File _service:obs_scm:ansible-container.obscpio of Package ansible-container

Overview Repositories Revisions Requests Users Attributes Meta

File _service:obs_scm:ansible-container.obscpio of Package ansible-container (Revision d437426c3c1c12cc733a54e0b9ffea51)

Currently displaying revision d437426c3c1c12cc733a54e0b9ffea51 , Show latest

07070100000000000081A4000000000000000000000001641463C1000001AE000000000000000000000000000000000000001D00000000ansible-container/.gitignore# Prerequisites
*.d

# Object files
*.o
*.ko
*.obj
*.elf

# Linker output
*.ilk
*.map
*.exp

# Precompiled Headers
*.gch
*.pch

# Libraries
*.lib
*.a
*.la
*.lo

# Shared objects (inc. Windows DLLs)
*.dll
*.so
*.so.*
*.dylib

# Executables
*.exe
*.out
*.app
*.i*86
*.x86_64
*.hex

# Debug files
*.dSYM/
*.su
*.idb
*.pdb

# Kernel Module Compile Results
*.mod*
*.cmd
.tmp_versions/
modules.order
Module.symvers
Mkfile.old
dkms.conf
07070100000001000081A4000000000000000000000001641463C1000008F2000000000000000000000000000000000000001D00000000ansible-container/Dockerfile# SPDX-License-Identifier: MIT
# Define the tags for OBS and build script builds:
#!BuildTag: suse/alp/workloads/ansible:latest
#!BuildTag: suse/alp/workloads/ansible:%PKG_VERSION%.%TAG_OFFSET%
#!BuildTag: suse/alp/workloads/ansible:%PKG_VERSION%.%TAG_OFFSET%.%RELEASE%

FROM opensuse/tumbleweed:latest

# Mandatory labels for the build service:
#   https://en.opensuse.org/Building_derived_containers
# Define labels according to https://en.opensuse.org/Building_derived_containers
# labelprefix=com.suse.alp.workloads.ansible
LABEL org.opencontainers.image.title="Ansible base container"
LABEL org.opencontainers.image.description="Container for Ansible"
LABEL org.opencontainers.image.created="%BUILDTIME%"
LABEL org.opencontainers.image.version="0.1"
LABEL org.openbuildservice.disturl="%DISTURL%"
LABEL org.opensuse.reference="registry.opensuse.org/suse/alp/workloads/tumbleweed_containerfiles/suse/alp/workloads/ansible:%PKG_VERSION%-%RELEASE%"
LABEL com.suse.supportlevel="techpreview"
LABEL com.suse.eula="beta"
LABEL com.suse.image-type="application"
LABEL com.suse.release-stage="alpha"
# endlabelprefix

# openssh-clients : for ansble ssh

ENV LANG en_US.UTF-8
ENV LC_ALL en_US.UTF-8

RUN mkdir -p /container
COPY label-install \
     label-uninstall \
     ansible-wrapper.sh \
     hosts_alphost_group \
     /container
ADD examples/ /container/examples
RUN chmod +x /container/ansible-wrapper.sh

WORKDIR /work

LABEL INSTALL="/usr/bin/podman run --env IMAGE=IMAGE --rm --security-opt label=disable -v /:/host IMAGE /bin/bash /container/label-install"
LABEL UNINSTALL="/usr/bin/podman run --rm --security-opt label=disable -v /:/host IMAGE /bin/bash /container/label-uninstall"
LABEL USER-INSTALL="/usr/bin/podman run --env IMAGE=IMAGE --security-opt label=disable --rm -v \${PWD}/:/host IMAGE /bin/bash /container/label-install"
LABEL USER-UNINSTALL="/usr/bin/podman run --rm --security-opt label=disable -v \${PWD}/:/host IMAGE /bin/bash /container/label-uninstall"

RUN zypper -v -n in \
        ansible \
        ansible-lint \
        ansible-test \
        git-core \
        openssh-clients \
        python3-libvirt-python \
        python3-lxml \
        python3-netaddr \
    ; \
    zypper clean --all

RUN cat /container/hosts_alphost_group >> /etc/ansible/hosts

07070100000002000081A4000000000000000000000001641463C100000428000000000000000000000000000000000000001A00000000ansible-container/LICENSEMIT License

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
07070100000003000081A4000000000000000000000001641463C1000022F7000000000000000000000000000000000000001C00000000ansible-container/README.md# Containerized Ansible: What's inside #

