solr.yml

---

- hosts: solr
  become: yes
  any_errors_fatal: true

  roles:
    - role: geerlingguy.java
      when: "ansible_os_family == 'Debian' and islandora_build_base_box|bool == True"
      java_packages:
        - openjdk-8-jdk
    - role: geerlingguy.java
      when: "ansible_os_family == 'RedHat' and islandora_build_base_box|bool == True"
      java_packages:
        - java-1.8.0-openjdk
    - role: geerlingguy.solr
      when: islandora_build_base_box|bool == True

  tasks:

    - name: Make tmp dir for solr config
      file:
        path: /tmp/solr_config
        state: directory
      tags: solr

    - name: Unarchive solr config
      unarchive:
        src: http://{{ hostvars[groups['webserver'][0]].ansible_host }}:{{ apache_listen_port }}/solr_config.zip
        dest: /tmp/solr_config
        remote_src: yes
      tags: solr
      when: islandora_build_base_box|bool == False

    - name: Get solr config files to copy
      command: "find /tmp/solr_config -type f"
      register: files_to_copy
      changed_when: false
      until: files_to_copy is not failed
      retries: 5
      tags: solr
      when: islandora_build_base_box|bool == False

    - name: Copy solr config files
      copy:
        src: "{{ item }}"
        dest: "{{ solr_instance_conf_path }}"
        owner: "{{ solr_user }}"
        group: "{{ solr_user }}"
        remote_src: True
      with_items:
        - "{{ files_to_copy.stdout_lines }}"
      tags: solr
      when: islandora_build_base_box|bool == False

    # https://www.drupal.org/project/search_api_solr/issues/3015993
    - name: Set solr_install_path in solrcore.properties
      lineinfile:
        path: "{{ solr_instance_conf_path }}/solrcore.properties"
        regexp: '^solr\.install\.dir=.*$'
        line: solr.install.dir={{ solr_install_path }}
        state: present
      notify: restart solr
      tags: solr
      when: islandora_build_base_box|bool == False

    - name: Fetch a Solr query to warm up the application
      uri:
        url: http://{{ hostvars[groups['solr'][0]].ansible_host  }}:8983/solr/{{ solr_cores[0] }}/select?q=warm
        method: GET
        return_content: yes
        status_code: [200,412]
      register: solr_webpage
      until: solr_webpage.status == 200
      retries: 20
      delay: 3
      tags: solr

    # Log4j December 2021 vulnurability fix.
    - name: Install zip command
      apt:
        name: "zip"
        state: present
        cache_valid_time: 3600
      when: islandora_build_base_box|bool == True

    - name: Find any instances of vulnurable Log4J core JAR file
      command: "find / -name log4j-core-2.1[0,1,2,3,4,5].?.jar"
      register: log4j_jars
      changed_when: false
      until: files_to_copy is not failed
      retries: 5
      ignore_errors: yes
      tags: solr
      when: islandora_build_base_box|bool == True

    - name: Delete Log4J JNDI class from JARs
      command: "zip -q -d {{ item }} org/apache/logging/log4j/core/lookup/JndiLookup.class"
      with_items:
        - "{{ log4j_jars.stdout_lines }}"
      ignore_errors: yes
      tags: solr
      when: islandora_build_base_box|bool == True

    - name: Restart SOLR to make config take effect.
      service:
        name: "solr"
        state: restarted
        sleep: 5