blob: c6241c633d5c60c42d1f1d57a5837175209c7d7f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
- hosts: manager
remote_user: debian
become: true
tasks:
- name: "configure modprobe to enable nested VMs"
copy:
content: |
options kvm-intel nested=1
options kvm-intel enable_shadow_vmcs=1
options kvm-intel enable_apicv=1
options kvm-intel ept=1
dest: /etc/modprobe.d/kvm-nested.conf
- name: "install needed packages"
apt:
name:
- ssh
- sudo
- qemu-system-x86
- virtinst
- libvirt-daemon-system
- libvirt-clients
- locales-all
- jq
- rsync
- kpartx
- python3-lxml
- ansible
- name: change IP block in default virtual network
replace:
path: /etc/libvirt/qemu/networks/default.xml
regexp: '192\.168\.122\.'
replace: '192.168.88.'
- name: configure default virtual network
command: /usr/bin/virsh net-define /etc/libvirt/qemu/networks/default.xml
- name: start default network now
virt_net:
state: active
name: default
- name: start default network at boot
virt_net:
autostart: yes
name: default
- name: "create manager user"
user:
comment: "Manager"
name: manager
shell: /bin/bash
groups:
- libvirt
- name: "create ~manager/.ssh"
file:
state: directory
path: /home/manager/.ssh
owner: manager
group: manager
mode: 0700
- name: "copy root authorized_keys to manager user"
shell: |
install -o manager -g manager /root/.ssh/authorized_keys /home/manager/.ssh/authorized_keys
sed -i 's/^.* ssh-rsa /ssh-rsa /' /home/manager/.ssh/authorized_keys
- name: "give manager sudo"
copy:
content: |
manager ALL=(ALL:ALL) NOPASSWD: ALL
dest: /etc/sudoers.d/manager
owner: root
group: root
mode: 0600
- name: "create ~manager/.ssh"
file:
state: directory
path: /home/manager/.ssh
owner: manager
group: manager
mode: 0700
- name: "add SSH keys to manager"
copy:
src: "{{ item }}"
dest: "/home/manager/.ssh/{{ item }}"
owner: manager
group: manager
mode: 0600
with_items:
- manager.key
- manager.key.pub
- name: "configure manager's ssh"
copy:
src: manager-ssh-config
dest: /home/manager/.ssh/config
owner: manager
group: manager
mode: 0600
vars:
ansible_python_interpreter: /usr/bin/python3
|
