- hosts: contractor-dev
  remote_user: root
  roles:
    - role: sane_debian_system
      tags: [sane]
    - comfortable-debian-system
    - unix_users
    - version-controller
    - vmhost
  tasks:
    - user:
        name: liw
        groups:
          - kvm
          - libvirt
    - apt:
        name:
          - black
          - vmdb2
          - subplot
    - shell: |
        virsh net-autostart default
        virsh net-start default || true
    - user:
        name: liw
        groups: [liw, kvm]
    - copy:
        content: |
          {{ liw_personal_ssh_pub }}
        dest: /home/liw/.ssh/liw-openpgp.pub
        owner: liw
        group: liw
        mode: 0600

  vars:
    sane_debian_system_version: 2
    sane_debian_system_hostname: contractor-dev
    sane_debian_system_codename: buster

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius
        sudo: yes

    sources_lists:
      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
        signing_key: "{{ ci_prod_signing_key }}"