37 lines
1.1 KiB
YAML
37 lines
1.1 KiB
YAML
#SPDX-License-Identifier: MIT-0
|
|
---
|
|
- name: Install Koji Utils package (which includes kojira)
|
|
ansible.builtin.dnf:
|
|
name: ["koji-utils"]
|
|
state: present
|
|
|
|
|
|
|
|
- name: Configure kojira
|
|
ansible.builtin.template:
|
|
src: kojira.conf.j2
|
|
dest: "{{ koji_remote_kojira_conf_path }}"
|
|
mode: "0644"
|
|
|
|
- name: Copy Koji certificates for kojira
|
|
ansible.builtin.copy:
|
|
src: "{{ koji_pki_dir }}/{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
owner: root
|
|
group: root
|
|
mode: "{{ item.mode }}"
|
|
loop:
|
|
- { src: "{{ koji_ca_name }}_cert.crt", dest: "/etc/pki/koji/koji_ca_cert.crt", mode: "0644" }
|
|
- { src: "kojira.crt", dest: "/etc/pki/koji/kojira.crt", mode: "0644" }
|
|
- { src: "kojira.key", dest: "/etc/pki/koji/kojira.key", mode: "0600" }
|
|
|
|
- name: "Concatenate certificate and key into a PEM file"
|
|
ansible.builtin.shell:
|
|
cmd: "cat /etc/pki/koji/kojira.crt /etc/pki/koji/kojira.key > /etc/pki/koji/kojira.pem"
|
|
creates: "/etc/pki/koji/kojira.pem"
|
|
|
|
- name: Start and enable kojira service
|
|
ansible.builtin.service:
|
|
name: kojira
|
|
state: started
|
|
enabled: true
|