This container provides the ansible toolstack inside a container.
* '''Dockerfile''' with the definition of the ansible container
  * based on OpenSUSE Tumbleweed
  * installs ansible and some additional tools
## System Setup ##
* Podman, python3-lxml and python3-rpm are needed on the container host. The run label commands are hard coded to use podman. Python3-lxml and python3-rpm  are required on the container host for ansible to interact with libvirt and gather package facts. Kernel-default-base does not contain the needed drivers for many Network Manager (nmcli) operations such as creating bonded interfaces and should be replaced with kernel-default.
  * sudo transactional-update pkg install python3-rpm python3-lxml kernel-default -kernel-default-base
  * system reboot is required after all transactional updates
    * sudo shutdown -r now

## Ansible commands
The ansible commands are provided as symlinks to ansible-wrapper.sh.
The commands will instantiate the container and execute the ansible
command.

## To install ansible commands ##

* as root:
  * for the root user the ansible commands are placed in /usr/local/bin
  * podman container runlabel install ansible
* as non-root
  * For non-root users 'podman container runlabel user-install ansible' will place the ansible commands in ${PWD}/bin. The following will install the ansible commands into the current user's bin area (~/bin).
  * (cd ~; podman container runlabel user-install ansible)

## Ansible Commands ##
* ansible
* ansible-community
* ansible-config
* ansible-connection
* ansible-console
* ansible-doc
* ansible-galaxy
* ansible-inventory
* ansible-lint
* ansible-playbook
* ansible-pull
* ansible-test
* ansible-vault

## Uninstall ansible commands  ##
* as root:
  * podman container runlabel uninstall ansible
* as non-root

* (cd ~; podman container runlabel user-uninstall ansible)

## Operation is through SSH back to container host or to other remote systems  ##
Since Ansible is running within a container, the default localhost environment
is the container itself and not the system hosting the container instance. As
such any changes made to the localhost environment are in fact being made to
the container and would be lost when the container exits.

Instead Ansible can be targetted at the host running the container, namely
host.containers.internal, via an SSH connection, using an Ansible inventory
similar to that found in `examples/ansible/inventory/inventory.yaml`, which
looks like:

```yaml
alhost_group:
  hosts:
    alphost:
      ansible_host: host.containers.internal
      ansible_python_interpreter: /usr/bin/python3
```

NOTE: An equivalent `alphost` default inventory item has also been added to
the container's `/etc/ansible/hosts` inventory, which can be leveraged by the
`ansible` command line tool.

For example to run the `setup` module to collect and show the system facts
from the `alphost` you could run a command like the following:

```shell
$ ansible alphost -m setup
alphost | SUCCESS => {
    "ansible_facts": {
...
    },
    "changed": false
}
```

The inventory record could also contain other hosts to be managed.

### SSH keys must be set up ###
The container must be able to SSH to the system being managed. So, the system must support SSH access and
the SSH keys must have been created (using `ssh-keygen`) and the public key must be in the `.ssh/authorized_keys` file for the
target user. While the root user can be used so long as the system allows SSH'ing to the root account,
the preferred method to to use an non-root account that has passwordless sudo rights. Any operations in ansible
play books that require system privilege would then need to use "become: true"

SSH access can be validated with `ssh localhost`.

# Examples

See the `examples/ansible` for example Ansible playbooks.

On an ALP system where the Ansible workload container has been installed,
using the `install` runlabel, the examples will be available under the
`/usr/local/share/ansible-container/examples/ansible` directory.

There are three playbooks currently under /usr/local/share/ansible-container/examples/ansible
* playbook.yml
* network.yml
* setup_libvirt_host.yml

## Simple Ansible test (playbook.yml)
The 'playbook.yml' tests several common ansible operations, such as gathering facts and testing for installed packages.
The play is invoked changing to directory `/usr/local/share/ansible-container/examples/ansible` and entering:
```shell
$ ansible-playbook playbook.yml
...
PLAY RECAP ***************************************************************************************************************
alphost                    : ok=8    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
```

## Ansible driving nmcli to change system networking (network.yml)
The 'network.yml' uses the 'community.general.nmcli' plugin to test common network operations such as assigning static IP addresses to NICs and creating bonded interfaces.

