blob: 8233dc530dc487f5ad6453884b7a14c569ec583f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
- name: Ensure jails directory exists
file:
path: /usr/local/jails
state: directory
owner: root
group: wheel
mode: "0755"
- name: Create ZFS datasets
loop:
- { name: "zroot/jails", mountpoint: "/usr/local/jails" }
- { name: "zroot/jails/media" }
- { name: "zroot/jails/templates" }
- { name: "zroot/jails/templates/{{ jail_userland_version }}" }
- { name: "zroot/jails/containers" }
loop_control:
loop_var: dataset
include_tasks: jail_datasets.yml
- name: Check if userland snapshot already exists
shell: zfs list -t snapshot -o name | grep -Fxq "zroot/jails/templates/{{ jail_userland_version }}@base"
failed_when: false
changed_when: false
register: zfs_userland_check
- name: Set up userland
when: zfs_userland_check.rc != 0
block:
- name: Download userland
get_url:
url: https://download.freebsd.org/ftp/releases/amd64/amd64/{{ jail_userland_version }}/base.txz
dest: /usr/local/jails/media/{{ jail_userland_version }}-base.txz
owner: root
group: wheel
mode: "0644"
- name: Unarchive userland
shell: tar -xzf /usr/local/jails/media/{{ jail_userland_version }}-base.txz -C /usr/local/jails/templates/{{ jail_userland_version }}
- name: Copy localtime and resolv.conf to jail userland
copy:
remote_src: true
src: "{{ item }}"
dest: "/usr/local/jails/templates/{{ jail_userland_version }}{{ item }}"
loop:
- /etc/resolv.conf
- /etc/localtime
- name: Update userland to latest patch level
shell: freebsd-update -b /usr/local/jails/templates/{{ jail_userland_version }}/ fetch install
- name: Create userland ZFS snapshot
shell: zfs snapshot zroot/jails/templates/{{ jail_userland_version }}@base
- name: Configure jails
block:
- name: Configure jail.conf
template:
src: etc_jail.conf.j2
dest: /etc/jail.conf
owner: root
group: wheel
mode: "0644"
- name: Configure individual jails
loop: "{{ jails }}"
loop_control:
loop_var: jail
include_tasks: jail_single.yml
|
