Implements the docker_host role tasks: prerequisites, /etc/apt/keyrings directory (ordered before the GPG key write), Docker APT key + repo, and docker-ce/cli/containerd.io/compose-plugin install. Daemon hardening and nftables.d integration remain deferred to Phase 2 (cluster + base firewall). Updates defaults, README, and molecule verify to assert docker --version. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
8 lines
255 B
YAML
8 lines
255 B
YAML
---
|
|
# Docker engine install (ADR-004). Cluster-specific daemon hardening + nftables.d
|
|
# integration are deferred to when the cluster + host firewall exist.
|
|
docker_host__packages:
|
|
- docker-ce
|
|
- docker-ce-cli
|
|
- containerd.io
|
|
- docker-compose-plugin
|