refactor(ansible): rename freecad_mcp env vars and rework deployment
- Drop `FREECAD_MCP_` prefix from env vars (use `FREECAD_*`) - Update freecad_mcp port from 22032 to 22061 - Document that FreeCAD bridge is required for tool calls - Replace kottos deployment with pallas deployment
This commit is contained in:
@@ -1,10 +1,17 @@
|
||||
---
|
||||
- name: Deploy Kottos (Pallas FastAgent runtime)
|
||||
- name: Deploy Kottos AI Agent Platform
|
||||
hosts: ubuntu
|
||||
vars:
|
||||
ansible_common_remote_group: "{{ kottos_group | default([]) }}"
|
||||
allow_world_readable_tmpfiles: true
|
||||
|
||||
handlers:
|
||||
- name: restart kottos
|
||||
become: true
|
||||
ansible.builtin.systemd:
|
||||
name: kottos
|
||||
state: restarted
|
||||
|
||||
tasks:
|
||||
- name: Check if host has kottos service
|
||||
ansible.builtin.set_fact:
|
||||
@@ -14,51 +21,84 @@
|
||||
ansible.builtin.meta: end_host
|
||||
when: not has_kottos_service
|
||||
|
||||
- name: Install required packages
|
||||
become: true
|
||||
ansible.builtin.apt:
|
||||
name:
|
||||
- acl
|
||||
- npm
|
||||
- curl
|
||||
state: present
|
||||
update_cache: true
|
||||
|
||||
- name: Create Kottos group
|
||||
become: true
|
||||
ansible.builtin.group:
|
||||
name: "{{ kottos_group }}"
|
||||
state: present
|
||||
|
||||
- name: Create kottos user
|
||||
- name: Create Kottos user
|
||||
become: true
|
||||
ansible.builtin.user:
|
||||
name: "{{ kottos_user }}"
|
||||
group: "{{ kottos_group }}"
|
||||
home: "/home/{{ kottos_user }}"
|
||||
home: "{{ kottos_directory }}"
|
||||
shell: /bin/bash
|
||||
system: false
|
||||
create_home: true
|
||||
system: true
|
||||
create_home: false
|
||||
|
||||
- name: Add keeper_user to kottos group (optional — enables passwordless tailing)
|
||||
- name: Add keeper_user to kottos group
|
||||
become: true
|
||||
ansible.builtin.user:
|
||||
name: "{{ keeper_user }}"
|
||||
groups: "{{ kottos_group }}"
|
||||
append: true
|
||||
when: keeper_user is defined
|
||||
|
||||
- name: Add kottos user to docker group
|
||||
become: true
|
||||
ansible.builtin.user:
|
||||
name: "{{ kottos_user }}"
|
||||
groups: docker
|
||||
append: true
|
||||
notify: restart kottos
|
||||
|
||||
- name: Reset connection to pick up new group membership
|
||||
ansible.builtin.meta: reset_connection
|
||||
|
||||
- name: Create Kottos install directory
|
||||
- name: Create Kottos directory
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: "{{ kottos_directory }}"
|
||||
owner: "{{ kottos_user }}"
|
||||
group: "{{ kottos_group }}"
|
||||
state: directory
|
||||
mode: '0750'
|
||||
mode: '750'
|
||||
|
||||
- name: Ensure base packages for Python + Docker MCP workflows
|
||||
- name: Create vendored Pallas directory
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: "{{ kottos_directory }}/vendor/pallas"
|
||||
owner: "{{ kottos_user }}"
|
||||
group: "{{ kottos_group }}"
|
||||
state: directory
|
||||
mode: '750'
|
||||
|
||||
- name: Ensure tar is installed for unarchive task
|
||||
become: true
|
||||
ansible.builtin.apt:
|
||||
name:
|
||||
- tar
|
||||
- python3
|
||||
- python3-venv
|
||||
- python3-dev
|
||||
- git
|
||||
state: present
|
||||
update_cache: true
|
||||
|
||||
- name: Ensure Python 3.13, venv, dev headers, and ACL are installed
|
||||
become: true
|
||||
ansible.builtin.apt:
|
||||
name:
|
||||
- python3.13
|
||||
- python3.13-venv
|
||||
- python3.13-dev
|
||||
- acl
|
||||
state: present
|
||||
update_cache: true
|
||||
|
||||
@@ -69,43 +109,52 @@
|
||||
dest: "{{ kottos_directory }}"
|
||||
owner: "{{ kottos_user }}"
|
||||
group: "{{ kottos_group }}"
|
||||
mode: '0550'
|
||||
mode: '550'
|
||||
notify: restart kottos
|
||||
|
||||
- name: Ensure .venv directory ownership is correct
|
||||
- name: Transfer and unarchive vendored Pallas source
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: "{{ kottos_directory }}/.venv"
|
||||
ansible.builtin.unarchive:
|
||||
src: "~/rel/pallas_{{ pallas_rel }}.tar"
|
||||
dest: "{{ kottos_directory }}/vendor/pallas"
|
||||
owner: "{{ kottos_user }}"
|
||||
group: "{{ kottos_group }}"
|
||||
state: directory
|
||||
recurse: true
|
||||
when: ansible_facts['file'] is defined or true
|
||||
mode: '550'
|
||||
notify: restart kottos
|
||||
|
||||
- name: Create virtual environment for Kottos
|
||||
- name: Rewrite pallas-mcp dependency to use vendored local path
|
