run-build-template-vm.sh

#!/usr/bin/env bash
#!/usr/bin/env bash

#set -eux

#source virtualenv.sh

# Requirements have to be installed prior to running ansible-playbook
# because plugins and requirements are loaded before the task runs

#pip install -r requirements.txt

echo "PWD=${PWD}"

#echo "==> ENV"
#echo "$(export -p | sed 's/declare -x //')"

PLAYBOOK_DEFAULT="bootstrap_vm_template.yml"

PROJECT_DIR="/var/tmp/packer-provisioner-ansible-local"

ANSIBLE_TEMPLATE_INVENTORY="${PROJECT_DIR}/inventory/xenv_groups.yml"
ANSIBLE_COLLECTION_REQUIREMENTS="${PROJECT_DIR}/collections/requirements.yml"
#ANSIBLE_COLLECTION_REQUIREMENTS="${PROJECT_DIR}/collections/requirements.test.yml"

VAULTPASS_FILEPATH="~/.vault_pass"
if [[ -f "${PROJECT_DIR}/.vault_pass" ]]; then
  VAULTPASS_FILEPATH="${PROJECT_DIR}/.vault_pass"
fi
#VAULT_FILEPATH="integration_config.vault.yml"
VAULT_FILEPATH="./vars/vault.yml"

INSTALL_LATEST_GALAXY_COLLECTIONS=1

USE_SOURCE_COLLECTIONS=0
SOURCE_COLLECTIONS_PATH="${BASE_DIR}/requirements_collections"

SCRIPT_DIR="$( cd "$( dirname "$0" )" && pwd )"
SCRIPT_FILE=$(basename $0)
#PLAYBOOK="${SCRIPT_FILE%.*}.yml"

echo "SCRIPT_DIR=[${SCRIPT_DIR}]"
echo "SCRIPT_FILE=[${SCRIPT_FILE}]"
#echo "PLAYBOOK=[${PLAYBOOK}]"
echo "PROJECT_DIR=${PROJECT_DIR}"

echo "VAULT_FILEPATH=${VAULT_FILEPATH}"
echo "VAULT_ID=${VAULT_ID}"

export LOCAL_COLLECTIONS_PATH=${HOME}/.ansible
#export ANSIBLE_ROLES_PATH=./
#export ANSIBLE_COLLECTIONS_PATH="${HOME}/.ansible:${PROJECT_DIR}/collections:${BASE_DIR}/requirements_collections"
#export ANSIBLE_COLLECTIONS_PATH="${PROJECT_DIR}/collections:${BASE_DIR}/requirements_collections"
#export ANSIBLE_COLLECTIONS_PATH="${BASE_DIR}/requirements_collections"
#export ANSIBLE_COLLECTIONS_PATH="${PROJECT_DIR}/collections"
#export ANSIBLE_COLLECTIONS_PATH="${PROJECT_DIR}/collections:${LOCAL_COLLECTIONS_PATH}"
export ANSIBLE_COLLECTIONS_PATH="${PROJECT_DIR}/collections:${LOCAL_COLLECTIONS_PATH}"

if [[ "${USE_SOURCE_COLLECTIONS}" -eq 1 ]]; then
  export ANSIBLE_COLLECTIONS_PATH=${ANSIBLE_COLLECTIONS_PATH}:${SOURCE_COLLECTIONS_PATH}
fi

#export ANSIBLE_DEBUG=1
export ANSIBLE_KEEP_REMOTE_FILES=1
export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES

## ref: https://github.com/ansible/ansible/issues/79557#issuecomment-1344168449
#export ANSIBLE_GALAXY_IGNORE=true
#export GALAXY_IGNORE_CERTS=true

function pull_latest_galaxy_collections() {

  echo "==> ansible-galaxy --version"
  ansible-galaxy --version

    ## ref: https://github.com/ansible/ansible/issues/79557#issuecomment-1344168449
  echo "==> Install Galaxy collection requirements"
#  GALAXY_INSTALL_CMD=("env ANSIBLE_GALAXY_IGNORE=true env GALAXY_IGNORE_CERTS=true")
#  GALAXY_INSTALL_CMD+=("ansible-galaxy collection install")
#  GALAXY_INSTALL_CMD+=("--ignore-certs")
#  GALAXY_INSTALL_CMD+=("--force")

  GALAXY_INSTALL_CMD=("ansible-galaxy collection install")
  GALAXY_INSTALL_CMD+=("--upgrade")
  GALAXY_INSTALL_CMD+=("-r ${ANSIBLE_COLLECTION_REQUIREMENTS}")
  GALAXY_INSTALL_CMD+=("-p ${LOCAL_COLLECTIONS_PATH}")

  echo "==> ${GALAXY_INSTALL_CMD[@]}"
  eval "${GALAXY_INSTALL_CMD[@]}"

}

function main() {
  PLAYBOOK_ARGS="$@"
  if [ $# -gt 0 ]; then
    PLAYBOOK_ARGS=("$@")
  else
    PLAYBOOK_ARGS=("${PLAYBOOK_DEFAULT}")
  fi
  echo "==> PLAYBOOK_ARGS[*]=${PLAYBOOK_ARGS[*]}"

  rm -f ./ansible.log

  ## ref: https://stackoverflow.com/questions/40684543/how-to-make-python-use-ca-certificates-from-mac-os-truststore
  CERT_PATH=$(python -m certifi)
  export SSL_CERT_FILE=${CERT_PATH}
  export REQUESTS_CA_BUNDLE=${CERT_PATH}

  if [[ "${INSTALL_LATEST_GALAXY_COLLECTIONS}" -eq 1 ]]; then
    pull_latest_galaxy_collections
  fi
  echo "==> ansible-galaxy collection list"
  ansible-galaxy collection list

  echo "==> ansible --version"
  ansible --version

  PLAYBOOK_CMD=("ansible-playbook")
#  PLAYBOOK_CMD+=("-e @${TEST_VARS_FILE}")
  PLAYBOOK_CMD+=("-e @${VAULT_FILEPATH}")
  PLAYBOOK_CMD+=("--vault-id ${VAULT_ID}@${VAULTPASS_FILEPATH}")
  PLAYBOOK_CMD+=("${PLAYBOOK_PATH}")
  PLAYBOOK_CMD+=("${PLAYBOOK_ARGS[*]}")
  PLAYBOOK_CMD+=("-i ${ANSIBLE_TEMPLATE_INVENTORY}")

  echo "==> ${PLAYBOOK_CMD[*]}"
  eval "${PLAYBOOK_CMD[@]}"

}

export PATH=$PATH:~/.venv/ansible/bin
main "$@"

#export PATH=$PATH:~/.venv/ansible/bin
#
#cd /var/tmp/packer-provisioner-ansible-local
#
#ansible-playbook bootstrap_vm_template.yml \
#  --tag vm-template \
#  --vault-password-file=~/.vault_pass \
#  -e @./vars/vault.yml \
#  -c local \
#  -i xenv_groups.yml