spinifex/scripts/ansible/roles/deploy/tasks/main.yml

---
# In-place artifact swap for an already-installed spinifex node. Mirrors
# `make deploy`: replace binaries + microvm artifacts, restart services.
# Does NOT run setup.sh (no user/dir/systemd-unit changes) or smoketest.

- name: deploy — fail fast if spinifex isn't already installed
  ansible.builtin.stat:
    path: "{{ spinifex_config_file }}"
  register: deploy_installed_stat
  failed_when: not deploy_installed_stat.stat.exists

- name: deploy — assert config present
  ansible.builtin.assert:
    that: deploy_installed_stat.stat.exists
    fail_msg: |
      {{ spinifex_config_file }} missing — this playbook only updates an
      existing install. Run ansible-dev-install or ansible-dev-reset first.

- name: deploy — verify build artifacts present
  ansible.builtin.stat:
    path: "{{ item }}"
  register: deploy_artifacts
  loop:
    - "{{ spinifex_root }}/bin/spx"
    - "{{ mulga_root }}/viperblock/lib/nbdkit-viperblock-plugin.so"

- name: deploy — assert artifacts exist after build role
  ansible.builtin.assert:
    that: item.stat.exists
    fail_msg: "Build artifact missing: {{ item.item }} — build role should have produced it"
  loop: "{{ deploy_artifacts.results }}"
  loop_control:
    label: "{{ item.item }}"

- name: deploy — detect microvm artifacts (direct-boot branches only)
  ansible.builtin.stat:
    path: "{{ spinifex_root }}/build/microvm/{{ item }}"
  register: deploy_microvm_stat
  loop:
    - vmlinuz
    - initramfs.cpio.gz

- name: deploy — set microvm presence fact
  ansible.builtin.set_fact:
    deploy_microvm_present: "{{ deploy_microvm_stat.results | map(attribute='stat.exists') | min }}"

- name: deploy — detect nbdkit plugin directory
  ansible.builtin.shell: |
    set -e
    nbdkit --dump-config | awk -F= '/^plugindir=/{print $2; exit}'
  register: deploy_plugindir_cmd
  changed_when: false

- name: deploy — set plugin path fact
  ansible.builtin.set_fact:
    deploy_plugindir: "{{ deploy_plugindir_cmd.stdout | trim }}"

- name: deploy — assert plugindir resolved
  ansible.builtin.assert:
    that: deploy_plugindir | length > 0
    fail_msg: "Could not detect nbdkit plugin directory via `nbdkit --dump-config`"

- name: deploy — stop spinifex.target before binary swap
  become: true
  ansible.builtin.systemd:
    name: spinifex.target
    state: stopped
  failed_when: false

- name: deploy — install spx binary
  become: true
  ansible.builtin.copy:
    src: "{{ spinifex_root }}/bin/spx"
    dest: /usr/local/bin/spx
    mode: "0755"
    owner: root
    group: root

- name: deploy — install viperblock nbdkit plugin
  become: true
  ansible.builtin.copy:
    src: "{{ mulga_root }}/viperblock/lib/nbdkit-viperblock-plugin.so"
    dest: "{{ deploy_plugindir }}/nbdkit-viperblock-plugin.so"
    mode: "0755"
    owner: root
    group: root

- name: deploy — ensure microvm dir
  become: true
  ansible.builtin.file:
    path: /usr/share/spinifex/microvm
    state: directory
    mode: "0755"
    owner: root
    group: root
  when: deploy_microvm_present

- name: deploy — install microvm kernel
  become: true
  ansible.builtin.copy:
    src: "{{ spinifex_root }}/build/microvm/vmlinuz"
    dest: /usr/share/spinifex/microvm/vmlinuz
    mode: "0644"
    owner: root
    group: root
  when: deploy_microvm_present

- name: deploy — install microvm initramfs
  become: true
  ansible.builtin.copy:
    src: "{{ spinifex_root }}/build/microvm/initramfs.cpio.gz"
    dest: /usr/share/spinifex/microvm/initramfs.cpio.gz
    mode: "0644"
    owner: root
    group: root
  when: deploy_microvm_present

- name: deploy — daemon-reload (covers any unit changes shipped via setup.sh later)
  become: true
  ansible.builtin.systemd:
    daemon_reload: true

- name: deploy — start spinifex.target
  become: true
  ansible.builtin.systemd:
    name: spinifex.target
    state: started

- name: deploy — wait for awsgw to respond
  ansible.builtin.command: "{{ spinifex_aws_cli }} ec2 describe-regions"
  register: deploy_awsgw
  retries: 15
  delay: 2
  until: deploy_awsgw.rc == 0
  changed_when: false

- name: deploy — summary
  ansible.builtin.debug:
    msg: |
      Deployed:
        spx           → /usr/local/bin/spx
        nbdkit plugin → {{ deploy_plugindir }}/nbdkit-viperblock-plugin.so
        microvm       → {{ '/usr/share/spinifex/microvm/{vmlinuz,initramfs.cpio.gz}' if deploy_microvm_present else 'skipped (not built on this branch)' }}
      spinifex.target restarted; awsgw responding.