fix vars

fix install (retries, until, delay), add deleting tmp-files and fix permissions for alloy.service

roles/grafana_alloy/defaults/main.yml

@@ -2,6 +2,7 @@
 grafana_alloy_version: "1.17.1"
 grafana_alloy_config_dir: "/etc/alloy"
 grafana_alloy_data_dir: "/var/lib/alloy"
+grafana_alloy_ui_port: 12345
 grafana_alloy_loki_port: 3100
 grafana_alloy_loki_url: "http://localhost:{{ grafana_alloy_loki_port }}/loki/api/v1/push"
 grafana_alloy_log_paths:

roles/grafana_alloy/molecule/default/molecule.yml

@@ -15,6 +15,15 @@ platforms:
     cgroupns_mode: host
     privileged: true
 
+  - name: ubuntu
+    image: geerlingguy/docker-${MOLECULE_DISTRO:-ubuntu2404}-ansible:latest
+    pre_build_image: true
+    command: ${MOLECULE_DOCKER_COMMAND:-""}
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+    cgroupns_mode: host
+    privileged: true
+
 provisioner:
   name: ansible
 

roles/grafana_alloy/molecule/default/verify.yml

@@ -30,7 +30,7 @@
     # kics-scan ignore-block
     - name: "Check if Alloy is ready"
       ansible.builtin.uri:
-        url: "http://localhost:12345/-/ready"
+        url: "http://localhost:{{ grafana_alloy_ui_port }}/-/ready"
         return_content: true
         status_code: 200
         method: GET

roles/grafana_alloy/tasks/install.yml

@@ -23,26 +23,50 @@
   block:
     - name: "Install | Check Alloy version"
       changed_when: false
+      failed_when: false
       ansible.builtin.command:
         cmd: "alloy --version"
       register: grafana_alloy_ver
 
     - name: "Install | Assert version correctness"
       ansible.builtin.assert:
-        that: "grafana_alloy_version in grafana_alloy_ver.stdout"
+        that:
+          - "grafana_alloy_ver.rc == 0"
+          - "grafana_alloy_version in grafana_alloy_ver.stdout"
         success_msg: "alloy version {{ grafana_alloy_version }} is installed and working"
         fail_msg: "alloy version {{ grafana_alloy_version }} is not installed or not working correctly"
 
   rescue:
+    - name: "Install | Update apt cache on Debian"
+      ansible.builtin.apt:
+        update_cache: true
+      when: ansible_facts["os_family"] == "Debian"
+
     - name: "Install | Ensure unzip is present"
       ansible.builtin.package:
         name: "unzip"
         state: present
 
-    - name: "Install | Fetch and unpack the distribution"
+    - name: "Install | Download the distribution archive"
+      ansible.builtin.get_url:
+        url: "https://github.com/grafana/alloy/releases/download/v{{ grafana_alloy_version }}/alloy-linux-amd64.zip"
+        dest: "/tmp/alloy-linux-amd64.zip"
+        group: "alloy"
+        owner: "alloy"
+        mode: "0644"
+        timeout: 30
+        force: true
+      register: grafana_alloy_download_status
+      until: grafana_alloy_download_status is success
+      retries: 3
+      delay: 5
+
+    - name: "Install | Unpack and delete the distribution"
       ansible.builtin.unarchive:
-        src: "https://github.com/grafana/alloy/releases/download/v{{ grafana_alloy_version }}/alloy-linux-amd64.zip"
+        src: "/tmp/alloy-linux-amd64.zip"
         dest: "/tmp"
+        group: "alloy"
+        owner: "alloy"
         remote_src: true
 
     - name: "Install | Put the binary under the PATH"
@@ -56,8 +80,11 @@
         mode: "0755"
 
     - name: "Install | Clean up the downloads"
+      loop:
+        - "/tmp/alloy-linux-amd64"
+        - "/tmp/alloy-linux-amd64.zip"
       ansible.builtin.file:
-        path: "/tmp/alloy-linux-amd64"
+        path: "{{ item }}"
         state: absent
 
 - name: "Install | Create a systemd service unit"
@@ -65,6 +92,6 @@
   ansible.builtin.template:
     src: alloy.service.j2
     dest: /etc/systemd/system/alloy.service
-    owner: "alloy"
-    group: "alloy"
-    mode: "0660"
+    owner: "root"
+    group: "root"
+    mode: "0600"