The NICs, IP addresses, bond names, bonded NICs are defined in the 'vars" section of network.yml and should be updated to reflect the current user environment. The 'network.yml' play is run by changing to directory `/usr/local/share/ansible-container/examples/ansible` and entering:
```shell
$ ansible-playbook network.yml 
...
ASK [Ping test Bond IPs] ************************************************************************************************
ok: [alphost] => (item={'name': 'bondcon0', 'ifname': 'bond0', 'ip4': '192.168.181.10/24', 'gw4': '192.168.181.2', 'mode': 'active-backup'})
ok: [alphost] => (item={'name': 'bondcon1', 'ifname': 'bond1', 'ip4': '192.168.181.11/24', 'gw4': '192.168.181.2', 'mode': 'balance-alb'})

TASK [Ping test static nics IPs] *****************************************************************************************
ok: [alphost] => (item={'name': 'enp2s0', 'ifname': 'enp2s0', 'ip4': '192.168.181.3/24', 'gw4': '192.168.181.2', 'dns4': ['8.8.8.8']})
ok: [alphost] => (item={'name': 'enp3s0', 'ifname': 'enp3s0', 'ip4': '192.168.181.4/24', 'gw4': '192.168.181.2', 'dns4': ['8.8.8.8']})

PLAY RECAP ***************************************************************************************************************
alphost                    : ok=9    changed=3    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
```

## Setup ALP as a Libvirt host

The `setup_libvirt_host.yml` playbook can be used to install the ALP
`kvm-container` workload and enable `libvirtd` as a systemd service.

To try out this example playbook, you can change directory to the
`/usr/local/share/ansible-container/examples/ansible` directory and
run the following command:

```shell
$ cd /usr/local/share/ansible-container/examples/ansible
$ ansible-playbook setup_libvirt_host.yml
...
PLAY RECAP *****************************************************************************************************************************
alphost                    : ok=9    changed=2    unreachable=0    failed=0    skipped=4    rescued=0    ignored=0

$ sudo /usr/local/bin/virsh list --all
using /etc/kvm-container.conf as configuration file
+ podman exec -ti libvirtd virsh list --all
Authorization not available. Check if polkit service is running or see debug message for more information.
 Id   Name   State
--------------------
```

NOTE: If the required kernel and supporting packages are not already
installed a reboot will be required to complete the install of those
packages; please follow the directions generated by the playbook, and
re-run the playbook after the reboot has completed successfully to
finish the setup of the `libvirtd` service.

## Create an openSUSE Tumbleweed appliance VM

The `create_tumbleweed_vm.yml` example playbook can be used to create
and start a Libvirt managed VM, called `tumbleweed`, based upon the
latest available Tumbleweed appliance VM image.

It leverages the `setup_libvirt_host.yml` example playbook, as outlined
previously, to ensure that the ALP host is ready to manage VMs before
creating the new VM, and may fail prompting you to reboot before running
the playbook again to finish setting up Libvirt and creating the VM.

```shell
$ cd /usr/local/share/ansible-container/examples/ansible
$ ansible-playbook create_tumbleweed_vm.yml
...
TASK [Query list of libvirt VMs] *******************************************************************************************************
ok: [alphost]

TASK [Show that Tumbleweed appliance has been created] *********************************************************************************
ok: [alphost] => {
    "msg": "Running VMs: tumbleweed"
}

PLAY RECAP *****************************************************************************************************************************
alphost                    : ok=15   changed=4    unreachable=0    failed=0    skipped=6    rescued=0    ignored=0

```
07070100000004000081ED000000000000000000000001641463C10000032E000000000000000000000000000000000000002500000000ansible-container/ansible-wrapper.sh#! /bin/sh
PATH=/sbin:/usr/sbin:/usr/local/sbin:/usr/local/bin:/usr/bin:/bin

IMAGE=registry.opensuse.org/suse/alp/workloads/tumbleweed_containerfiles/suse/alp/workloads/ansible:latest
for cnf in /etc/default/ansible-container ~/.config/ansible-container/image
do
    if [ -r ${cnf} ]; then
        . ${cnf}
    fi
done

KEED_USERID=""
if [[ $(id -ru) != "0" ]]; then
    KEED_USERID="--userns=keep-id"
fi

# make symlinks for mount points
# this needed to hand colons in file path names
LINK_DIR=`mktemp -d -p /tmp`
ln -s $(pwd)  ${LINK_DIR}/work
ln -s ${HOME} ${LINK_DIR}/home

podman run  --security-opt label=disable -it -v ${LINK_DIR}/work:/work -v ${LINK_DIR}/home:${HOME} ${KEED_USERID} --rm ${IMAGE} "$(basename "${0}")" "$@"

# clean up symlink area
rm ${LINK_DIR}/work ${LINK_DIR}/home
rmdir ${LINK_DIR}
07070100000005000041ED000000000000000000000003641463C100000000000000000000000000000000000000000000001B00000000ansible-container/examples07070100000006000041ED000000000000000000000004641463C100000000000000000000000000000000000000000000002300000000ansible-container/examples/ansible07070100000007000081A4000000000000000000000001641463C100000ED5000000000000000000000000000000000000003500000000ansible-container/examples/ansible/create_alp_vm.yml---

