Merge branch 'enroot' into 'master'

Enroot

See merge request !492

roles/enroot/README.md

+Install enroot on a ubuntu machine
+See https://github.com/NVIDIA/enroot
+
+Centos 7 requires a Kernel setting mod so is not supported at this time.
+
+enroot is not meant for installation across a cluster. Config files live only on
+installed machine, and container files need to be owned by the user using them.
+
+Usage
+- { roles: enroot, tags: [ enroot ] }
+
+
+Be aware, large files are created. You can/should set the following environment
+variables to a suitable file system.
+
+export ENROOT_RUNTIME_PATH=/mnt/enroot/runtime
+export ENROOT_CONFIG_PATH=/mnt/enroot/config
+export ENROOT_CACHE_PATH=/mnt/enroot/cache
+export ENROOT_DATA_PATH=/mnt/enroot/data
+export ENROOT_TEMP_PATH=/mnt/enroot/tmp

roles/enroot/tasks/main.yml

+---
+#see https://nvidia.github.io/libnvidia-container/
+#DIST=$(. /etc/os-release; echo $ID$VERSION_ID)
+#curl -s -L https://nvidia.github.io/libnvidia-container/gpgkey | \
+#  sudo apt-key add -
+#curl -s -L https://nvidia.github.io/libnvidia-container/$DIST/libnvidia-container.list | \
+#    sudo tee /etc/apt/sources.list.d/libnvidia-container.list
+#sudo apt-get update
+#
+- name: configure  Nivida repos
+  ansible.builtin.apt_key:
+    url:  https://nvidia.github.io/libnvidia-container/gpgkey
+    state: present
+  become: True
+  become_user: root
+  when: ansible_os_family == "Debian"
+
+- name: get DIST variable for repolist
+  shell: . /etc/os-release; echo $ID$VERSION_ID
+  register: DIST
+  when: ansible_os_family == "Debian"
+
+- name: Print out value of DIST
+  debug: msg={{ DIST.stdout }}
+  when: ansible_os_family == "Debian"
+
+#- name: Add specified repository into sources list
+#  ansible.builtin.apt_repository:
+#    #repo: "deb https://nvidia.github.io/libnvidia-container/{{ DIST.stdout }}/libnvidia-container.list"
+#    repo: "deb https://nvidia.github.io/libnvidia-container/ubuntu20.04 libnvidia-container"
+#    state: present
+
+- name: Add specified repository into sources list
+  shell: "curl -s -L https://nvidia.github.io/libnvidia-container/{{ DIST.stdout }}/libnvidia-container.list | sudo tee /etc/apt/sources.list.d/libnvidia-container.list"
+  become: True
+  become_user: root
+  when: ansible_os_family == "Debian"
+
+- name: Update apt-get repo and cache
+  apt: update_cache=yes force_apt_get=yes cache_valid_time=3600
+  become: True
+  become_user: root
+  when: ansible_os_family == "Debian"
+
+ 
+- name: install  Nivida container tools
+  package:
+    state: present
+    name:
+      - libnvidia-container1
+      - libnvidia-container-tools
+  become: true
+  become_user: root
+  when: ansible_os_family == "Debian"
+
+- name: get architecture
+  shell: dpkg --print-architecture
+  register: ARCH
+  when: ansible_os_family == "Debian"
+
+
+
+- name: Print out value of ARCH
+  debug: msg={{ ARCH.stdout }}
+  when: ansible_os_family == "Debian"
+
+- name: install hardened enroot deb 1 of 2
+  apt:
+    deb: "https://github.com/NVIDIA/enroot/releases/download/v3.3.0/enroot-hardened_3.3.0-1_{{ ARCH.stdout }}.deb"
+  become: true
+  become_user: root
+  when: ansible_os_family == "Debian"
+
+- name: install hardened enroot deb  2 of 2
+  apt:
+    deb: "https://github.com/NVIDIA/enroot/releases/download/v3.3.0/enroot-hardened+caps_3.3.0-1_{{ ARCH.stdout }}.deb"
+  become: true
+  become_user: root
+  when: ansible_os_family == "Debian"
+