refactor: drop use of liw-openpgp key everywhere

Sponsored-by: author

19 files changed, 9 insertions, 521 deletions

diff --git a/ansible/atuin.liw.fi.yml b/ansible/atuin.liw.fi.yml
index 55b3095..cf0a223 100644
--- a/ansible/atuin.liw.fi.yml
+++ b/ansible/atuin.liw.fi.yml
@@ -54,12 +54,10 @@
         comment: Lars Wirzenius
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_hetzner_ssh_pub }}
       - username: root
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_hetzner_ssh_pub }}
 
     mailname: atuin.liw.fi
@@ -148,22 +146,18 @@
         comment: Lars Wirzenius
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_hetzner_ssh_pub }}
       - username: root
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_hetzner_ssh_pub }}
       - username: liw-laptop
         comment: Lars Wirzenius
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_hetzner_ssh_pub }}
       - username: liw-holywood
         comment: Lars Wirzenius
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ root_at_holywood2_ssh_key_pub }}
           {{ root_at_holywood2_ssh_key_pub_v2 }}
 
diff --git a/ansible/billion.yml b/ansible/billion.yml
index f902c9c..60c321d 100644
--- a/ansible/billion.yml
+++ b/ansible/billion.yml
@@ -18,4 +18,4 @@
         comment: Lars Wirzenius
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
+          {{ liw_personal_ssh_pub }}
diff --git a/ansible/contractor-dev.yml b/ansible/contractor-dev.yml
index d763065..d06fd72 100644
--- a/ansible/contractor-dev.yml
+++ b/ansible/contractor-dev.yml
@@ -26,7 +26,7 @@
         groups: [liw, kvm]
     - copy:
         content: |
-          {{ liw_ssh_pub }}
+          {{ liw_personal_ssh_pub }}
         dest: /home/liw/.ssh/liw-openpgp.pub
         owner: liw
         group: liw
@@ -43,7 +43,7 @@
         comment: Lars Wirzenius
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
+          {{ liw_personal_ssh_pub }}
 
     sources_lists:
       - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
diff --git a/ansible/debmirror.yml b/ansible/debmirror.yml
index f9de0d4..3605f91 100644
--- a/ansible/debmirror.yml
+++ b/ansible/debmirror.yml
@@ -23,11 +23,11 @@
         comment: Lars Wirzenius
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
+          {{ liw_personal_ssh_pub }}
       - username: debmirror
         comment: Debian Mirror
         authorized_keys: |
-          {{ liw_ssh_pub }}
+          {{ liw_personal_ssh_pub }}
 
     static_sites:
 
