cookbooks/docker-grid/attributes/default.rb

   1 #
   2 # Cookbook Name:: docker-grid
   3 # Attributes:: default
   4 #
   5 # Copyright 2016-2018, whitestar
   6 #
   7 # Licensed under the Apache License, Version 2.0 (the "License");
   8 # you may not use this file except in compliance with the License.
   9 # You may obtain a copy of the License at
  10 #
  11 #     http://www.apache.org/licenses/LICENSE-2.0
  12 #
  13 # Unless required by applicable law or agreed to in writing, software
  14 # distributed under the License is distributed on an "AS IS" BASIS,
  15 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16 # See the License for the specific language governing permissions and
  17 # limitations under the License.
  18 #
  19
  20 platform = node['platform']
  21
  22 default['docker-grid']['install_flavor'] = 'dockerproject'  # or 'os-repository'
  23 default['docker-grid']['dockerproject']['enable_new_repo'] = true
  24 # read only
  25 force_override['docker-grid']['dockerproject']['apt_new_repo_url'] = "https://download.docker.com/linux/#{platform}"
  26 force_override['docker-grid']['dockerproject']['apt_old_repo_url'] = 'https://apt.dockerproject.org/repo'
  27 # e.g. 'stable edge', 'edge test',...
  28 default['docker-grid']['dockerproject']['apt_new_repo_sections'] = 'stable'
  29 default['docker-grid']['dockerproject']['package_name'] \
  30   = node['docker-grid']['dockerproject']['enable_new_repo'] ? 'docker-ce' : 'docker-engine'
  31 apt_repo_url = \
  32   if node['docker-grid']['dockerproject']['enable_new_repo']
  33     node['docker-grid']['dockerproject']['apt_new_repo_url']
  34   else
  35     node['docker-grid']['dockerproject']['apt_old_repo_url']
  36   end
  37 default['docker-grid']['apt_repo'] = {
  38   'url' => apt_repo_url,
  39   'override_apt_line' => '',  # e.g. 'deb https://apt.dockerproject.org/repo ubuntu-xenial main'
  40   # for old repository
  41   'keyserver' => 'hkp://p80.pool.sks-keyservers.net:80',
  42   'recv-keys' => '58118E89F3A912897C070ADBF76221572C52609D',
  43 }
  44 # e.g. 'docker-ce-edge,docker-ce-test'
  45 default['docker-grid']['dockerproject']['yum_new_repo_extra_enablerepo'] = ''
  46 # Old yum repository
  47 default['docker-grid']['yum_repo'] = {
  48   'baseurl' => 'https://yum.dockerproject.org/repo/main/centos/$releasever/',
  49   'gpgcheck' => '1',
  50   'gpgkey' => 'https://yum.dockerproject.org/gpg',
  51 }
  52
  53 default['docker-grid']['compose']['install_flavor'] = 'dockerproject'  # or 'os-repository'
  54 default['docker-grid']['compose']['skip_setup'] = false
  55 # dockerproject: direct download.
  56 # Note: non-support by this cookbook.
  57 #   os-repository (Ubuntu): http://packages.ubuntu.com/search?keywords=docker-compose&searchon=names
  58 #   os-repository (CentOS): none.
  59 default['docker-grid']['compose']['auto_upgrade'] = false
  60 # latest: 'https://github.com/docker/compose/releases/download/1.17.1'
  61 default['docker-grid']['compose']['release_base_url'] = 'https://github.com/docker/compose/releases/download/1.9.0'
  62 default['docker-grid']['compose']['release_url'] = "#{node['docker-grid']['compose']['release_base_url']}/docker-compose-#{node['kernel']['name']}-#{node['kernel']['machine']}"
  63 default['docker-grid']['compose']['home_dir'] = '/opt/docker-compose'
  64 default['docker-grid']['compose']['app_dir'] = "#{node['docker-grid']['compose']['home_dir']}/app"
  65
  66 default['docker-grid']['dind-compose']['app_dir'] = "#{node['docker-grid']['compose']['app_dir']}/docker-in-docker"
  67 default['docker-grid']['dind-compose']['data_dir'] = "#{node['docker-grid']['dind-compose']['app_dir']}/data"
  68 default['docker-grid']['dind-compose']['config'] = {
  69   # Version 2 docker-compose format
  70   'version' => '2',
  71   'services' => {
  72     'dind' => {
  73       'image' => 'docker:stable-dind',
  74       'privileged' => true,
  75       'command' => [
  76         #'--storage-driver=overlay2',  # same as host Docker's storage driver
  77       ],
  78       'volumes' => [
  79         # These volumes will be set by the docker-grid::dind-compose recipe automatically.
