From bb1529e5b1bab164cec4a68eb92a3c8f873f8449 Mon Sep 17 00:00:00 2001
From: Hyperling <me@hyperling.com>
Date: Tue, 27 Oct 2026 08:31:09 -0700
Subject: [PATCH] docker, pull from llm.

---
 tasks/workstation/linux/software/docker.yml | 39 +++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 tasks/workstation/linux/software/docker.yml

diff --git a/tasks/workstation/linux/software/docker.yml b/tasks/workstation/linux/software/docker.yml
new file mode 100644
index 0000000..6f308c4
--- /dev/null
+++ b/tasks/workstation/linux/software/docker.yml
@@ -0,0 +1,39 @@
+# 2026-10-27 Hyperling
+# Pulled out of llm.yml since the number of tasks is growing.
+
+- name: Workstation | Linux | Software | Docker | Install
+  ansible.builtin.package:
+    name:
+      - docker
+      - docker-compose
+      - docker-buildx
+    state: present
+
+- name: Workstation | Linux | Software | Docker | Install [runit]
+  ansible.builtin.package:
+    name:
+      - docker-runit
+    state: present
+  when: ansible_pkg_mgr == "pacman"
+    and ansible_service_mgr == "runit"
+
+- name: Workstation | Linux | Software | Docker | Group
+  ansible.builtin.user:
+    name: "{{ item  }}"
+    groups: docker
+    append: true
+  loop:
+    - root
+    - "{{ user }}"
+
+- name: Workstation | Linux | Software | Docker | Config
+  ansible.builtin.copy:
+    dest: /etc/docker/daemon.json
+    content: |
+      {
+        "firewall-backend": "nftables",
+        "iptables": false
+      }
+    owner: root
+    mode: '0644'
+  when: ansible_pkg_mgr == "pacman"