diff --git a/ansible/exolobe4.yml b/ansible/exolobe4.yml
deleted file mode 100644
index c9518d6..0000000
--- a/ansible/exolobe4.yml
+++ /dev/null
@@ -1,62 +0,0 @@
-- hosts: exolobe4
-  remote_user: liw
-  become: yes
-  roles:
-    - sane_debian_system
-    - comfortable-debian-system
-    - unix_users
-    - version-controller
-    - emacs
-    - gnupg-workstation
-    - gnome-system
-    # - smarthost-client
-    - journal-workstation
-    # - apache_server
-    - writing-dev-env
-    - tex-dev-env
-    - chaoskey-host
-    - vmhost
-    - ansible
-    - mail-client
-    - intel-wifi
-    - rust-dev-env
-  tasks:
-    - apt:
-        name:
-          - black
-          - pylint
-          - pylint3
-          - lshw
-          - subplot
-          - extrautils
-          - flake8
-  vars:
-    sane_debian_system_version: 1
-    unix_users_version: 2
-
-    sane_debian_system_hostname: exolobe4
-    sane_debian_system_codename: buster
-    sane_debian_system_timezone: Europe/Helsinki
-    sane_debian_system_sources_lists:
-      - repo: |
-          deb http://deb.debian.org/debian buster contrib non-free
-          
- #     - repo: |
- #         deb https://riot.im/packages/debian sid main
- #       signing_key: "{{ riot_im_signing_key }}"
-
-      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
-        signing_key: "{{ ci_prod_signing_key }}"
-
-    # mailname: exolobe4.liw.fi
-    # relayhost: pieni.net:587
-    # smarthost: pieni.net
-    # smarthost_user: pienirelay
-    # smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"
-
-    unix_users:
-      - username: liw
-        comment: Lars Wirzenius
-        sudo: yes
-        authorized_keys: |
-          {{ liw_ssh_pub }}
diff --git a/ansible/exolobe6.yml b/ansible/exolobe6.yml
deleted file mode 100644
index add7dea..0000000
--- a/ansible/exolobe6.yml
+++ /dev/null
@@ -1,90 +0,0 @@
-- hosts: exolobe6
-  remote_user: liw
-  become: yes
-  roles:
-    - sane_debian_system
-    - comfortable-debian-system
-    - unix_users
-    - version-controller
-    - emacs
-    - backup-client
-    - gnupg-workstation
-    - gnome-system
-    - writing-dev-env
-    - ansible
-    - mail-client
-    - intel-wifi
-    - vmhost
-  tasks:
-    - apt:
-        name:
-          - black
-          - pylint
-          - pylint3
-          - lshw
-          - subplot
-          - flake8
-          - thunderbolt-tools
-          - liw-automation
-          - wmf-sre-laptop
-          - clamav
-          - clamav-freshclam
-          - clamav-daemon
-  vars:
-    ansible_python_interpreter: /usr/bin/python3
-    sane_debian_system_version: 2
-    unix_users_version: 2
-
-    sane_debian_system_hostname: exolobe6
-    sane_debian_system_codename: bullseye
-    sane_debian_system_timezone: Europe/Helsinki
-    sane_debian_system_sources_lists:
-      - repo: |