  80         #"#{node['docker-grid']['dind-compose']['data_dir']}:/var/lib/docker",
  81       ],
  82       'environment' => {
  83       },
  84     },
  85   },
  86 }
  87
  88 default['docker-grid']['engine']['skip_setup'] = false
  89 # dockerproject: 18.06.0.ce-3, 18.03.1.ce-1, 17.12.1.ce-1, 1.13.1-1
  90 # os-repository: yum list docker
  91 #   http://mirror.centos.org/centos/7.3.1611/extras/x86_64/Packages/
  92 default['docker-grid']['engine']['version_on_centos'] = '17.12.1.ce-1'
  93 # dockerproject: 18.06.0~ce~3-0, 18.03.1~ce-0, 17.12.1~ce-0, 1.13.1-0
  94 default['docker-grid']['engine']['version_on_debian'] = '17.12.1~ce-0'
  95 # dockerproject: 18.06.0~ce~3-0, 18.03.1~ce-0, 17.12.1~ce-0
  96 # os-repository: http://packages.ubuntu.com/search?keywords=docker.io&searchon=names
  97 default['docker-grid']['engine']['version_on_ubuntu'] = '17.12.1~ce-0'
  98
  99 # '' (empty) or 'latest' version -> latest version
 100 case platform
 101 when 'centos', 'redhat'
 102   version_on_centos = node['docker-grid']['engine']['version_on_centos']
 103   if !version_on_centos.nil? && !version_on_centos.empty? && version_on_centos != 'latest'
 104     suffix = ''
 105     if Gem::Version.create(version_on_centos) < Gem::Version.create('18.06.0.ce-3')
 106       suffix = ".#{node['platform']}"
 107     end
 108     version_on_centos = "#{version_on_centos}.el#{node['platform_version'].to_i}#{suffix}"
 109   end
 110 when 'debian'
 111   version_on_debian = node['docker-grid']['engine']['version_on_debian']
 112   if !version_on_debian.nil? && !version_on_debian.empty? && version_on_debian != 'latest'
 113     version_on_debian = \
 114       if node['docker-grid']['install_flavor'] == 'dockerproject'
 115         if Gem::Version.create(version_on_debian.tr('~', '-')) >= Gem::Version.create('1.12.4-0')
 116           "#{version_on_debian}~debian-#{node['lsb']['codename']}"
 117         else
 118           "#{version_on_debian}~#{node['lsb']['codename']}"
 119         end
 120       end
 121   end
 122 when 'ubuntu'
 123   version_on_ubuntu = node['docker-grid']['engine']['version_on_ubuntu']
 124   if !version_on_ubuntu.nil? && !version_on_ubuntu.empty? && version_on_ubuntu != 'latest'
 125     version_on_ubuntu = \
 126       if node['docker-grid']['install_flavor'] == 'dockerproject'
 127         if Gem::Version.create(version_on_ubuntu.tr('~', '-')) >= Gem::Version.create('1.12.4-0')
 128           "#{version_on_ubuntu}~ubuntu-#{node['lsb']['codename']}"
 129         else
 130           "#{version_on_ubuntu}~#{node['lsb']['codename']}"
 131         end
 132         # else
 133         # e.g. 1.12.3-0ubuntu4~16.10.2, 1.12.3-0ubuntu4~16.04.2
 134         # version_on_ubuntu
 135       end
 136   end
 137 end
 138
 139 # '' (empty) or 'latest' version -> latest version
 140 default['docker-grid']['engine']['version'] = node.value_for_platform(
 141   ['centos', 'redhat'] => {
 142     'default' => version_on_centos,
 143   },
 144   'debian' => {
 145     'default' => version_on_debian,
 146   },
 147   'ubuntu' => {
 148     'default' => version_on_ubuntu,
 149   }
 150 )
 151 # overlay2: Docker >= 1.12, Kernel >= 4.0
 152 default['docker-grid']['engine']['storage-driver_on_centos'] = 'overlay'
 153 default['docker-grid']['engine']['storage-driver_on_debian'] = 'overlay2'
 154 default['docker-grid']['engine']['storage-driver_on_ubuntu'] = 'aufs'
 155 default['docker-grid']['engine']['storage-driver'] = node.value_for_platform(
 156   ['centos', 'redhat'] => {
 157     'default' => node['docker-grid']['engine']['storage-driver_on_centos'],
 158   },
 159   'debian' => {
 160     'default' => node['docker-grid']['engine']['storage-driver_on_debian'],
 161   },
 162   'ubuntu' => {
 163     'default' => node['docker-grid']['engine']['storage-driver_on_ubuntu'],
 164   }
 165 )
 166 default['docker-grid']['engine']['userns-remap'] = nil  # default: inactive
 167 # CentOS default: '--selinux-enabled --log-driver=journald --signature-verification=false'
 168 default['docker-grid']['engine']['daemon_extra_options'] = '-H fd://'
 169 default['docker-grid']['engine']['users_allow'] = []
 170
 171 # dockerproject: container image from https://hub.docker.com/
 172 # Note: non-support by this cookbook.
