Add image squashing

Author: thejsj

ansible/group_vars/all.yml

@@ -7,6 +7,7 @@ pager_duty_key: testkey
 registry_env: prod
 registry_port: 80
 registry_host: "quay.io"
+quay_api_token: QB9UzzNhwClqMgRyMgNGrSGLdUYZPJLJALdcpKRa
 
 # for docker stop old container
 stop_time: 5

ansible/roles/builder/meta/main.yml

@@ -0,0 +1,3 @@
+---
+dependencies:
+  - { role: docker_squash }

ansible/roles/builder/tasks/main.yml

@@ -23,7 +23,7 @@
     url: https://quay.io/api/v1/repository/runnable/{{ repository_name | default(name) }}/tag/?limit=1&specificTag={{ container_tag }}
     method: GET
     headers:
-      Authorization: 'Bearer QB9UzzNhwClqMgRyMgNGrSGLdUYZPJLJALdcpKRa'
+      Authorization: 'Bearer {{ quay_api_token }}'
   register: currently_built_tags
 
 - name: set number of images built
@@ -134,6 +134,32 @@
   loop_control:
     loop_var: file_name_item
 
+- name: get image id for newly created image
+  tags: deploy
+  become: true
+  when: build_image and push_image
+  shell: docker images -a | grep "{{ container_image }}" | grep "{{ container_tag }}" | awk '{print $3}'
+  register: unsquahed_image_id
+
+- name: squash newly created image (Expect this to take some time [5 min. approx])
+  tags: deploy
+  when: build_image and push_image
+  become: true
+  shell: docker-squash "{{ unsquahed_image_id.stdout_lines[0] }}" -t "{{ container_image }}:{{ container_tag }}"
+
+- name: get number of layers
+  tags: deploy
+  when: build_image and push_image
+  become: true
+  shell: docker history "{{ container_image }}:{{ container_tag }}" | wc -l
+  register: number_of_layers
+
+- name: Ensure only squashed images are pushed
+  tags: deploy
+  # One line for layer and one line for headers
+  when: build_image and push_image and (number_of_layers is defined and number_of_layers.stdout != "2")
+  fail: msg="Only squashed layers can be pushed to registry"
+
 - name: login to registry
   tags: deploy
   become: yes

ansible/roles/squash_image/tasks/main.yml

@@ -1,9 +1,4 @@
 ---
-- name: squash newly created image
-  become: true
-  ignore_errors: true # Might already be squashed
-  shell: docker-squash "{{ unsquahed_image_id.stdout_lines[0] }}" -t "{{ container_image }}:{{ container_tag }}"
-
 - name: get image id for newly created image
   become: true
   shell: docker images -a | grep "{{ container_image }}" | grep "{{ container_tag }}" | awk '{print $3}'