From b563b0a6fe632c5776e0e1759bf680173a91e540 Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <lwirzenius@wikimedia.org>
Date: Fri, 28 Aug 2020 18:56:13 +0300
Subject: add: oomph2

---
 ansible/hosts      |  2 ++
 ansible/oomph2.yml | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 48 insertions(+)
 create mode 100644 ansible/oomph2.yml

diff --git a/ansible/hosts b/ansible/hosts
index 810d4da..e2f8dfc 100644
--- a/ansible/hosts
+++ b/ansible/hosts
@@ -25,6 +25,7 @@ nalanda                 ansible_ssh_host=nalanda.liw.fi
 gregvm                  ansible_ssh_host=78.46.87.152
 
 sequoia
+vbox
 
 [ick-workers]
 ick3-unstable           hostname=ick3-unstable  debian_codename=unstable pbuilder_othermirror_distro=unstable
@@ -33,4 +34,5 @@ ick3-backports          hostname=ick3-backports debian_codename=stretch pbuilder
 
 [vdc-dev]
 oomph
+oomph2
 meta-dev
diff --git a/ansible/oomph2.yml b/ansible/oomph2.yml
new file mode 100644
index 0000000..917800c
--- /dev/null
+++ b/ansible/oomph2.yml
@@ -0,0 +1,46 @@
+- hosts: oomph2
+  remote_user: root
+  roles:
+    - sane_debian_system
+    - comfortable-debian-system
+    - unix_users
+    - self-updating-system
+  tasks:
+    - apt:
+        name:
+          - ansible
+          - subplot
+          - qemu-utils
+          - qemu-system-x86
+          - kpartx
+          - moreutils
+          - genisoimage
+    - copy:
+          content: |
+            options kvm-intel nested=1
+            options kvm-intel enable_shadow_vmcs=1
+            options kvm-intel enable_apicv=1
+            options kvm-intel ept=1
+            options kvm-amd nested=1
+          dest: /etc/modprobe.d/kvm-nested.conf
+    - user:
+        name: liw
+        groups: [kvm]
+  vars:
+    hostname: oomph2
+    debian_codename: buster
+
+    unix_users:
+      - username: liw
+        comment: Lars Wirzenius
+        sudo: yes
+        authorized_keys: |
+          {{ liw_ssh_pub }}
+
+
+    sources_lists:
+      - repo: |
+          deb http://deb.debian.org/debian buster contrib non-free
+
+      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
+        signing_key: "{{ ci_prod_signing_key }}"
-- 
cgit v1.2.1