Merge pull request #191 from sportsru/manage_unit_systemd

Add flag 'mongodb_manage_systemd_unit' for disable manage systemd unit file of MongoDB

Author: UnderGreen

.travis.yml

@@ -11,116 +11,144 @@ env:
     DIST_VERSION=18_04-builded
     MONGODB_VERSION=4.2
     MONGODB_PACKAGE=mongodb-org
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=ubuntu
     DIST_VERSION=18_04-builded
     MONGODB_VERSION=4.0
     MONGODB_PACKAGE=mongodb-org
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=ubuntu
     DIST_VERSION=18_04-builded
     MONGODB_VERSION=3.6
     MONGODB_PACKAGE=mongodb
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=ubuntu
     DIST_VERSION=16_04-builded
     MONGODB_VERSION=4.2
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=ubuntu
     DIST_VERSION=16_04-builded
     MONGODB_VERSION=4.0
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=ubuntu
     DIST_VERSION=16_04-builded
     MONGODB_VERSION=3.6
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=ubuntu
     DIST_VERSION=16_04-builded
     MONGODB_VERSION=3.4
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=ubuntu-upstart
     DIST_VERSION=14.04
     MONGODB_VERSION=4.0
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=ubuntu-upstart
     DIST_VERSION=14.04
     MONGODB_VERSION=3.6
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=ubuntu-upstart
     DIST_VERSION=14.04
     MONGODB_VERSION=3.4
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=debian
     DIST_VERSION=9-builded
     MONGODB_VERSION=4.2
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=debian
     DIST_VERSION=9-builded
     MONGODB_VERSION=4.0
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=debian
     DIST_VERSION=9-builded
     MONGODB_VERSION=3.6
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=debian
     DIST_VERSION=8-builded
     MONGODB_VERSION=4.0
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=debian
     DIST_VERSION=8-builded
     MONGODB_VERSION=3.6
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=debian
     DIST_VERSION=8-builded
     MONGODB_VERSION=3.4
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=centos
     DIST_VERSION=6-builded
     MONGODB_VERSION=4.2
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=centos
     DIST_VERSION=6-builded
     MONGODB_VERSION=4.0
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=centos
     DIST_VERSION=6-builded
     MONGODB_VERSION=3.6
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=centos
     DIST_VERSION=6-builded
     MONGODB_VERSION=3.4
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=centos
     DIST_VERSION=7-builded
     MONGODB_VERSION=4.2
+    DOCKER_PRIVILEGED=false
   - >
     DISTRIBUTION=centos
     DIST_VERSION=7-builded
     MONGODB_VERSION=4.0
+    DOCKER_PRIVILEGED=false
   - >
     DISTRIBUTION=centos
     DIST_VERSION=7-builded
     MONGODB_VERSION=3.6
+    DOCKER_PRIVILEGED=false
   - >
     DISTRIBUTION=centos
     DIST_VERSION=7-builded
     MONGODB_VERSION=3.4
+    DOCKER_PRIVILEGED=false
   - >
     DISTRIBUTION=amazonlinux
     DIST_VERSION=2-builded
     MONGODB_VERSION=4.2
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=amazonlinux
     DIST_VERSION=2-builded
     MONGODB_VERSION=4.0
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=amazonlinux
     DIST_VERSION=2-builded
     MONGODB_VERSION=3.6
+    DOCKER_PRIVILEGED=true
   - >
     DISTRIBUTION=amazonlinux
     DIST_VERSION=2-builded
     MONGODB_VERSION=3.4
+    DOCKER_PRIVILEGED=true
 
 services:
   - docker

README.md

@@ -43,6 +43,7 @@ mongodb_pymongo_from_pip: true # Install latest PyMongo via PIP or package manag
 mongodb_pymongo_pip_version: 3.6.1 # Choose PyMong version to install from pip. If not set use latest
 mongodb_user_update_password: "on_create" # MongoDB user password update default policy
 mongodb_manage_service: true
+mongodb_manage_systemd_unit: true
 
 # Disable transparent hugepages on systemd debian based installations
 mongodb_disable_transparent_hugepages: false

defaults/main.yml

@@ -15,6 +15,7 @@ mongodb_pymongo_pip_version: 3.7.1
 
 mongodb_user_update_password: "on_create"        # MongoDB user password update default policy
 mongodb_manage_service: true
+mongodb_manage_systemd_unit: true
 
 mongodb_disable_transparent_hugepages: false
 

handlers/main.yml

@@ -3,25 +3,27 @@
 - name: reload systemd
   systemd:
     daemon_reload: yes
-  when: ansible_service_mgr == "systemd" and mongodb_manage_service
+  when:
+    - ansible_service_mgr == "systemd"
+    - mongodb_manage_service | bool
 
 - name: mongodb reload
   service:
     name: "{{ mongodb_daemon_name }}"
     state: reloaded
-  when: mongodb_manage_service|bool
+  when: mongodb_manage_service | bool
 
 - name: mongodb restart
   service:
     name: "{{ mongodb_daemon_name }}"
     state: restarted
-  when: mongodb_manage_service|bool
+  when: mongodb_manage_service | bool
 
 - name: mongodb-mms-monitoring-agent restart
   service:
     name: mongodb-mms-monitoring-agent
     state: restarted
-  when: mongodb_manage_service|bool
+  when: mongodb_manage_service | bool
 
