Files
ansible-role-seriatim/tasks/validate.yml

39 lines
1.7 KiB
YAML

---
- name: Verify the managed host is supported
ansible.builtin.assert:
that:
- ansible_facts.distribution == 'Ubuntu'
- ansible_facts.distribution_version is version('26.04', '==')
- ansible_facts.architecture in ['x86_64', 'aarch64']
fail_msg: >-
Seriatim supports Ubuntu 26.04 on x86_64 and aarch64; detected
{{ ansible_facts.distribution }} {{ ansible_facts.distribution_version }}
on {{ ansible_facts.architecture }}.
- name: Verify required Seriatim values are nonempty
ansible.builtin.assert:
that:
- seriatim_version | length > 0
- seriatim_repository_url | length > 0
- seriatim_source_ref | length > 0
- seriatim_build_version | length > 0
- seriatim_go_snap_channel | length > 0
- seriatim_go_binary | length > 0
- seriatim_go_build_flags | length > 0
- seriatim_go_build_flags | select('equalto', '') | list | length == 0
- seriatim_go_ldflags | length > 0
- seriatim_go_package | length > 0
- seriatim_build_version is not regex('.*\s+.*')
fail_msg: Seriatim repository, revision, build, and Go values must be nonempty, and the build version cannot contain whitespace.
- name: Verify managed Seriatim paths are safe and distinct
ansible.builtin.assert:
that:
- seriatim_source_dir is match('^/')
- seriatim_binary_path is match('^/')
- seriatim_build_state_dir is match('^/')
- seriatim_source_dir != seriatim_binary_path
- seriatim_source_dir != seriatim_build_state_dir
- seriatim_binary_path != seriatim_build_state_dir
fail_msg: Seriatim source, binary, and state paths must be absolute and pairwise distinct.