chore(deps): pin dependencies

.ansible-lint

@@ -1,3 +1,4 @@
 ---
 
-skip_list: []
+exclude_paths:
+- .gitea/

.drone.yml

@@ -1,42 +0,0 @@
----
-kind: pipeline
-type: kubernetes
-name: linter
-
-platform:
-  os: linux
-
-steps:
-- name: markdown lint
-  commands:
-  - markdownlint *.md
-  image: docker.io/volkerraschek/markdownlint:0.31.1
-  resources:
-    limits:
-      cpu: 50
-      memory: 50M
-
-- name: email-notification
-  environment:
-    PLUGIN_HOST:
-      from_secret: smtp_host
-    PLUGIN_USERNAME:
-      from_secret: smtp_username
-    PLUGIN_PASSWORD:
-      from_secret: smtp_password
-    PLUGIN_FROM:
-      from_secret: smtp_mail_address
-  image: docker.io/drillster/drone-email:latest
-  resources:
-    limits:
-      cpu: 50
-      memory: 25M
-  when:
-    status:
-    - changed
-    - failure
-
-trigger:
-  event:
-    exclude:
-    - tag

.gitea/workflows/ansible-linters.yaml

@@ -0,0 +1,20 @@
+name: Ansible Linter
+
+on:
+  pull_request:
+    types: [ "opened", "reopened", "synchronize" ]
+  push:
+    branches: [ '**' ]
+    tags-ignore: [ '**' ]
+
+jobs:
+  ansible-lint:
+    runs-on:
+    - ubuntu-latest
+    steps:
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - name: Run ansible-lint
+      uses: ansible/ansible-lint@5fac056c45595896c973fbde871f01f6cb14d74c # v26.4.0
+      with:
+        args: "--config-file .ansible-lint"
+        setup_python: "true"

.gitea/workflows/markdown-linters.yaml

@@ -0,0 +1,18 @@
+name: Lint Markdown files
+
+on:
+  pull_request:
+    types: [ "opened", "reopened", "synchronize" ]
+  push:
+    branches: [ '**' ]
+    tags-ignore: [ '**' ]
+
+jobs:
+  markdown-lint:
+    runs-on:
+    - ubuntu-latest
+    steps:
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
+      with:
+        globs: '**/*.md'

.gitea/workflows/release.yaml

@@ -0,0 +1,22 @@
+name: Release Ansible Role
+
+on:
+  push:
+    tags:
+    - '**'
+  workflow_dispatch: {}
+
+jobs:
+  release:
+    name: Release Ansible Role
+    runs-on: ubuntu-latest
+    steps:
+    - name: Install Ansible Galaxy
+      run: |
+        apt update --yes
+        apt install --yes ansible
+    - env:
+        ANSIBLE_GALAXY_TOKEN: ${{ secrets.ANSIBLE_GALAXY_TOKEN }}
+      name: Update Ansible Role in Ansible Galaxy
+      run: |
+        ansible-galaxy role import --token=${ANSIBLE_GALAXY_TOKEN} volker-raschek ${GITHUB_REPOSITORY#*/}

.gitignore

@@ -0,0 +1 @@
+.ansible

.markdownlint.yaml

@@ -45,19 +45,17 @@ MD012:
 # MD013/line-length - Line length
 MD013:
   # Number of characters
-  line_length: 80
+  line_length: 120
   # Number of characters for headings
-  heading_line_length: 80
+  heading_line_length: 120
   # Number of characters for code blocks
-  code_block_line_length: 80
+  code_block_line_length: 120
   # Include code blocks
   code_blocks: false
   # Include tables
   tables: false
   # Include headings
   headings: true
-  # Include headings
-  headers: true
   # Strict length checking
   strict: false
   # Stern length checking
@@ -70,11 +68,6 @@ MD022:
   # Blank lines below heading
   lines_below: 1
 
