Updated the docker and ansible files for setting up and building / running rasberry pi with the frank service

Still need to manually copy the new id_rsa created on the pi to knox.

docker/bake-pies.yml

@@ -0,0 +1,153 @@
+#################################################
+# DO Community Playbooks: Docker
+#################################################
+---
+- hosts: all
+  become: true
+  vars_files:
+    - vars/pies.yml
+
+  tasks:
+    - name: Check if LCD Rotated
+      shell: grep -c "lcd_rotate=2" /boot/config.txt || true
+      register: lcd_rotate_test
+
+    - name: rotate the lcd
+      lineinfile:
+        dest: /boot/config.txt
+        line: lcd_rotate=2
+      when: lcd_rotate_test.stdout == "0"
+
+    - name: Update the hostname file
+      replace:
+        path: /etc/hostname
+        regexp: '(\s*)raspberrypi(\s+.*)?$'
+        replace: "\\1{{ hostname }}\\2"
+        backup: yes
+
+    - name: Update the hosts file
+      replace:
+        path: /etc/hosts
+        regexp: '(\s+)raspberrypi(\s+.*)?$'
+        replace: "\\1{{ hostname }}\\2"
+        backup: yes
+
+    - name: Ensure SSH Directory exists
+      file:
+          path: /home/pi/.ssh
+          state: directory
+          group: pi
+          owner: pi
+          mode: 0700
+
+    - name: Ensure authorized_keys file exists
+      copy:
+        content: ""
+        dest: /home/pi/.ssh/authorized_keys
+        force: no
+        group: pi
+        owner: pi
+        mode: 0644
+
+    - name: Check Peitho public key
+      shell: "grep -c \"{{ peitho_key }}\" /home/pi/.ssh/authorized_keys || true"
+      register: peithokey_test
+
+    - name: Add Peitho public key
+      lineinfile:
+        dest: /home/pi/.ssh/authorized_keys
+        line: "{{ peitho_key }}"
+      when: peithokey_test.stdout == "0"
+
+    - name: Check if .ssh config file exists
+      stat:
+        path: /home/pi/.ssh/config
+      register: config_status
+
+    - name: No need to upload the .ssh config
+      when: config_status.stat.exists == true
+      debug:
+        msg: No need to upload the .ssh config as it already exists.
+
+    - name: Upload the .ssh config file
+      when: config_status.stat.exists == false
+      template:
+        src: "files/config"
+        dest: "/home/pi/.ssh/config"
+        group: pi
+        owner: pi
+        mode: 0644
+
+    - name: Check if rsa key exists
+      stat:
+        path: /home/pi/.ssh/id_rsa
+      register: key_status
+
+    - name: No need to generate new rsa key
+      when: key_status.stat.exists == true
+      debug:
+        msg: No need to generate new rsa key as it already exists.
+
+    - name: Generate new rsa key
+      when: key_status.stat.exists == false
+      become: yes
+      become_user: pi
+      shell: ssh-keygen -t rsa -b 4096 -q -f /home/pi/.ssh/id_rsa -C "pi@{{ hostname }} $(date '+%Y.%m.%d')" -N ""
+#      shell: ssh-keygen -t rsa -b 4096 -q -f /home/pi/.ssh/id_rsa -C "$(whoami)@$(hostname) $(date '+%Y.%m.%d')" -N ""
+
+    - name: Install Docker
+      shell: curl -sSL https://get.docker.com | sh
+
+    - name: Install matchbox-keyboard
+      package:
+        name: matchbox-keyboard
+        state: latest
+
+    - name: Install python3-docker
+      package:
+        name: python3-docker
+        state: latest
+
+    - name: adding user pi to group docker
+      user:
+        name: pi
+        groups: docker
+        append: yes
+
+    - name: adding user pi to group lp (line printers)
+      user:
+        name: pi
+        groups: lp
+        append: yes
+
+    - name: install knox-redis-tunnel systemd unit file
+      template:
+        src: "files/knox-redis-tunnel.service"
+        dest: "/etc/systemd/system/knox-redis-tunnel.service"
+
+    - name: enable service knox-redis-tunnel and ensure it is not masked
+      systemd:
+        name: knox-redis-tunnel
+        enabled: yes
+        masked: no
+
+    - name: Make sure knox-redis-tunnel service is running
+      systemd:
+        state: started
+        name: knox-redis-tunnel
+
+    - name: install knox-redis-tunnel systemd unit file
+      template:
+        src: "files/gotthard.service"
+        dest: "/etc/systemd/system/gotthard.service"
+
+    - name: enable service gotthard and ensure it is not masked
+      systemd:
+        name: gotthard
+        enabled: yes
+        masked: no
+
+    - name: Make sure gotthard service is running
+      systemd:
+        state: started
+        name: gotthard