aboutsummaryrefslogtreecommitdiff
path: root/personal_infra/playbooks/roles/join_ipa
diff options
context:
space:
mode:
authoralex <alex@pdp7.net>2023-01-28 16:36:26 +0100
committeralex <alex@pdp7.net>2023-01-28 16:36:49 +0100
commit39b4e1252ed4d2b7ca971eb48038b5deb137ec9d (patch)
tree798aecbfd9f4277cf97f393bf9177541ba9b10e6 /personal_infra/playbooks/roles/join_ipa
parentdadd31dc8e9fe4ebb2a3856f8125896c58c89e6b (diff)
Refactor playbooks into roles
Diffstat (limited to 'personal_infra/playbooks/roles/join_ipa')
-rw-r--r--personal_infra/playbooks/roles/join_ipa/handlers/main.yml4
-rw-r--r--personal_infra/playbooks/roles/join_ipa/tasks/main.yml15
2 files changed, 19 insertions, 0 deletions
diff --git a/personal_infra/playbooks/roles/join_ipa/handlers/main.yml b/personal_infra/playbooks/roles/join_ipa/handlers/main.yml
new file mode 100644
index 00000000..da74d5ee
--- /dev/null
+++ b/personal_infra/playbooks/roles/join_ipa/handlers/main.yml
@@ -0,0 +1,4 @@
+- name: restart_container
+ delegate_to: "{{ proxmox.host }}"
+ command: pct reboot {{ proxmox.id }}
+
diff --git a/personal_infra/playbooks/roles/join_ipa/tasks/main.yml b/personal_infra/playbooks/roles/join_ipa/tasks/main.yml
new file mode 100644
index 00000000..eea24430
--- /dev/null
+++ b/personal_infra/playbooks/roles/join_ipa/tasks/main.yml
@@ -0,0 +1,15 @@
+---
+- name: join
+ # TODO:
+ # -N: no NTP (LXC doesn't need NTP)
+ shell: getent passwd admin || ipa-client-install -U -N --domain={{ freeipa.domain }} -w {{ freeipa.join_password|trim }} --mkhomedir -p {{ freeipa.join_user }}
+- name: set idmappings
+ blockinfile:
+ path: /etc/pve/lxc/{{ proxmox.id }}.conf
+ block: |
+ lxc.idmap = u 0 100000 65536
+ lxc.idmap = g 0 100000 65536
+ lxc.idmap = u {{ freeipa.idrange_start }} {{ freeipa.idrange_start }} {{ freeipa.idrange_size }}
+ lxc.idmap = g {{ freeipa.idrange_start }} {{ freeipa.idrange_start }} {{ freeipa.idrange_size }}
+ delegate_to: "{{ proxmox.host }}"
+ notify: restart_container