-# MD024/no-duplicate-heading/no-duplicate-header - Multiple headings with the same content
-MD024:
-  # Only check sibling headings
-  allow_different_nesting: true
-
 # MD025/single-title/single-h1 - Multiple top-level headings in the same document
 MD025:
   # Heading level
@@ -141,4 +134,4 @@ MD046:
 # MD048/code-fence-style - Code fence style
 MD048:
   # Code fence syle
-  style: "backtick"
+  style: "backtick"

.vscode/settings.json

@@ -0,0 +1,14 @@
+{
+  "ansible.python.interpreterPath": "/bin/python",
+  "files.associations": {
+    "**/.gitea/**/*.yml": "yaml",
+    "**/.gitea/**/*.yaml": "yaml",
+    "docker-compose*.yml": "dockercompose",
+    "*.yml": "ansible",
+    "*.yaml": "ansible",
+    ".yamllint": "yaml",
+    ".yamllint.yml": "yaml",
+    ".yamllint.yaml": "yaml"
+  },
+  "rewrap.wrappingColumn": 120
+}

.yamllint.yaml

@@ -0,0 +1,17 @@
+#
+# Documentation:
+# https://yamllint.readthedocs.io/en/stable/
+#
+
+rules:
+  brackets:
+    forbid: false
+    min-spaces-inside: 0
+    max-spaces-inside: 2
+    min-spaces-inside-empty: 0
+    max-spaces-inside-empty: 0
+  indentation:
+    spaces: 2
+    indent-sequences: false
+  line-length:
+    max: 360

README.md

@@ -1,6 +1,5 @@
 # kvm
 
-[![Build Status](https://drone.cryptic.systems/api/badges/volker.raschek/kvm-role/status.svg)](https://drone.cryptic.systems/volker.raschek/kvm-role)
 [![Ansible Role](https://img.shields.io/ansible/role/d/58218)](https://galaxy.ansible.com/volker_raschek/kvm)
 
 With following role can be kvm installed and configured.

defaults/main.yaml

@@ -2,6 +2,6 @@
 
 # Users added to required Unix groups to interact with qemu/kvm.
 kvm_users: []
-# - name: markus
+# - name: "markus"
 
-kvm_virtual_machine_manager: false
+kvm_virtual_machine_manager: false

handlers/main.yml

@@ -1 +0,0 @@
----

meta/main.yaml

@@ -1,25 +1,25 @@
+dependencies: []
 galaxy_info:
-  role_name: kvm
   author: Markus Pesch
-  description: Role to install and configure kvm on different distributions
   company: Cryptic Systems
+  description: Role to install and configure kvm on different distributions
+  galaxy_tags:
+  - kvm
+  - virtualization
   license: MIT
   min_ansible_version: "2.9"
+  namespace: volker-raschek
   platforms:
   - name: ArchLinux
     versions:
     - all
-  - name: Ubuntu
-    versions:
-    - jammy
-    - bionic
   - name: EL
     versions:
     - all
-
-
-  galaxy_tags:
-  - kvm
-  - virtualization
-
-dependencies: []
+  - name: Fedora
+    versions:
+    - all
+  - name: Ubuntu
+    versions:
+    - all
+  role_name: kvm

renovate.json

@@ -1,17 +1,9 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "assignees": [ "volker.raschek" ],
-  "automergeStrategy": "merge-commit",
-  "automergeType": "pr",
-  "labels": [ "renovate" ],
-  "packageRules": [
-    {
-      "addLabels": [ "renovate/droneci", "renovate/automerge" ],
-      "automerge": true,
-      "matchManagers": "droneci",
-      "matchUpdateTypes": [ "minor", "patch"]
-    }
-  ],
-  "rebaseLabel": "renovate/rebase",
-  "rebaseWhen": "behind-base-branch"
-}
+  "extends": [
+    "local>volker.raschek/renovate-config:default#master",
+    "local>volker.raschek/renovate-config:container#master",
+    "local>volker.raschek/renovate-config:actions#master",
+    "local>volker.raschek/renovate-config:regexp#master"
+  ]
+}

tasks/main.yaml

@@ -1,25 +1,36 @@
 ---
 
 - name: Read cpuinfo from kernel
-  shell: cat /proc/cpuinfo
+  ansible.builtin.command:
+    cmd: cat /proc/cpuinfo
   register: cpu_info
   changed_when: false
 
