aboutsummaryrefslogtreecommitdiff
path: root/personal_infra/playbooks/join_ipa.yaml
blob: 4bfe8585cdce5f9afb53137e7cc167b09ebe738c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
---
- name: join ipa
  hosts: all
  collections:
    - ansible.builtin
    - community.general

  tasks:
    - name: join
      # TODO:
      # -N: no NTP (LXC doesn't need NTP)
      command: ipa-client-install -U -N --domain={{ freeipa.domain }} -w {{ freeipa.join_password }} --mkhomedir -p {{ freeipa.join_user }}
    - name: set idmappings
      blockinfile:
        path: /etc/pve/lxc/{{ proxmox.id }}.conf
        block: |
          lxc.idmap = u 0 100000 65536
          lxc.idmap = g 0 100000 65536
          lxc.idmap = u {{ freeipa.idrange_start }} {{ freeipa.idrange_start }} {{ freeipa.idrange_size }}
          lxc.idmap = g {{ freeipa.idrange_start }} {{ freeipa.idrange_start }} {{ freeipa.idrange_size }}
      delegate_to: "{{ proxmox.host }}"