Compute script: configure EESSI

Author: bertiethorpe

ansible/roles/compute_init/files/compute-init.yml

@@ -11,17 +11,13 @@
     # block device (disk) on which to create the exported filesystem.
     # if the disk is not defined, formatting and mounting will not be done.
     nfs_disk_location:
-
     # Path to exported filesystem mountpoint on nfs servers
     nfs_export: "/exports/home"
-
     # nfs client mount options
     nfs_client_mnt_options:
-
     # Path to mountpoint on nfs clients
     nfs_client_mnt_point: "/home"
     nfs_client_mnt_state: mounted
-
     nfs_server: "{{ control_node_ip }}"
 
 
@@ -38,23 +34,29 @@
 
 
     basic_users_manage_homedir: false
-
     basic_users_userdefaults:
       state: present
       create_home: "{{ basic_users_manage_homedir }}"
       generate_ssh_key: "{{ basic_users_manage_homedir }}"
       ssh_key_comment: "{{ item.name }}"
-
     test_user_password: "zXpcWyGQL7jtZnqylQra4g=="
-
     basic_users_users:
       - name: testuser # can't use rocky as $HOME isn't shared!
         password: "{{ test_user_password | password_hash('sha512', 65534 | random(seed=inventory_hostname) | string) }}" # idempotent
         uid: 1005
         state: present
-
     basic_users_groups: []
 
+
+    # Default to 10GB
+    cvmfs_quota_limit_mb: 10000
+    cvmfs_config_default:
+      CVMFS_CLIENT_PROFILE: single
+      CVMFS_QUOTA_LIMIT: "{{ cvmfs_quota_limit_mb }}"
+    cvmfs_config_overrides: {}
+    cvmfs_config: "{{ cvmfs_config_default | combine(cvmfs_config_overrides) }}"
+
+
   tasks:
     - name: Configure resolve.conf
       block:
@@ -217,4 +219,54 @@
           loop: "{{ basic_users_users }}"
           loop_control:
             label: "{{ item.name }}"
-          when: "'sudo' in item"
+          when: "'sudo' in item"
+
+
+    - name: Configure EESSI
+      gather_facts: false
+      block:
+        - name: Download Cern GPG key
+          ansible.builtin.get_url:
+            url: http://cvmrepo.web.cern.ch/cvmrepo/yum/RPM-GPG-KEY-CernVM 
+            dest: ./cvmfs-key.gpg
+
+        - name: Import downloaded GPG key
+          command: rpm --import cvmfs-key.gpg
+
+        - name: Add CVMFS repo
+          dnf:
+            name: https://ecsft.cern.ch/dist/cvmfs/cvmfs-release/cvmfs-release-latest.noarch.rpm
+
+        - name: Install CVMFS
+          dnf:
+            name: cvmfs
+
+        - name: Install EESSI CVMFS config
+          dnf:
+            name: https://github.com/EESSI/filesystem-layer/releases/download/latest/cvmfs-config-eessi-latest.noarch.rpm
+            # NOTE: Can't find any docs on obtaining gpg key - maybe downloading directly from github is ok?
+            disable_gpg_check: true
+
+        # Alternative version using official repo - still no GPG key :(
+        # - name: Add EESSI repo
+        #   dnf: 
+        #     name: http://repo.eessi-infra.org/eessi/rhel/8/noarch/eessi-release-0-1.noarch.rpm
+
+        # - name: Install EESSI CVMFS config
+        #   dnf:
+        #     name: cvmfs-config-eessi
+
+        - name: Add base CVMFS config
+          community.general.ini_file:
+            dest: /etc/cvmfs/default.local
+            section: null
+            option: "{{ item.key }}"
+            value: "{{ item.value }}"
+            no_extra_spaces: true
+          loop: "{{ cvmfs_config | dict2items }}"
+            
+
+        # NOTE: Not clear how to make this idempotent
+        - name: Ensure CVMFS config is setup
+          command:
+            cmd: "cvmfs_config setup"