Moved the userns and subuid tasks to the correct file. (a9b388bd) · Commits · shore / homelab

roles/debian_server/tasks/docker.yml

+0 −20

Original line number	Diff line number	Diff line
		@@ -53,23 +53,3 @@
		direction: in
		interface: docker0
		rule: allow

		- name: Set UID/GID mapping range
		loop:
		- /etc/subgid
		- /etc/subuid
		copy:
		content: \|
		nimrod:100000:65536
		dest: \|-
		{{ item }}
		group: root
		mode: 0o0644
		owner: root

		- name: Allow unprivileged user namespaces
		when: ansible_facts.distribution_major_version\|int < 11
		ansible.posix.sysctl:
		name: kernel/unprivileged_userns_clone
		state: present
		value: "1"

+20 −0

Original line number	Diff line number	Diff line
		---
		- name: Set UID/GID mapping range
		loop:
		- /etc/subgid
		- /etc/subuid
		copy:
		content: \|
		nimrod:100000:65536
		dest: \|-
		{{ item }}
		group: root
		mode: 0o0644
		owner: root

		- name: Allow unprivileged user namespaces
		when: ansible_facts.distribution_major_version\|int < 11
		ansible.posix.sysctl:
		name: kernel/unprivileged_userns_clone
		state: present
		value: "1"

		- name: Install Podman from the Kubic repository
		# yamllint disable-line rule:line-length
		when: ansible_facts.distribution_release is in ["buster", "bionic", "focal", "hera", "odin"]