From 69bc93ff6ed27ce85d8d3040165eb47ceb69c2ba Mon Sep 17 00:00:00 2001
From: David Prevot <dprevot+git@evolix.fr>
Date: Fri, 24 Nov 2023 11:23:29 +0100
Subject: [PATCH] lxc: Init /etc git repository in lxc container
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Note: ugly loop, but “it works”…
---
 CHANGELOG.md                   |  1 +
 lxc/tasks/create-container.yml | 23 +++++++++++++++++++++--
 2 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a1e1db28..a7a96271 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -30,6 +30,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * proftpd: in SFTP vhost, enable SSH keys login, enable ed25549 host key for Debian >= 11
 * bind: Update role for Buster, Bullseye and Bookworm support
 * kvmstats: use .capacity instead of .physical for disk size
+* lxc: Init /etc git repository in lxc container
 
 ### Fixed
 
diff --git a/lxc/tasks/create-container.yml b/lxc/tasks/create-container.yml
index 4d3851b6..45f7270b 100644
--- a/lxc/tasks/create-container.yml
+++ b/lxc/tasks/create-container.yml
@@ -58,13 +58,13 @@
     name: "{{ name }}"
     state: started
 
-- name: "Ensure /etc/profile.d exists in container"
+- name: "Ensure /etc/profile.d exists in container {{ name }}"
   ansible.builtin.file:
     path: "/var/lib/lxc/{{ name }}/rootfs/etc/profile.d"
     mode: '0755'
     state: directory
 
-- name: "Copy host /etc/profile.d/evolinux into container"
+- name: "Copy host /etc/profile.d/evolinux into container {{ name }}"
   ansible.builtin.copy:
     src: "/etc/profile.d/evolinux.sh"
     remote_src: true
@@ -75,3 +75,22 @@
   community.general.lxc_container:
     name: "{{ name }}"
     container_command: "DEBIAN_FRONTEND=noninteractive apt-get purge -y openssh-server"
+
+- name: "Init /etc git repository in container {{ name }}"
+  ansible.builtin.include_role:
+    name: 'etc-git'
+    tasks_from: 'repository.yml'
+    apply:
+      vars:
+        gitignore_items:
+          - "aliases.db"
+          - "*.swp"
+          - "postfix/sa-blacklist.access"
+          - "postfix/*.db"
+          - "postfix/spamd.cidr"
+          - "evobackup/.keep-*"
+          - "letsencrypt/.certbot.lock"
+      become: yes
+  loop: ["/var/lib/lxc/{{ name }}/rootfs/etc/"]
+  loop_control:
+    loop_var: 'repository_path'