 - name: Verify if Intel VMX or AMD SVM is enabled
-  fail:
+  ansible.builtin.fail:
     msg: "Intel VMX or AMD SVE not enabled"
   when: "'vmx' not in cpu_info.stdout and 'svm' not in cpu_info.stdout"
 
-- name: Load variables
-  include_vars: "{{ ansible_os_family }}.yml"
+- name: Include OS-specific variables
+  ansible.builtin.include_vars: "{{ lookup('first_found', params) }}"
+  vars:
+    params:
+      files:
+      - "{{ ansible_facts['distribution'] }}_{{ ansible_facts['architecture'] }}.yaml"
+      - "{{ ansible_facts['distribution'] }}.yaml"
+      - "{{ ansible_facts['os_family'] }}_{{ ansible_facts['architecture'] }}.yaml"
+      - "{{ ansible_facts['os_family'] }}.yaml"
+      - main.yaml
+      paths:
+      - vars
 
 - name: Add virt-manager to list of kvm packages
-  set_fact:
+  ansible.builtin.set_fact:
     kvm_package_names: "{{ kvm_package_names + kvm_vm_manager_package_names }}"
   when: kvm_virtual_machine_manager
 
 - name: Install kvm packages
-  package:
+  ansible.builtin.package:
     name: "{{ item }}"
     state: present
   with_items:
@@ -29,27 +40,34 @@
   when: cpu_info.stdout.find('sev') != -1
   block:
   - name: Load kernel module "kvm_amd" temporarily
-    modprobe:
+    community.general.modprobe:
       name: "kvm_amd"
       params: "sev=1"
       state: present
   - name: Load kernel module "kvm_amd" persistently
-    template:
+    ansible.builtin.template:
       src: "etc/modules-load.d/10-amd-sve.conf.j2"
       dest: "/etc/modules-load.d/10-amd-sve.conf"
       owner: root
       group: root
-      mode: 0644
+      mode: "0644"
 
 - name: Append unix user to unix groups to interact with qemu/kvm
-  user:
+  ansible.builtin.user:
     name: "{{ item.name }}"
-    append: yes
+    append: true
     groups: "{{ kvm_unix_groups }}"
   with_items: "{{ kvm_users }}"
 
 - name: Start and enable {{ kvm_service_name }}
-  systemd:
+  ansible.builtin.systemd:
     name: "{{ kvm_service_name }}"
     state: started
-    enabled: yes
+    enabled: true
+
+# FIXME:
+# Create btrfs subvolume /var/lib/libvirt/images and execute `chattr +C` if subvolume was successfullt created. Check if
+# directory exists. If not check if filesystem type of /var/lib/libvirt/images is btrfs via `stat -f --format=%T <path>`
+# and if the inode is 256 or 2 with `stat --format="%i" <path>`.
+
+# - name: ...

vars/Archlinux.yaml

@@ -1,20 +1,21 @@
 ---
 
 kvm_package_names:
+- dmidecode
+- dnsmasq         # for dns of virtual networks
 - libvirt
+- openbsd-netcat  # required to remote access via virt-manager
 - qemu
-- qemu-arch-extra
 - qemu-block-gluster
 - qemu-block-iscsi
-- qemu-block-rbd
-- edk2-ovmf # efi
+- edk2-ovmf       # efi
 
 kvm_service_name: libvirtd
 
 kvm_vm_manager_package_names:
+- spice
 - virt-manager
 - virt-viewer
-- openbsd-netcat
 
 kvm_unix_groups:
 - libvirt