Docker in definition

.gitmodules

@@ -16,3 +16,9 @@
 [submodule "provisioning/roles/kypo-user-access-windows"]
 	path = provisioning/roles/kypo-user-access-windows
 	url = https://gitlab.ics.muni.cz/muni-kypo-crp/backend-python/ansible-networking-stage/kypo-user-access-windows
+[submodule "provisioning/roles/docker-compose"]
+	path = provisioning/roles/docker-compose
+	url = https://gitlab.ics.muni.cz/muni-kypo/ansible-roles/docker-compose
+[submodule "provisioning/roles/docker"]
+	path = provisioning/roles/docker
+	url = https://gitlab.ics.muni.cz/CSIRT-MU-PUBLIC/ansible-roles/docker

provisioning/playbook.yml

@@ -356,3 +356,44 @@
       - name: reboot machine
         win_reboot:
         when: win_hostname_return_value.reboot_required
+
+- name: Prepare docker enabled machines
+  hosts:
+    - docker_hosts
+  become: yes
+
+  roles:
+    - role: kypo-user-access
+      kypo_user_access_username: kypo-user
+      kypo_user_access_ssh_public_key_options: 'restrict,port-forwarding,command="/usr/sbin/nologin"'
+
+  tasks:
+    - name: Install required system packages for Docker
+      apt:
+        name: gnupg-agent
+        state: latest
+        update_cache: yes
+
+    - name: Install docker-compose
+      include_role:
+        name: docker-compose
+
+    - name: Add administrator to docker group
+      user:
+        name: "{{ ansible_user }}"
+        groups: docker
+        append: yes
+
+    - name: Copy user public key to remote machine
+      copy:
+        src: "{{ kypo_global_ssh_public_user_key }}"
+        dest: "/home/kypo-user/.ssh/user_rsa.pub"
+
+    - name: Copy docker container directory to remote machine
+      copy:
+        src: "{{ containers_path }}"
+        dest: "/home/kypo-user/containers"
+
+    - name: Build docker containers
+      community.docker.docker_compose:
+        project_src: "/home/kypo-user/containers/"

docker @ b03308ef

+Subproject commit b03308ef7c89348216bf349c833cf3ce0a006bd3

docker-compose @ 7a9f2ce4

+Subproject commit 7a9f2ce48aae64b2ae16e6583fc79a5def48eaa6