- {% if datacenter == 'iad2' %}

-     server  mirrorlist-local3 127.0.0.1:18083 check inter 1s rise 2 fall 3 weight 100

- {% endif %}

- CONTAINER3="/var/log/mirrormanager/mirrorlist3.service.log"

- 	ssh $s "( cat $CONTAINER3 | grep -v 127.0.0.1 | gzip -4 )" >> ${OUTPUT}/mirrorlist.log.gz 2>/dev/null

- 		ssh $s "( xzcat $CONTAINER3-${DATE}.xz | grep -v 127.0.0.1 | gzip -4 )" >> ${OUTPUT}/mirrorlist.log.gz 2>/dev/null

- mirrorlist_container_image: "quay.io/adrianreber/mirrorlist-server:2.0.0"

- mirrorlist_container_image_stg: "quay.io/adrianreber/mirrorlist-server:2.0.0"

- # This job handles hourly restarting mirrorlist container(s) and making sure all is well.

- #

- # Starting with Fedora 31 this no longer uses containers.

- ##

- ## Docker ports for mirrors

- {% if datacenter == 'iad2' %}

- mirrorlist3="http://localhost:18083/metalink?repo=rawhide&arch=x86_64"

- {% endif %}

- {% if datacenter == 'iad2' %}

- # We have more mirror containers here

- if [ ! -f /srv/mirrorlist/data/mirrorlist3/global_netblocks.txt ];

- then

- 	cp /srv/mirrorlist/data/mirrorlist1/* /srv/mirrorlist/data/mirrorlist3/

- fi

- {% endif %}

- 

- 

- {% if datacenter == 'iad2' %}

- # check mirrorlist3 (old protbuf cache and see that it's processing ok)

- curl -q -H mirrors.fedoraproject.org ${mirrorlist3} -s -f --retry 50 --retry-delay 10 --retry-connrefused --retry-max-time 180 | grep "sha512" >/dev/null

- if [ $? != 0 ]; then

- 	echo "ERROR: mirrorlist3 not processing correctly"

- 	exit 1

- fi

- {% endif %}

- 

- 

- {% if ansible_distribution_major_version|int < 31  %}

-     # We have seen this to fail because podman was not able to completely

-     # remove the container for some reason. First try this:

-     sudo -u mirrormanager /usr/bin/podman rm mirrorlist1.service --storage --force

- {% endif %}

- 

- {% if datacenter == 'iad2' %}

- # copy new protbuf cache to mirrorlist3

- cp -a /srv/mirrorlist/data/mirrorlist1/* /srv/mirrorlist/data/mirrorlist3/

- 

- # Drain mirrorlist3

- echo "set server mirror-lists-backend/mirrorlist-local3 state drain" | nc -U /var/run/haproxy-admin >& /dev/null

- sleep ${TIME_DRAIN}

- echo "disable server mirror-lists-backend/mirrorlist-local3" | nc -U /var/run/haproxy-admin >& /dev/null

- sleep ${TIME_DISABLE}

- 

- # restart mirrorlist3

- systemctl stop mirrorlist3

- sleep 1

- systemctl start mirrorlist3

- if [[ ${?} -ne 0 ]]; then

-     echo "Unable to start mirrorlist3"

-     exit 1

- fi

- 

- sleep ${TIME_RESTART}

- curl -q -H mirrors.fedoraproject.org ${mirrorlist3} -o/dev/null -s -f --retry 50 --retry-delay 10 --retry-connrefused --retry-max-time 180

- if [ $? != 0 ]; then

- 	echo "ERROR: mirrorlist3 did not restart correctly"

- 	exit 1

- fi

- 

- echo "enable server mirror-lists-backend/mirrorlist-local3" | nc -U /var/run/haproxy-admin >& /dev/null

- {% endif %}

- # tasklist for setting up the mirrorlist app as a container on proxies

- - name: add mirrormanager subdirectories

-   file: dest="{{item}}" mode=0755 state=directory owner=mirrormanager group=mirrormanager

-   with_items:

-     - /home/mirrormanager/rundir

-     - /home/mirrormanager/rundir/libpod

-   tags:

