- hosts: oomph2
  remote_user: root
  roles:
    - sane_debian_system
    - comfortable-debian-system
    - unix_users
    - self-updating-system
  tasks:
    - apt:
        name:
          - ansible
          - subplot
          - qemu-utils
          - qemu-system-x86
          - kpartx
          - moreutils
          - genisoimage
    - copy:
          content: |
            options kvm-intel nested=1
            options kvm-intel enable_shadow_vmcs=1
            options kvm-intel enable_apicv=1
            options kvm-intel ept=1
            options kvm-amd nested=1
          dest: /etc/modprobe.d/kvm-nested.conf
    - user:
        name: liw
        groups: [kvm]
  vars:
    hostname: oomph2
    debian_codename: buster

    unix_users:
      - username: liw
        comment: Lars Wirzenius
        sudo: yes
        authorized_keys: |
          {{ liw_ssh_pub }}


    sources_lists:
      - repo: |
          deb http://deb.debian.org/debian buster contrib non-free

      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
        signing_key: "{{ ci_prod_signing_key }}"