mirror of
https://github.com/iiab/iiab.git
synced 2025-03-09 15:40:17 +00:00
138 lines
7.6 KiB
Bash
Executable file
138 lines
7.6 KiB
Bash
Executable file
#!/bin/bash -e
|
|
# FWIW "-e" tries to exit right away on error:
|
|
# https://tldp.org/LDP/abs/html/options.html
|
|
# https://stackoverflow.com/questions/9952177/whats-the-meaning-of-the-parameter-e-for-bash-shell-command-line/9952249
|
|
|
|
# PLZ SEE http://FAQ.IIAB.IO > "What is Ansible and what version should I use?"
|
|
# https://github.com/iiab/iiab/tree/master/scripts/ansible.md
|
|
# https://github.com/iiab/iiab/wiki/IIAB-Contributors-Guide#ansible
|
|
|
|
APT_PATH=/usr/bin # Avoids problematic /usr/local/bin/apt on Linux Mint
|
|
CURR_VER=undefined # Ansible version you currently have installed
|
|
GOOD_VER=2.10.6 # Orig for 'yum install [rpm]' & XO laptops (pip install)
|
|
|
|
# We install the latest 'ansible-base' from PPA, using an OS 'CODENAME' below:
|
|
# https://launchpad.net/~ansible/+archive/ubuntu/ansible
|
|
|
|
# 'lsb_release -sc' gives Mint 20 codename 'ulyana' etc: (TOO FINE-GRAINED)
|
|
if grep -q buster /etc/os-release /etc/debian_version; then
|
|
CODENAME=bionic # Debian 10, RaspiOS 10 & Buster-like distros
|
|
else
|
|
CODENAME=focal # Debian 11+, RaspiOS 11+, Ubuntu 20.04+, Mint 20+ (ETC)
|
|
fi
|
|
|
|
# 'ansible-base' being renamed 'ansible-code' early in 2021. RELEASE LINK REFS:
|
|
# http://ppa.launchpad.net/ansible/ansible/ubuntu/pool/main/a/ansible-base/
|
|
# https://launchpad.net/~ansible/+archive/ubuntu/ansible-2.10
|
|
# https://github.com/ansible/ansible/commits/stable-2.10/changelogs/CHANGELOG-v2.10.rst
|
|
# https://github.com/ansible/ansible/blob/devel/docs/docsite/rst/roadmap/ROADMAP_2_11.rst
|
|
# https://www.ansible.com/blog/ansible-3.0.0-qa
|
|
# https://github.com/ansible/ansible/releases
|
|
# https://releases.ansible.com/ansible-base/
|
|
# https://releases.ansible.com/ansible-core/
|
|
|
|
# FYI .travis.yml installs ansible-base in a slightly different way (PR #2689).
|
|
|
|
# IIAB implementers might instead consider these 3 GENERAL TECHNIQUES below
|
|
# ("in an emergency!") e.g. if you must install an older version of Ansible:
|
|
|
|
# TEMPORARILY USE ansible-base 2.10.6 (REMOVE W/ "pip3 uninstall ansible-base")
|
|
#pip3 install ansible-base==2.10.6 # Start new shell, so /usr/local/bin works
|
|
#ansible-galaxy collection install -r collections.yml
|
|
|
|
# TEMPORARILY USE ANSIBLE 2.9.18 (REMOVE IT WITH "pip uninstall ansible")
|
|
#apt install python-pip
|
|
#pip install ansible==2.9.18
|
|
|
|
# TEMPORARILY USE ANSIBLE 2.4.2 DUE TO 2.4.3 MEMORY BUG. Details: iiab/iiab#669
|
|
#echo "Install http://download.iiab.io/packages/ansible_2.4.2.0-1ppa~xenial_all.deb"
|
|
#cd /tmp
|
|
#wget http://download.iiab.io/packages/ansible_2.4.2.0-1ppa~xenial_all.deb
|
|
#apt -y --allow-downgrades install ./ansible_2.4.2.0-1ppa~xenial_all.deb
|
|
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
# Why 'noninteractive' appears needed:
|
|
# https://github.com/iiab/iiab/issues/564#issuecomment-347264985
|
|
|
|
echo -e "\n\nYOU ARE RUNNING: /opt/iiab/iiab/scripts/ansible (TO INSTALL ANSIBLE)\n"
|
|
#echo -e 'Alternative: /opt/iiab/iiab/scripts/ansible-2.9.x ("Slow Food")\n'
|
|
|
|
echo -e "RECOMMENDED PREREQUISITES:"
|
|
echo -e "(1) Verify you're online"
|
|
echo -e "(2) Remove all prior versions of Ansible using..."
|
|
echo -e " 'apt purge ansible-base' and/or 'pip3 uninstall ansible-base' and/or"
|
|
echo -e " 'apt purge ansible' and/or 'pip uninstall ansible'"
|
|
echo -e "(3) Remove all lines containing 'ansible' from..."
|
|
echo -e " /etc/apt/sources.list and /etc/apt/sources.list.d/*\n"
|
|
|
|
echo -e "IIAB INSTALL INSTRUCTIONS: (OLDER, MANUAL APPROACH)"
|
|
echo -e "https://github.com/iiab/iiab/wiki/IIAB-Installation#do-everything-from-scratch\n"
|
|
|
|
if [ $(command -v ansible) ]; then # "command -v" is POSIX compliant; also catches built-in commands like "cd"
|
|
CURR_VER=`ansible --version | head -1 | awk '{print $2}'` # To match iiab-install. Was: CURR_VER=`ansible --version | head -n 1 | cut -f 2 -d " "`
|
|
echo -e "CURRENTLY INSTALLED ANSIBLE: $CURR_VER -- LET'S TRY TO UPGRADE IT!"
