---
# Copyright 2015, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- name: Playbook for configuring the LXC host
  hosts: localhost
  pre_tasks:
    - name: Clear iptables rules
      shell: ./iptables-clear.sh
    # Make sure OS does not have a stale package cache.
    - name: Update apt cache
      apt:
        update_cache: yes
      when: ansible_os_family == 'Debian'
    - name: Ensure root's new public ssh key is in authorized_keys
      authorized_key:
        user: root
        key: "{{ hostvars['localhost']['lxc_container_ssh_key'] }}"
        manage_dir: no
    - set_fact:
        lxc_container_ssh_key: "{{ hostvars['localhost']['lxc_container_ssh_key'] }}"
    - name: Check if this is an OpenStack-CI nodepool instance
      stat:
        path: /etc/nodepool/provider
      register: nodepool
    - name: Set the files to copy into the container cache for OpenStack-CI instances
      set_fact:
        lxc_container_cache_files:
          - { src: '/etc/pip.conf', dest: '/etc/pip.conf' }
      when: nodepool.stat.exists | bool
  post_tasks:
# The elegant solution: change the bridge everywhere to replicate the standard behaviour
    - name: Create br-mgmt bridge
      command: /sbin/brctl addbr br-mgmt
    - name: IP br-mgmt
      command: /sbin/ifconfig br-mgmt 10.100.102.1 netmask 255.255.255.0
    - name: Create br-vxlan bridge
      command: /sbin/brctl addbr br-vxlan
    - name: IP br-vxlan
      command: /sbin/ifconfig br-vxlan 10.100.101.1 netmask 255.255.255.0
    - name: Create br-vlan bridge
      command: /sbin/brctl addbr br-vlan
    - name: IP br-vlan
      command: /sbin/ifconfig br-vlan 10.1.13.1 netmask 255.255.255.0
    - name: Add iptables rule to ensure ssh checksum is correct
      command: /sbin/iptables -A POSTROUTING -t mangle -p tcp --dport 22 -j CHECKSUM --checksum-fill
    - name: Add iptables rules for lxc natting
      command: /usr/local/bin/lxc-system-manage iptables-create
  roles:
    - role: "lxc_hosts"
      lxc_net_address: 10.100.100.1
      lxc_net_netmask: 255.255.255.0
      lxc_net_dhcp_range: 10.100.100.2,10.100.100.99
      lxc_net_bridge: lxcbr0
      lxc_kernel_options:
        - { key: 'fs.inotify.max_user_instances', value: 1024 }