-          deb http://deb.debian.org/debian bullseye contrib non-free
-          
-      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
-        signing_key: "{{ ci_prod_signing_key }}"
-
-      - repo: deb http://apt.wikimedia.org/wikimedia buster-wikimedia main
-        signing_key: |
-          -----BEGIN PGP PUBLIC KEY BLOCK-----
-          Version: GnuPG v1
-
-          mQINBFieKQEBEACZXCSJEwJnXsEofPUIunQTqF8p1IipjkDF4sNSgyuA17AD235h
-          EEll1Czzd13bajM4D9dO+Yz4q9lWcrdoaHXklTEnA1Dhjk0wgTRqEqa37PBxjm7p
-          xTuSOEFAHnQfjM9ZzV6Bd3kzIlfxnTguiYbN1pf4KQ7u4TQSchKr8V4p+mf4Y+Xg
-          6hhskLrvMRYO7mNGEzm0vdfWsGbbvPZlhrRMea4oyCrOGd2piXAIPLR6DFXpyrb9
-          GdEKrg8evTUnntsIqQ60h8veFETGNUmtpSF9OwzVGfH8TKACV7qA30Bbp6wDSLeY
-          JefpX4yBexY3FbNx1oxXbXTZbDR8RZ4olWjP+inKYJTwHxQnvYjXWgMeNR/BgX2s
-          ontLXqK5BzBP+1E0vHdAAYSU/8vjr+zmy1qyDWYtIlqdMXzDkXTCZIkJE0WPp5Sx
-          sEFqpLdO7ggqJV5UF7h/yIq9bcxoaNxYGJFRDWg3Lj6ZLCxiSN/QHuqascMijKAU
-          2RHzQtXhfXzZA8PwZp92dalOZOguytEYyhzrPfJlysvOnXTigHa9WeybDcJgsOO8
-          xFbgU9P98NgyE4ZIel6P1GpLnBY8j0KpbhWfCi5mmomwwK5OUWe0g9/u4z5FmN3z
-          /WWA/8BjuJI9MFnS3YoU3safEUi0vD5pnuktVQGJOkSnR6gAN4dAoCcVEwARAQAB
-          tDxXaWtpbWVkaWEgQXJjaGl2ZSBBdXRvbWF0aWMgU2lnbmluZyBLZXkgPHJvb3RA
-          d2lraW1lZGlhLm9yZz6JAjcEEwEKACEFAlieKQECGwMFCwkIBwMFFQoJCAsFFgID
-          AQACHgECF4AACgkQnTktP/rfGPtmohAAhQhGkOe0DX5ZSK6uEs2IpB1W3EvCPK87
-          vSgI6FZyGEURH7s/MknQR2lMShgHZ1oqLwZV1DE5ao/D4khPw1JZFeYajXOxQ3Sr
-          /Qjg6ZayrJ/r9sSchC4nd6m+rFpzuRsx22FWrVenzRBau6/J6OUz3WawsjX3Bwrg
-          /Hw11/+kgsabkdsdK28ENWdVj0tLp5asSxrs4L4d2RjKpfiufBAGpkqFV5p2J8aw
-          cJ7Wh3/1mMo+biTtuemHtWf4XfWmXv99ltSEVe8PpMYQ+FjNUHDzEZMS5K39em+V
-          EOC7GsE+SHHF6lgjH2BtDcpkimbU9uROnGeIWtpRr+PNMu/yhFLUCxe7tf4yffIJ
-          NIAL3RFcRhLj0xCbL3fd5DbQP4eB68k9pLHwYxpKba7DDmH0aMstvk5xrpphdHAP
-          p03VbE6ZThKxA828yb2jWtumDhoYRlkHs2KrVufUPA411mUE+A53pwqBse/KM9Iq
-          Pidc+TwMwy2nByRB9WFyyGS08wqhewpwp8mwIOejvRf+3yi+CGHM2Xi4bTmEqVL+
-          Jm1D5W49O5/j1T6HyVPGsyH/0QgYwg2IVZwL5Jfy9w3974jTV3QAcCBafR9hcZCS
-          S2wOIo0ckRI0APw6DQSFMyBrNs9rWy72Ixu9RC1GtzCCn5OaMRUM9FaqjRnTKX4m
-          grWsU8i35fI=
-          =ib96
-          -----END PGP PUBLIC KEY BLOCK-----
-
-
-    unix_users:
-      - username: liw
-        comment: Lars Wirzenius
-        sudo: yes
-        groups:
-          - libvirt
-          - kvm
-        authorized_keys: |
-          {{ liw_ssh_pub }}
diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml
index befb482..558988a 100644
--- a/ansible/group_vars/all.yml
+++ b/ansible/group_vars/all.yml
@@ -1,7 +1,3 @@
-liw_ssh_pub: |
-  ssh-rsa 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 openpgp:0xBBE80E50
-
-
 liw_personal_ssh_pub: |
   ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPQe6lsTapAxiwhhEeE/ixuK+5N8esCsMWoekQqjtxjP liw personal systems
 
