Hello,
Does anyone have by any chance an ansible playbook to setup docker on a debian trixie?

This is my first experience with Ansible, i thought this would be easy and straightforward. I used existing ones for debian 12 as template and yes, with ai, and taking things from other templates, i am trying to make this work. but for the life of me, i cannot crack this.

i began with the most simple steps:

- name: install Docker
  hosts: all
  become: true
  tasks:
    - name: Install apt-transport-https
      ansible.builtin.apt:
        name:
          - apt-transport-https
          - ca-certificates
          - lsb-release
          - gnupg
        state: latest
        update_cache: true

    - name: Create keyrings directory
      ansible.builtin.file:
        path: /etc/apt/keyrings
        state: directory
        mode: '0755'

    - name: Add Docker GPG key
      ansible.builtin.shell: |
        curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
        chmod a+r /etc/apt/keyrings/docker.gpg
      args:
        creates: /etc/apt/keyrings/docker.gpg

    - name: Add Docker repository
      ansible.builtin.apt_repository:
        repo: "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian trixie stable"
        state: present
        filename: docker

    - name: Install Docker
      ansible.builtin.apt:
        name:
          - docker-ce
          - docker-ce-cli
          - containerd.io
          - docker-buildx-plugin
          - docker-compose-plugin
        state: latest
        update_cache: true

and added some debug stuff that really didnt help that much:

- name: Install Docker Engine and Docker Compose on Debian (Ansible WebUI compatible)
  hosts: all
  become: true
  become_user: root

  vars:
    docker_packages:
      - docker-ce
      - docker-ce-cli
      - containerd.io
      - docker-buildx-plugin
      - docker-compose-plugin

  tasks:

    - name: Ensure required packages are installed
      apt:
        name:
          - ca-certificates
          - curl
          - gnupg
        update_cache: yes
        state: present
      delegate_to: "{{ inventory_hostname }}"

    - name: Ensure /etc/apt/keyrings exists
      file:
        path: /etc/apt/keyrings
        state: directory
        mode: '0755'
      delegate_to: "{{ inventory_hostname }}"

    - name: Get system architecture for Docker repo
      ansible.builtin.command: dpkg --print-architecture
      register: dpkg_architecture
      changed_when: false
      delegate_to: "{{ inventory_hostname }}"

    - name: Download Docker GPG key
      ansible.builtin.get_url:
        url: https://download.docker.com/linux/debian/gpg
        dest: /etc/apt/keyrings/docker.asc
        mode: '0644'
      delegate_to: "{{ inventory_hostname }}"

    - name: DEBUG - Check if GPG key exists
      ansible.builtin.stat:
        path: /etc/apt/keyrings/docker.asc
      register: gpg_key_stat
      delegate_to: "{{ inventory_hostname }}"

    - name: DEBUG - Show GPG key status
      ansible.builtin.debug:
        msg: "GPG key exists: {{ gpg_key_stat.stat.exists }}, Size: {{ gpg_key_stat.stat.size | default('N/A') }}"

    - name: DEBUG - List keyrings directory
      ansible.builtin.command: ls -lah /etc/apt/keyrings/
      register: keyrings_list
      delegate_to: "{{ inventory_hostname }}"

    - name: DEBUG - Show keyrings directory contents
      ansible.builtin.debug:
        var: keyrings_list.stdout_lines

    - name: Add Docker APT repository (correct for Debian 13)
      ansible.builtin.apt_repository:
        repo: "deb [arch={{ dpkg_architecture.stdout }} signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian {{ ansible_distribution_release }} stable"
        filename: docker
        state: present
      delegate_to: "{{ inventory_hostname }}"

    - name: DEBUG - Check if repo file exists
      ansible.builtin.stat:
        path: /etc/apt/sources.list.d/docker.list
      register: repo_file_stat
      delegate_to: "{{ inventory_hostname }}"

    - name: DEBUG - Show repo file status
      ansible.builtin.debug:
        msg: "Repo file exists: {{ repo_file_stat.stat.exists }}"

    - name: DEBUG - Show repo file contents if exists
      ansible.builtin.command: cat /etc/apt/sources.list.d/docker.list
      register: repo_contents
      when: repo_file_stat.stat.exists
      failed_when: false
      delegate_to: "{{ inventory_hostname }}"

    - name: DEBUG - Display repo contents
      ansible.builtin.debug:
        var: repo_contents.stdout_lines
      when: repo_file_stat.stat.exists

    - name: Update apt cache after adding repo
      apt:
        update_cache: yes
      delegate_to: "{{ inventory_hostname }}"

    - name: Install Docker packages
      apt:
        name: "{{ docker_packages }}"
        state: present
      delegate_to: "{{ inventory_hostname }}"

    - name: Enable & start Docker
      service:
        name: docker
        state: started
        enabled: yes
      delegate_to: "{{ inventory_hostname }}"

the target server has only root. so no user confusion there. yes, i know. bad practice. but its a learning exercise and its a lxc within my home network not internet exposed.

