klal

all.yml

@@ -74,3 +74,6 @@
     - name: nfs_server
       role: nfs_server
       tags: nfs_server
+    - name: cert_gen
+      role: cert_gen
+      tags: cert_gen

roles/common/tasks/main.yml

@@ -16,7 +16,6 @@
       ansible.builtin.shell:
         cmd: |
           apt-mark hold docker-ce docker-compose-plugin docker-ce-rootless-extras docker-ce-cli docker-buildx-plugin
-      when: inventory_hostname == 'm-server.home.lan'
       register: logo
       changed_when: "logo.rc == 0"
 

roles/docker/handlers/main.yml

@@ -1,4 +1,4 @@
-- name: Restart_docker
+- name: restart_docker
   ansible.builtin.service:
     name: docker.service
     state: restarted

roles/docker/tasks/main.yml

@@ -75,15 +75,46 @@
       when:
         - ansible_distribution == "Ubuntu"
 
-    - name: Install docker
+    # - name: Install docker
+    #   ansible.builtin.apt:
+    #     name:
+    #       - docker-ce
+    #       - docker-ce-cli
+    #       - containerd.io
+    #       - docker-buildx-plugin
+    #       - docker-compose-plugin
+    #     update_cache: true
+
+
+    - name: Install the version docker
       ansible.builtin.apt:
-        name:
-          - docker-ce
-          - docker-ce-cli
-          - containerd.io
-          - docker-buildx-plugin
-          - docker-compose-plugin
-        update_cache: true
+        name: "{{ item }}=5:28.5.2-1~{{ ansible_distribution | lower }}.{{ ansible_distribution_major_version }}~{{ ansible_distribution_release }}"
+        state: present
+        allow_downgrade: true
+      when:
+        - ansible_distribution == "Debian"
+      loop:
+        - docker-ce
+        - docker-ce-cli
+    - name: Install the version docker
+      ansible.builtin.apt:
+        name: "{{ item }}=1.7.28-2~{{ ansible_distribution | lower }}.{{ ansible_distribution_major_version }}~{{ ansible_distribution_release }}"
+        state: present
+        allow_downgrade: true
+      when:
+        - ansible_distribution == "Debian"
+      loop:
+        - containerd.io
+
+    - name: Install the version docker
+      ansible.builtin.apt:
+        name: "{{ item }}=0.28.0-0~{{ ansible_distribution | lower }}.{{ ansible_distribution_major_version }}~{{ ansible_distribution_release }}"
+        state: present
+        allow_downgrade: true
+      when:
+        - ansible_distribution == "Debian"
+      loop:
+        - docker-buildx-plugin
 
     - name: Create a directory docker.service.d
       ansible.builtin.file:
@@ -98,27 +129,27 @@
         owner: root
         group: root
 
-    - name: Copy files
-      ansible.builtin.copy:
-        src: server-key.pem
-        dest: /etc/docker/certs/
-        mode: '0600'
-        owner: root
-        group: root
-    - name: Copy files
-      ansible.builtin.copy:
-        src: ca.pem
-        dest: /etc/docker/certs/
-        mode: '0600'
-        owner: root
-        group: root
-    - name: Copy files
-      ansible.builtin.copy:
-        src: server-cert.pem
-        dest: /etc/docker/certs/
-        mode: '0600'
-        owner: root
-        group: root
+    # - name: Copy files
+    #   ansible.builtin.copy:
+    #     src: server-key.pem
+    #     dest: /etc/docker/certs/
+    #     mode: '0600'
+    #     owner: root
+    #     group: root
+    # - name: Copy files
+    #   ansible.builtin.copy:
+    #     src: ca.pem
+    #     dest: /etc/docker/certs/
+    #     mode: '0600'
+    #     owner: root
+    #     group: root
+    # - name: Copy files
+    #   ansible.builtin.copy:
+    #     src: server-cert.pem
+    #     dest: /etc/docker/certs/
+    #     mode: '0600'
+    #     owner: root
+    #     group: root
     - name: Creating a file with content
       ansible.builtin.copy:
         dest: "/etc/systemd/system/docker.service.d/override.conf"