initial checkin -- May 27, 2017

roles/docker/defaults/main.yml

@@ -0,0 +1,2 @@
+docker_install: True
+docker_enabled: False

roles/docker/tasks/main.yml

@@ -0,0 +1,54 @@
+- name: Install docker
+  package:  name={{ item }} 
+            state=present
+  with_items:
+    - docker
+    - python-docker-py
+  when: docker_install
+  tags: download
+
+- name: put the systemd startup file in place
+  template: src=docker.service
+            dest=/etc/systemd/system/
+            owner=root
+            group=root
+            mode=0644
+
+- name: create the socket for docker
+  template: src=docker.socket
+            dest=/etc/systemd/system/
+            owner=root
+            group=root
+            mode=0644
+
+- name: Create a folder for systemd unit files that are docker containers
+  file: path=/etc/systemd/system/docker.service.d
+        owner=root
+        group=root
+        mode=0644
+        state=directory
+
+- name: Enable docker
+  service: name=docker
+           state=started
+           enabled=true
+  when: docker_enabled
+
+- name: Disable docker
+  service: name=docker
+           state=stopped
+           enabled=false
+  when: not docker_enabled
+
+- name: add docker to service list
+  ini_file: dest='{{ service_filelist }}'
+            section=docker
+            option='{{ item.option }}'
+            value='{{ item.value }}'
+  with_items:
+    - option: name
+      value: Docker Container
+    - option: description
+      value: '"Docker allows a person to package an application with all of its dependencies into a standardized unit for software development."'
+    - option: enabled
+      value: "{{ docker_enabled }}"

roles/docker/templates/docker.service

@@ -0,0 +1,26 @@
+[unit]
+Description=Docker Application Container Engine
+Documentation=https://docs.docker.com
+After=network.target docker.socket
+Requires=docker.socket
+
+[Service]
+Type=notify
+# the default is not to use systemd for cgroups because the delegate issues still
+# exists and systemd currently does not support the cgroup feature set required
+# for containers run by docker
+ExecStart=/usr/bin/docker daemon 
+MountFlags=slave
+LimitNOFILE=1048576
+LimitNPROC=1048576
+LimitCORE=infinity
+# Uncomment TasksMax if your systemd version supports it.
+# Only systemd 226 and above support this version.
+#TasksMax=infinity
+TimeoutStartSec=0
+# set delegate yes so that systemd does not reset the cgroups of docker containers
+Delegate=yes
+
+[Install]
+WantedBy=multi-user.target
+

roles/docker/templates/docker.socket

@@ -0,0 +1,13 @@
+[unit]
+Description=Docker Socket for the API
+PartOf=docker.service
+
+[Socket]
+ListenStream=/var/run/docker.sock
+SocketMode=0660
+SocketUser=root
+SocketGroup=docker
+
+[Install]
+WantedBy=sockets.target
+