diff --git a/ansible/holywood2.yml b/ansible/holywood2.yml
index 7175e9e..d739a03 100644
--- a/ansible/holywood2.yml
+++ b/ansible/holywood2.yml
@@ -28,13 +28,11 @@
         comment: Lars Wirzenius
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_personal_ssh_pub }}
       - username: root
         ssh_key: "{{ lookup('pipe', 'pass show root_at_holywood2_ssh_key') }}"
         ssh_key_pub: "{{ root_at_holywood2_ssh_key_pub }}"
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_personal_ssh_pub }}
 
     mailname: "{{ sane_debian_system_hostname }}.liw.fi"
diff --git a/ansible/http.liw.fi.yml b/ansible/http.liw.fi.yml
index 042db97..f5b4352 100644
--- a/ansible/http.liw.fi.yml
+++ b/ansible/http.liw.fi.yml
@@ -17,16 +17,13 @@
       - username: liw
         comment: Lars Wirzenius
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_personal_ssh_pub }}
       - username: root
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_personal_ssh_pub }}
       - username: ickliwfi
         comment: Ick website
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_personal_ssh_pub }}
           {{ ci_worker_ssh_pub }}
 
diff --git a/ansible/kea.yml b/ansible/kea.yml
index 2a884bc..cfa04d2 100644
--- a/ansible/kea.yml
+++ b/ansible/kea.yml
@@ -50,7 +50,7 @@
         comment: Ansible
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
+          {{ liw_personal_ssh_pub }}
 