-   - mirrorlist_proxy

- 

- - name: mirrormanager subgid

-   lineinfile:

-     dest: /etc/subgid

-     regexp: "^mirrormanager:"

-     line: "mirrormanager:{{ mirrormanager_subgid }}"

-   tags:

-   - mirrorlist_proxy

- 

- - name: mirrormanager subuid

-   lineinfile:

-     dest: /etc/subuid

-     regexp: "^mirrormanager:"

-     line: "mirrormanager:{{ mirrormanager_subuid }}"

-   tags:

-   - mirrorlist_proxy

- 

-   - /srv/mirrorlist/data/mirrorlist3

-   - /srv/mirrorlist/data/mirrorlist3

- - name: Ensure log file for content exists

-   file: dest="{{item}}" owner=mirrormanager group=mirrormanager mode=0755 state=touch

-   with_items:

-   - /var/log/mirrormanager/mirrorlist3.service.log

-   when: datacenter == 'iad2'

-   tags:

-   - mirrorlist_proxy

- 

- - name: for the rust based mirrorlist server chown log files

-   file: dest="{{item}}" owner=mirrormanager group=mirrormanager

-   with_items:

-   - /var/log/mirrormanager/mirrorlist3.service.log

-   when: datacenter == 'iad2'

-   tags:

-   - mirrorlist_proxy

- 

- 

- - name: Install podman

-   package: name={{item}} state=present

-   with_items:

-   - podman

-   tags:

-   - mirrorlist_proxy

- 

- - name: Pull mirrorlist image

-   command: podman pull -q  "{{ mirrorlist_container_image }}"

-   tags:

-   - mirrorlist_proxy

-   check_mode: yes

- 

-   package: name={{ item }} state=present enablerepo=epel-testing

-   when: ansible_distribution_major_version|int >= 31

- # We deploy two service files. Both listen on a different port, so that we can switch

- # them out as part of the protobuf cache deployment without having any local downtime.

- - name: Deploy service files for m3

-   template: src=mirrorlist.service.j2 dest=/etc/systemd/system/mirrorlist{{ item }}.service

-   with_items:

-   - 3

-   tags:

-   - mirrorlist_proxy

-   notify:

-   - reload systemd

-   when: datacenter == 'iad2'

- 

- - name: Enable mirrorlist3

-   service: name=mirrorlist3 enabled=yes

-   tags:

-   - mirrorlist_proxy

-   when: datacenter == 'iad2'

- 

- - name: install script to restart mirrorlist containers on protobuf cache changes

-   template: src=restart-mirrorlist-containers.j2 dest=/usr/local/bin/restart-mirrorlist-containers mode=0755

-   cron: name="restart-mirrorlist-containers" minute="20" user="root"

-         job="/usr/local/bin/restart-mirrorlist-containers"

-         cron_file=restart-mirrorlist-containers

- - name: Set cron MAILTO for restart-mirrorlist-containers

-     cron_file: restart-mirrorlist-containers

- {% if ansible_distribution_major_version|int < 31  %}

- ExecStartPre=-/usr/bin/podman stop -t 1 %n

- ExecStartPre=-/usr/bin/podman rm %n --force

- ExecStart=/usr/bin/podman run \

-             --rm=true \

-             --net=host --userns=keep-id \

-             --rm=true --name %n \

-             -v /usr/share/GeoIP:/usr/share/GeoIP \

-             -v /srv/mirrorlist/data/mirrorlist{{ item }}:/var/lib/mirrormanager \

-             -v /var/log/mirrormanager:/var/log/mirrormanager \

- {% if env == "staging" %}

-             {{ mirrorlist_container_image_stg }} \

- {% else %}

-             {{ mirrorlist_container_image }} \

- {% endif %}

-                  --port 1808{{ item }} \

-                  --listen 127.0.0.1 \

-                  -l /var/log/mirrormanager/%n.log

- ExecStop=/usr/bin/podman stop -t 1 %n

- KillMode=none

- {% else %}

- {% endif %}

- mirrormanager_subuid: "100000:65536"

- mirrormanager_subgid: "100000:65536"