Hack to check systemd version for service files validation

factory-reset.target was introduced in system 250, same version as the
aliasing feature we need for verifying systemd services with ansible.
So we only actually executes the validation if that target is present.

This is an horrible hack which should be reverted as soon as we drop
support for distributions with systemd<250.

roles/container-engine/containerd/tasks/main.yml

@@ -61,7 +61,7 @@
     src: containerd.service.j2
     dest: /etc/systemd/system/containerd.service
     mode: 0644
-    validate: "systemd-analyze verify %s:containerd.service"
+    validate: "sh -c '[ -f /usr/bin/systemd/system/factory-reset.target ] || exit 0 && systemd-analyze verify %s:containerd.service'"
   notify: Restart containerd
 
 - name: Containerd | Ensure containerd directories exist

roles/container-engine/cri-dockerd/tasks/main.yml

@@ -18,7 +18,7 @@
     src: "{{ item }}.j2"
     dest: "/etc/systemd/system/{{ item }}"
     mode: 0644
-    validate: "systemd-analyze verify %s:{{ item }}"
+    validate: "sh -c '[ -f /usr/bin/systemd/system/factory-reset.target ] || exit 0 && systemd-analyze verify %s:{{ item }}'"
   with_items:
     - cri-dockerd.service
     - cri-dockerd.socket

roles/etcd/tasks/configure.yml

@@ -51,7 +51,7 @@
     dest: /etc/systemd/system/etcd.service
     backup: yes
     mode: 0644
-    validate: "systemd-analyze verify %s:etcd-{{ etcd_deployment_type }}.service"
+    validate: "sh -c '[ -f /usr/bin/systemd/system/factory-reset.target ] || exit 0 && systemd-analyze verify %s:etcd-{{ etcd_deployment_type }}.service'"
   when: is_etcd_master and etcd_cluster_setup
 
 - name: Configure | Copy etcd-events.service systemd file
@@ -60,7 +60,7 @@
     dest: /etc/systemd/system/etcd-events.service
     backup: yes
     mode: 0644
-    validate: "systemd-analyze verify %s:etcd-events-{{ etcd_deployment_type }}.service"
+    validate: "sh -c '[ -f /usr/bin/systemd/system/factory-reset.target ] || exit 0 && systemd-analyze verify %s:etcd-events-{{ etcd_deployment_type }}.service'"
   when: is_etcd_master and etcd_events_cluster_setup
 
 - name: Configure | reload systemd

roles/kubernetes/control-plane/tasks/main.yml

@@ -113,7 +113,7 @@
     src: "{{ item }}.j2"
     dest: "/etc/systemd/system/{{ item }}"
     mode: 0644
-    validate: "systemd-analyze verify %s:{{item}}"
+    validate: "sh -c '[ -f /usr/bin/systemd/system/factory-reset.target ] || exit 0 && systemd-analyze verify %s:{{item}}'"
   with_items:
     - k8s-certs-renew.service
     - k8s-certs-renew.timer

roles/kubernetes/node/tasks/kubelet.yml

@@ -34,7 +34,7 @@
     dest: "/etc/systemd/system/kubelet.service"
     backup: "yes"
     mode: 0600
-    validate: "systemd-analyze verify %s:kubelet.service"
+    validate: "sh -c '[ -f /usr/bin/systemd/system/factory-reset.target ] || exit 0 && systemd-analyze verify %s:kubelet.service'"
   notify: Node | restart kubelet
   tags:
     - kubelet