porthole/tools/gate/playbooks/docker-image-build.yaml

# Copyright 2019 AT&T Intellectual Property.  All other rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- hosts: all
  tasks:
    - include_vars: vars.yaml

    - name: Install Docker (Debian)
      when: ansible_os_family == 'Debian'
      block:
        - file:
            path: "{{ item }}"
            state: directory
          with_items:
            - /etc/docker/
            - /etc/systemd/system/docker.service.d/
            - /var/lib/docker/
        - mount:
            path: /var/lib/docker/
            src: tmpfs
            fstype: tmpfs
            opts: size=25g
            state: mounted
        - copy: "{{ item }}"
          with_items:
            - content: "{{ docker_daemon | to_json }}"
              dest: /etc/docker/daemon.json
            - src: files/docker-systemd.conf
              dest: /etc/systemd/system/docker.service.d/
        - apt_key:
            url: https://download.docker.com/linux/ubuntu/gpg
        - apt_repository:
            repo: deb http://{{ zuul_site_mirror_fqdn }}/deb-docker xenial stable
        - apt:
            name: "{{ item }}"
            allow_unauthenticated: True
          with_items:
            - docker-ce
            - python-pip
        - pip:
            name: docker
            version: 2.7.0
        # NOTE(SamYaple): Allow all connections from containers to host so the
        # containers can access the http server for git and wheels
        - iptables:
            action: insert
            chain: INPUT
            in_interface: docker0
            jump: ACCEPT
      become: True

    - name: Debug inputs
      block:
        - debug:
            var: distro_suffix
        - debug:
            var: image_name
        - debug:
            var: publish
        - debug:
            var: tags
        - debug:
            var: zuul
        - debug:
            msg: "{{ tags | to_json }}"

    - name: Determine tags
      shell: echo '{{ tags | to_json }}' | python {{ zuul.project.src_dir }}/tools/image_tags.py
      environment:
        BRANCH: "{{ zuul.branch | default('') }}"
        CHANGE: "{{ zuul.change | default('') }}"
        COMMIT: "{{ zuul.newrev | default('') }}"
        PATCHSET: "{{ zuul.patchset | default('') }}"
      register: image_tags

    - name: Debug computed tags
      debug:
        var: image_tags

    - name: Make images
      when: not publish
      block:
        - make:
            chdir: "{{ zuul.project.src_dir }}"
            target: "build"
            params:
              DISTRO_SUFFIX: "{{ distro_suffix }}"
              IMAGE_NAME: "{{ image_name }}"
              IMAGE_TAG: "{{ item }}"
          with_items: "{{ image_tags.stdout_lines }}"
        - shell: "docker images"
          register: docker_images
        - debug:
            var: docker_images
        - shell: |
            docker images --format \
            '{{ '{{' }}.Repository{{ '}}' }}:{{ '{{' }}.Tag{{ '}}' }}'            
          register: docker_images_formatted
          with_items: "{{ image_tags.stdout_lines }}"
          failed_when: "'{{ image_name }}:{{ item }}' not in docker_images_formatted.stdout"
      become: True

    - name: Publish images
      when: publish
      block:
        - docker_login:
            username: "{{ quay_credentials.username }}"
            password: "{{ quay_credentials.password }}"
            registry_url: "https://quay.io/api/v1/"
        - make:
            chdir: "{{ zuul.project.src_dir }}"
            target: "build"
            params:
              COMMIT: "{{ zuul.newrev | default('') }}"
              DISTRO_SUFFIX: "{{ distro_suffix }}"
              DOCKER_REGISTRY: "quay.io"
              IMAGE_NAME: "{{ image_name }}"
              IMAGE_PREFIX: "airshipit"
              IMAGE_TAG: "{{ item }}"
              PUSH_IMAGE: "true"
          with_items: "{{ image_tags.stdout_lines }}"
        - shell: "docker images"
          register: docker_images
        - debug:
            var: docker_images
        - shell: |
            docker images --format \
            '{{ '{{' }}.Repository{{ '}}' }}:{{ '{{' }}.Tag{{ '}}' }}'            
          register: docker_images_formatted
          with_items: "{{ image_tags.stdout_lines }}"
          failed_when: "'{{ image_name }}:{{ item }}' not in docker_images_formatted.stdout"
      become: True