1
0
Fork 0
mirror of https://github.com/roles-ansible/ansible_role_restic.git synced 2024-12-11 23:41:32 +01:00

improve restic self-update handling

This commit is contained in:
L3D 2021-08-03 23:16:34 +02:00
parent 1b6c55473c
commit 67294c1489
Signed by: l3d
GPG key ID: CD08445BFF4313D1
8 changed files with 58 additions and 49 deletions

View file

@ -77,6 +77,7 @@ ansible-galaxy install arillso.restic
| `restic_schedule_type` | `systemd` | Here you can define if we create a ``cronjob`` or a ``systemd`` timer. If it fails to create a systemd timer, a cronjob will be created. | | `restic_schedule_type` | `systemd` | Here you can define if we create a ``cronjob`` or a ``systemd`` timer. If it fails to create a systemd timer, a cronjob will be created. |
| `restic_dir_owner` | `'{{ansible_user}}'` | The owner of all created dirs | | `restic_dir_owner` | `'{{ansible_user}}'` | The owner of all created dirs |
| `restic_dir_group` | `'{{ansible_user}}'` | The group of all created dirs | | `restic_dir_group` | `'{{ansible_user}}'` | The group of all created dirs |
| `restic_no_log` | `true` | set to false to see hidden ansible logs |
### Repos ### Repos
Restic stores data in repositories. You have to specify at least one repository Restic stores data in repositories. You have to specify at least one repository

View file

@ -11,6 +11,7 @@ restic_backups: []
restic_create_schedule: "{{ restic_create_cron }}" restic_create_schedule: "{{ restic_create_cron }}"
restic_schedule_type: "systemd" restic_schedule_type: "systemd"
# restic_schedule_type: "cronjob" # restic_schedule_type: "cronjob"
restic_no_log: true
restic_dir_owner: '{{ ansible_user | default(ansible_user_id) }}' restic_dir_owner: '{{ ansible_user | default(ansible_user_id) }}'
restic_dir_group: '{{ ansible_user | default(ansible_user_id) }}' restic_dir_group: '{{ ansible_user | default(ansible_user_id) }}'

View file

@ -7,6 +7,7 @@
daemon_reload: true daemon_reload: true
masked: false masked: false
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
ignore_errors: true
when: when:
- restic_create_schedule - restic_create_schedule
- item.name is defined - item.name is defined

View file

@ -12,7 +12,7 @@
mode: '0700' mode: '0700'
owner: '{{ restic_dir_owner }}' owner: '{{ restic_dir_owner }}'
group: '{{ restic_dir_group }}' group: '{{ restic_dir_group }}'
no_log: true no_log: "{{ restic_no_log }}"
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
when: when:
- item.name is defined - item.name is defined
@ -27,7 +27,7 @@
mode: '0700' mode: '0700'
owner: '{{ restic_dir_owner }}' owner: '{{ restic_dir_owner }}'
group: '{{ restic_dir_group }}' group: '{{ restic_dir_group }}'
no_log: true no_log: "{{ restic_no_log }}"
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
when: when:
- item.name is defined - item.name is defined

View file

@ -12,7 +12,7 @@
AWS_DEFAULT_REGION: '{{ item.value.aws_default_region | default("") }}' AWS_DEFAULT_REGION: '{{ item.value.aws_default_region | default("") }}'
B2_ACCOUNT_ID: '{{ item.value.b2_account_id | default("") }}' B2_ACCOUNT_ID: '{{ item.value.b2_account_id | default("") }}'
B2_ACCOUNT_KEY: '{{ item.value.b2_account_key | default("") }}' B2_ACCOUNT_KEY: '{{ item.value.b2_account_key | default("") }}'
no_log: true no_log: "{{ restic_no_log }}"
register: restic_init register: restic_init
changed_when: "'created restic repository' in restic_init.stdout" changed_when: "'created restic repository' in restic_init.stdout"
failed_when: failed_when:

