# Install Swarm Manager Node

    module.exports = header: 'Swarm Manager Install', handler: (options) ->
      tmp_dir  = options.tmp_dir ?= "/var/tmp/ryba/swarm"

## Wait dependencies

      @call 'ryba/zookeeper/server/wait', options.wait_zookeeper

## IPTables

| Service                 | Port  | Proto       | Parameter          |
|-------------------------|-------|-------------|--------------------|
| Swarm Manager Engine    | 2375  | tcp         | port               |
| Swarm Manager Engine    | 2376  | tcp - TLS   | port               |
| Swarm Manager Advertise | 3376  | tcp         | port               |

      @tools.iptables
        rules: [
          { chain: 'INPUT', jump: 'ACCEPT', dport: options.listen_port, protocol: 'tcp', state: 'NEW', comment: "Docker Engine Port" },
          { chain: 'INPUT', jump: 'ACCEPT', dport: options.advertise_port, protocol: 'tcp', state: 'NEW', comment: "Swarm Manager Advertise Port" }
        ]
        if: options.iptables

## Container
Ryba install official docker/swarm image.
Try to pull the image first, or upload from cache if not pull possible.

      @call header: 'Download Container', ->
        exists = false
        @docker.checksum
          image: options.image
          tag: options.tag
        , (err, status, checksum) ->
          throw err if err
          exists = checksum
        @docker.pull
          header: 'from registry'
          if: -> not exists
          tag: options.image
          code_skipped: 1
        @file.download
          unless: -> @status(-1) or @status(-2)
          binary: true
          header: 'from cache'
          source: "#{options.cache_dir}/swarm.tar"
          target: "#{tmp_dir}/swarm.tar"
        @docker.load
          header: 'Load'
          unless: -> @status(-3)
          if_exists: "#{tmp_dir}/swarm.tar"
          source: "#{tmp_dir}/swarm.tar"

## Run Container
Run the swarm manager container. Pass host option to null to run the container
on the local engine daemon (before configuring swarm).

      @call ->
        args = []
        if options.ssl.enabled
         args.push [
            '--tlsverify'
            "--tlskey=/certs/#{path.basename options.other_args['tlskey']}"
            "--tlscert=/certs/#{path.basename options.other_args['tlscert']}"
            "--tlscacert=/certs/#{path.basename options.other_args['tlscacert']}"
          ]...
        args.push [
          "--host #{options.listen_host}:#{options.listen_port}"
          '--replication'
          "--advertise #{options.other_args['cluster-advertise']}"
          "#{options.cluster.zk_store}"
          ]...
        @docker.service
          header: 'Run Container'
          force: -> @status -1
          docker: options.docker
          name: options.name
          net: if options.host_mode then 'host' else null
          image: options.image
          volume: [
            "#{options.docker.conf_dir}/certs.d/:/certs:ro"
          ]
          cmd: "manage #{args.join ' '}"
          port: [
            "#{options.listen_port}:#{options.listen_port}"
          ]

## Configure Environment
Write file in profile.d to be able to communicate with swarm master.
- DOCKER_HOST: used to designated the docker daemon to communicate with.
- DOCKER_CERT_PATH: used when TLS is enabled
- DOCKER_TLS_VERIFY: enable TLS verification
The port is set to the manager listen_port, to be able to type docker command
on the swarm cluster level

        @file
          target: '/etc/profile.d/docker.sh'
          write: [
            match: /^export DOCKER_HOST=.*$/mg
            replace: "export DOCKER_HOST=tcp://#{options.fqdn}:#{options.docker.default_port}"
            append: true
          ,
            match: /^export DOCKER_CERT_PATH=.*$/mg
            replace: "export DOCKER_CERT_PATH=#{options.docker.conf_dir}/certs.d" 
            append: true
          ,
            match: /^export DOCKER_TLS_VERIFY=.*$/mg
            replace: "export DOCKER_TLS_VERIFY=#{if options.ssl.enabled then 1 else 0}"
            append: true
          ]
          backup: true
          eof: true
          mode: 0o750

## Dependencies

    path = require 'path'