add: playbook to update OPNsense HA cluster

Reviewed-on: #6

ansible/proxmox/cloudinit_template.yml

@@ -0,0 +1,120 @@
+---
+- name: Create or update a cloud-init Ubuntu template
+  hosts: nodes
+  become: true
+  vars:
+    template_vmid: 900
+    template_os: ubuntu
+    os_release: noble
+
+    template_name: "{{template_os}}-{{ os_release }}-cloud"
+ 
+    image_filename: "{{ os_release }}-server-cloudimg-amd64.img"
+    image_url: "https://cloud-images.ubuntu.com/{{ os_release }}/current/{{ image_filename }}"
+    image_dest: "/var/lib/vz/template/iso/{{ image_filename }}"
+ 
+    iso_storage: local
+    vm_storage: ceph-workload
+ 
+    template_memory: 2048
+    template_cores: 1
+ 
+  tasks:
+    - name: Check whether the template VMID already exists
+      ansible.builtin.command: qm status {{ template_vmid }}
+      register: template_status
+      changed_when: false
+      failed_when: false
+
+    - name: Check if the cloud image file exists
+      ansible.builtin.stat:
+        path: "{{ image_dest }}"
+      register: image_exists
+      changed_when: false
+      failed_when: false
+
+    - name: Set candidate information
+      ansible.builtin.set_fact:
+        has_image_file: "{{ image_exists.stat.exists }}"
+        root_free_space: "{{ (ansible_facts['mounts'] | selectattr('mount', 'equalto', '/') | first).size_available }}"
+
+    - name: Select target host
+      ansible.builtin.set_fact:
+        target_host: >-
+          {{ (ansible_play_hosts
+              | map('extract', hostvars)
+              | selectattr('has_image_file', 'equalto', true)
+              | sort(attribute='root_free_space', reverse=true)
+              | map(attribute='inventory_hostname')
+              | first)
+              | default(ansible_play_hosts
+              | map('extract', hostvars)
+              | sort(attribute='root_free_space', reverse=true)
+              | map(attribute='inventory_hostname')
+              | first,
+              true) }}
+      run_once: true
+
+    - name: Download the current Ubuntu cloud image
+      ansible.builtin.get_url:
+        url: "{{ image_url }}"
+        dest: "{{ image_dest }}"
+        force: false 
+        mode: "0644"
+      register: image_download
+      when: inventory_hostname == target_host
+
+    - name: Destroy existing template if present
+      ansible.builtin.command: qm destroy {{ template_vmid }} --purge
+      when: 
+        - template_status.rc == 0
+        - image_download.changed
+ 
+    - name: Rebuild the template
+      when: 
+        - inventory_hostname == target_host
+        - image_download.changed or 
+          template_status.rc != 0
+      block:
+ 
+        - name: Create the base VM shell
+          ansible.builtin.command: >
+            qm create {{ template_vmid }}
+            --memory {{ template_memory }}
+            --core {{ template_cores }}
+            --net0 virtio,bridge=vmbr0
+            --scsihw virtio-scsi-pci
+            --bios ovmf
+            --machine q35
+            --efidisk0 {{ vm_storage }}:0,pre-enrolled-keys=0
+            --name {{ template_name }}
+ 
+        - name: Import the cloud image as the primary disk
+          ansible.builtin.command: qm set {{ template_vmid }} --scsi0 {{ vm_storage }}:0,import-from={{ image_dest }}
+ 
+        - name: Attach a cloud-init drive
+          ansible.builtin.command: qm set {{ template_vmid }} --scsi1 {{ vm_storage }}:cloudinit
+ 
+        - name: Set boot order to the primary disk
+          ansible.builtin.command: qm set {{ template_vmid }} --boot order=scsi0
+ 
+        - name: Add serial console for cloud-init consoles
+          ansible.builtin.command: qm set {{ template_vmid }} --serial0 socket --vga serial0
+ 
+        - name: Convert the VM to a template
+          ansible.builtin.command: qm template {{ template_vmid }}
+
+        - name: Send notification
+          ansible.builtin.uri:
+            url: "{{  ntfy_url }}/{{ ntfy_topic }}"
+            method: POST
+            user: "{{ ntfy_user }}"
+            password: "{{ lookup('env', 'NTFY_PASSWORD') }}"
+            force_basic_auth: true
+            body: |
+              The {{ template_os | capitalize }} {{ os_release }} cloud-init template has been successfully updated on {{ inventory_hostname }}.
+            headers:
+              Title: "Cloud-init template updated"
+              Priority: "min"
+              Tags: "white_check_mark"
+          when: ntfy_url is defined

terraform/modules/pve_vm/variables.tf

@@ -12,7 +12,7 @@ variable "node_datastore" {
 variable "vm_template" {
   description = "Template of the VM"
   type        = string
-  default     = "ubuntu-cloud"
+  default     = "ubuntu-noble-cloud"
 }
 
 variable "vm_name" {

terraform/projects/simple-vm-telmate/main.tf

@@ -6,7 +6,7 @@ resource "proxmox_vm_qemu" "cloudinit-test" {
 
   target_node = "zenith"
 
-  clone = "ubuntu-cloud"
+  clone = "ubuntu-noble-cloud"
 
   agent = 0
 

terraform/projects/simple-vm/variables.tf

@@ -23,7 +23,7 @@ variable "node_datastore" {
 variable "vm_template" {
   description = "Template of the VM"
   type        = string
-  default     = "ubuntu-cloud"
+  default     = "ubuntu-noble-cloud"
 }
 
 variable "vm_name" {