View file

@ -1,21 +1,21 @@
--- ---
- name: install and verify restic binary
block:
- name: Download client binary - name: Download client binary
get_url: ansible.builtin.get_url:
url: '{{ restic_url }}' url: '{{ restic_url }}'
dest: '{{ restic_download_path }}/restic.bz2' dest: '{{ restic_download_path }}/restic.bz2'
force: true force: true
register: get_url_restic register: get_url_restic
# TODO: This needs to become independent of the shell module to actually work # TODO: This needs to become independent of the shell module to actually work
# on every system. We could use a distribution specific aproach, but this would
# conflict with the current structure in tasks/distribution/
- name: Decompress the binary - name: Decompress the binary
shell: "bzip2 -dc {{ get_url_restic.dest }} > {{ restic_bin_bath }}" ansible.builtin.shell: "bzip2 -dc {{ get_url_restic.dest }} > {{ restic_bin_bath }}"
args: args:
creates: '{{ restic_download_path }}/bin/restic-{{ restic_version }}' creates: '{{ restic_download_path }}/bin/restic-{{ restic_version }}'
- name: Ensure permissions are correct - name: Ensure permissions are correct
file: ansible.builtin.file:
path: '{{ restic_download_path }}/bin/restic-{{ restic_version }}' path: '{{ restic_download_path }}/bin/restic-{{ restic_version }}'
mode: '0755' mode: '0755'
owner: '{{ restic_dir_owner }}' owner: '{{ restic_dir_owner }}'
@ -27,21 +27,25 @@
register: restic_test_result register: restic_test_result
- name: Remove faulty binary - name: Remove faulty binary
file: ansible.builtin.file:
path: '{{ restic_bin_bath }}' path: '{{ restic_bin_bath }}'
state: absent state: absent
when: "'FAILED' in restic_test_result.stderr" when: "'FAILED' in restic_test_result.stderr"
- name: Fail if restic could not be installed - name: Fail if restic could not be installed
fail: ansible.builtin.fail:
msg: >- msg: >-
Restic binary has been faulty and has been removed. Restic binary has been faulty and has been removed.
Try to re-run the role and make sure you have bzip2 installed! Try to re-run the role and make sure you have bzip2 installed!
when: "'FAILED' in restic_test_result.stderr" when: "'FAILED' in restic_test_result.stderr"
- name: Create symbolic link to the correct version - name: Create symbolic link to the correct version
file: ansible.builtin.file:
src: '{{ restic_download_path }}/bin/restic-{{ restic_version }}' src: '{{ restic_download_path }}/bin/restic-{{ restic_version }}'
path: '{{ restic_install_path }}/restic' path: '{{ restic_install_path }}/restic'
state: link state: link
force: true force: true
rescue:
- name: try restic self-update
become: true
ansible.builtin.command: "{{ restic_install_path }}/restic self-update"

View file

@ -9,7 +9,7 @@
owner: 'root' owner: 'root'
group: 'root' group: 'root'
mode: '0644' mode: '0644'
no_log: true no_log: "{{ restic_no_log }}"
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
notify: systemctl restart restic.timer notify: systemctl restart restic.timer
when: when:
@ -24,7 +24,7 @@
owner: 'root' owner: 'root'
group: 'root' group: 'root'
mode: '0644' mode: '0644'
no_log: true no_log: "{{ restic_no_log }}"
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
when: when:
- item.name is defined - item.name is defined
@ -38,7 +38,7 @@
owner: 'root' owner: 'root'
group: 'root' group: 'root'
mode: '0644' mode: '0644'
no_log: true no_log: "{{ restic_no_log }}"
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
when: when:
- item.name is defined - item.name is defined
@ -83,7 +83,7 @@
cron_file: '/etc/crontab' cron_file: '/etc/crontab'
user: 'root' user: 'root'
become: true become: true
no_log: true no_log: "{{ restic_no_log }}"
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
when: when:
- item.name is defined - item.name is defined
@ -109,7 +109,7 @@
cron_file: '/etc/crontab' cron_file: '/etc/crontab'
user: 'root' user: 'root'
become: true become: true
no_log: true no_log: "{{ restic_no_log }}"
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
when: when:
- restic_create_schedule | bool - restic_create_schedule | bool
@ -124,6 +124,7 @@
enabled: false enabled: false
masked: true masked: true
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
ignore_errors: true
when: when:
- restic_create_schedule | bool - restic_create_schedule | bool
- item.name is defined - item.name is defined
@ -137,6 +138,7 @@
enabled: false enabled: false
masked: true masked: true
with_items: '{{ restic_backups }}' with_items: '{{ restic_backups }}'
ignore_errors: true
when: when:
- restic_create_schedule | bool - restic_create_schedule | bool
- item.name is defined - item.name is defined

View file

@ -10,5 +10,5 @@ restic_os_variables:
paths: paths:
- 'vars' - 'vars'
playbook_version_number: 15 # should be int playbook_version_number: 16 # should be int
playbook_version_path: 'do1jlr.restic.version' playbook_version_path: 'do1jlr.restic.version'