diff options
| author | alex <alex@pdp7.net> | 2023-01-28 21:26:13 +0100 |
|---|---|---|
| committer | alex <alex@pdp7.net> | 2023-01-28 21:26:13 +0100 |
| commit | 1398657abfe3bf0e0e0bb6a544d53fa3a2c65f28 (patch) | |
| tree | 700d2b081eb2ce24210c1333a1f847d808f2c84e | |
| parent | 1a86fde3e0d6ec6546624d6eae1e9aec64ffe40f (diff) | |
Update id mappings properly :(
| -rw-r--r-- | personal_infra/playbooks/roles/join_ipa/tasks/main.yml | 22 |
1 files changed, 19 insertions, 3 deletions
diff --git a/personal_infra/playbooks/roles/join_ipa/tasks/main.yml b/personal_infra/playbooks/roles/join_ipa/tasks/main.yml index eea24430..0610dba4 100644 --- a/personal_infra/playbooks/roles/join_ipa/tasks/main.yml +++ b/personal_infra/playbooks/roles/join_ipa/tasks/main.yml @@ -3,13 +3,29 @@ # TODO: # -N: no NTP (LXC doesn't need NTP) shell: getent passwd admin || ipa-client-install -U -N --domain={{ freeipa.domain }} -w {{ freeipa.join_password|trim }} --mkhomedir -p {{ freeipa.join_user }} -- name: set idmappings +# proxmox reorders the configuration file and misbehaves quite a bit :( +- name: set id mappings copy out + copy: + remote_src: yes + src: /etc/pve/lxc/{{ proxmox.id }}.conf + dest: /tmp/{{ proxmox.id }}.conf + delegate_to: "{{ proxmox.host }}" +- name: read conf + slurp: + src: /tmp/{{ proxmox.id }}.conf + register: proxmox_conf + delegate_to: "{{ proxmox.host }}" +- name: set id mappings blockinfile: - path: /etc/pve/lxc/{{ proxmox.id }}.conf + path: /tmp/{{ proxmox.id }}.conf block: | lxc.idmap = u 0 100000 65536 lxc.idmap = g 0 100000 65536 lxc.idmap = u {{ freeipa.idrange_start }} {{ freeipa.idrange_start }} {{ freeipa.idrange_size }} lxc.idmap = g {{ freeipa.idrange_start }} {{ freeipa.idrange_start }} {{ freeipa.idrange_size }} - delegate_to: "{{ proxmox.host }}" + when: not proxmox_conf['content']|b64decode is search('lxc.idmap') notify: restart_container + delegate_to: "{{ proxmox.host }}" +- name: set id mappings copy in + command: cp /tmp/{{ proxmox.id }}.conf /etc/pve/lxc/{{ proxmox.id }}.conf + delegate_to: "{{ proxmox.host }}" |