PLAY [Install Docker Engine and Docker Compose on Debian (Ansible WebUI compatible)] ***

TASK [Gathering Facts] *********************************************************
[1;35m[WARNING]: Host 'anytype.lab' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information.[0m
[0;32mok: [anytype.lab][0m

TASK [Ensure required packages are installed] **********************************
[0;33mchanged: [anytype.lab][0m

TASK [Ensure /etc/apt/keyrings exists] *****************************************
[0;32mok: [anytype.lab][0m

TASK [Get system architecture for Docker repo] *********************************
[0;36mskipping: [anytype.lab][0m

TASK [Download Docker GPG key] *************************************************
[0;33mchanged: [anytype.lab][0m

TASK [DEBUG - Check if GPG key exists] *****************************************
[0;32mok: [anytype.lab][0m

TASK [DEBUG - Show GPG key status] *********************************************
[0;32mok: [anytype.lab] => {[0m
[0;32m    "msg": "GPG key exists: False, Size: N/A"[0m
[0;32m}[0m

TASK [DEBUG - List keyrings directory] *****************************************
[0;36mskipping: [anytype.lab][0m

TASK [DEBUG - Show keyrings directory contents] ********************************
[0;32mok: [anytype.lab] => {[0m
[0;32m    "keyrings_list.stdout_lines": [][0m
[0;32m}[0m

TASK [Add Docker APT repository (correct for Debian 13)] ***********************
[0;33mchanged: [anytype.lab][0m

TASK [DEBUG - Check if repo file exists] ***************************************
[0;32mok: [anytype.lab][0m

TASK [DEBUG - Show repo file status] *******************************************
[0;32mok: [anytype.lab] => {[0m
[0;32m    "msg": "Repo file exists: False"[0m
[0;32m}[0m

TASK [DEBUG - Show repo file contents if exists] *******************************
[0;36mskipping: [anytype.lab][0m

TASK [DEBUG - Display repo contents] *******************************************
[0;36mskipping: [anytype.lab][0m

TASK [Update apt cache after adding repo] **************************************
[0;33mchanged: [anytype.lab][0m

TASK [Install Docker packages] *************************************************
[0;31m[ERROR]: Task failed: Module failed: No package matching 'docker-ce' is available[0m
[0;31mOrigin: /tmp/ansible-webui/repositories/1_ansibleplaybooksrepo/playbooks/debian13docker.yml:100:7[0m
[0;31m[0m
[0;31m 98       delegate_to: "{{ inventory_hostname }}"[0m
[0;31m 99[0m
[0;31m100     - name: Install Docker packages[0m
[0;31m          ^ column 7[0m
[0;31m[0m
[0;31mfatal: [anytype.lab]: FAILED! => {"changed": false, "msg": "No package matching 'docker-ce' is available"}[0m

PLAY RECAP *********************************************************************
[0;31manytype.lab[0m                : [0;32mok=11  [0m [0;33mchanged=4   [0m unreachable=0    [0;31mfailed=1   [0m [0;36mskipped=4   [0m rescued=0    ignored=0   

any help will be greatly appreciated.

Diplomats and officials react with outrage to new details of the U.S. peace plan, warning it could wreck their efforts to help Ukraine survive the war.

Donald Trump has hurled a wrench into one of the most sensitive negotiations currently under way in Europe, potentially derailing efforts to help fund Ukraine to stay in the fight against Russia.

For months European Union officials have been trying — and failing — to work out a way to use around €140 billion of immobilized Russian state assets held largely in Belgium to support Kyiv’s war effort. The cash is desperately needed as Ukraine is at risk of running out of money early next year.

Talks in Brussels are now at an extremely delicate stage, diplomats said, as top officials try to finesse a legal text that would enable the frozen funds to be used for a loan to the Ukrainian government.

‘Witkoff needs a psychiatrist’: Europeans fume at Trump’s plan to profit from frozen Russian assets 

^{Tim Ross (POLITICO)}

archive

The Make America Healthy Again summit, attended by health secretary Robert F. Kennedy Jr and vice-president JD Vance, gave a sense of what’s driving US health policy.

