chore: Cleaned up ansible and added control script

ansible/roles/bootstrap/tasks/main.yml

@@ -10,50 +10,22 @@
     upgrade: dist
     cache_valid_time: 3600
 
-- name: Install Docker prerequisites
+# Docker straight from Ubuntu's own repositories - no external apt repo, GPG
+# key or architecture juggling. docker.io is the engine, docker-compose-v2 is
+# the `docker compose` plugin. A little behind Docker's own channel, but far
+# simpler and plenty for these hosts.
+- name: Install Docker Engine and the Compose plugin
   ansible.builtin.apt:
     name:
-      - ca-certificates
-      - curl
-      - gnupg
+      - docker.io
+      - docker-compose-v2
     state: present
 
-- name: Create apt keyrings directory
-  ansible.builtin.file:
-    path: /etc/apt/keyrings
-    state: directory
-    mode: "0755"
-
-- name: Download Docker's GPG key
-  ansible.builtin.get_url:
-    url: https://download.docker.com/linux/ubuntu/gpg
-    dest: /etc/apt/keyrings/docker.asc
-    mode: "0644"
-    force: false
-
-- name: Determine dpkg architecture
-  ansible.builtin.command: dpkg --print-architecture
-  register: _dpkg_arch
-  changed_when: false
-
-- name: Add Docker apt repository
-  ansible.builtin.apt_repository:
-    repo: >-
-      deb [arch={{ _dpkg_arch.stdout }} signed-by=/etc/apt/keyrings/docker.asc]
-      https://download.docker.com/linux/ubuntu {{ ansible_distribution_release }} stable
-    filename: docker
-    state: present
-
-- name: Install Docker Engine and Compose plugin
-  ansible.builtin.apt:
-    update_cache: true
-    name:
-      - docker-ce
-      - docker-ce-cli
-      - containerd.io
-      - docker-buildx-plugin
-      - docker-compose-plugin
-    state: present
+- name: Ensure Docker is enabled and running
+  ansible.builtin.systemd:
+    name: docker
+    enabled: true
+    state: started
 
 - name: Create non-root sudo user, given the same key root was provisioned with
   ansible.builtin.user: