Devan Carpenter
c705916520
VMs: remove teythoon-toy
...
no longer needed
2 years ago
Devan Carpenter
e653c47242
VMs: replace old ansible-pull URL
...
Leftover ansible-pull url for cloud-init was wrong.
2 years ago
Devan Carpenter
71c0a1c1b0
kvm: fix obscure syntax error
...
Ansible (or yaml?) does not like hyphens...
2 years ago
Devan Carpenter
fec4008d0e
kvm: adhere to Debian's grub layout
...
This adopts our anti-CPU-mitigation configuration to use Debian's
expected grub paths and programs.
2 years ago
Devan Carpenter
627f79ff8d
kvm: regenerate GRUB config after modification
...
When we add the config removing the CPU mitigations then we want to
regenerate our GRUB config
2 years ago
Devan Carpenter
be374bb0ae
kvm: create sysconfig dir for grub
...
Adding the grub config for CPU mitigations requires the "/etc/sysconfig"
dir to exist.
2 years ago
Devan Carpenter
f71559f3c6
kvm: s/AMD/Intel/g
...
hmm, funny mistake is now corrected. We are checking for "Intel" not
"AMD".
2 years ago
Devan Carpenter
85f834f297
kvm: correct syntax for task
...
Ansible doesn't want another task list here, so we just put the CPU
mitigation steps as their own individual tasks.
2 years ago
Devan Carpenter
4563441c63
kvm: disable kernel mitigations on Intel
...
Based on instructions in:
https://linuxreviews.org/HOWTO_make_Linux_run_blazing_fast_(again)_on_Intel_CPUs
We are prioritizing performance over these CPU flaw mitigations.
2 years ago
Devan Carpenter
fd85a9445a
VMs: add instance for teythoon
...
This VM was requested by teythoon for running builds, testing,
experimentation, etc.
2 years ago
Devan Carpenter
ebc712dca9
VMs: add virtio video device to vm-template
...
Debian VMs are not booting without a video device. This is a bug with
our configuration, which we should fix. For now, we are working around
by adding a virtio video interface.
2 years ago
Devan Carpenter
e7253de417
VMs: create instance for Gitlab Runner
...
Create a new VM based off of Debian 10 to be a Gitlab Runner.
2 years ago
Devan Carpenter
b8c06f1fe1
kvm: configure NATed networking & nested virt
...
This enables the "default" libvirt networking which creates a virtual
network for "guests" (VMs) which is behind NAT to the hypervisor.
Additionally nested virt is now enabled in the kernel if this playbook
is run on a non-virtualized host.
This also sets some necessary apparmour policies to allow the
libvirt-qemu group to interact with libvirt.
2 years ago
Devan Carpenter
8ea14442b6
kvm: download and store Debian Testing image
...
This adds Debian Testing (bullseye) to the "installmedia" store, making
it available as a base image to create new VMs.
2 years ago
Devan Carpenter
eb856be7da
remove superfluous VM template
...
this VM template was copied over from another setup, and is not needed
at this time.
2 years ago
Devan Carpenter
1b402b2072
initialize: add basic roles to get started
...
This playbook is intended to be used with "ansible-pull".
This initial commit creates roles which will setup libvirt and kvm on
the host, and setup some scaffolding for creating VMs via ansible
variables.
2 years ago
Devan Carpenter