75 lines
2.3 KiB
YAML
75 lines
2.3 KiB
YAML
---
|
|
- name: "Check if container {{ name }} exists"
|
|
command: "lxc-ls {{ name }}"
|
|
changed_when: false
|
|
check_mode: no
|
|
register: container_exists
|
|
|
|
- name: "Create container {{ name }}"
|
|
lxc_container:
|
|
name: "{{ name }}"
|
|
container_log: true
|
|
template: debian
|
|
state: stopped
|
|
template_options: "--arch amd64 --release {{ release }}"
|
|
when: container_exists.stdout_lines | length == 0
|
|
|
|
- name: "Disable network configuration inside container {{ name }}"
|
|
replace:
|
|
name: "/var/lib/lxc/{{ name }}/rootfs/etc/default/networking"
|
|
regexp: "^#CONFIGURE_INTERFACES=yes"
|
|
replace: CONFIGURE_INTERFACES=no
|
|
when: lxc_network_type == "none"
|
|
|
|
- name: "Disable interface shut down on halt inside container {{ name }} (Jessie container)"
|
|
lineinfile:
|
|
name: "/var/lib/lxc/{{ name }}/rootfs/etc/default/halt"
|
|
line: "NETDOWN=no"
|
|
when: lxc_network_type == "none" and release == "jessie"
|
|
|
|
- name: "Make the container {{ name }} poweroff on SIGPWR sent by lxc-stop (Jessie container)"
|
|
file:
|
|
src: /lib/systemd/system/poweroff.target
|
|
dest: "/var/lib/lxc/{{ name }}/rootfs/etc/systemd/system/sigpwr.target"
|
|
state: link
|
|
when: release == 'jessie'
|
|
|
|
- name: "Configure the DNS resolvers in the container {{ name }}"
|
|
copy:
|
|
remote_src: yes
|
|
src: /etc/resolv.conf
|
|
dest: "/var/lib/lxc/{{ name }}/rootfs/etc/"
|
|
|
|
- name: "Add hostname in /etc/hosts for container {{ name }}"
|
|
lineinfile:
|
|
name: "/var/lib/lxc/{{ name }}/rootfs/etc/hosts"
|
|
line: "127.0.0.1 {{ name }}"
|
|
|
|
- name: "Fix permission on /dev for container {{ name }}"
|
|
lineinfile:
|
|
name: "/var/lib/lxc/{{ name }}/rootfs/etc/rc.local"
|
|
line: "chmod 755 /dev"
|
|
insertbefore: "^exit 0$"
|
|
when: release == 'jessie'
|
|
|
|
# For some reason import_role/include_role doesn't work here.
|
|
# Apparently ansible see some condition that end up being false.
|
|
# So we use import_tasks and a symlink.
|
|
- name: "Put /etc of container {{ name }} into git"
|
|
import_tasks: repository.yml
|
|
vars:
|
|
repository_path: "/var/lib/lxc/{{ name }}/rootfs/etc"
|
|
gitignore_items:
|
|
- "aliases.db"
|
|
- "*.swp"
|
|
- "postfix/sa-blacklist.access"
|
|
- "postfix/*.db"
|
|
- "postfix/spamd.cidr"
|
|
- "evobackup/.keep-*"
|
|
- "letsencrypt/.certbot.lock"
|
|
|
|
- name: "Ensure that {{ name }} container is running"
|
|
lxc_container:
|
|
name: "{{ name }}"
|
|
state: started
|