redhat-qe-security / vm-ansible

Arbitrary repo with playbooks for simplifying KVM deployment for smart cards development and testing

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

HOWTO guide for deploying RHEL 8/9 for virtual/real smart card

Playbooks

  • setup-vm.yaml: this playbok is used to general setup of the KVM based on some specifications. There are several places for specification. There are default values for some arguments (check defauls in roles/check-image/defaults/main.yml). However, those values can be overwritten with hosts file. If hosts file is provided and some values are set, those values will be used.
  • virtual-card.yaml: this playbook is used to deploy virtual smart card. By deployment of virtual smart card, we mean that all dependecies for them, including SCAutolib, would be installed on the system BUT the system would not be configured to use virtual smart card.
  • virtual-card-ready.yaml: this playbook is used to deploy virtual smart card and configure the system to use virtual smart card. In other words, this playbook extends virtual-card.yaml by configuration of the system to use virtual smart card using SCAutolib
  • ipa-server.yaml: this playbook is used to deploy IPA server. This playbook is using publickly available roles for IPA deployment available GitHub. That means that this playbook reuquires this Ansible module to be accessible (in any way you prefer, e.g. installing globally to the system)

Roles

Documentation to individual roles can be found in roles directory.

common

This role requires that QCOW2 image is already downloaded and expects that your user (that executes the play) would enough permission to manipulate with virsh command.

If no options are provided (via -e "option1=... option2=..."), role would use default values located in roles/common/defaults/main.yaml. Images directory is $HOME/os_dir/. Role would copy base_img to destination img_path and the image would have name <img_name>.qcow2.By default, base image hase name rhel-<rhel_version> (e.g rhel-9.0) and located in image directory. No file extension is expected for base image because the name can be symlink to the real image. You can overwrite these options in option string (-e "base_img=... ").

real-smart-card

virtual-smart-card

About

Arbitrary repo with playbooks for simplifying KVM deployment for smart cards development and testing


Languages

Language:Makefile 100.0%