#
# A example playbook showing how the create a ALP VM.
#

# Ensure the system is ready to act as a libvirt host.
# NOTE: A reboot may be required if packages need to be installed.
- name: Setup ALP system as a libvirt host
  import_playbook: setup_libvirt_host.yml
  tags: libvirt

- name: Create an ALP VM
  hosts: alphost
  vars:
    appliance:
      name: alptest
      mirror: https://download.opensuse.org/repositories/SUSE:/ALP/images/
      image: ALP-VM.x86_64-0.0.1-kvm-Build24.3
      format: qcow2
      checksum: sha256
      vcpus: 2
      memory_mb: 1536
      disk_size_gb: 30
    libvirt:
      images: /var/lib/libvirt/images
      network: sle_network

tasks:

- name: Check if we already have the ALP VM image
      ansible.builtin.stat:
        path: "{{ libvirt.images }}/{{ appliance.image }}.{{ appliance.format }}"
      register: stat_vm_image

- name: Download ALP VM image
      become: true
      ansible.builtin.get_url:
        dest: "{{ libvirt.images }}"
        url: "{{ item.url }}"
        checksum: "{{ appliance.checksum }}:{{ item.url }}.{{ appliance.checksum }}"
        mode: 0644
      loop:
        - name: "{{ appliance.image }}"
          url: "{{ appliance.mirror }}/{{ appliance.image }}.{{ appliance.format }}"
      loop_control:
        label: "{{ item.name }}"
      when:
        - not stat_vm_image.stat.exists

- name: Query list of configured libvirt networks
      become: true
      community.libvirt.virt_net:
        command: list_nets
      register: virt_net_list_nets

- name: Fail if required network is not available
      fail:
        msg: "ERROR: required '{{ libvirt.network }}' missing!"
      when:
        - libvirt.network not in virt_net_list_nets.list_nets

- name: Determine list of SSH public keys
      ansible.builtin.set_fact:
        ssh_pub_keys: "{{ lookup('ansible.builtin.fileglob', '~/.ssh/*.pub').split(',') }}"

- name: Generate ignition config file
      become: true
      ansible.builtin.template:
        src: "config.ign.j2"
        dest: "{{ libvirt.images }}/{{ appliance.name }}.ign"
        mode: 0644

- name: Query list of libvirt VMs
      become: true
      community.libvirt.virt:
        command: list_vms
      register: virt_list_vms

- name: Create the ALP VM if not running
      become: true
      ansible.builtin.command: >-
        /usr/local/bin/virt-install
          --connect qemu:///system
          --import
          --name {{ appliance.name }}
          --osinfo opensusetumbleweed
          --virt-type kvm
          --hvm
          --machine q35
          --boot hd
          --cpu host-passthrough
          --video vga
          --console pty,target_type=virtio
          --noautoconsole
          --network network={{ libvirt.network }}
          --rng /dev/urandom
          --vcpu {{ appliance.vcpus }}
          --memory {{ appliance.memory_mb }}
          --disk size={{ appliance.disk_size_gb }},backing_store={{ libvirt.images }}/{{ appliance.image }}.{{ appliance.format }},backing_format={{ appliance.format }},bus=virtio,cache=none
          --graphics vnc,listen=0.0.0.0
          --sysinfo type=fwcfg,entry0.name="opt/com.coreos/config",entry0.file="{{ libvirt.images }}/{{ appliance.name }}.ign"
          --tpm backend.type=emulator,backend.version=2.0,model=tpm-tis
      register: virt_install_vm
      when:
        - appliance.name not in virt_list_vms.list_vms

- name: Query list of libvirt VMs
      become: true
      community.libvirt.virt:
        command: list_vms
      register: virt_list_vms

- name: Show that the ALP VM has been created
      ansible.builtin.debug:
        msg: "Running VMs: {{ virt_list_vms.list_vms | join(', ') }}"
      when:
        - appliance.name in virt_list_vms.list_vms
07070100000008000081A4000000000000000000000001641463C100000D24000000000000000000000000000000000000003C00000000ansible-container/examples/ansible/create_tumbleweed_vm.yml---

