Ansible Role: RustFS

Installs and runs RustFS, an S3 compatible object storage server, as a Docker container. The repository is named s3, the role is installed as rustfs.

Requirements

• A Docker host. The role uses the community.docker collection.
• Access to the registry mirror cr.simoncor.net (the image is pulled from cr.simoncor.net/dockerhub).

Dependencies

The playbook runs these roles first, as listed in roles/requirements.yml:

• docker (https://git.simoncor.net/ansible/docker.git)
• traefik (https://git.simoncor.net/ansible/traefik.git)
• rustfs (this repository, https://git.simoncor.net/ansible/s3.git)

Variables

The role has no defaults/ and defines no variables of its own. It uses one variable that must come from the inventory or from one of the dependencies:

Variable	Required	Default	Description
timezone	Yes		Timezone, passed to the container as TZ

Variables of the docker and traefik roles apply as documented in those repositories.

Example

timezone: "Europe/Amsterdam"

Usage

Run playbook.yaml through Semaphore. The playbook first runs ansible-galaxy install -f -r roles/requirements.yml on localhost, then runs the docker, traefik and rustfs roles in that order.

Operational notes

• The data directory /mnt/rustfs/data is created with owner and group 10001 and mounted at /data in the container. The mount must exist and be persistent.
• The container is called rustfs, uses image cr.simoncor.net/dockerhub/rustfs/rustfs:1.0.0-beta.3 (pinned beta), runs with host networking, restart policy unless-stopped and is pulled on every run (pull: always).
• Ports: 9000/tcp (S3 API) and 9001/tcp (console) are published. The container sets no Traefik labels, so routing through Traefik has to be configured on the Traefik side.
• No credentials are configured by the role: the only environment variable is TZ.
• After starting the container, the role runs a Docker cleanup (tasks/cleanup.yaml): it prunes containers, images, networks, volumes and the builder cache and then runs docker system prune --all --force --volumes. This removes everything unused on the host, including images and volumes of stopped containers.
• There are no tags.