life-church: add thinkcenter-kdenlive media playbook (thinkcenter-only, error-checked)
This commit is contained in:
parent
4d0346b970
commit
539bb0be50
154
life-church/playbooks/thinkcenter-kdenlive.yml
Normal file
154
life-church/playbooks/thinkcenter-kdenlive.yml
Normal file
@ -0,0 +1,154 @@
|
||||
---
|
||||
# ============================================================================
|
||||
# life-church/playbooks/thinkcenter-kdenlive.yml
|
||||
# Install Kdenlive (video editor) on thinkcenter via apt, plus the extras that
|
||||
# make it usable on Cinnamon: Breeze icons (fixes blank toolbar icons), MLT
|
||||
# engine, frei0r effects, LADSPA audio effects, and extra codecs.
|
||||
# thinkcenter ONLY. Idempotent. Native packages (no flatpak/snap).
|
||||
# become password from Infisical /lc-hosts at runtime.
|
||||
#
|
||||
# NOTE: Ubuntu 24.04/Mint 22.3 ships Kdenlive 23.08.x (stable, ~1.5yr behind
|
||||
# upstream). This installs that native build + the fixups it needs on Cinnamon.
|
||||
#
|
||||
# UNDO:
|
||||
# sudo apt remove --purge kdenlive
|
||||
# sudo apt autoremove --purge
|
||||
# (breeze-icon-theme / frei0r-plugins / codecs are shared — leave them.)
|
||||
# ============================================================================
|
||||
|
||||
# --- Play 1 (localhost): fetch thinkcenter sudo pass from Infisical ----------
|
||||
- name: "thinkcenter Kdenlive — resolve become password from Infisical"
|
||||
hosts: localhost
|
||||
gather_facts: false
|
||||
tasks:
|
||||
- name: "[resolve] Infisical creds from env"
|
||||
ansible.builtin.set_fact:
|
||||
infisical_client_id: "{{ lookup('env','INFISICAL_CLIENT_ID') }}"
|
||||
infisical_client_secret: "{{ lookup('env','INFISICAL_CLIENT_SECRET') }}"
|
||||
infisical_project_id: "{{ lookup('env','INFISICAL_PROJECT_ID') }}"
|
||||
infisical_url: "{{ lookup('env','INFISICAL_API_URL') | default('http://192.168.122.41:8080', true) }}"
|
||||
infisical_env_slug: "{{ lookup('env','INFISICAL_ENV_SLUG') | default('prod', true) }}"
|
||||
|
||||
- name: "[resolve] Assert Infisical creds present"
|
||||
ansible.builtin.assert:
|
||||
that:
|
||||
- infisical_client_id | length > 0
|
||||
- infisical_client_secret | length > 0
|
||||
- infisical_project_id | length > 0
|
||||
fail_msg: "Infisical creds missing from Semaphore environment 'infisical-dev'."
|
||||
|
||||
- name: "[infisical] Log in"
|
||||
infisical.vault.login:
|
||||
url: "{{ infisical_url }}"
|
||||
auth_method: universal_auth
|
||||
universal_auth_client_id: "{{ infisical_client_id }}"
|
||||
universal_auth_client_secret: "{{ infisical_client_secret }}"
|
||||
register: infisical_login
|
||||
no_log: true
|
||||
|
||||
- name: "[infisical] Read /lc-hosts"
|
||||
infisical.vault.read_secrets:
|
||||
login_data: "{{ infisical_login.login_data }}"
|
||||
project_id: "{{ infisical_project_id }}"
|
||||
env_slug: "{{ infisical_env_slug }}"
|
||||
path: "/lc-hosts"
|
||||
as_dict: true
|
||||
register: lc_secrets
|
||||
no_log: true
|
||||
|
||||
- name: "[set] Stash thinkcenter sudo pass"
|
||||
ansible.builtin.set_fact:
|
||||
thinkcenter_become_pass: "{{ lc_secrets.secrets['THINKCENTER_SUDO_PASS'] }}"
|
||||
no_log: true
|
||||
|
||||
# --- Play 2: Kdenlive on thinkcenter ONLY ------------------------------------
|
||||
- name: "Install Kdenlive on thinkcenter"
|
||||
hosts: thinkcenter
|
||||
gather_facts: true
|
||||
become: true
|
||||
vars:
|
||||
ansible_become_pass: "{{ hostvars['localhost'].thinkcenter_become_pass }}"
|
||||
kdenlive_packages:
|
||||
- kdenlive # the editor (pulls MLT, Qt/KF5 automatically)
|
||||
- breeze-icon-theme # fixes blank toolbar icons on Cinnamon
|
||||
- frei0r-plugins # video effects/transitions via MLT
|
||||
- frei0r-plugins-data
|
||||
- swh-plugins # LADSPA audio effects
|
||||
- ladspa-sdk
|
||||
- libavcodec-extra # broad/restricted codec support (import fixes)
|
||||
- mediainfo # clip inspection
|
||||
tasks:
|
||||
- name: "[safety] Confirm we are on thinkcenter"
|
||||
ansible.builtin.assert:
|
||||
that: inventory_hostname == 'thinkcenter'
|
||||
fail_msg: "Refusing to run — this play is scoped to thinkcenter only."
