Stack BunkerWeb (scheduler, UI, MariaDB, Redis), sites de test (nginx, Juice Shop, go-httpbin), filtrage DOCKER-USER, script de tests, README et schéma d'architecture. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
52 lines
1.3 KiB
YAML
52 lines
1.3 KiB
YAML
---
|
|
# Installation de Docker CE depuis le dépôt officiel (Debian 13 trixie)
|
|
- name: Retirer les paquets Docker de la distribution
|
|
ansible.builtin.apt:
|
|
name: [docker.io, docker-compose, docker-doc, podman-docker, containerd, runc]
|
|
state: absent
|
|
|
|
- name: Déclarer le dépôt Docker
|
|
ansible.builtin.deb822_repository:
|
|
name: docker
|
|
types: [deb]
|
|
uris: https://download.docker.com/linux/debian
|
|
suites: ["{{ ansible_distribution_release }}"]
|
|
components: [stable]
|
|
architectures: [amd64]
|
|
signed_by: https://download.docker.com/linux/debian/gpg
|
|
state: present
|
|
|
|
- name: Installer Docker CE et le plugin compose
|
|
ansible.builtin.apt:
|
|
name:
|
|
- docker-ce
|
|
- docker-ce-cli
|
|
- containerd.io
|
|
- docker-buildx-plugin
|
|
- docker-compose-plugin
|
|
state: present
|
|
update_cache: true
|
|
|
|
- name: Limiter la taille des journaux des conteneurs
|
|
ansible.builtin.copy:
|
|
dest: /etc/docker/daemon.json
|
|
mode: "0644"
|
|
content: |
|
|
{
|
|
"log-driver": "json-file",
|
|
"log-opts": { "max-size": "20m", "max-file": "3" }
|
|
}
|
|
notify: Redémarrer Docker
|
|
|
|
- name: Démarrer Docker
|
|
ansible.builtin.systemd_service:
|
|
name: docker
|
|
state: started
|
|
enabled: true
|
|
|
|
- name: Ajouter l'utilisateur au groupe docker
|
|
ansible.builtin.user:
|
|
name: "{{ poc_vm_user }}"
|
|
groups: docker
|
|
append: true
|