fix(semaphore/collections): remove :ro from bind-mount, fix ANSIBLE_COLLECTIONS_PATH

- Removed :ro from volume mount — ansible-galaxy writes via podman exec
  into the container, so the mount must be writable during role runs
- Fixed deprecated ANSIBLE_COLLECTIONS_PATHS -> ANSIBLE_COLLECTIONS_PATH
This commit is contained in:
Hermes Agent service account
2026-06-07 16:48:06 -05:00
parent 644128cd3f
commit 84e30c8ee2

View File

@@ -18,9 +18,9 @@ PublishPort={{ semaphore_listen_address }}:{{ semaphore_listen_port }}:3000
Volume={{ semaphore_data_volume }}:/var/lib/semaphore:Z Volume={{ semaphore_data_volume }}:/var/lib/semaphore:Z
# Ansible collections — host-side dir populated by the semaphore role. # Ansible collections — host-side dir populated by the semaphore role.
# Bind-mounted to a neutral path; ANSIBLE_COLLECTIONS_PATHS tells # Bind-mounted to a neutral path; ANSIBLE_COLLECTIONS_PATH tells
# ansible-galaxy where to find them without touching ~/.ansible/. # Ansible where to find them without touching ~/.ansible/.
Volume={{ semaphore_collections_dir }}:/opt/ansible-collections:Z,ro Volume={{ semaphore_collections_dir }}:/opt/ansible-collections:Z
# Database — points at the postgres container on the user-defined network # Database — points at the postgres container on the user-defined network
Environment=SEMAPHORE_DB_DIALECT=postgres Environment=SEMAPHORE_DB_DIALECT=postgres
@@ -53,7 +53,7 @@ Environment=SEMAPHORE_WEB_ROOT={{ semaphore_web_url }}
Environment=TZ=America/Chicago Environment=TZ=America/Chicago
# Tell Ansible where to find collections installed by the role # Tell Ansible where to find collections installed by the role
Environment=ANSIBLE_COLLECTIONS_PATHS=/opt/ansible-collections Environment=ANSIBLE_COLLECTIONS_PATH=/opt/ansible-collections
[Service] [Service]
Restart=always Restart=always