ansible-roles/lxc/tasks/create-container.yml

---
- name: "Check if container {{ name }} exists"
  command: "lxc-ls {{ name }}"
  changed_when: false
  check_mode: no
  register: container_exists

- name: "Create container {{ name }}"
  lxc_container:
    name: "{{ name }}"
    container_log: true
    template: debian
    state: stopped
    template_options: "--arch amd64 --release {{ release }}"
  when: container_exists.stdout_lines | length == 0

- name: "Disable network configuration inside container {{ name }}"
  replace:
    name: "/var/lib/lxc/{{ name }}/rootfs/etc/default/networking"
    regexp: "^#CONFIGURE_INTERFACES=yes"
    replace: CONFIGURE_INTERFACES=no
  when: lxc_network_type == "none"

- name: "Disable interface shut down on halt inside container {{ name }} (Jessie container)"
  lineinfile:
    name: "/var/lib/lxc/{{ name }}/rootfs/etc/default/halt"
    line: "NETDOWN=no"
  when: lxc_network_type == "none" and release == "jessie"

- name: "Make the container {{ name }} poweroff on SIGPWR sent by lxc-stop (Jessie container)"
  file:
    src: /lib/systemd/system/poweroff.target
    dest: "/var/lib/lxc/{{ name }}/rootfs/etc/systemd/system/sigpwr.target"
    state: link
  when: release == 'jessie'

- name: "Configure the DNS resolvers in the container {{ name }}"
  copy:
    remote_src: yes
    src: /etc/resolv.conf
    dest: "/var/lib/lxc/{{ name }}/rootfs/etc/"

- name: "Add hostname in /etc/hosts for container {{ name }}"
  lineinfile:
    name: "/var/lib/lxc/{{ name }}/rootfs/etc/hosts"
    line: "127.0.0.1 {{ name }}"

- name: "Fix permission on /dev for container {{ name }}"
  lineinfile:
    name: "/var/lib/lxc/{{ name }}/rootfs/etc/rc.local"
    line: "chmod 755 /dev"
    insertbefore: "^exit 0$"
  when: release == 'jessie'

# For some reason import_role/include_role doesn't work here.
# Apparently ansible see some condition that end up being false.
# So we use import_tasks and a symlink.
- name: "Put /etc of container {{ name }} into git"
  import_tasks: repository.yml
  vars:
    repository_path: "/var/lib/lxc/{{ name }}/rootfs/etc"
    gitignore_items:
      - "aliases.db"
      - "*.swp"
      - "postfix/sa-blacklist.access"
      - "postfix/*.db"
      - "postfix/spamd.cidr"
      - "evobackup/.keep-*"
      - "letsencrypt/.certbot.lock"

- name: "Ensure that {{ name }} container is running"
  lxc_container:
    name: "{{ name }}"
    state: started