#
# A example playbook showing how the create a openSUSE Tumbleweed VM.
#

- name: Create an openSUSE Tumbleweed appliance
  hosts: alphost
  vars:
    appliance:
      name: tumbleweed
      mirror: https://download.opensuse.org/tumbleweed/appliances
      image: openSUSE-Tumbleweed-Minimal-VM.x86_64-kvm-and-xen
      format: qcow2
      checksum: sha256
      vcpus: 2
      memory_mb: 2048
      disk_size_gb: 30
    libvirt:
      images: /var/lib/libvirt/images
      network: sle_network

tasks:

- name: Check if we already have the openSUSE Tumbleweed image
      ansible.builtin.stat:
        path: "{{ libvirt.images }}/{{ appliance.image }}.{{ appliance.format }}"
      register: stat_vm_image

- name: Download openSUSE Tumbleweed appliance image
      become: true
      ansible.builtin.get_url:
        dest: "{{ libvirt.images }}"
        url: "{{ item.url }}"
        checksum: "{{ appliance.checksum }}:{{ item.url }}.{{ appliance.checksum }}"
        mode: 0644
      loop:
        - name: "{{ appliance.image }}"
          url: "{{ appliance.mirror }}/{{ appliance.image }}.{{ appliance.format }}"
      loop_control:
        label: "{{ item.name }}"
      when:
        - not stat_vm_image.stat.exists

- name: Query list of configured libvirt networks
      become: true
      community.libvirt.virt_net:
        command: list_nets
      register: virt_net_list_nets

- name: Fail if required network is not available
      fail:
        msg: "ERROR: required '{{ libvirt.network }}' missing!"
      when:
        - libvirt.network not in virt_net_list_nets.list_nets

- name: Query list of libvirt VMs
      become: true
      community.libvirt.virt:
        command: list_vms
      register: virt_list_vms

- name: Create the openSUSE Tumbleweed appliance if not running
      become: true
      ansible.builtin.command: >-
        /usr/local/bin/virt-install
          --connect qemu:///system
          --import
          --name {{ appliance.name }}
          --osinfo opensusetumbleweed
          --virt-type kvm
          --hvm
          --machine q35
          --boot hd
          --cpu host-passthrough
          --video vga
          --console pty,target_type=virtio
          --noautoconsole
          --network network={{ libvirt.network }}
          --rng /dev/urandom
          --vcpu {{ appliance.vcpus }}
          --memory {{ appliance.memory_mb }}
          --cloud-init
          --disk size={{ appliance.disk_size_gb }},backing_store={{ libvirt.images }}/{{ appliance.image }}.{{ appliance.format }},backing_format={{ appliance.format }},bus=virtio,cache=none
          --graphics vnc,listen=0.0.0.0
      register: virt_install_vm
      when:
        - ('tumbleweed' not in virt_list_vms.list_vms)

- name: Query list of libvirt VMs
      become: true
      community.libvirt.virt:
        command: list_vms
      register: virt_list_vms

- name: Show that Tumbleweed appliance has been created
      ansible.builtin.debug:
        msg: "Running VMs: {{ virt_list_vms.list_vms | join(', ') }}"
      when:
        - ('tumbleweed' in virt_list_vms.list_vms)
07070100000009000041ED000000000000000000000003641463C100000000000000000000000000000000000000000000002D00000000ansible-container/examples/ansible/inventory0707010000000A000041ED000000000000000000000003641463C100000000000000000000000000000000000000000000003800000000ansible-container/examples/ansible/inventory/group_vars0707010000000B000041ED000000000000000000000002641463C100000000000000000000000000000000000000000000003C00000000ansible-container/examples/ansible/inventory/group_vars/all0707010000000C000081A4000000000000000000000001641463C100000032000000000000000000000000000000000000005400000000ansible-container/examples/ansible/inventory/group_vars/all/python_interpreter.yaml---

ansible_python_interpreter: /usr/bin/python3
0707010000000D000081A4000000000000000000000001641463C100000086000000000000000000000000000000000000003C00000000ansible-container/examples/ansible/inventory/inventory.yamlalphost_group:
  hosts:
    alphost:
      ansible_host: host.containers.internal
      ansible_python_interpreter: /usr/bin/python3

0707010000000E000081A4000000000000000000000001641463C1000009C5000000000000000000000000000000000000002F00000000ansible-container/examples/ansible/network.yml---
- hosts: alphost
  vars:
    static_nics:
      - name: enp2s0
        ifname: enp2s0
        ip4: 192.168.181.3/24
        gw4: 192.168.181.2
        dns4:
          - 8.8.8.8