||||
become: true
|
||||
ansible.builtin.replace:
|
||||
path: "{{ kottos_directory }}/pyproject.toml"
|
||||
regexp: '"pallas-mcp @ git\+ssh://[^"]+"'
|
||||
replace: '"pallas-mcp @ file://{{ kottos_directory }}/vendor/pallas"'
|
||||
notify: restart kottos
|
||||
|
||||
- name: Create virtual environment for Kottos (Python 3.13)
|
||||
become: true
|
||||
become_user: "{{ kottos_user }}"
|
||||
ansible.builtin.command:
|
||||
cmd: "python3 -m venv {{ kottos_directory }}/.venv/"
|
||||
cmd: "python3.13 -m venv {{ kottos_directory }}/.venv/"
|
||||
creates: "{{ kottos_directory }}/.venv/bin/activate"
|
||||
|
||||
- name: Install wheel in the virtualenv
|
||||
- name: Install wheel and mcp-server-time in virtualenv
|
||||
become: true
|
||||
become_user: "{{ kottos_user }}"
|
||||
ansible.builtin.pip:
|
||||
name:
|
||||
- wheel
|
||||
- mcp-server-time
|
||||
state: latest
|
||||
virtualenv: "{{ kottos_directory }}/.venv"
|
||||
|
||||
- name: Install Kottos (pyproject.toml — pulls in pallas-mcp and fast-agent-mcp)
|
||||
- name: Install Kottos (and its rewritten local pallas-mcp) in virtualenv
|
||||
become: true
|
||||
become_user: "{{ kottos_user }}"
|
||||
ansible.builtin.pip:
|
||||
chdir: "{{ kottos_directory }}/kottos"
|
||||
chdir: "{{ kottos_directory }}"
|
||||
name: .
|
||||
virtualenv: "{{ kottos_directory }}/.venv"
|
||||
virtualenv_command: python3 -m venv
|
||||
virtualenv_command: python3.13 -m venv
|
||||
notify: restart kottos
|
||||
|
||||
- name: Template agents.yaml
|
||||
@@ -115,7 +164,7 @@
|
||||
dest: "{{ kottos_directory }}/agents.yaml"
|
||||
owner: "{{ kottos_user }}"
|
||||
group: "{{ kottos_group }}"
|
||||
mode: '0640'
|
||||
mode: '640'
|
||||
notify: restart kottos
|
||||
|
||||
- name: Template fastagent.config.yaml
|
||||
@@ -125,38 +174,27 @@
|
||||
dest: "{{ kottos_directory }}/fastagent.config.yaml"
|
||||
owner: "{{ kottos_user }}"
|
||||
group: "{{ kottos_group }}"
|
||||
mode: '0640'
|
||||
mode: '640'
|
||||
notify: restart kottos
|
||||
|
||||
- name: Template fastagent.secrets.yaml (vault-rendered)
|
||||
- name: Template fastagent.secrets.yaml
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: fastagent.secrets.yaml.j2
|
||||
dest: "{{ kottos_directory }}/fastagent.secrets.yaml"
|
||||
owner: "{{ kottos_user }}"
|
||||
group: "{{ kottos_group }}"
|
||||
mode: '0600'
|
||||
notify: restart kottos
|
||||
no_log: true
|
||||
|
||||
- name: Template runtime .env (PALLAS_LOG_STDOUT etc.)
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: .env.j2
|
||||
dest: "{{ kottos_directory }}/.env"
|
||||
owner: "{{ kottos_user }}"
|
||||
group: "{{ kottos_group }}"
|
||||
mode: '0640'
|
||||
mode: '640'
|
||||
notify: restart kottos
|
||||
|
||||
- name: Template systemd unit
|
||||
- name: Template systemd service file
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: kottos.service.j2
|
||||
dest: /etc/systemd/system/kottos.service
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0644'
|
||||
mode: '644'
|
||||
notify: restart kottos
|
||||
|
||||
- name: Enable and start kottos service
|
||||
@@ -167,26 +205,15 @@
|
||||
state: started
|
||||
daemon_reload: true
|
||||
|
||||
- name: Flush handlers before validation probes
|
||||
- name: Flush handlers to restart service before validation
|
||||
ansible.builtin.meta: flush_handlers
|
||||
|
||||
# ── Validation ──────────────────────────────────────────────────────────
|
||||
# Registry is the only endpoint that responds with a deterministic JSON
|
||||
# payload without requiring an MCP session, so we probe it. Agent ports
|
||||
# are exercised by Daedalus's health-poll loop once registered.
|
||||
- name: Validate Kottos registry responds
|
||||
- name: Validate Kottos registry liveness
|
||||
ansible.builtin.uri:
|
||||
url: "http://localhost:{{ kottos_registry_port | default(24100) }}/.well-known/mcp/server.json"
|
||||
url: "http://localhost:{{ kottos_registry_port }}/live"
|
||||
status_code: 200
|
||||
return_content: true
|
||||
register: registry_check
|
||||
register: kottos_live
|
||||
retries: 10
|
||||
delay: 3
|
||||
until: registry_check.status == 200
|
||||
|
||||
handlers:
|
||||
- name: restart kottos
|
||||
become: true
|
||||
ansible.builtin.systemd:
|
||||
name: kottos
|
||||
state: restarted
|
||||
delay: 5
|
||||
until: kottos_live.status == 200
|
||||
|
||||
Reference in New Issue
Block a user