---
# tasks file for svelt.prepare_lxc_host
- name: Sanity check
  assert:
    that:
      - ansible_pkg_mgr == "apt"
    fail_msg: "Sorry, Debian-like hosts only!"


- name: Install packages
  package:
    name:
      - bridge-utils
      - lxc
      - python3-lxc
      # OLD: - dnsmasq
      # OLD: - iptables
    state: latest


- name: Raise inotify limit
  sysctl:
    name: fs.inotify.max_user_instances
    value: '2048'
    sysctl_file: 30-lxc-inotify.conf
    sysctl_set: yes
    state: present
    reload: yes


- name: Enable CAP_SYS_TIME in Container
  lineinfile:
    dest: /usr/share/lxc/config/common.conf
    backrefs: yes
    regexp: '(^\s*[^#].*)sys_time ?(.*)$'
    line: '\1\2'
    backup: yes


- name: Template config files
  template:
    src: "{{ item }}.j2"
    dest: "/{{ item }}"
    owner: root
    group: root
    mode: 0644
  loop:
    - etc/lxc/ansible.conf


- name: "Include network via lxc-net"
  include_tasks: net_lxc-net.yml
  # FIXME:
  when: True


- name: "Include network manual"
  include_tasks: net_manual.yml
  # FIXME:
  when: False