From 39b4e1252ed4d2b7ca971eb48038b5deb137ec9d Mon Sep 17 00:00:00 2001 From: alex Date: Sat, 28 Jan 2023 16:36:26 +0100 Subject: Refactor playbooks into roles --- personal_infra/playbooks/roles/join_ipa/handlers/main.yml | 4 ++++ personal_infra/playbooks/roles/join_ipa/tasks/main.yml | 15 +++++++++++++++ 2 files changed, 19 insertions(+) create mode 100644 personal_infra/playbooks/roles/join_ipa/handlers/main.yml create mode 100644 personal_infra/playbooks/roles/join_ipa/tasks/main.yml (limited to 'personal_infra/playbooks/roles/join_ipa') diff --git a/personal_infra/playbooks/roles/join_ipa/handlers/main.yml b/personal_infra/playbooks/roles/join_ipa/handlers/main.yml new file mode 100644 index 00000000..da74d5ee --- /dev/null +++ b/personal_infra/playbooks/roles/join_ipa/handlers/main.yml @@ -0,0 +1,4 @@ +- name: restart_container + delegate_to: "{{ proxmox.host }}" + command: pct reboot {{ proxmox.id }} + diff --git a/personal_infra/playbooks/roles/join_ipa/tasks/main.yml b/personal_infra/playbooks/roles/join_ipa/tasks/main.yml new file mode 100644 index 00000000..eea24430 --- /dev/null +++ b/personal_infra/playbooks/roles/join_ipa/tasks/main.yml @@ -0,0 +1,15 @@ +--- +- name: join + # TODO: + # -N: no NTP (LXC doesn't need NTP) + shell: getent passwd admin || ipa-client-install -U -N --domain={{ freeipa.domain }} -w {{ freeipa.join_password|trim }} --mkhomedir -p {{ freeipa.join_user }} +- name: set idmappings + blockinfile: + path: /etc/pve/lxc/{{ proxmox.id }}.conf + block: | + lxc.idmap = u 0 100000 65536 + lxc.idmap = g 0 100000 65536 + lxc.idmap = u {{ freeipa.idrange_start }} {{ freeipa.idrange_start }} {{ freeipa.idrange_size }} + lxc.idmap = g {{ freeipa.idrange_start }} {{ freeipa.idrange_start }} {{ freeipa.idrange_size }} + delegate_to: "{{ proxmox.host }}" + notify: restart_container -- cgit v1.2.3