@ -15,89 +15,87 @@
# under the License.
- name : make sure we don't have a trailing forward slash in the src
set_fact:
tripleo_transfer_src_dir_safe : "{{ tripleo_transfer_src_dir | regex_replace('\\/$', '') }}"
cacheable : false
# Note:
# This role is used in a playbook that typically targets the undercloud
# and may target other hosts, so to ensure that it executes against the
# right src and dest it uses delegation throughout.
- name : make sure we don't have a trailing forward slash in the dst
set_fact:
tripleo_transfer_dest_dir_safe : "{{ tripleo_transfer_dest_dir | regex_replace('\\/$', '') }}"
cacheable : false
- name : tripleo_transfer tasks
run_once : true
block:
- name : install requirements in src and dest hosts
become : true
package:
name:
- rsync
- openssh-clients
state : present
delegate_to : "{{ item }}"
loop:
- "{{ tripleo_transfer_src_host }}"
- "{{ tripleo_transfer_dest_host }}"
- name : ensure local storage directory exists and has correct permissions
file:
path : "{{ tripleo_transfer_storage_root_dir }}"
# Attempting to set an owner fails with "chown failed: failed to
# look up user" so we at least ensure the permissions.
mode : 0700
state : directory
delegate_to : localhost
become : "{{ tripleo_transfer_storage_root_become }}"
- name : generate ssh key-pair in source host
openssh_keypair:
path : "{{ tripleo_transfer_key_location }}"
delegate_to : "{{ tripleo_transfer_src_host }}"
become : "{{ tripleo_transfer_src_become }}"
register : keypair_gen
- name : create tempfile for the archive
tempfile:
prefix : ansible.tripleo-transfer.
register : tripleo_transfer_tempfile
become : "{{ tripleo_transfer_src_become }}"
delegate_to : "{{ tripleo_transfer_src_host }}"
- name : set authorized-keys in destination host
authorized_key:
comment : "Added by tripleo-transfer"
user : "{{ ansible_user|default(ansible_ssh_user|default(hostvars[tripleo_transfer_dest_host].ansible_user_id)) }}"
state : present
key : "{{ keypair_gen.public_key }}"
delegate_to : "{{ tripleo_transfer_dest_host }}"
when : keypair_gen is succeeded
# Using the "archive" module lists lists all tarred files in module
# output, if there's too many files, it can crash ansible even with
# "no_log: true".
- name : create the archive
shell : |-
set -euo pipefail
tar --transform "s|^{{ tripleo_transfer_src_dir_safe | basename }}|{{ tripleo_transfer_dest_dir_safe | basename }}|" \
-czf "{{ tripleo_transfer_tempfile.path }}" \
-C "{{ tripleo_transfer_src_dir_safe | dirname }}" \
"{{ tripleo_transfer_src_dir_safe | basename }}"
become : "{{ tripleo_transfer_src_become }}"
delegate_to : "{{ tripleo_transfer_src_host }}"
- import_tasks : flag.yml
when:
- tripleo_transfer_flag_file != None
- tripleo_transfer_flag_file|length > 0
become : "{{ tripleo_transfer_dest_become }}"
delegate_to : "{{ tripleo_transfer_dest_host }}"
- name : fetch the archive
fetch:
src : "{{ tripleo_transfer_tempfile.path }}"
dest : "{{ tripleo_transfer_storage_root_dir }}/{{ tripleo_transfer_dest_host }}{{ tripleo_transfer_dest_dir_safe }}.tar.gz"
flat : true
become : "{{ tripleo_transfer_src_become }}"
delegate_to : "{{ tripleo_transfer_src_host }}"
- name : synchronize both directories
vars:
hostvars_dest_host_ip : >-
{{ hostvars[tripleo_transfer_dest_host].ansible_host |
default(hostvars[tripleo_transfer_dest_host].inventory_hostname) }}
tripleo_transfer_dest_user : >-
{{ hostvars[tripleo_transfer_dest_host].ansible_user |
default(hostvars[tripleo_transfer_dest_host].ansible_ssh_user |
default(hostvars[tripleo_transfer_dest_host].ansible_user_id)) }}
shell : >-
/usr/bin/rsync
-v
--delay-updates
-F
--compress
--archive
--delete
--rsync-path='sudo rsync'
--rsh='ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -i {{ tripleo_transfer_key_location }}'
{{ tripleo_transfer_src_dir_safe }}
{{ tripleo_transfer_dest_user }}@{{ hostvars_dest_host_ip }}:{{ tripleo_transfer_dest_dir_safe }}
become : "{{ tripleo_transfer_src_become }}"
delegate_to : "{{ tripleo_transfer_src_host }}"
always:
- name : clean up keys in source host
file:
path : "{{ item }}"
state : absent
delegate_to : "{{ tripleo_transfer_src_host }}"
become : "{{ tripleo_transfer_src_become }}"
loop:
- "{{ tripleo_transfer_key_location }}"
- "{{ tripleo_transfer_key_location }}.pub"
- name : remove tempfile
file:
name : "{{ tripleo_transfer_tempfile.path }}"
state : absent
become : "{{ tripleo_transfer_src_become }}"
delegate_to : "{{ tripleo_transfer_src_host }}"
- include_tasks : flag.yml
when:
- tripleo_transfer_flag_file != None
- tripleo_transfer_flag_file|length > 0
- name : wipe the destination directory
file:
path : "{{ tripleo_transfer_dest_dir_safe }}"
state : absent
become : "{{ tripleo_transfer_dest_become }}"
delegate_to : "{{ tripleo_transfer_dest_host }}"
when : tripleo_transfer_dest_wipe|bool
- name : make sure the destination parent directory is present
file:
path : "{{ tripleo_transfer_dest_dir_safe|dirname }}"
state : directory
become : "{{ tripleo_transfer_dest_become }}"
delegate_to : "{{ tripleo_transfer_dest_host }}"
- name : push and extract the archive
unarchive:
src : "{{ tripleo_transfer_storage_root_dir }}/{{ tripleo_transfer_dest_host }}{{ tripleo_transfer_dest_dir_safe }}.tar.gz"
dest : "{{ tripleo_transfer_dest_dir_safe|dirname }}"
become : "{{ tripleo_transfer_dest_become }}"
delegate_to : "{{ tripleo_transfer_dest_host }}"
- name : remove the local archive
file:
path : "{{ tripleo_transfer_storage_root_dir }}/{{ tripleo_transfer_dest_host }}{{ tripleo_transfer_dest_dir_safe }}.tar.gz"
state : absent
- name : remove public key from authorized keys in destination host
lineinfile:
path : "~/.ssh/authorized_keys"
state : absent
regexp : '.*Added by tripleo-transfer.*$'
delegate_to : "{{ tripleo_transfer_dest_host }}"
when : tripleo_transfer_cleanup_keys | bool
Jose Luis Franco Arza
3 months ago
Jesse Pretorius (odyssey4me)