Skip to content

AspNetCore.IdentityServer4.Sample

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History

AspNetCore.IdentityServer4.Sample

README.md

Deploy karatejb\AspNetCore.IdentityServer4.Sample

The playbook to install Docker and deploy karatejb\AspNetCore.IdentityServer4.Sample to Ubuntu.

Structure

│  ansible.cfg # Define the inventory and ssh key for the default playbook
│  docker-app-adv.yml  # The playbook for using hosts, group_vars and host_vars inside inventories directory (e.q. inventories/JB)
│  docker-app.yml # The default playbook
│  docker-only.yml # The playbook that only install Docker in managed node
│  inventory # The inventory for default playbook
│
├─inventories
│  └─JB # My custom hosts/group_vars/host_vars/...
│      │  hosts 
│      │
│      ├─group_vars
│      │      all
│      │      development
│      │      production
│      │
│      └─host_vars
│              all
│
└─roles
    ├─app # The role to deploy application (build and start the containers)
    │  ├─defaults
    │  │      main.yml
    │  │
    │  ├─files
    │  │      development.crt
    │  │      development.key
    │  │      development.pfx
    │  │
    │  ├─meta
    │  │      main.yml
    │  │
    │  ├─tasks
    │  │      1.clone_ap_repository.yml # Clone the git respository, you can specified certain git branch here
    │  │      2.run_containers.yml
    │  │      3.update_ap_config.yml
    │  │      4.update_cert.yml
    │  │      5.restart_containers.yml
    │  │      6.remove_tmp_files.yml
    │  │      main.yml # Then main task to include the other tasks
    │  │
    │  ├─templates
    │  │  │
    │  │  └─AppSettings
    │  │          AppSettings.Auth.j2 # Template for generating appsettings.Docker.json to Auth Server
    │  │          AppSettings.WebApi.j2 # Template for generating appsettings.Docker.json to Backend web api
    │  │
    │  └─vars
    │          development.yml # Define the variables/values when hosts == "development"
    │          main.yml # Define the default variables/values
    │          production.yml # Define the variables/values when hosts == "production"
    │
    ├─docker # The role to install Docker and Docker-compose
    │  ├─defaults
    │  │      main.yml
    │  │
    │  ├─meta
    │  │      main.yml
    │  │
    │  └─tasks
    │          main.yml
    │
    └─pip  # The role to install python3's related packages
        └─tasks
                main.yml

Steps (Using default playbook)

1. Update the managed node's information in inventory

For example,

[dev_hp_omen]
127.0.0.1 ansible_port=22 ansible_user=jb ansible_python_interpreter=/usr/bin/python3

2. (Optional) Update the configurations of Auth Server or Backend webapi

If you wanna change the values of AppSettings, update the values of

roles/app/vars/development.yml (For development environment)

or create a new vars file.

3. Run the playbook

$ ansible-playbook docker-app.yml -e "machine=dev_hp_omen env=development"

The above command will load inventory/ssh key that are defined in ansible.cfg. You can bypass the extra vars: machine, env, by overwriting the values in docker-app.yml:

 vars:
    - machine: dev_hp_omen
    - env: "development"

4. (Optional) Use Ansible Vault

For production environment, it is recommeded to use Ansible Vault for encrypting sensitive information, such as LDAP Credentials. For example, to encrypt the value of LDAP Credentials,

$ echo "<your_pwd>" > ~/prod-av-secret
$ ansible-vault encrypt_string --vault-id prod@~/prod-av-secret 'admin' --name 'ldap_bind_credentials'
ldap_bind_credentials: !vault |
          $ANSIBLE_VAULT;1.2;AES256;prod
          ...skip the cipher

Paste the above encrypted string to roles/app/vars/production and replace the original variable and its value. Run the playbook as following,

$ ansible-playbook --vault-id prod@~/prod-av-secret docker-app.yml -e "machine=dev_hp_omen env=development"

Steps (Using hosts/group_vars/host_vars in invertories/xxx)

1. Update the managed node's information

Define the managed node's IP in inventories/xxx/group_vars/all and

Update the managed node's group information in inventories/xxx/hosts.

2. (Optional) Update the configurations of Auth Server or Backend webapi

If you wanna change the values of AppSettings, update the values of

inventories/xxx/group_vars/development (For development environment)

or create a new vars file.

3. Run the playbook

$ ansible-playbook -e "env=development" --private-key ~/.ssh/id_rsa -i ./inventories/xxx/ docker-app-adv.yml

The extra vars: env, can be bypass by by overwriting the values in docker-app-adv.yml:

vars:
    - env: development

E.q.

$ ansible-playbook -e "env=development" --private-key ~/.ssh/id_rsa -i ./inventories/JB/ docker-app-adv.yml

4. (Optional) Use Ansible Vault

For production environment, it is recommeded to use Ansible Vault for encrypting sensitive information, such as LDAP Credentials. For example, to encrypt the value of LDAP Credentials,

$ echo "<your_pwd>" > ~/prod-av-secret
$ ansible-vault encrypt_string --vault-id prod@~/prod-av-secret 'admin' --name 'ldap_bind_credentials'
ldap_bind_credentials: !vault |
          $ANSIBLE_VAULT;1.2;AES256;prod
          ...skip the cipher

Paste the above encrypted string to inventories/xxx/group_vars/production and replace the original variable and its value. Run the playbook as following,

$ ansible-playbook -e "env=production" --vault-id prod@~/prod-av-secret --private-key ~/.ssh/id_rsa -i ./inventories/JB/ docker-app-adv.yml

Trouble shootings

Debug

Debug Ansible by

ANSIBLE_DEBUG=True ansible-inventory -i inventories/JB --list --yaml

Cannot have both the docker-py and docker python modules

  1. Uninstall python2
$ apt-get purge -y python2.7
  1. Uninstall docker's related package
$ pip3 list | grep docker
docker (4.3.1)
docker-compose (1.26.2)
docker-pycreds (0.4.0)
dockerpty (0.4.1)

$ pip3 uninstall docker docker-compose
  1. Then force re-install docker and docker-compose.
$ pip3 install --force-reinstall docker docker-compose

And restart the machine.

WSL2

Docker 'cgroups: cannot find cgroup mount destination: unknown'

See microsoft/WSL#4189 (comment)

$ sudo mkdir /sys/fs/cgroup/systemd
$ sudo mount -t cgroup -o none,name=systemd cgroup /sys/fs/cgroup/systemd