     sources_lists:
       - repo: |
diff --git a/ansible/letest-letest.vm.liw.fi.yml b/ansible/letest-letest.vm.liw.fi.yml
index 8ff0919..c9555dc 100644
--- a/ansible/letest-letest.vm.liw.fi.yml
+++ b/ansible/letest-letest.vm.liw.fi.yml
@@ -17,4 +17,4 @@
       - username: liw
         comment: Lars Wirzenius
         authorized_keys: |
-          {{ liw_ssh_pub }}
+          {{ liw_personal_ssh_pub }}
diff --git a/ansible/mirror-git.yml b/ansible/mirror-git.yml
index c1cd202..97810f6 100644
--- a/ansible/mirror-git.yml
+++ b/ansible/mirror-git.yml
@@ -60,17 +60,14 @@
     unix_users:
       - username: root
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_personal_ssh_pub }}
       - username: debian
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_personal_ssh_pub }}
       - username: liw
         comment: Lars Wirzenius
         sudo: true
         authorized_keys: |
-          {{ liw_ssh_pub }}
           {{ liw_personal_ssh_pub }}
         ssh_key: |
           {{ lookup('pipe', 'pass show ssh/liw@mirror-git') }}
diff --git a/ansible/oomph.yml b/ansible/oomph.yml
deleted file mode 100644
index adfb643..0000000
--- a/ansible/oomph.yml
+++ /dev/null
@@ -1,87 +0,0 @@
-- hosts: oomph
-  remote_user: root
-  roles:
-    - sane_debian_system
-    - comfortable-debian-system
-    - unix_users
-    - self-updating-system
-  tasks:
-    - apt_repository:
-        repo: "deb http://deb.debian.org/debian buster-backports main"
-    - copy:
-        content: |
-          Package: ansible
-          Pin: release a=buster-backports
-          Pin-Priority: 900
-        dest: /etc/apt/preferences.d/50-train-dev.pref
-    - apt:
-        name:
-          - ansible
-          - subplot
-          - qemu-utils
-          - qemu-system-x86
-          - kpartx
-          - moreutils
-          - genisoimage
-          - libvirt-clients
-          - shellcheck
-          - pyflakes3
-    - apt:
-        upgrade: yes
-    - copy:
-          content: |
-            options kvm-intel nested=1
-            options kvm-intel enable_shadow_vmcs=1
-            options kvm-intel enable_apicv=1
-            options kvm-intel ept=1
-            options kvm-amd nested=1
-          dest: /etc/modprobe.d/kvm-nested.conf
-    - user:
-        name: liw
-        groups: [kvm]
-
-    - name: Make ext4 filesystem on /dev/vdb
-      filesystem:
-        fstype: ext4
-        dev: /dev/vdb
-        force: no
-        opts: "-Lworkspace"
-    - name: mkdir /workspace
-      file:
-        state: directory
-        path: /workspace
-    - name: Mount /dev/vdb on /workspace
-      mount:
-        src: LABEL=workspace
-        path: /workspace
-        fstype: auto
-        opts: defaults
-        dump: '0'
-        passno: '2'
-        state: mounted
-    - name: Set owner/mode on /workspace
-      file:
-        path: /workspace
-        owner: liw
-        group: liw
-        mode: 0755
-  vars:
-    sane_debian_system_version: 1
-    unix_users_version: 2
-
-    sane_debian_system_hostname: oomph
-    sane_debian_system_codename: buster
-
-    unix_users:
-      - username: liw
-        comment: Lars Wirzenius
-        sudo: yes
-        authorized_keys: |
-          {{ liw_ssh_pub }}
-
-    sources_lists:
-      - repo: |
-          deb http://deb.debian.org/debian buster contrib non-free
-
-      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
-        signing_key: "{{ ci_prod_signing_key }}"
diff --git a/ansible/scap-dev.yml b/ansible/scap-dev.yml
deleted file mode 100644
index 5586076..0000000
--- a/ansible/scap-dev.yml
+++ /dev/null
@@ -1,83 +0,0 @@
-- hosts: scapdev
-  remote_user: debian
-  become: true
-  roles:
-    - sane_debian_system
-    - comfortable-debian-system
-    - unix_users
-  tasks:
-    - apt:
-        name:
-          - bash-completion
-          - black
-          - build-essential
-          - ca-certificates
-          - cowbuilder
-          - debhelper
-          - dh-python
-          - docker.io
-          - flake8
-          - git
-          - git-buildpackage
-          - libjpeg-dev
-          - moreutils
-          - openssl
-          - pandoc-citeproc
-          - php
-          - php-cli
-          - python-all
-          - python-all-dev
-          - python-concurrent.futures
-          - python-configparser
-          - python-coverage
-          - python-dev
-          - python-flake8
-          - python-jinja2
-          - python-mock
-          - python-openssl
-          - python-psutil
-          - python-pygments
-          - python-pytest
-          - python-pytest-cov
-          - python-pytest-mock
-          - python-requests
-          - python-setuptools
-          - python-six
-          - python-sphinx
-          - python-sphinxcontrib.actdiag
-          - python-sphinxcontrib.blockdiag
-          - python-sphinxcontrib.programoutput
-          - python-yaml
-          - python2.7
-          - python2.7-dev
-          - python2.7-dev
-          - subplot
-          - texlive-fonts-recommended
-          - texlive-latex-base
-          - texlive-latex-recommended
-          - zlib1g-dev
-    - name: "upgrade all packages"
-      apt:
-        upgrade: safe
-  vars:
-    ansible_python_interpreter: /bin/python2
-
-    sane_debian_system_version: 1
-    sane_debian_system_codename: buster
-
-    sane_debian_system_sources_lists:
-      - repo: |
-          deb http://deb.debian.org/debian buster contrib non-free
-
-      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
-        signing_key: "{{ ci_prod_signing_key }}"
-
-    unix_users_version: 2
-    unix_users:
-      - username: liw
-        comment: Lars Wirzenius
-        sudo: yes
-        groups:
-          - docker
-        authorized_keys: |
-          {{ liw_ssh_pub }}
diff --git a/ansible/sequoia.yml b/ansible/sequoia.yml
deleted file mode 100644
index f6b2680..0000000
--- a/ansible/sequoia.yml
+++ /dev/null
@@ -1,29 +0,0 @@
-- hosts: sequoia
-  remote_user: root
-  roles:
-    - sane_debian_system
-    - comfortable-debian-system
-    - unix_users
-    - self-updating-system
-    - emacs
-  tasks:
-    - apt:
-        name:
-          - curl
-          - build-essential
-          - clang
-          - pkg-config
-          - nettle-dev
-          - libssl-dev
-          - capnproto
-          - libsqlite3-dev
-  vars:
-    hostname: sequoia
-    debian_codename: buster
-
-    unix_users:
-      - username: liw
-        comment: Lars Wirzenius
-        sudo: yes
-        authorized_keys: |
-          {{ liw_ssh_pub }}
diff --git a/ansible/sshca-dev.yml b/ansible/sshca-dev.yml
index ee92b83..c3403d9 100644
--- a/ansible/sshca-dev.yml
+++ b/ansible/sshca-dev.yml
@@ -44,7 +44,7 @@
         comment: Lars Wirzenius
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
+          {{ liw_personal_ssh_pub }}
 
