--- - name: Cloner une VM Debian depuis le modele Proxmox hosts: localhost connection: local gather_facts: false become: false tasks: - name: Verifier les fichiers de variables Proxmox optionnels ansible.builtin.stat: path: "{{ item }}" loop: - "{{ playbook_dir }}/../../inventories/lab/group_vars/proxmox.yml" - "{{ playbook_dir }}/../../inventories/lab/group_vars/proxmox.vault.yml" - "{{ playbook_dir }}/../../inventories/lab/group_vars/proxmox.local.yml" register: proxmox_fichiers_variables - name: Charger les variables Proxmox non sensibles disponibles ansible.builtin.include_vars: file: "{{ item.stat.path }}" loop: "{{ proxmox_fichiers_variables.results }}" when: - item.stat.exists - item.stat.path is not search('vault') - name: Charger les secrets Proxmox Vault block: - name: Charger proxmox.vault.yml ansible.builtin.include_vars: file: "{{ item.stat.path }}" loop: "{{ proxmox_fichiers_variables.results }}" when: - item.stat.exists - item.stat.path is search('vault') no_log: true rescue: - name: Expliquer l echec de chargement du Vault ansible.builtin.fail: msg: >- Impossible de charger inventories/lab/group_vars/proxmox.vault.yml. Si le fichier est chiffre avec Ansible Vault, fournir son mot de passe ou definir ANSIBLE_VAULT_PASSWORD_FILE avant de relancer make creer-vm. - name: Appliquer les valeurs Proxmox avec repli environnement ansible.builtin.set_fact: proxmox_api_host_effectif: "{{ proxmox_api_host | default(lookup('env', 'PROXMOX_API_HOST'), true) }}" proxmox_api_user_effectif: "{{ proxmox_api_user | default(lookup('env', 'PROXMOX_API_USER'), true) }}" proxmox_api_token_id_effectif: "{{ proxmox_api_token_id | default(lookup('env', 'PROXMOX_API_TOKEN_ID'), true) }}" proxmox_api_token_secret_effectif: "{{ proxmox_api_token_secret | default(lookup('env', 'PROXMOX_API_TOKEN_SECRET'), true) }}" proxmox_api_port_effectif: "{{ proxmox_api_port | default(lookup('env', 'PROXMOX_API_PORT'), true) }}" no_log: true - name: Valider les parametres obligatoires Proxmox ansible.builtin.assert: that: - proxmox_api_host_effectif | length > 0 - proxmox_api_user_effectif | length > 0 - proxmox_api_token_id_effectif | length > 0 - proxmox_api_token_secret_effectif | length > 0 - proxmox_clone_nom is defined - proxmox_clone_nom | length > 0 - proxmox_clone_vmid_modele is defined - proxmox_clone_vmid is defined - proxmox_clone_noeud is defined - proxmox_clone_noeud | length > 0 - proxmox_clone_ipconfig0 is defined - proxmox_clone_ipconfig0 | length > 0 fail_msg: "Parametres Proxmox incomplets. Verifier proxmox.yml, proxmox.vault.yml et les variables make propres a la VM." - name: Lire la cle publique SSH depuis le fichier fourni ansible.builtin.set_fact: proxmox_clone_sshkeys: "{{ lookup('ansible.builtin.file', proxmox_clone_cle_publique_fichier) }}" when: - proxmox_clone_cle_publique is not defined - proxmox_clone_cle_publique_fichier is defined - proxmox_clone_cle_publique_fichier | length > 0 - name: Utiliser la cle publique SSH fournie directement ansible.builtin.set_fact: proxmox_clone_sshkeys: "{{ proxmox_clone_cle_publique }}" when: - proxmox_clone_cle_publique is defined - proxmox_clone_cle_publique | length > 0 - name: Construire les serveurs DNS Cloud-Init ansible.builtin.set_fact: proxmox_clone_nameservers: >- {{ (proxmox_clone_dns | default('') | split(',')) | map('trim') | reject('equalto', '') | list }} - name: Verifier la bibliotheque Python proxmoxer locale ansible.builtin.command: cmd: "{{ ansible_playbook_python }} -c 'import proxmoxer'" changed_when: false failed_when: false register: proxmoxer_verification - name: Refuser si proxmoxer est absent ansible.builtin.fail: msg: >- La bibliotheque Python proxmoxer est absente pour {{ ansible_playbook_python }}. Installer le paquet systeme approprie, par exemple sudo apt install python3-proxmoxer, ou installer proxmoxer dans l'environnement Python utilise par Ansible, puis relancer make creer-vm. when: proxmoxer_verification.rc != 0 - name: Cloner la VM depuis le modele community.general.proxmox_kvm: api_host: "{{ proxmox_api_host_effectif }}" api_port: "{{ proxmox_api_port_effectif | int if proxmox_api_port_effectif | length > 0 else omit }}" api_user: "{{ proxmox_api_user_effectif }}" api_token_id: "{{ proxmox_api_token_id_effectif }}" api_token_secret: "{{ proxmox_api_token_secret_effectif }}" validate_certs: "{{ proxmox_validate_certs | default(false) | bool }}" node: "{{ proxmox_clone_noeud }}" clone: "{{ proxmox_clone_source_nom | default('modele-debian13') }}" vmid: "{{ proxmox_clone_vmid_modele | int }}" newid: "{{ proxmox_clone_vmid | int }}" name: "{{ proxmox_clone_nom }}" storage: "{{ proxmox_clone_stockage | default(omit, true) }}" format: "{{ proxmox_clone_format | default(omit, true) }}" full: "{{ proxmox_clone_complet | default(true) | bool }}" timeout: "{{ proxmox_clone_timeout | default(600) | int }}" - name: Ajuster le reseau de la VM clonee community.general.proxmox_nic: api_host: "{{ proxmox_api_host_effectif }}" api_port: "{{ proxmox_api_port_effectif | int if proxmox_api_port_effectif | length > 0 else omit }}" api_user: "{{ proxmox_api_user_effectif }}" api_token_id: "{{ proxmox_api_token_id_effectif }}" api_token_secret: "{{ proxmox_api_token_secret_effectif }}" validate_certs: "{{ proxmox_validate_certs | default(false) | bool }}" vmid: "{{ proxmox_clone_vmid | int }}" interface: "{{ proxmox_clone_interface | default('net0') }}" model: virtio bridge: "{{ proxmox_clone_pont }}" tag: "{{ proxmox_clone_vlan | int if proxmox_clone_vlan is defined and proxmox_clone_vlan | string | length > 0 else omit }}" firewall: "{{ proxmox_clone_parefeu_interface | default(false) | bool }}" state: present when: - proxmox_clone_pont is defined - proxmox_clone_pont | length > 0 - name: Agrandir le disque principal du clone community.general.proxmox_disk: api_host: "{{ proxmox_api_host_effectif }}" api_port: "{{ proxmox_api_port_effectif | int if proxmox_api_port_effectif | length > 0 else omit }}" api_user: "{{ proxmox_api_user_effectif }}" api_token_id: "{{ proxmox_api_token_id_effectif }}" api_token_secret: "{{ proxmox_api_token_secret_effectif }}" validate_certs: "{{ proxmox_validate_certs | default(false) | bool }}" vmid: "{{ proxmox_clone_vmid | int }}" disk: "{{ proxmox_clone_disque | default('scsi0') }}" size: "{{ proxmox_clone_taille_disque }}" state: resized when: - proxmox_clone_taille_disque is defined - proxmox_clone_taille_disque | length > 0 - name: Configurer Cloud-Init sur le clone community.general.proxmox_kvm: api_host: "{{ proxmox_api_host_effectif }}" api_port: "{{ proxmox_api_port_effectif | int if proxmox_api_port_effectif | length > 0 else omit }}" api_user: "{{ proxmox_api_user_effectif }}" api_token_id: "{{ proxmox_api_token_id_effectif }}" api_token_secret: "{{ proxmox_api_token_secret_effectif }}" validate_certs: "{{ proxmox_validate_certs | default(false) | bool }}" node: "{{ proxmox_clone_noeud }}" vmid: "{{ proxmox_clone_vmid | int }}" name: "{{ proxmox_clone_nom }}" update: true ciuser: "{{ proxmox_clone_ciuser | default(omit, true) }}" sshkeys: "{{ proxmox_clone_sshkeys | default(omit) }}" ipconfig: ipconfig0: "{{ proxmox_clone_ipconfig0 }}" nameservers: "{{ proxmox_clone_nameservers if proxmox_clone_nameservers | length > 0 else omit }}" searchdomains: "{{ proxmox_clone_domaines_recherche | default(omit, true) }}" agent: "enabled=1" - name: Demarrer le clone community.general.proxmox_kvm: api_host: "{{ proxmox_api_host_effectif }}" api_port: "{{ proxmox_api_port_effectif | int if proxmox_api_port_effectif | length > 0 else omit }}" api_user: "{{ proxmox_api_user_effectif }}" api_token_id: "{{ proxmox_api_token_id_effectif }}" api_token_secret: "{{ proxmox_api_token_secret_effectif }}" validate_certs: "{{ proxmox_validate_certs | default(false) | bool }}" node: "{{ proxmox_clone_noeud }}" vmid: "{{ proxmox_clone_vmid | int }}" name: "{{ proxmox_clone_nom }}" state: started when: proxmox_clone_demarrer | default(true) | bool - name: Afficher le resume du clone ansible.builtin.debug: msg: - "VM creee: {{ proxmox_clone_nom }} (VMID {{ proxmox_clone_vmid }})" - "Cloud-Init ipconfig0: {{ proxmox_clone_ipconfig0 }}"