jkirk / ansible-role-proxmox

Simple ansible role to install Proxmox VE on Debian

proxmox

Simple ansible role to install Proxmox VE on Debian as described in https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Stretch and https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_Buster

Requirements

None.

Role Variables

If the role variable proxmox_pveadmins is defined a PVE group 'admin' is created and the ACL is updated in that way that members of the group 'admin' are assigned the 'Administrator' role for the whole system (path /):

% sudo pvesh get /access/acl
┌──────┬───────────────┬───────┬───────┬───────────┐
│ path │ roleid        │ type  │ ugid  │ propagate │
╞══════╪═══════════════╪═══════╪═══════╪═══════════╡
│ /    │ Administrator │ group │ admin │ 1         │
└──────┴───────────────┴───────┴───────┴───────────┘

The list of users which will be added to this admin group is set with this role variable:

# proxmox_pveadmins: [ 'janedoe' , 'johndoe' ]

Dependencies

None.

Additional Notes

If you use the role Oefenweb/ansible-hostname (which sets the hostname and /etc/hosts) you should put the following in group_vars/proxmox.yml (together with a host group proxmox):

---
hostname_hostname_ip_address: "{{ ansible_default_ipv4.address }}"

to avoid changes /etc/hosts by this role.

That is because Oefenweb/ansible-hostname makes sure that the following line exists in /etc/hosts:

127.0.1.1 proxmox.example.com proxmox

but Proxmox needs the external IP-Addresss to be resolvable. That means the /etc/hosts line should look like this:

192.0.2.1 proxmox.example.com proxmox

Further more, if you have use a Proxmox/Ceph cluster with two rings and a ceph network, a host group cluster is needed and something like this should be added in group_vars/cluster.yml:

---
hostname_additional_hosts:
  - ip_address: 10.88.0.1
    hostname: alpha01.ring0
  - ip_address: 10.88.0.2
    hostname: alpha02.ring0
  - ip_address: 10.88.0.3
    hostname: alpha03.ring0
  - ip_address: 10.89.0.1
    hostname: alpha01.ring1
  - ip_address: 10.89.0.2
    hostname: alpha02.ring1
  - ip_address: 10.89.0.3
    hostname: alpha03.ring1
  - ip_address: 10.77.0.1
    hostname: alpha01.ceph
  - ip_address: 10.77.0.2
    hostname: alpha02.ceph
  - ip_address: 10.77.0.3
    hostname: alpha03.ceph

Example Playbook

For this example we will assume you have defined a host group proxmox in the inventory file hosts.

site-proxmox.yml:

---

    - hosts: proxmox
      roles:
         - { role: proxmox, proxmox_pveadmins: [ 'janedoe', 'johndoe' ] }

To run this playbook you would do ansible-playbook -i hosts site-proxmox.yml

License

MIT

Author Information

Darshaka Pathirana - https://synpro.solutions

ansible-role-proxmox's Issues

apt-key is deprecated / avoid ansible apt_key

See:

• https://docs.ansible.com/ansible/latest/collections/ansible/builtin/apt_key_module.html#notes
• https://michael-prokop.at/blog/2021/02/16/how-to-properly-use-3rd-party-debian-repository-signing-keys-with-apt/
• https://wiki.debian.org/DebianRepository/UseThirdParty#Sources.list_entry