110 lines
2.8 KiB
YAML
110 lines
2.8 KiB
YAML
---
|
|
- name: Validate the supported platform
|
|
ansible.builtin.assert:
|
|
that:
|
|
- ansible_facts.distribution == "Ubuntu"
|
|
- ansible_facts.distribution_version == "26.04"
|
|
- ansible_facts.architecture in ["x86_64", "aarch64"]
|
|
fail_msg: Audita supports Ubuntu 26.04 on x86_64 or aarch64.
|
|
|
|
- name: Install Git
|
|
become: true
|
|
ansible.builtin.apt:
|
|
name: git
|
|
state: present
|
|
update_cache: true
|
|
cache_valid_time: 3600
|
|
when: audita_manage_build_dependencies
|
|
|
|
- name: Install Go
|
|
become: true
|
|
community.general.snap:
|
|
name: go
|
|
channel: "{{ audita_go_snap_channel }}"
|
|
classic: true
|
|
state: present
|
|
when: audita_manage_build_dependencies
|
|
|
|
- name: Create installation parent directories
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: "0755"
|
|
loop:
|
|
- "{{ audita_source_dir | dirname }}"
|
|
- "{{ audita_binary_path | dirname }}"
|
|
|
|
- name: Create the Audita configuration directory
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: "{{ audita_config_path | dirname }}"
|
|
state: directory
|
|
owner: "{{ audita_config_owner }}"
|
|
group: "{{ audita_config_group }}"
|
|
mode: "{{ audita_config_directory_mode }}"
|
|
|
|
- name: Check out Audita source
|
|
become: true
|
|
ansible.builtin.git:
|
|
repo: "{{ audita_repository_url }}"
|
|
dest: "{{ audita_source_dir }}"
|
|
version: "{{ audita_version }}"
|
|
force: true
|
|
register: audita_checkout
|
|
|
|
- name: Inspect the installed binary
|
|
ansible.builtin.stat:
|
|
path: "{{ audita_binary_path }}"
|
|
register: audita_binary
|
|
|
|
- name: Build Audita
|
|
become: true
|
|
ansible.builtin.command:
|
|
argv:
|
|
- "{{ audita_go_binary }}"
|
|
- build
|
|
- -trimpath
|
|
- -ldflags
|
|
- "-s -w -X gitea.maximumdirect.net/eric/audita/internal/buildinfo.Version={{ audita_version }}"
|
|
- -o
|
|
- "{{ audita_binary_path }}"
|
|
- gitea.maximumdirect.net/eric/audita/cmd/audita
|
|
chdir: "{{ audita_source_dir }}"
|
|
environment:
|
|
CGO_ENABLED: "0"
|
|
GOTOOLCHAIN: local
|
|
GOWORK: "off"
|
|
changed_when: true
|
|
when: >-
|
|
audita_checkout.changed or
|
|
not audita_binary.stat.exists
|
|
|
|
- name: Converge installed metadata
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: "{{ item.path }}"
|
|
state: "{{ item.state }}"
|
|
owner: root
|
|
group: root
|
|
mode: "{{ item.mode | default(omit) }}"
|
|
recurse: "{{ item.recurse | default(omit) }}"
|
|
loop:
|
|
- path: "{{ audita_source_dir }}"
|
|
state: directory
|
|
recurse: true
|
|
- path: "{{ audita_binary_path }}"
|
|
state: file
|
|
mode: "0755"
|
|
|
|
- name: Write Audita configuration
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: config.yml.j2
|
|
dest: "{{ audita_config_path }}"
|
|
owner: "{{ audita_config_owner }}"
|
|
group: "{{ audita_config_group }}"
|
|
mode: "{{ audita_config_file_mode }}"
|