- name: enp3s0
        ifname: enp3s0
        ip4: 192.168.181.4/24
        gw4: 192.168.181.2
        dns4:
          - 8.8.8.8

bonds:
      - name: bondcon0
        ifname: bond0
        ip4: 192.168.181.10/24
        gw4: 192.168.181.2
        mode: active-backup

- name: bondcon1
        ifname: bond1
        ip4: 192.168.181.11/24
        gw4: 192.168.181.2
        mode: balance-alb

bonded_nics:
      - name: bond0-if1
        ifname: enp4s0
        master: bond0

- name: bond0-if2
        ifname: enp5s0
        master: bond0

- name: bond1-if1
        ifname: enp6s0
        master: bond1

- name: bond1-if2
        ifname: enp7s0
        master: bond1

tasks:
    - name: Gather the package facts
      ansible.builtin.package_facts:
        manager: auto

- name: Ensure NetworkManager is installed
      ansible.builtin.package:
        name: "{{ item }}"
        state: present
      become: true
      loop:
        - NetworkManager

- name: configure NIC
      community.general.nmcli:
        conn_name: '{{ item.name }}'
        ifname: '{{ item.ifname }}'
        ip4: '{{ item.ip4 }}'
        gw4: '{{ item.gw4 }}'
        dns4: '{{ item.dns4 }}'
        state: present
        autoconnect: true
        type: ethernet
      become: true
      loop: '{{ static_nics }}'

- name: Create bonds
      community.general.nmcli:
        type: bond
        conn_name: '{{ item.name }}'
        ifname: '{{ item.ifname }}'
        ip4: '{{ item.ip4 }}'
        gw4: '{{ item.gw4 }}'
        mode: '{{ item.mode }}'
        state: present
      become: true
      loop: "{{ bonds }}"

- name: add NICs to bonds
      community.general.nmcli:
        type: bond-slave
        conn_name: '{{ item.name }}'
        ifname: '{{ item.ifname }}'
        state: present
        master: '{{ item.master }}'
      become: true
      loop: "{{ bonded_nics }}"

- name: Ping test Bond IPs
      ansible.builtin.command: >-
        ping -c 1 -W 0.1 {{ item.ip4 | ansible.utils.ipaddr('address') }}
      loop: "{{ bonds }}"
      changed_when: false

- name: Ping test static nics IPs
      ansible.builtin.command: >-
        ping -c 1 -W 0.1 {{ item.ip4 | ansible.utils.ipaddr('address') }}
      loop: "{{ static_nics }}"
      changed_when: false
0707010000000F000081A4000000000000000000000001641463C1000003EB000000000000000000000000000000000000003000000000ansible-container/examples/ansible/playbook.yml---
- hosts: alphost
  tasks:
    - name: site | hello world
      ansible.builtin.command: echo "Hi! Ansible is working"
      changed_when: false

- name: Gather the package facts
      ansible.builtin.package_facts:
        manager: auto

- name: Print the package facts
      ansible.builtin.debug:
        var: ansible_facts.packages

- name: Ensure NetworkManager is installed
      ansible.builtin.package:
        name: "{{ item }}"
        state: present
      become: true
      with_items:
        - NetworkManager

- name: Deactivate Wireless Network Interfaces
      ansible.builtin.command: nmcli radio wifi off
      become: true
      when: "'NetworkManager' in ansible_facts.packages"

- name: test ssh
      ansible.builtin.wait_for:
        host: "{{ ansible_host }}"
        port: 22
      delegate_to: localhost

- name: test webpage access
      ansible.builtin.uri:
        url: https://www.example.com
        return_content: true
      register: webpage
07070100000010000081A4000000000000000000000001641463C100000FBA000000000000000000000000000000000000003A00000000ansible-container/examples/ansible/setup_libvirt_host.yml---

#
# A example playbook showing how the setup an ALP system as a libvirt host.
#

- name: Setup ALP system as a libvirt host
  hosts: alphost
  vars:
    workload:
      name: libvirtd
      image: registry.opensuse.org/suse/alp/workloads/tumbleweed_containerfiles/suse/alp/workloads/kvm:latest
      labels:
        install: install
        uninstall: uninstall
      required_pkgs:
        - kernel-default
        - "-kernel-default-base"
        - netcat-openbsd
        - python3-libvirt-python
        - python3-lxml
        - swtpm
      service:
        name: libvirtd
        wait_for:
          path: /var/run/libvirt/libvirt-sock

tasks:

- name: Retrieve image for workload {{ workload.name }}
      become: true
      containers.podman.podman_image:
        name: "{{ workload.image }}"
        state: present
      register: retrieve_workload_image