 173 #   os-repository (Ubuntu): http://packages.ubuntu.com/search?keywords=docker-registry&searchon=names
 174 #   os-repository (CentOS): http://mirror.centos.org/centos/7.3.1611/extras/x86_64/Packages/
 175 default['docker-grid']['registry']['with_ssl_cert_cookbook'] = false
 176 # If node['docker-grid']['registry']['with_ssl_cert_cookbook'] is true,
 177 # node['docker-grid']['registry']['docker-compose']['config']
 178 # are overridden by the following 'ca_name' and 'common_name' attributes.
 179 #default['docker-grid']['registry']['ssl_cert']['ca_name'] = nil
 180 default['docker-grid']['registry']['ssl_cert']['common_name'] = node['fqdn']
 181 # See https://docs.docker.com/registry/configuration/
 182 rootdirectory = node.value_for_platform(
 183   ['centos', 'redhat'] => {
 184     'default' => '/var/lib/registry',
 185   },
 186   ['debian', 'ubuntu'] => {
 187     'default' => '/var/lib/docker-registry',
 188   }
 189 )
 190 default['docker-grid']['registry']['server']['config'] = {
 191   'version' => '0.1',
 192   'log' => {
 193     'fields' => {
 194       'service' => 'registry',
 195     },
 196   },
 197   'storage' => {
 198     'cache' => {
 199       # NOTE: Formerly, blobdescriptor was known as layerinfo.
 200       # While these are equivalent, layerinfo has been deprecated.
 201       'blobdescriptor' => 'inmemory',
 202     },
 203     'filesystem' => {
 204       'rootdirectory' => rootdirectory,
 205     },
 206   },
 207   'http' => {
 208     'addr' => ':5000',
 209     'headers' => {
 210       'X-Content-Type-Options' => [
 211         'nosniff',
 212       ],
 213     },
 214   },
 215   #'proxy' => {
 216   #  'remoteurl' => 'https://registry-1.docker.io',
 217   #},
 218   'health' => {
 219     'storagedriver' => {
 220       'enabled' => true,
 221       'interval' => '10s',
 222       'threshold' => 3,
 223     },
 224   },
 225 }
 226 default['docker-grid']['registry']['docker-compose']['app_dir'] = "#{node['docker-grid']['compose']['app_dir']}/registry"
 227 # ./docker-compose.yml
 228 default['docker-grid']['registry']['docker-compose']['config_format_version'] = '1'
 229 default['docker-grid']['registry']['docker-compose']['service_name'] = 'registry'
 230 default['docker-grid']['registry']['docker-compose']['host_data_volume'] = '/var/lib/docker-registry'
 231 service_name = node['docker-grid']['registry']['docker-compose']['service_name']
 232 version_1_config = {
 233   # Version 1 docker-compose format
 234   service_name => {
 235     'restart' => 'always',
 236     'image' => 'registry:2',
 237     #'ports' => [
 238     #  '5000:5000',
 239     #],
 240     #'environment' => {
 241     #  'REGISTRY_HTTP_TLS_CERTIFICATE' => '/certs/domain.crt',
 242     #  'REGISTRY_HTTP_TLS_KEY' =>         '/certs/domain.key',
 243     #  'REGISTRY_AUTH' =>                'htpasswd',
 244     #  'REGISTRY_AUTH_HTPASSWD_PATH' =>  '/auth/htpasswd',
 245     #  'REGISTRY_AUTH_HTPASSWD_REALM' => 'Registry Realm',
 246     #},
 247     #'volumes' => [
 248     #  #'./etc/config.yml:/etc/docker/registry/config.yml',  # Overriding the entire configuration file
 249     #  "#{node['docker-grid']['registry']['docker-compose']['host_data_volume']}:/var/lib/registry",
 250     #  '/path/certs:/certs',
 251     #  '/path/auth:/auth',
 252     #],
 253   },
 254 }
 255 version_2_config = {
 256   # Version 2 docker-compose format
 257   'version' => '2',
 258   'services' => version_1_config,
 259 }
 260 default['docker-grid']['registry']['docker-compose']['config'] = \
 261   node['docker-grid']['registry']['docker-compose']['config_format_version'] == '2' ? version_2_config : version_1_config
 262 # ./etc/config.yml
 263 # See: https://docs.docker.com/registry/configuration/#/overriding-the-entire-configuration-file
 264 default['docker-grid']['registry']['docker-compose']['registry-config'] = nil