归档：Kata / microVM runner 实验（2026-09-17 工作区快照）

从旧工作区 chore/recover-old-workspace 清理时保存，内容与 2026-09-17 stash@{0} 快照中的版本一致；未合并、未在 main 上使用，仅作参考，不开 PR。被 gitignore 的 tfstate 与凭据文件不在此分支，仍留在本地工作区。 Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-01 17:30:48 +00:00
parent 69d3476a6b
commit 55bb5be8b6
39 changed files with 1891 additions and 0 deletions
@@ -0,0 +1,58 @@
+---
+- name: Bootstrap k3s in the Kata LXC worker
+  hosts: pve2
+  gather_facts: false
+  vars:
+    kata_lxc_id: 147
+  tasks:
+    - name: Check base packages in LXC
+      ansible.builtin.command:
+        cmd: >-
+          pct exec {{ kata_lxc_id }} -- dpkg-query -W
+          ca-certificates curl jq openssh-server
+      register: kata_lxc_packages
+      changed_when: false
+      failed_when: false
+
+    - name: Install base packages and SSH server in LXC
+      ansible.builtin.command:
+        cmd: >-
+          pct exec {{ kata_lxc_id }} -- bash -lc
+          'apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y
+          ca-certificates curl jq openssh-server'
+      when: kata_lxc_packages.rc != 0
+
+    - name: Install k3s in LXC
+      ansible.builtin.shell:
+        cmd: |
+          set -euo pipefail
+          pct exec {{ kata_lxc_id }} -- bash -lc '
+            if ! command -v k3s >/dev/null; then
+              curl -sfL https://get.k3s.io -o /tmp/install-k3s.sh
+              chmod 0755 /tmp/install-k3s.sh
+              INSTALL_K3S_EXEC="server --disable=traefik --write-kubeconfig-mode=0644" /tmp/install-k3s.sh
+            fi
+          '
+        executable: /bin/bash
+      register: kata_lxc_k3s_install
+      changed_when: "'No change detected' not in kata_lxc_k3s_install.stdout"
+
+    - name: Wait for k3s node readiness
+      ansible.builtin.command:
+        cmd: >-
+          pct exec {{ kata_lxc_id }} -- /usr/local/bin/k3s kubectl wait
+          --for=condition=Ready node/kata-lxc-lab --timeout=180s
+      changed_when: false
+
+    - name: Check LXC virtualization and devices
+      ansible.builtin.command:
+        cmd: >-
+          pct exec {{ kata_lxc_id }} -- bash -lc
+          'systemd-detect-virt; ls -l /dev/kvm /dev/vhost-net /dev/vhost-vsock;
+          /usr/local/bin/k3s kubectl get node -o wide'
+      register: kata_lxc_ready
+      changed_when: false
+
+    - name: Report k3s readiness
+      ansible.builtin.debug:
+        var: kata_lxc_ready.stdout_lines