panxiao81
88a02ababa
Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
42 lines
1.7 KiB
YAML
42 lines
1.7 KiB
YAML
---
|
|
# 86Box host: desktop + RDP. AD join is NOT here — that uses the shared
|
|
# `ad_sssd_join` role in ../../samba-ad/ansible (join-sssd.yml), so every
|
|
# Linux host joins the domain the same way.
|
|
- name: Retro lab desktop
|
|
hosts: retrolab
|
|
gather_facts: true
|
|
|
|
environment:
|
|
# DO NOT REMOVE. This host holds long-lived interactive desktop sessions.
|
|
# Ubuntu's needrestart hooks apt and, in non-interactive mode, RESTARTS any
|
|
# service linked against an upgraded library. On 2026-07-25 an unrelated
|
|
# `apt install patchelf libcap2-bin` pulled in a libcap2 upgrade, which made
|
|
# needrestart restart xrdp-sesman. sesman came back with an empty session
|
|
# table and could no longer reattach the running :10 session, stranding a
|
|
# live 86Box VM: every reconnect created a NEW session, and xfce4-session
|
|
# refuses to start twice for one user, so each new session died instantly.
|
|
# `l` = list what would need restarting, restart nothing.
|
|
NEEDRESTART_MODE: l
|
|
|
|
vars:
|
|
# ISO library, served from the laptop (the same export PVE mounts as its
|
|
# `laptop` storage). Mounted READ-ONLY: it is where 86Box picks CD images
|
|
# from, and nothing on the retro side should ever write to the library.
|
|
nfs_mounts:
|
|
- src: "192.168.10.127:/mnt/pool/proxmox/template/iso"
|
|
path: /mnt/iso
|
|
|
|
# The bridge 86Box attaches its TAP interfaces to. net1 (retronet, VLAN
|
|
# 110) deliberately has no IP on the host — see roles/tap_bridge/defaults.
|
|
tap_bridge_name: br-retro
|
|
tap_bridge_member: enp6s19
|
|
tap_bridge_member_mac: "bc:24:11:9f:63:ed"
|
|
retro_86box_tap_bridge: br-retro
|
|
|
|
roles:
|
|
- guest_base
|
|
- retro_desktop
|
|
- nfs_mounts
|
|
- tap_bridge
|
|
- retro_86box
|