- name: Install tools for workload {{ workload.name }}
      become: true
      ansible.builtin.command: >-
        podman container runlabel {{ workload.labels.install }} {{ workload.image }}
      register: workload_runlabel_install
      changed_when:
        - ('already exist' not in workload_runlabel_install.stdout)

- name: Install required packages, if any, for workload {{ workload.name }}
      become: true
      ansible.builtin.package:
        name: "{{ workload.required_pkgs }}"
        state: present
      register: required_pkgs_install
      when:
        - ((workload.required_pkgs | default([])) | length) > 0

- name: Handle reboot, if needed
      when:
        - required_pkgs_install is changed
      block:

- name: Print message requesting immediate reboot
          ansible.builtin.debug:
            msg: >-
              Required system packages have been installed via
              transactional-update to support workload
              {{ workload.name }}.
              An immediate reboot is required to activate these
              packages before proceding. Once reboot has completed
              please re-run this playbook.

- name: Request immediate reboot  # noqa no-handler
          ansible.builtin.fail:
            msg: "Reboot required"

- name: Setup service for workload {{ workload.name }}
      when:
        - workload.service is defined
      block:

- name: Ensure service can be started for workload {{ workload.name }}
          become: true
          ansible.builtin.systemd_service:
            name: "{{ workload.service.name }}"
            state: "started"
          register: workload_service_start

- name: Enable service to start on reboot for workload {{ workload.name }}
          become: true
          ansible.builtin.systemd_service:
            name: "{{ workload.service.name }}"
            enabled: true
          when:
            - workload_service_start is success

- name: Wait for service to be ready for workload {{ workload.name }}
          when:
            - workload.service.wait_for is defined
          block:

- name: Check service path for workload {{ workload.name }}
              ansible.builtin.wait_for:
                path: "{{ workload.service.wait_for.path }}"
              when:
                - workload.service.wait_for.path is defined

- name: Check service port for workload {{ workload.name }}
              ansible.builtin.wait_for:
                port: "{{ workload.service.wait_for.port }}"
              when:
                - workload.service.wait_for.port is defined

#
# Verify basic operation of the Libvirt service
#

- name: Verify that Libvirt is operational
  hosts: alphost
  tasks:

- name: Query running Libvirt VMs
      become: true
      community.libvirt.virt:
        command: list_vms
      register: virt_list_vms

- name: Report running Libvirt VMs, if any
      ansible.builtin.debug:
        msg: "Running VMs: {{ virt_list_vms.list_vms | join(', ') }}"
      when:
        - ((virt_list_vms.list_vms | default([])) | length) > 0
07070100000011000041ED000000000000000000000002641463C100000000000000000000000000000000000000000000002D00000000ansible-container/examples/ansible/templates07070100000012000081A4000000000000000000000001641463C100000680000000000000000000000000000000000000003B00000000ansible-container/examples/ansible/templates/config.ign.j2{#- Based upon ignition config generated by https://opensuse.github.io/fuel-ignition/edit -#}
{%- set _keys = [] -%}
{%- for _kf in ssh_pub_keys | default([]) -%}
{%-   set _ = _keys.append(lookup('ansible.builtin.file', _kf)) -%}
{%- endfor -%}
{%- set unique_keys = _keys | sort | unique -%}
{
  "ignition": {
    "version": "3.2.0"
  },
  "passwd": {
    "users": [
      {
        "name": "root",
{% if (unique_keys | length) > 0 %}
        "sshAuthorizedKeys": {{ unique_keys | to_json }},
{% endif %}
	{# Password is the user's name #}
        "passwordHash": "$2a$10$FbGb5ARQnuaHiskxcYIOgO9PADKyymvmioHMCoHdfO.eyYePLqBZ2"
      },
      {
        "name": "test",
{% if (unique_keys | length) > 0 %}
        "sshAuthorizedKeys": {{ unique_keys | to_json }},
{% endif %}
	{# Password is the user's name #}
        "passwordHash": "$2a$10$WK21CVEDrqW4QB5FmmeCjuvFlJl7NMCYGRqBCg/WR1932ua8igzIa"
      }
    ]
  },
  "storage": {
    "filesystems": [
      {
        "device": "/dev/disk/by-label/ROOT",
        "format": "btrfs",
        "mountOptions": [
          "subvol=/@/home"
        ],
        "path": "/home",
        "wipeFilesystem": false
      }
    ],
    "files": [
      {
        "path": "/etc/hostname",
        "mode": 420,
        "overwrite": true,
        "contents": {
          "source": "data:text/plain;charset=utf-8;base64,{{ appliance.name | b64encode }}"
        }
      },
      {
        "path": "/etc/sudoers.d/test",
        "mode": 420,
        "overwrite": true,
        "contents": {
          "source": "data:text/plain;charset=utf-8;base64,{{ 'test ALL=(ALL:ALL) NOPASSWD:ALL' | b64encode }}"
        }
      }
    ]
  }
}
07070100000013000081A4000000000000000000000001641463C1000000A0000000000000000000000000000000000000002600000000ansible-container/hosts_alphost_group# Define an inventory group for the ALP (podman) host
[alphost_group]
alphost ansible_host=host.containers.internal ansible_python_interpreter=/usr/bin/python3
07070100000014000081A4000000000000000000000001641463C1000006FA000000000000000000000000000000000000002000000000ansible-container/label-install#!/bin/bash
create_command_bin() {
SCRIPT=$1
if [ ! -e ${TARGET_BIN}/${SCRIPT} ]; then
        cd ${TARGET_BIN}; ln -s ansible-wrapper.sh ${SCRIPT}
else
        echo "${TARGET_BIN}/${SCRIPT} already exist, will not update it"
fi
}

