pollos install docker (#225)

Author: landsman

pollos/microsite/src/setup/003-docker.sh

@@ -0,0 +1 @@
+../../../setup/003-docker.sh

pollos/microsite/src/setup/004-typescript.sh

@@ -0,0 +1 @@
+../../../setup/004-typescript.sh

pollos/setup/001-init.sh

@@ -24,7 +24,10 @@ set -eu
 #   uidmap           subuid/subgid tools for rootless containers
 #   slirp4netns      user-mode networking for rootless containers
 #   fuse-overlayfs   rootless overlayfs storage driver
-#
+#   make             automatisation for apps builds
+#   rsync            sync files form host <> remote
+#   unzip            open compressed archives
+#   tmux             terminal multiplexer
 
 apt-get update -y
 apt-get install -y \
@@ -35,14 +38,19 @@ apt-get install -y \
   gnupg \
   vim \
   htop \
+  btop \
   screenfetch \
   hstr \
   chrony \
   python3 \
   python3-apt \
   uidmap \
   slirp4netns \
-  fuse-overlayfs
+  fuse-overlayfs \
+  make \
+  rsync \
+  unzip \
+  tmux
 
 systemctl enable --now ssh
 systemctl enable --now chrony

pollos/setup/003-docker.sh

@@ -0,0 +1,41 @@
+#!/bin/sh
+set -eu
+
+#
+# MANUAL STEP: run on every fresh box at the console, as root, after 002-users.sh.
+#
+# What it does:
+#   - installs Docker via the official get.docker.com script
+#   - adds 'ansible' and 'containers' users to the docker group
+#   - installs lazydocker from GitHub releases (arm64)
+#
+# After this finishes, log out and back in (or `newgrp docker`) so group
+# membership takes effect, then sanity-check with:
+#   sudo -u containers docker run --rm hello-world
+#
+
+# docker engine
+curl -fsSL https://get.docker.com | sh
+
+# allow the workload + admin users to talk to the docker socket
+usermod -aG docker containers
+usermod -aG docker ansible
+
+# lazydocker (not in apt — pull release tarball from GitHub)
+case "$(uname -m)" in
+  x86_64)  LAZYDOCKER_ARCH=x86_64 ;;
+  aarch64) LAZYDOCKER_ARCH=arm64 ;;
+  armv7l)  LAZYDOCKER_ARCH=armv7 ;;
+  *) echo "unsupported arch: $(uname -m)" >&2; exit 1 ;;
+esac
+LAZYDOCKER_VERSION=$(curl -fsSL https://api.github.com/repos/jesseduffield/lazydocker/releases/latest \
+  | grep -oE '"tag_name":\s*"v[^"]+"' | head -n1 | sed -E 's/.*"v([^"]+)".*/\1/')
+TMPDIR=$(mktemp -d)
+curl -fsSL -o "${TMPDIR}/lazydocker.tar.gz" \
+  "https://github.com/jesseduffield/lazydocker/releases/download/v${LAZYDOCKER_VERSION}/lazydocker_${LAZYDOCKER_VERSION}_Linux_${LAZYDOCKER_ARCH}.tar.gz"
+tar -xzf "${TMPDIR}/lazydocker.tar.gz" -C "${TMPDIR}" lazydocker
+install -m 0755 "${TMPDIR}/lazydocker" /usr/local/bin/lazydocker
+rm -rf "${TMPDIR}"
+
+echo
+echo "docker ready. log out + back in (or 'newgrp docker') before running docker as containers/ansible."

pollos/setup/004-typescript.sh

@@ -0,0 +1,27 @@
+#!/bin/sh
+set -eu
+
+#
+# MANUAL STEP: run on every fresh box at the console, as root, after 003-docker.sh.
+#
+# What it does:
+#   - installs Bun globally to /usr/local/bin from the GitHub release zip
+#     (the official curl|bash installer drops it under $HOME/.bun, which on
+#      a root run only benefits root — we want every user to see `bun`).
+#
+
+case "$(uname -m)" in
+  x86_64)  BUN_ARCH=x64 ;;
+  aarch64) BUN_ARCH=aarch64 ;;
+  *) echo "unsupported arch: $(uname -m)" >&2; exit 1 ;;
+esac
+
+# unzip + curl come from 001-init.sh
+TMPDIR=$(mktemp -d)
+curl -fsSL -o "${TMPDIR}/bun.zip" \
+  "https://github.com/oven-sh/bun/releases/latest/download/bun-linux-${BUN_ARCH}.zip"
+unzip -q "${TMPDIR}/bun.zip" -d "${TMPDIR}"
+install -m 0755 "${TMPDIR}/bun-linux-${BUN_ARCH}/bun" /usr/local/bin/bun
+rm -rf "${TMPDIR}"
+
+bun --version