The ansible-create-proxmox-centos7-ipa from alexpdp7

ansible-create-proxmox-centos7-ipa's Introduction

Deprecated by https://github.com/alexpdp7/alexpdp7/tree/master/personal_infra/playbooks/roles/proxmox_create_lxc , https://github.com/alexpdp7/alexpdp7/tree/master/personal_infra/playbooks/roles/join_ipa

Just a small task to provision a Proxmox LXC container joined to FreeIPA.

Typical Playbook usage:

---
- hosts: <promox host>
  tasks:
    - include_role:
        name: create-proxmox-centos7-ipa
      vars:
        hostname: <hostname>
        vmid: "{{ hostvars['<hostname>']['proxmox_vmid'] }}"
        root_password: "{{ hostvars['<hostname>']['root_password'] }}"
        ipa_domain: "{{ ipa_domain_name }}"
        ipa_username: admin
        ipa_password: "{{ ipa_admin_password }}"
        centos_version: 8  # 7 is the default

I keep IPA data on group_vars/all/(vars|vault) and proxmox_vmid/root_password on
host_vars/<host>/(vars|vault).

I only need a single line in the inventory for each host's hostname, and I put:

ansible_become: True
ansible_user: <my ipa username>

in the host's variables to connect.

I use DHCP/DNS so IP configuration is automatic and I can access the containers
using their hostname.

You can use extra vars such as memory/swap to set up memory and swap allocation
and extra_opts for extra options for pct_create.

You can use an "unprivileged" boolean parameter to create an unprivileged container
(with some Docker support), but at the moment this is not recommended due to:

https://bugzilla.proxmox.com/show_bug.cgi?id=2036
https://bugzilla.redhat.com/show_bug.cgi?id=1589968
https://bugs.centos.org/view.php?id=14897

Also, you cannot use ZFS mountpoints inside unprivileged containers, at least in EL8.

Recommend Projects