configure netplan (#610)

Reviewed-on: #610
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>

group_vars/all.yml

@@ -7,6 +7,9 @@ file_header: |
   #              This file is managed with ansible!                #
   #----------------------------------------------------------------#
 
+### mgrote_netplan
+netplan_configure: true
+
 ### mgrote.restic
 restic_user: root
 restic_group: restic

group_vars/pbs.yml

@@ -1,4 +1,7 @@
 ---
+### mgrote_netplan
+netplan_configure: false
+
 ### mgrote.postfix
 postfix_erlaubte_netzwerke: "127.0.0.0/8 192.168.2.0/24 192.168.3.0/24"
 

group_vars/pve.yml

@@ -1,4 +1,7 @@
 ---
+### mgrote_netplan
+netplan_configure: false
+
 ### mgrote.restic
 restic_folders_to_backup: "/ /etc/pve"
 

playbooks/1_bootstrap.yml

@@ -13,6 +13,8 @@
     - role: mgrote_users
       tags: "user"
       become: true
+    - role: mgrote_netplan
+      tags: "netplan"
 
   post_tasks:
     - name: Change user password

playbooks/base/system.yml

@@ -20,3 +20,5 @@
       # $manage_lvm gehört zu dieser Rolle, wird aber extra abgefragt um das PLaybook zu "aktivieren"
     - role: mgrote_ssh
       tags: "ssh"
+    - role: mgrote_netplan
+      tags: "netplan"

roles/mgrote_netplan/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+netplan_configure: false # this role dos nothing if this variable is false or the os is not ubuntu

roles/mgrote_netplan/handlers/main.yml

@@ -0,0 +1,4 @@
+---
+- name: netplan apply # noqa no-changed-when
+  become: true
+  ansible.builtin.command: netplan apply

roles/mgrote_netplan/tasks/main.yml

@@ -0,0 +1,6 @@
+---
+- name: Include tasks only when the OS is Ubuntu
+  ansible.builtin.include_tasks: netplan.yml
+  when:
+    - "'Ubuntu' in ansible_distribution"
+    - netplan_configure is true

roles/mgrote_netplan/tasks/netplan.yml

@@ -0,0 +1,27 @@
+---
+- name: Install netplan
+  become: true
+  ansible.builtin.apt:
+    name:
+      - netplan.io
+    state: present
+
+- name: Template netplan-config
+  become: true
+  ansible.builtin.template:
+    src: 10_config.yml.j2
+    dest: /etc/netplan/00-installer-config.yaml
+    owner: root
+    group: root
+    mode: '0400'
+  notify: netplan apply
+
+- name: Ensure default config is absent
+  become: true
+  ansible.builtin.file:
+    path: "/etc/netplan/{{ item }}"
+    state: absent
+  notify: netplan apply
+  loop:
+    - 10_config.yml
+    - 01-netcfg.yaml

roles/mgrote_netplan/templates/10_config.yml.j2

@@ -0,0 +1,7 @@
+{{ file_header | default () }}
+network:
+  version: 2
+  renderer: networkd
+  ethernets:
+    {{ ansible_default_ipv4.interface }}:
+      dhcp4: yes