|
|
else
|
|
echo -e "ANSIBLE NOT FOUND ON THIS COMPUTER -- LET'S TRY TO INSTALL IT!"
|
|
fi
|
|
echo -e "(Internet-in-a-Box requests ansible-base $GOOD_VER or higher)\n"
|
|
|
|
# Code above designed to work on all Linux distributions, to preserve options,
|
|
# in support of any volunteer(s) wanting to port IIAB to a new Linux/distro.
|
|
if [ ! -f /etc/debian_version ]; then # e.g. RaspiOS, Ubuntu, Mint & Debian
|
|
echo -e "\nEXITING: /etc/debian_version FILE NOT FOUND. Linux OS support info here:"
|
|
echo -e " https://github.com/iiab/iiab/wiki/IIAB-Platforms\n"
|
|
exit 1
|
|
fi
|
|
|
|
echo -e "\napt update; install dirmngr; PPA to /etc/apt/sources.list.d/iiab-ansible.list\n"
|
|
$APT_PATH/apt update
|
|
$APT_PATH/apt -y install dirmngr
|
|
echo "deb http://ppa.launchpad.net/ansible/ansible/ubuntu $CODENAME main" \
|
|
> /etc/apt/sources.list.d/iiab-ansible.list
|
|
# In future we might instead consider 'add-apt-repository ppa:ansible/ansible'
|
|
# or 'apt-add-repository ppa:ansible/bionic/ansible' etc, e.g. for streamlined
|
|
# removal using 'apt-add-repository -r' -- however that currently requires
|
|
# 'apt install software-properties-common' which drags in a dozen packages we
|
|
# might not want, e.g. unattended-upgrades, packagekit etc.
|
|
|
|
# 2020-08-20: TEMP WORKAROUND (REVERT TO ANSIBLE 2.9.6) MITIGATING
|
|
# iiab/iiab#2481 (Ansible 2.9.12 and 2.10.0's 666-TO-600 file permissions
|
|
# problem). This workaround installs 2.9.6-1ppa~disco onto RaspiOS, from
|
|
# https://launchpad.net/~ansible/+archive/ubuntu/ansible
|
|
#echo "deb http://ppa.launchpad.net/ansible/ansible/ubuntu disco main" \
|
|
# > /etc/apt/sources.list.d/iiab-ansible.list
|
|
|
|
echo -e '\nIF YOU FACE ERROR "signatures couldn'"'"'t be verified because the public key is not available" THEN REPEATEDLY RE-RUN "sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 93C4A3FD7BB9C367"\n'
|
|
apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 93C4A3FD7BB9C367
|
|
echo -e 'PPA source "deb http://ppa.launchpad.net/ansible/ansible/ubuntu '$CODENAME' main"'
|
|
echo -e "successfully saved to /etc/apt/sources.list.d/iiab-ansible.list\n"
|
|
echo -e "IF *OTHER* ANSIBLE SOURCES APPEAR BELOW, PLEASE MANUALLY REMOVE THEM TO"
|
|
echo -e 'ENSURE ANSIBLE UPDATES CLEANLY: (then re-run this script to be sure!)\n'
|
|
grep '^deb .*ansible' /etc/apt/sources.list /etc/apt/sources.list.d/*.list | grep -v '^/etc/apt/sources.list.d/iiab-ansible.list:' || true # Override bash -e (instead of aborting at 1st error)
|
|
|
|
echo -e "\napt update; apt install ansible-base and python3 dependencies explained at:"
|
|
echo -e "https://github.com/iiab/iiab/tree/master/scripts/ansible.md\n"
|
|
$APT_PATH/apt update
|
|
$APT_PATH/apt -y --allow-downgrades install ansible-base \
|
|
python3-pymysql python3-psycopg2 python3-passlib python3-pip \
|
|
python3-setuptools python3-packaging python3-venv virtualenv
|
|
|
|
# (Re)running collection installs appears safe, with --force-with-deps to force
|
|
# upgrade of collection and dependencies it pulls in. Note Ansible may support
|
|
# explicit upgrading of collections (--upgrade / -U flag) in version "2.11"
|
|
# with PR ansible/ansible#73336. See also IIAB PRs #2647 #2652 #2653 #2655.
|
|
echo -e "\n\nIIAB requires these ~4 Ansible Collections: (we upgrade them here if possible!)\n"
|
|
ansible-galaxy collection install --force-with-deps \
|
|
-r /opt/iiab/iiab/collections.yml \
|
|
-p /usr/share/ansible/collections
|
|
# 2021-02-24: 'ansible-galaxy collection list' lists those installed. (#2659)
|
|
# 2020-11-28: The ~3 Ansible Collections used by IIAB (~37MB) once lived here:
|
|
# /root/.ansible/collections/ansible_collections
|
|
# But going forward they'll be stored herein:
|
|
# /usr/share/ansible/collections/ansible_collections
|
|
|
|
echo -e "\n\nCreating/verifying directory /etc/ansible & installing /etc/ansible/hosts\n"
|
|
mkdir -p /etc/ansible
|
|
echo -e '[local]\nlocalhost\n' > /etc/ansible/hosts
|
|
|
|
echo -e "SUCCESS: VERIFY ANSIBLE WITH 'ansible --version' & 'apt -a list ansible-base'\n\n"
|