Psychedelics and immortality: Nature went to a health summit starring RFK and JD Vance

^{Kozlov, Max}

Most of the people who run Open Source projects are mortal. Recent history shows us that they will all eventually die, or get bored, or win the lottery, or get sick, or be conscripted, or lose their mind. If you've ever visited a foreign country's national history museum, I guarantee you've read this little snippet: King Whatshisface was a wise and noble ruler who bought peace and prosperity…

Terence Eden’s Blog

2025-11-19 12:34:27

The Peaceful Transfer of Power in Open Source Projects

shkspr.mobi/blog/2025/11/the-p…

Most of the people who run Open Source projects are mortal. Recent history shows us that they will all eventually die, or get bored, or win the lottery, or get sick, or be conscripted, or lose their mind.

If you've ever visited a foreign country's national history museum, I guarantee you've read this little snippet:

King Whatshisface was a wise and noble ruler who bought peace and prosperity to all the land.

Upon his death, his heirs waged bloody war over rightful succession which plunged the country into a hundred years of hardship.

The great selling point of democracy is that it allows for the peaceful transition of power. Most modern democracies have rendered civil war almost unthinkable. Sure, you might not like the guy currently in charge, but there are well established mechanisms to limit their power and kick them out if they misbehave. If they die in office, there's an obvious and understood hierarchy for who follows them.

Most Open Source projects start small - just someone in their spare room tinkering for fun. Unexpectedly, they grow into a behemoth which now powers half the world. These mini-empires are fragile. The most popular method of governance is the Benevolent Dictator For Life model. The founder of the project controls everything. But, as I've said before, BDFL only works if the D is genuinely B. Otherwise the FL becomes FML.

The last year has seen several BDFLs act like Mad Kings. They become tyrannical despots, lashing out at their own volunteers. They execute takeovers of community projects. They demand fealty and tithes. Like dragons, they become quick to anger when their brittle egos are tested. Spineless courtiers carry out deluded orders while pilfering the coffers.

Which is why I am delighted that the Mastodon project has shown a better way to behave.

In "The Future is Ours to Build - Together" they describe perfectly how to gracefully and peacefully transfer power. There are no VCs bringing in their MBA-brained lackeys to extract maximum value while leaving a rotting husk. No one is seizing community assets and jealously hoarding them. Opaque financial structures and convoluted agreements are prominent in their absence.

Eugen Rochko, the outgoing CEO, has a remarkably honest blog post about the transition. I wouldn't wish success on my worst enemy. He talks plainly about the reality of dealing with the pressure and how he might have been a limiting factor on Mastodon's growth. That's a far step removed from the ego-centric members of The Cult of The Founder with their passionate belief in the Divine Right of Kings.

Does your tiny OSS script need a succession plan? Probably not. Do you have several thousand NPM installs per day? It might be worth working out who you can share responsibility with if you are unexpectedly raptured. Do you think that your project is going to last for a thousand years? Build an organisation which won't crumble the moment its founder is arrested for their predatory behaviour on tropical islands.

I'm begging project leaders everywhere - please read up on the social contract and the consent of the governed. Or, if reading is too woke, just behave like grown-ups rather than squabbling tweenagers.

It is a sad inevitability that, eventually, we will all be nothing but memories. The bugs that we create live after us, the patches are oft interrèd with our code. Let it be so with all Open Source projects.

#bdfl #mastodon #openSource #oss

The Future is Ours to Build - Together

We’re pleased to introduce Mastodon’s new leadership team, and to share some other important updates.

^{Mastodon Blog}

From the peertube video description:

Want a beautiful, fast, private web reader that handles HUGE encrypted CBZ files without much effort? Then Gopherbook.

In this video, I walk you through everything

Intro & why I built this  
easy install / Docker setup  
Creating your first account (first user = admin)  
Uploading your first comics (including massive encrypted ones)  
How the magic password system works (it just remembers them!)  
Auto-organization by Artist / StoryArc  
Admin panel – toggle registration & delete comics  
Where everything is stored & backup tips  

• 100% local, single binary
• Full encrypted/password-protected CBZ support
• Automatically tries all your known passwords on new files
• ComicInfo.xml metadata extraction
• Gorgeous dark UI with cover grid
• Per-user libraries & encrypted password vault
• no tracking

If you hoard comics like I do, this is the reader you've been dreaming of.

GitHub - riomoo/gopherbook: Self-Hosted Comic Library & CBZ Reader

Self-Hosted Comic Library & CBZ Reader. Contribute to riomoo/gopherbook development by creating an account on GitHub.

^GitHub