if [ ! -e ${TARGET_BIN}/${SCRIPT} ]; then
        echo "Failed to create ${TARGET_BIN}/${SCRIPT}"
        exit 1
fi

# Commands to create
COMMANDS="ansible \
ansible-config \
ansible-console \
ansible-galaxy \
ansible-playbook \
ansible-vault \
ansible-community \
ansible-connection \
ansible-doc \
ansible-inventory \
ansible-test \
ansible-lint \
ansible-pull"

# determime target root directory
# either /usr/local/bin or current user ~/bin
if [ -d /host/usr/local/bin ]; then
        TARGET_ROOT=/host/usr/local
        IMAGE_CONF_DIR=etc/default
        IMAGE_CONF_FILE=ansible-container
elif [ -d /host/bin ] ; then
        TARGET_ROOT=/host
        IMAGE_CONF_DIR=.config/ansible-container
        IMAGE_CONF_FILE=image
else
        echo "could not determine copy target"
        exit 1
fi

TARGET_BIN=${TARGET_ROOT}/bin
TARGET_SHARE=${TARGET_ROOT}/share/ansible-container
TARGET_CONF_DIR=${TARGET_ROOT}/${IMAGE_CONF_DIR}

cp -v /container/ansible-wrapper.sh ${TARGET_BIN}/ansible-wrapper.sh

for COMMAND in ${COMMANDS}; do
    create_command_bin ${COMMAND}
done

# Create container share area under /usr/local/share if it doesn't exist
if [ ! -d ${TARGET_SHARE} ]; then
        mkdir -p ${TARGET_SHARE}
fi

# Copy examples to container share area, overwriting any previous content.
cp -av /container/examples ${TARGET_SHARE}/

# Save container image used to install the container to appropriate conf
# file
if [ ! -d ${TARGET_CONF_DIR} ]; then
        mkdir -p ${TARGET_CONF_DIR}
fi
echo "IMAGE=${IMAGE}" > ${TARGET_CONF_DIR}/${IMAGE_CONF_FILE}
07070100000015000081A4000000000000000000000001641463C1000002FB000000000000000000000000000000000000002200000000ansible-container/label-uninstall#!/bin/bash
delete_file() {
FILE=$1
if [[ -e "/host/bin/${FILE}" || -L "/host/bin/${FILE}" ]]; then
    /usr/bin/rm -vf /host/bin/${FILE}
elif [[ -e "/host/usr/local/bin/${FILE}" || -L "/host/usr/local/bin/${FILE}" ]]; then
    /usr/bin/rm -vf /host/usr/local/bin/${FILE}
else
    echo "${FILE} not present, nothing to remove"
fi
}

COMMANDS="ansible-wrapper.sh \
ansible \
ansible-config \
ansible-console \
ansible-galaxy \
ansible-playbook \
ansible-vault \
ansible-community \
ansible-connection \
ansible-doc \
ansible-inventory \
ansible-test \
ansible-lint \
ansible-pull"

for COMMAND in ${COMMANDS}; do
    delete_file ${COMMAND}
done

if [ -d /host/usr/local/share/ansible-container ]; then
    rm -rf /host/usr/local/share/ansible-container
fi

exit 0
07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000B00000000TRAILER!!!72 blocks

Places

File _service:obs_scm:ansible-container.obscpio of Package ansible-container (Revision d437426c3c1c12cc733a54e0b9ffea51)

Places