From 2101dc40d16857d6792cdb007b3f3500ed224ee1 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Sun, 29 Sep 2019 15:57:03 +0200
Subject: added vmhost network

---
 roles/vm/host/tasks/main.yml    |  5 +++++
 roles/vm/host/tasks/network.yml | 31 +++++++++++++++++++++++++++++++
 2 files changed, 36 insertions(+)
 create mode 100644 roles/vm/host/tasks/network.yml

(limited to 'roles/vm/host/tasks')

diff --git a/roles/vm/host/tasks/main.yml b/roles/vm/host/tasks/main.yml
index f83b7d0b..83b5fca1 100644
--- a/roles/vm/host/tasks/main.yml
+++ b/roles/vm/host/tasks/main.yml
@@ -25,3 +25,8 @@
   file:
     name: "{{ item }}"
     state: directory
+
+- name: install vm-host network
+  when: vm_host.network is defined
+  include_tasks: network.yml
+
diff --git a/roles/vm/host/tasks/network.yml b/roles/vm/host/tasks/network.yml
new file mode 100644
index 00000000..d3d2edf2
--- /dev/null
+++ b/roles/vm/host/tasks/network.yml
@@ -0,0 +1,31 @@
+---
+## TODO: add support for ubuntu netplan
+- name: create interface config
+  copy:
+    dest: "/etc/network/interfaces.d/{{ vm_host.network.interface }}"
+    content: |
+      auto {{ vm_host.network.interface }}
+      iface {{ vm_host.network.interface }} inet static
+        address {{ vm_host.network.ip }}
+        netmask {{ vm_host.network.mask }}
+        bridge_ports none
+        bridge_stp off
+        bridge_waitport 0
+        bridge_fd 0
+        up echo 0 > /proc/sys/net/ipv6/conf/$IFACE/accept_ra
+        up echo 0 > /proc/sys/net/ipv6/conf/$IFACE/autoconf
+        up modprobe br_netfilter
+        up /sbin/sysctl net.bridge.bridge-nf-call-iptables=0
+        up /sbin/sysctl net.bridge.bridge-nf-call-ip6tables=0
+        up /sbin/sysctl net.bridge.bridge-nf-call-arptables=0
+      {% if 'nat' in vm_host.network and vm_host.network.nat %}
+        up /usr/sbin/iptables -t nat -A POSTROUTING -o {{ ansible_default_ipv4.interface }} -s {{ (vm_host.network.ip + '/' + vm_host.network.mask) | ipaddr('network/prefix') }} -j SNAT --to {{ ansible_default_ipv4.address }}
+        down /usr/sbin/iptables -t nat -D POSTROUTING -o {{ ansible_default_ipv4.interface }} -s {{ (vm_host.network.ip + '/' + vm_host.network.mask) | ipaddr('network/prefix') }} -j SNAT --to {{ ansible_default_ipv4.address }}
+      {% endif %}
+  register: vmhost_interface_config
+
+## We don't try to be to clever here: aka don't call ifdown before ifup because
+## if there are VMs running they would end up with a broken network
+- name: bring vm-host interface up
+  when: vmhost_interface_config is changed
+  command: "/usr/sbin/ifup {{ vm_host.network.interface }}"
-- 
cgit v1.2.3