Update 2 files

- /roles/base_setup/tasks/main.yml
- /roles/docker/tasks/main.yml
This commit is contained in:
Administrator 2025-11-27 06:25:06 +00:00
parent 8047e5732c
commit 5c7188b24b
2 changed files with 66 additions and 65 deletions

View File

@ -19,70 +19,6 @@
autoclean: yes
become: yes
# ========== Fix Docker runc version ==========
- name: Check current runc version
command: runc --version
register: runc_version_check
ignore_errors: yes
changed_when: false
become: yes
- name: Download and update runc to v1.2.4 if needed
block:
- name: Download runc v1.2.4
get_url:
url: https://github.com/opencontainers/runc/releases/download/v1.2.4/runc.amd64
dest: /tmp/runc.amd64
mode: '0755'
become: yes
- name: Stop docker service
systemd:
name: docker
state: stopped
become: yes
- name: Backup existing runc
command: mv /usr/bin/runc /usr/bin/runc.bak
args:
creates: /usr/bin/runc.bak
become: yes
- name: Install new runc
copy:
src: /tmp/runc.amd64
dest: /usr/bin/runc
remote_src: yes
mode: '0755'
become: yes
- name: Start docker service
systemd:
name: docker
state: started
become: yes
- name: Clean up temporary runc file
file:
path: /tmp/runc.amd64
state: absent
become: yes
- name: Verify new runc version
command: runc --version
register: new_runc_version
become: yes
- name: Show runc update result
debug:
msg: "runc updated to version: {{ new_runc_version.stdout }}"
become: yes
when:
- runc_version_check is failed or
"'1.2.4' not in runc_version_check.stdout"
- ansible_architecture == "x86_64"
become: yes
- name: Disable IPv6 via sysctl
sysctl:

View File

@ -155,3 +155,68 @@
- name: Show Docker metrics test result
debug:
var: metrics_test.stdout
# ========== Fix Docker runc version ==========
- name: Check current runc version
command: runc --version
register: runc_version_check
ignore_errors: yes
changed_when: false
become: yes
- name: Download and update runc to v1.2.4 if needed
block:
- name: Download runc v1.2.4
get_url:
url: https://github.com/opencontainers/runc/releases/download/v1.2.4/runc.amd64
dest: /tmp/runc.amd64
mode: '0755'
become: yes
- name: Stop docker service
systemd:
name: docker
state: stopped
become: yes
- name: Backup existing runc
command: mv /usr/bin/runc /usr/bin/runc.bak
args:
creates: /usr/bin/runc.bak
become: yes
- name: Install new runc
copy:
src: /tmp/runc.amd64
dest: /usr/bin/runc
remote_src: yes
mode: '0755'
become: yes
- name: Start docker service
systemd:
name: docker
state: started
become: yes
- name: Clean up temporary runc file
file:
path: /tmp/runc.amd64
state: absent
become: yes
- name: Verify new runc version
command: runc --version
register: new_runc_version
become: yes
- name: Show runc update result
debug:
msg: "runc updated to version: {{ new_runc_version.stdout }}"
become: yes
when:
- runc_version_check is failed or
"'1.2.4' not in runc_version_check.stdout"
- ansible_architecture == "x86_64"
become: yes