 - name: restart sysfsutils
   service:

tasks/install.debian.yml

@@ -59,14 +59,26 @@
     state: present
 
 - name: Add systemd configuration if present
-  copy: src=mongodb.service dest=/lib/systemd/system/{{mongodb_daemon_name}}.service owner=root group=root mode=0644
-  when: ansible_service_mgr == "systemd"
+  copy:
+    src: mongodb.service
+    dest: "/lib/systemd/system/{{mongodb_daemon_name}}.service"
+    owner: root
+    group: root
+    mode: '0644'
+  when:
+    - ansible_service_mgr == "systemd"
+    - mongodb_manage_systemd_unit | bool
   notify:
     - reload systemd
 
 - name: Add symlink for systemd
-  file: src=/lib/systemd/system/{{mongodb_daemon_name}}.service dest=/etc/systemd/system/multi-user.target.wants/{{mongodb_daemon_name}}.service state=link
-  when: ansible_service_mgr == "systemd"
+  file:
+    src: "/lib/systemd/system/{{mongodb_daemon_name}}.service"
+    dest: "/etc/systemd/system/multi-user.target.wants/{{mongodb_daemon_name}}.service"
+    state: link
+  when:
+    - ansible_service_mgr == "systemd"
+    - mongodb_manage_systemd_unit | bool
   notify:
     - reload systemd
 

tests/Dockerfile.amazonlinux_2-builded

@@ -3,12 +3,12 @@ FROM amazonlinux:2
 # This is needed so that ansible managed to read "ansible_default_ipv4"
 RUN yum install iproute -y
 
-# This step is needed since standard CentOS docker image does not come with init-functions installed by default.
-# This package seems to be required for Mongo 3.2 and downwards
-RUN yum install initscripts -y
-
 # we can has SSH
 EXPOSE 22
 
+# This step is needed since standard CentOS docker image does not come with i
+# This package seems to be required for Mongo 3.2 and downwards
+RUN yum install initscripts -y
+
 # pepare for takeoff
 CMD ["/usr/sbin/init"]

tests/Dockerfile.centos_7-builded

@@ -6,10 +6,6 @@ RUN yum install iproute -y
 # This step is needed since standard CentOS docker image does not come with EPEL installed by default
 RUN yum install epel-release -y
 
-# This step is needed since standard CentOS docker image does not come with init-functions installed by default.
-# This package seems to be required for Mongo 3.2 and downwards
-RUN yum install initscripts -y
-
 # we can has SSH
 EXPOSE 22
 

tests/scripts/test.sh

@@ -12,39 +12,39 @@ set -o errexit
 
 package=${MONGODB_PACKAGE:-mongodb-org}
 # Test 1
-echo "ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e image_name=${DISTRIBUTION}:${DIST_VERSION}"
-ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e image_name=${DISTRIBUTION}:${DIST_VERSION}
+echo "ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION}"
+ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION}
 # Idempotence test
-ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e image_name=${DISTRIBUTION}:${DIST_VERSION} | \
+ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} | \
     grep -q 'changed=0.*failed=0' && \
     (echo 'Idempotence test: pass' && exit 0) || (echo 'Idempotence test: fail' && exit 1)
 # Delete all containers
 docker kill mongo{1,2,3} && docker rm mongo{1,2,3}
 
 # Test 2
-echo "ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_security_authorization='enabled'"
-ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_security_authorization='enabled'
+echo "ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_security_authorization='enabled'"
+ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_security_authorization='enabled'
 # Idempotence test
-ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_security_authorization='enabled' \
+ansible-playbook -i tests/hosts tests/site.yml -e target=mongo1 -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_security_authorization='enabled' \
     | grep -q 'changed=0.*failed=0' \
     && (echo 'Idempotence test: pass' && exit 0) || (echo 'Idempotence test: fail' && exit 1)
 # Delete all containers
 docker kill mongo{1,2,3} && docker rm mongo{1,2,3}
 
 # Test 3
-echo "ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs'"
-ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs'
+echo "ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs'"
+ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs'
 # Idempotence test
-ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs' \
+ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs' \
     | grep -q 'changed=0.*failed=0' \
     && (echo 'Idempotence test: pass' && exit 0) || (echo 'Idempotence test: fail' && exit 1)
 # Delete all containers
 docker kill mongo{1,2,3} && docker rm mongo{1,2,3}
 
 # Test 4
-echo "ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs' -e mongodb_security_authorization='enabled'"
-ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs' -e mongodb_security_authorization='enabled'
+echo "ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs' -e mongodb_security_authorization='enabled'"
+ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs' -e mongodb_security_authorization='enabled'
 # Idempotence test
-ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs' -e mongodb_security_authorization='enabled' \
+ansible-playbook -i tests/hosts tests/site.yml -e target=mongo -e docker_privileged=${DOCKER_PRIVILEGED} -e image_name=${DISTRIBUTION}:${DIST_VERSION} -e mongodb_package=${package} -e mongodb_version=${MONGODB_VERSION} -e mongodb_replication_replset='testrs' -e mongodb_security_authorization='enabled' \
     | grep -q 'changed=0.*failed=0' \
     && (echo 'Idempotence test: pass' && exit 0) || (echo 'Idempotence test: fail' && exit 1)

tests/site.yml

@@ -11,7 +11,18 @@
         image: "{{ image_name }}"
         command: "/sbin/init"
         state: started
-        privileged: true
+        privileged: "{{ docker_privileged }}"
+        mounts:
+          - type: bind
+            source: /sys/fs/cgroup
+            target: /sys/fs/cgroup
+          - type: bind
+            source: /sys/fs/fuse
+            target: /sys/fs/fuse
+          - type: tmpfs
+            target: /run
+          - type: tmpfs
+            target: /run/lock
       with_items:
         - mongo1
         - mongo2