Files
matrix-docker-ansible-deploy/roles/custom/matrix-bot-draupnir/molecule/default/prepare.yml
T

120 lines
4.4 KiB
YAML

# SPDX-FileCopyrightText: 2026 Slavi Pantaleev
#
# SPDX-License-Identifier: AGPL-3.0-or-later
---
- name: Prepare matrix-bot-draupnir Molecule tests
hosts: all
become: true
vars_files:
- "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') }}/../../../molecule-shared/vars.yml"
- "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') }}/../../../molecule-shared/playbook-context.yml"
gather_facts: true
tasks:
- name: Ensure apt cache is updated
ansible.builtin.apt:
update_cache: true
cache_valid_time: 600
when: ansible_facts['os_family'] == 'Debian'
- name: Ensure required packages are installed
ansible.builtin.package:
name:
- python3-requests
- fuse-overlayfs
state: present
- name: Ensure Docker is installed
ansible.builtin.include_role:
name: ansible-role-docker
vars:
docker_daemon_options:
storage-driver: fuse-overlayfs
# matrix-base creates this identity in the complete playbook. The component role's file
# tasks resolve owner/group by name, so the role-scoped scenario supplies that side effect.
- name: Ensure the matrix group exists
ansible.builtin.group:
name: "{{ matrix_group_name }}"
gid: "{{ matrix_user_gid }}"
state: present
- name: Ensure the matrix user exists
ansible.builtin.user:
name: "{{ matrix_user_name }}"
uid: "{{ matrix_user_uid }}"
group: "{{ matrix_group_name }}"
create_home: false
system: true
state: present
- name: Ensure the base data path exists
ansible.builtin.file:
path: "{{ matrix_base_data_path }}"
state: directory
owner: "{{ matrix_user_name }}"
group: "{{ matrix_group_name }}"
mode: "0750"
# Draupnir and the stub need the network before the role's converge creates it.
- name: Ensure the container network the role attaches to exists
ansible.builtin.command:
argv:
- docker
- network
- create
- "{{ matrix_bot_draupnir_container_network }}"
register: matrix_bot_draupnir_molecule_network
changed_when: matrix_bot_draupnir_molecule_network.rc == 0
failed_when:
- matrix_bot_draupnir_molecule_network.rc != 0
- "'already exists' not in matrix_bot_draupnir_molecule_network.stderr"
# The bot must see itself joined to an existing management room. The create, member and
# power-level events are the minimum state Draupnir needs to validate that room and prove
# its own user can send state. No real homeserver or account is involved.
- name: Ensure the homeserver stub is running with Draupnir management-room state
ansible.builtin.include_tasks:
file: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') }}/../../../molecule-shared/tasks/homeserver-stub.yml"
vars:
molecule_shared_stub_network: "{{ matrix_bot_draupnir_container_network }}"
molecule_shared_stub_user_id: "@draupnir:molecule.local"
molecule_shared_stub_joined_rooms:
- "{{ matrix_bot_draupnir_config_managementRoom }}"
molecule_shared_stub_verbose: "1"
molecule_shared_stub_room_state:
- type: m.room.create
state_key: ''
room_id: "{{ matrix_bot_draupnir_config_managementRoom }}"
sender: "@draupnir:molecule.local"
event_id: "$molecule-create"
origin_server_ts: 1
content:
creator: "@draupnir:molecule.local"
room_version: "10"
- type: m.room.member
state_key: "@draupnir:molecule.local"
room_id: "{{ matrix_bot_draupnir_config_managementRoom }}"
sender: "@draupnir:molecule.local"
event_id: "$molecule-member"
origin_server_ts: 2
content:
displayname: Molecule Draupnir
membership: join
- type: m.room.power_levels
state_key: ''
room_id: "{{ matrix_bot_draupnir_config_managementRoom }}"
sender: "@draupnir:molecule.local"
event_id: "$molecule-power"
origin_server_ts: 3
content:
ban: 50
events_default: 0
invite: 50
kick: 50
redact: 50
state_default: 50
users:
"@draupnir:molecule.local": 100
users_default: 0