panxiao81
88a02ababa
Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
114 lines
3.8 KiB
YAML
114 lines
3.8 KiB
YAML
---
|
|
# Create the DC VM on the local libvirt host. Idempotent: if the domain already
|
|
# exists it does nothing. Run on localhost with qemu:///system (become: true).
|
|
|
|
- name: Resolve the SSH public key to inject
|
|
ansible.builtin.set_fact:
|
|
dc_vm_ssh_pubkey: "{{ lookup('file', dc_vm_ssh_pubkey_file | expanduser) }}"
|
|
|
|
- name: Fail early if no usable public key
|
|
ansible.builtin.assert:
|
|
that:
|
|
- dc_vm_ssh_pubkey is search('^ssh-')
|
|
fail_msg: >-
|
|
No SSH public key at {{ dc_vm_ssh_pubkey_file }}. Generate one
|
|
(ssh-keygen -t ed25519) or set dc_vm_ssh_pubkey_file.
|
|
|
|
- name: Check whether the libvirt domain already exists
|
|
ansible.builtin.command: "virsh dominfo {{ dc_vm_name }}"
|
|
register: dc_vm_dominfo
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Create the VM
|
|
when: dc_vm_dominfo.rc != 0
|
|
block:
|
|
- name: Ensure image directories exist
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
mode: "0711"
|
|
loop:
|
|
- "{{ dc_vm_images_dir }}"
|
|
- "{{ dc_vm_images_dir }}/base"
|
|
|
|
- name: Download the Ubuntu cloud image (once)
|
|
ansible.builtin.get_url:
|
|
url: "{{ dc_vm_image_url }}"
|
|
dest: "{{ dc_vm_images_dir }}/base/{{ dc_vm_image_url | basename }}"
|
|
mode: "0644"
|
|
|
|
- name: Check whether the root-disk zvol already exists
|
|
ansible.builtin.command: "zfs list -H -o name {{ dc_vm_zvol }}"
|
|
register: dc_vm_zvol_check
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Create the root-disk zvol
|
|
ansible.builtin.command:
|
|
cmd: >-
|
|
zfs create {{ '-s ' if dc_vm_zvol_sparse else '' }}-V {{ dc_vm_disk_gb }}G
|
|
-o volblocksize={{ dc_vm_zvol_volblocksize }}
|
|
{{ dc_vm_zvol }}
|
|
when: dc_vm_zvol_check.rc != 0
|
|
|
|
- name: Wait for the zvol device node to appear
|
|
ansible.builtin.wait_for:
|
|
path: "{{ dc_vm_zvol_dev }}"
|
|
timeout: 30
|
|
when: dc_vm_zvol_check.rc != 0
|
|
|
|
- name: Write the cloud image into the zvol (raw)
|
|
ansible.builtin.command:
|
|
cmd: >-
|
|
qemu-img convert -O raw
|
|
{{ dc_vm_images_dir }}/base/{{ dc_vm_image_url | basename }}
|
|
{{ dc_vm_zvol_dev }}
|
|
when: dc_vm_zvol_check.rc != 0
|
|
# cloud-init growpart expands the rootfs to fill the zvol on first boot.
|
|
|
|
- name: Render the cloud-init seed files
|
|
ansible.builtin.template:
|
|
src: "{{ item }}.j2"
|
|
dest: "{{ dc_vm_images_dir }}/{{ dc_vm_name }}-seed-{{ item }}"
|
|
mode: "0644"
|
|
loop:
|
|
- user-data
|
|
- meta-data
|
|
- network-config
|
|
|
|
- name: Build the NoCloud seed ISO
|
|
ansible.builtin.command:
|
|
cmd: >-
|
|
genisoimage -output {{ dc_vm_images_dir }}/{{ dc_vm_name }}-seed.iso
|
|
-volid cidata -joliet -rock
|
|
-graft-points
|
|
user-data={{ dc_vm_images_dir }}/{{ dc_vm_name }}-seed-user-data
|
|
meta-data={{ dc_vm_images_dir }}/{{ dc_vm_name }}-seed-meta-data
|
|
network-config={{ dc_vm_images_dir }}/{{ dc_vm_name }}-seed-network-config
|
|
args:
|
|
creates: "{{ dc_vm_images_dir }}/{{ dc_vm_name }}-seed.iso"
|
|
|
|
- name: Define and start the domain (cloud-init imports the disk)
|
|
ansible.builtin.command:
|
|
cmd: >-
|
|
virt-install
|
|
--name {{ dc_vm_name }}
|
|
--memory {{ dc_vm_memory_mb }}
|
|
--vcpus {{ dc_vm_vcpus }}
|
|
--osinfo require=off,name={{ dc_vm_osinfo }}
|
|
--disk path={{ dc_vm_zvol_dev }},format=raw,bus=virtio
|
|
--disk path={{ dc_vm_images_dir }}/{{ dc_vm_name }}-seed.iso,device=cdrom
|
|
--network bridge={{ dc_vm_bridge }},model=virtio
|
|
--graphics none --noautoconsole --import
|
|
register: virt_install
|
|
changed_when: true
|
|
|
|
- name: Wait for SSH on the new DC
|
|
ansible.builtin.wait_for:
|
|
host: "{{ dc_vm_ip }}"
|
|
port: 22
|
|
delay: 10
|
|
timeout: 300
|
|
when: dc_vm_dominfo.rc != 0
|