     sane_debian_system_sources_lists:
       - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
diff --git a/ansible/subplot-dan.yml b/ansible/subplot-dan.yml
index 0f6493f..56a3d9b 100644
--- a/ansible/subplot-dan.yml
+++ b/ansible/subplot-dan.yml
@@ -25,7 +25,7 @@
         comment: Lars Wirzenius
         sudo: yes
         authorized_keys: |
-          {{ liw_ssh_pub }}
+          {{ liw_personal_ssh_pub }}
       - username: dan
         comment: Dan
         sudo: yes
diff --git a/ansible/train-dev-docker.yml b/ansible/train-dev-docker.yml
deleted file mode 100644
index 013f634..0000000
--- a/ansible/train-dev-docker.yml
+++ /dev/null
@@ -1,69 +0,0 @@
-- hosts: train-dev-docker
-  remote_user: debian
-  become: true
-  roles:
-    - sane_debian_system
-    - comfortable-debian-system
-    - unix_users
-    - self-updating-system
-  tasks:
-    - apt_repository:
-        repo: "deb http://deb.debian.org/debian buster-backports main"
-    - apt_repository:
-        repo: "deb [trusted=yes] http://ci-prod-controller.vm.liw.fi/debian unstable-ci main"
-    - copy:
-        content: |
-          Package: ansible
-          Pin: release a=buster-backports
-          Pin-Priority: 900
-        dest: /etc/apt/preferences.d/50-train-dev.pref
-    - apt:
-        name:
-          - docker.io
-          - docker-compose
-          - make
-          - emacs
-          - jq
-          - subplot
-    - apt:
-        upgrade: yes
-    - copy:
-          content: |
-            options kvm-intel nested=1
-            options kvm-intel enable_shadow_vmcs=1
-            options kvm-intel enable_apicv=1
-            options kvm-intel ept=1
-            options kvm-amd nested=1
-          dest: /etc/modprobe.d/kvm-nested.conf
-    - user:
-        name: liw
-        groups: [docker]
-
-    - name: mkdir /workspace
-      file:
-        state: directory
-        path: /workspace
-        owner: liw
-        group: liw
-  vars:
-    sane_debian_system_version: 2
-    unix_users_version: 2
-
-    sane_debian_system_hostname: train-dev-docker
-    sane_debian_system_codename: buster
-
-    ansible_python_interpreter: /usr/bin/python3
-
-    unix_users:
-      - username: liw
-        comment: Lars Wirzenius
-        sudo: yes
-        authorized_keys: |
-          {{ liw_ssh_pub }}
-
-    sources_lists:
-      - repo: |
-          deb http://deb.debian.org/debian buster contrib non-free
-
-      - repo: |
-          deb [trusted=yes] http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
diff --git a/ansible/train-dev.yml b/ansible/train-dev.yml
deleted file mode 100644
index bf0e01a..0000000
--- a/ansible/train-dev.yml
+++ /dev/null
@@ -1,74 +0,0 @@
-- hosts: train-dev
-  remote_user: debian
-  become: true
-  roles:
-    - sane_debian_system
-    - comfortable-debian-system
-    - unix_users
-    - self-updating-system
-  tasks:
-    - apt_repository:
-        repo: "deb http://deb.debian.org/debian buster-backports main"
-    - apt_repository:
-        repo: "deb [trusted=yes] http://ci-prod-controller.vm.liw.fi/debian unstable-ci main"
-    - copy:
-        content: |
-          Package: ansible
-          Pin: release a=buster-backports
-          Pin-Priority: 900
-        dest: /etc/apt/preferences.d/50-train-dev.pref
-    - apt:
-        name:
-          - ansible
-          - subplot
-          - qemu-utils
-          - qemu-system-x86
-          - kpartx
-          - moreutils
-          - genisoimage
-          - libvirt-clients
-          - shellcheck
-          - pyflakes3
-          - netcat-traditional
-    - apt:
-        upgrade: yes
-    - copy:
-          content: |
-            options kvm-intel nested=1
-            options kvm-intel enable_shadow_vmcs=1
-            options kvm-intel enable_apicv=1
-            options kvm-intel ept=1
-            options kvm-amd nested=1
-          dest: /etc/modprobe.d/kvm-nested.conf
-    - user:
-        name: liw
-        groups: [kvm]
-
-    - name: mkdir /workspace
-      file:
-        state: directory
-        path: /workspace
-        owner: liw
-        group: liw
-  vars:
-    sane_debian_system_version: 2
-    unix_users_version: 2
-
-    sane_debian_system_hostname: train-dev
-    sane_debian_system_codename: buster
-
-    ansible_python_interpreter: /usr/bin/python3
-
-    unix_users:
-      - username: liw
-        comment: Lars Wirzenius
-        sudo: yes
-        authorized_keys: |
-          {{ liw_ssh_pub }}
-
-    sources_lists:
-      - repo: |
-          deb http://deb.debian.org/debian buster contrib non-free
-
-      - repo: |
-          deb [trusted=yes] http://ci-prod-controller.vm.liw.fi/debian unstable-ci main