playbook.yaml

- name: "Create license manager user and group"
  hosts:
    - pouta_license_server
  become: true
  vars:
    download_url: "https://ssd.mathworks.com/supportfiles/downloads/R2026a/license_manager/R2026a/daemons/glnxa64/mathworks_network_license_manager_glnxa64.zip"
    download_checksum: "sha256:2c93c8a9c511f25a5ab1ffef4549243f26e7290f797ef9f4a4c6630cdb3ceddf"
    dir_lm: "/license/matlab/lm/R2026a"
    dir_license: "/license/matlab/files"
    license_file: "{{ dir_license }}/license.lic"
    options_file: "{{ dir_license }}/license.opt"
    log_file: "{{ dir_license }}/license.log"
    license_server_port: 27000
    license_manager_port: 27001

  tasks:
    - name: "Upgrade all packages"
      ansible.builtin.apt:
        upgrade: yes
        update_cache: yes
        cache_valid_time: 3600

    - name: "Install unzip"
      ansible.builtin.apt:
        name:
          - unzip
        state: present
        install_recommends: no

    - name: "Firewall config"
      ansible.builtin.iptables:
        chain: INPUT
        protocol: tcp
        destination_port: "{{ item }}"
        jump: ACCEPT
        state: present
      loop:
        - 27000
        - 27001

    - name: "Create non-standard tmp location for legacy FlexLM"
      ansible.builtin.file:
        src: /tmp
        dest: /usr/tmp
        state: link

    - name: "Create license directory"
      ansible.builtin.file:
        path: "/license"
        state: directory
        mode: "u=rwx,go=rx"

    - name: Create group lmadmin
      ansible.builtin.group:
        name: lmadmin
        state: present

    - name: Create user lmmatlab
      ansible.builtin.user:
        name: lmmatlab
        group: lmadmin
        state: present

    - name: "Create license manager directory"
      ansible.builtin.file:
        path: "{{ item }}"
        state: directory
        mode: "u=rwx,go=rx"
        owner: lmmatlab
        group: lmadmin
      loop:
        - "{{ dir_lm }}"
        - "{{ dir_lm }}/bin"

    - name: "Download matlab license manager"
      ansible.builtin.get_url:
        url: "{{ download_url }}"
        dest: "{{ dir_lm }}/mlm.zip"
        checksum: "{{ download_checksum }}"
        mode: "u=rw,go=r"
        owner: lmmatlab
        group: lmadmin

    - name: "Extract the archive"
      ansible.builtin.unarchive:
        src: "{{ dir_lm }}/mlm.zip"
        dest: "{{ dir_lm }}"
        remote_src: true
        mode: "u=rwX,go=rX"
        owner: lmmatlab
        group: lmadmin

    - name: "lm_hostid command"
      ansible.builtin.copy:
        content: |
          #!/usr/bin/env bash
          {{ dir_lm }}/etc/glnxa64/lmutil lmhostid -n
        dest: "{{ dir_lm }}/bin/lm_hostid"
        mode: "u=rwx,go=rx"
        owner: lmmatlab
        group: lmadmin

    - name: "lm_status command"
      ansible.builtin.copy:
        content: |
          #!/usr/bin/env bash
          {{ dir_lm }}/etc/glnxa64/lmutil lmstat -a -c "{{ license_file }}"
        dest: "{{ dir_lm }}/bin/lm_status"
        mode: "u=rwx,go=rx"
        owner: lmmatlab
        group: lmadmin

    - name: "lm_reload command"
      ansible.builtin.copy:
        content: |
          #!/usr/bin/env bash
          {{ dir_lm }}/etc/glnxa64/lmutil lmreread -c "{{ license_file }}" -vendor MLM
        dest: "{{ dir_lm }}/bin/lm_reload"
        mode: "u=rwx,go=rx"
        owner: lmmatlab
        group: lmadmin

    - name: "lm_start command"
      ansible.builtin.copy:
        content: |
          #!/usr/bin/env bash
          {{ dir_lm }}/etc/glnxa64/lmgrd -c "{{ license_file }}" -l "+{{ log_file }}" -2 -p lmdown
        dest: "{{ dir_lm }}/bin/lm_start"
        mode: "u=rwx,go=rx"
        owner: lmmatlab
        group: lmadmin

    - name: "lm_stop command"
      ansible.builtin.copy:
        content: |
          #!/usr/bin/env bash
          kill -9 "$(pidof "{{ dir_lm }}/etc/glnxa64/lmgrd")" "$(pidof "{{ dir_lm }}/etc/glnxa64/MLM")"
        dest: "{{ dir_lm }}/bin/lm_stop"
        mode: "u=rwx,go=rx"
        owner: lmmatlab
        group: lmadmin

    - name: "Create license file directory"
      ansible.builtin.file:
        path: "{{ dir_license }}"
        state: directory
        mode: "u=rwx,go=rx"
        owner: lmmatlab
        group: lmadmin

    - name: "Retrieve hostid used by license.lic.j2"
      command: '"{{ dir_lm }}/bin/lm_hostid"'
      register: hostid

    - name: "Print hostid"
      ansible.builtin.debug:
        msg: "hostid: {{ hostid.stdout }}"

    - name: "Install license file"
      ansible.builtin.copy:
        content: |
          SERVER this_host {{ hostid.stdout }} {{ license_server_port }}
          VENDOR MLM {{ dir_lm }}/etc/glnxa64/MLM {{ options_file }} port={{ license_manager_port }}
          # MATLAB license contents
        dest: "{{ license_file }}"
        mode: "u=rw,go=r"
        owner: lmmatlab
        group: lmadmin
        backup: yes

    - name: "Install options file"
      ansible.builtin.copy:
        content: |
          # Allow specific users to use the license.
          INCLUDEALL USER nobody
          # Disallow anyony else but the allowed users from using the licese.
          EXCLUDEALL USER_GROUP EVERYONE
        dest: "{{ options_file }}"
        mode: "u=rw,go=r"
        owner: lmmatlab
        group: lmadmin
        backup: yes

    - name: "Touch log file without modifying it"
      ansible.builtin.file:
        path: "{{ log_file }}"
        state: "touch"
        mode: "u=rw,go=r"
        modification_time: "preserve"
        access_time: "preserve"
        owner: lmmatlab
        group: lmadmin

    - name: "Create systemd service"
      ansible.builtin.copy:
        content: |
          [Unit]
          Description=MATLAB License Service
          After=network.target

          [Service]
          Type=forking
          User=lmmatlab
          ExecStart={{ dir_lm}}/bin/lm_start
          Restart=on-failure

          [Install]
          WantedBy=multi-user.target
        dest: "/etc/systemd/system/lm_matlab.service"
        mode: "u=rw,g=r,o=r"

    - name: "Reload changes, then enable and start service"
      ansible.builtin.systemd:
        name: "lm_matlab"
        state: "started"
        enabled: true
        daemon_reload: true