|
||||
|
||||
- name: "[safety] Confirm Ubuntu-family host"
|
||||
ansible.builtin.assert:
|
||||
that: ansible_facts.os_family == 'Debian'
|
||||
fail_msg: "This playbook targets Debian/Ubuntu (Mint). Host is {{ ansible_facts.os_family }}."
|
||||
|
||||
- name: "[apt] Update cache (retry on transient failure)"
|
||||
ansible.builtin.apt:
|
||||
update_cache: true
|
||||
cache_valid_time: 3600
|
||||
register: apt_cache
|
||||
until: apt_cache is succeeded
|
||||
retries: 3
|
||||
delay: 15
|
||||
|
||||
# libavcodec-extra can prompt/conflict with the base libavcodec; allow apt
|
||||
# to resolve it. If that one package fails, retry without it so Kdenlive
|
||||
# itself still installs (rescue path).
|
||||
- name: "[apt] Install Kdenlive + effects + codecs (retry on dpkg lock)"
|
||||
block:
|
||||
- name: "[apt] Install full Kdenlive package set"
|
||||
ansible.builtin.apt:
|
||||
name: "{{ kdenlive_packages }}"
|
||||
state: present
|
||||
register: kden_install
|
||||
until: kden_install is succeeded
|
||||
retries: 3
|
||||
delay: 15
|
||||
rescue:
|
||||
- name: "[apt] FALLBACK — install Kdenlive core without libavcodec-extra"
|
||||
ansible.builtin.apt:
|
||||
name: "{{ kdenlive_packages | reject('equalto','libavcodec-extra') | list }}"
|
||||
state: present
|
||||
register: kden_install_fallback
|
||||
until: kden_install_fallback is succeeded
|
||||
retries: 3
|
||||
delay: 15
|
||||
|
||||
- name: "[apt] Note codec-extra was skipped"
|
||||
ansible.builtin.debug:
|
||||
msg: "libavcodec-extra could not be installed (likely held/conflict); Kdenlive core installed. Add codecs manually if a clip won't import."
|
||||
|
||||
- name: "[verify] kdenlive binary present + version"
|
||||
ansible.builtin.command: kdenlive --version
|
||||
register: kden_ver
|
||||
changed_when: false
|
||||
failed_when: false
|
||||
|
||||
- name: "[verify] MLT renderer (melt) present"
|
||||
ansible.builtin.command: which melt
|
||||
register: melt_which
|
||||
changed_when: false
|
||||
failed_when: false
|
||||
|
||||
- name: "[verify] Assert Kdenlive + MLT engine installed"
|
||||
ansible.builtin.assert:
|
||||
that:
|
||||
- kden_ver.rc == 0
|
||||
- melt_which.rc == 0
|
||||
fail_msg: "Kdenlive or its MLT engine (melt) is missing. version rc={{ kden_ver.rc }}, melt rc={{ melt_which.rc }}"
|
||||
success_msg: "Kdenlive + MLT engine present."
|
||||
|
||||
- name: "[report] Kdenlive summary"
|
||||
ansible.builtin.debug:
|
||||
msg:
|
||||
- "===== thinkcenter Kdenlive ====="
|
||||
- "packages changed this run : {{ kden_install.changed | default(kden_install_fallback.changed | default(false)) }}"
|
||||
- "Kdenlive version : {{ kden_ver.stdout | default('n/a') | trim }}"
|
||||
- "MLT renderer (melt) : {{ melt_which.stdout | default('n/a') | trim }}"
|
||||
- "NOTE: Ubuntu ships Kdenlive 23.08 (native). For the newest release use the official AppImage instead."
|
||||
Loading…
Reference in New Issue
Block a user