added ansible for deployment in private infrastrucutre

deploy/roles/docker/README.md

@@ -0,0 +1,33 @@
+# The `docker` Role
+
+The `docker` role installs the Docker CE repository and runtime packages.
+
+This role may be executed independently by running:
+
+```bash
+$ ansible-playbook packages.yml --tags "docker"
+```
+
+On execution, this role installs the following directly to the remote machine's operating system:
+
+### Apt Repositories (Debian/Ubuntu)
+
+- Docker CE
+
+### Apt GPG Signing Keys (Debian/Ubuntu)
+
+- Docker Release (CE deb) <docker@docker.com>
+
+### Operating System Packages (Debian/Ubuntu)
+
+- docker-ce v5:18.x
+
+### System Services
+
+- `docker` (enabled and started)
+
+### User Groups
+
+- docker
+
+All users listed under `secrets.users` in `secrets.yml` will be added to the `docker` group.

deploy/roles/docker/tasks/debian.yml

@@ -0,0 +1,17 @@
+---
+# Docker Package Installation
+- name: add Docker's official GPG key
+  apt_key:
+    state: present
+    url: "{{ docker.apt.signing_key_url }}"
+
+- name: add Docker apt repository
+  apt_repository:
+    repo: "{{ docker.apt.repo }}"
+    state: present
+
+- name: install Docker CE
+  apt:
+    name: "{{ docker.apt.package }}"
+    state: present
+    update_cache: yes

deploy/roles/docker/tasks/main.yml

@@ -0,0 +1,23 @@
+---
+# General Docker Setup
+- import_tasks: debian.yml
+  when: ansible_facts['os_family']|lower == 'debian' # debian, ubuntu
+
+- name: ensure the docker service starts at boot
+  systemd:
+    name: "{{ docker.service_name }}"
+    enabled: yes
+    state: started
+
+- name: create Docker group to avoid running as root
+  group:
+    name: "{{ docker.group_name }}"
+    state: present
+
+- name: add users to Docker group
+  user:
+    append: yes
+    groups:
+      - "{{ docker.group_name }}"
+    name: "{{ item }}"
+  loop: "{{ users }}"

deploy/roles/docker/vars/main.yml

@@ -0,0 +1,8 @@
+---
+docker:
+  apt:
+    package: docker-ce=5:18.* # known good with 5:18.09.1~3-0~ubuntu-bionic
+    repo: deb [arch=amd64] https://download.docker.com/linux/ubuntu bionic stable
+    signing_key_url: https://download.docker.com/linux/ubuntu/gpg
+  group_name: docker
+  service_name: docker