Install course requirements

playbooks/roles/xqwatcher/tasks/code_jail.yml

@@ -32,11 +32,30 @@
     mode=0440 owner=root group=root validate='visudo -c -f %s'
   with_items: XQWATCHER_COURSES
 
+- name: put code jail into aa-complain
+  command: /usr/sbin/aa-complain "/etc/apparmor.d/code.jail.{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}"
+  when: CODE_JAIL_COMPLAIN
+  with_items: XQWATCHER_COURSES
+  
 - name: create jail virtualenv
   shell: >
-    /usr/sbin/aa-complain "/etc/apparmor.d/code.jail.{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}" && /usr/local/bin/virtualenv --no-site-packages {{ xqwatcher_venv_base }}/{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}
+    /usr/local/bin/virtualenv --no-site-packages {{ xqwatcher_venv_base }}/{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}
+  with_items: XQWATCHER_COURSES
+
+- name: write out requirements.txt
+  template: >
+    src=edx/app/xqwatcher/data/requirements.txt.j2
+    dest={{ xqwatcher_data_dir }}/{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}-requirements.txt
+    mode=0440 owner=root group=root
   with_items: XQWATCHER_COURSES
 
+- name : install course specific python requirements
+  pip: >
+    requirements="{{ xqwatcher_data_dir }}/{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}-requirements.txt"
+    virtualenv="{{ xqwatcher_venv_base }}/{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}"
+    state=present
+    extra_args="{{ XQWATCHER_PIP_EXTRA_ARGS }}"
+  
 - name: give other read permissions to the virtualenv
   shell: >
     chown -R {{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.user }} {{ xqwatcher_venv_base }}/{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}
@@ -49,11 +68,6 @@
   command: apparmor_parser -r "/etc/apparmor.d/code.jail.{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}"
   with_items: XQWATCHER_COURSES
 
-- name: put code jail into aa-complain
-  command: /usr/sbin/aa-complain "/etc/apparmor.d/code.jail.{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}"
-  when: CODE_JAIL_COMPLAIN
-  with_items: XQWATCHER_COURSES
-
 - name: put code sandbox into aa-enforce
   command: /usr/sbin/aa-enforce "/etc/apparmor.d/code.jail.{{ item.QUEUE_CONFIG.HANDLERS[0].CODEJAIL.name }}"
   when: not CODE_JAIL_COMPLAIN
\ No newline at end of file

playbooks/roles/xqwatcher/templates/edx/app/xqwatcher/data/requirements.txt.j2

+# {{ ansible_managed }}
+
+{% for name,version in item.PYTHON_REQUIREMENTS.items() %}
+{{ name }}=={{ value }}
+{% endfor %}