Initial commit
commit
9018bc3c88
|
@ -0,0 +1,52 @@
|
||||||
|
Role Name
|
||||||
|
=========
|
||||||
|
|
||||||
|
Configure a network bridge with BATMAN support
|
||||||
|
|
||||||
|
Requirements
|
||||||
|
------------
|
||||||
|
|
||||||
|
* Debian buster/bullseye
|
||||||
|
|
||||||
|
Role Variables
|
||||||
|
--------------
|
||||||
|
|
||||||
|
TBD
|
||||||
|
|
||||||
|
Dependencies
|
||||||
|
------------
|
||||||
|
|
||||||
|
TBD
|
||||||
|
|
||||||
|
Example Playbook
|
||||||
|
-------
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
- hosts: servers
|
||||||
|
become: yes
|
||||||
|
vars:
|
||||||
|
# name of the bridge (default br-mesh)
|
||||||
|
batman_bridge_name: br-mesh
|
||||||
|
# name of the batman interface (default bat0)
|
||||||
|
batman_bridge_batman_interface: bat0
|
||||||
|
# interfaces added to the bridge and to provide batman
|
||||||
|
batman_bridge_ports:
|
||||||
|
- eth1
|
||||||
|
- wlan0
|
||||||
|
# IPv4/6 addresses of the bridge
|
||||||
|
batman_bridge_addresses:
|
||||||
|
- 172.16.1.3
|
||||||
|
- fd00:1234:5678::3
|
||||||
|
roles:
|
||||||
|
- batman-bridge-setup
|
||||||
|
```
|
||||||
|
|
||||||
|
License
|
||||||
|
-------
|
||||||
|
|
||||||
|
BSD
|
||||||
|
|
||||||
|
Author Information
|
||||||
|
------------------
|
||||||
|
|
||||||
|
Alexander Böhm (alexander.boehm@malbolge.net)
|
|
@ -0,0 +1,7 @@
|
||||||
|
---
|
||||||
|
# defaults file for batman-bridge-setup
|
||||||
|
|
||||||
|
batman_bridge_name: br-mesh
|
||||||
|
batman_bridge_batman_interface: bat0
|
||||||
|
batman_bridge_ports: []
|
||||||
|
batman_bridge_addresses: []
|
|
@ -0,0 +1,2 @@
|
||||||
|
---
|
||||||
|
|
|
@ -0,0 +1,52 @@
|
||||||
|
galaxy_info:
|
||||||
|
author: your name
|
||||||
|
description: your role description
|
||||||
|
company: your company (optional)
|
||||||
|
|
||||||
|
# If the issue tracker for your role is not on github, uncomment the
|
||||||
|
# next line and provide a value
|
||||||
|
# issue_tracker_url: http://example.com/issue/tracker
|
||||||
|
|
||||||
|
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
||||||
|
# - BSD-3-Clause (default)
|
||||||
|
# - MIT
|
||||||
|
# - GPL-2.0-or-later
|
||||||
|
# - GPL-3.0-only
|
||||||
|
# - Apache-2.0
|
||||||
|
# - CC-BY-4.0
|
||||||
|
license: license (GPL-2.0-or-later, MIT, etc)
|
||||||
|
|
||||||
|
min_ansible_version: 2.1
|
||||||
|
|
||||||
|
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||||
|
# min_ansible_container_version:
|
||||||
|
|
||||||
|
#
|
||||||
|
# Provide a list of supported platforms, and for each platform a list of versions.
|
||||||
|
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
|
||||||
|
# To view available platforms and versions (or releases), visit:
|
||||||
|
# https://galaxy.ansible.com/api/v1/platforms/
|
||||||
|
#
|
||||||
|
# platforms:
|
||||||
|
# - name: Fedora
|
||||||
|
# versions:
|
||||||
|
# - all
|
||||||
|
# - 25
|
||||||
|
# - name: SomePlatform
|
||||||
|
# versions:
|
||||||
|
# - all
|
||||||
|
# - 1.0
|
||||||
|
# - 7
|
||||||
|
# - 99.99
|
||||||
|
|
||||||
|
galaxy_tags: []
|
||||||
|
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||||
|
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||||
|
# remove the '[]' above, if you add tags to this list.
|
||||||
|
#
|
||||||
|
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||||
|
# Maximum 20 tags per role.
|
||||||
|
|
||||||
|
dependencies: []
|
||||||
|
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||||
|
# if you add dependencies to this list.
|
|
@ -0,0 +1,40 @@
|
||||||
|
---
|
||||||
|
|
||||||
|
- package:
|
||||||
|
name:
|
||||||
|
- batctl
|
||||||
|
state: present
|
||||||
|
|
||||||
|
- copy:
|
||||||
|
content: |
|
||||||
|
# ansible managed
|
||||||
|
batman-adv
|
||||||
|
dest: /etc/modules-load.d/batman.conf
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: o=rw,g=r,o=r
|
||||||
|
register: batman_mod_conf
|
||||||
|
|
||||||
|
# immediately reload modules or the network configuration will fail
|
||||||
|
- name: Reload kernel modules
|
||||||
|
service:
|
||||||
|
name: systemd-modules-load.service
|
||||||
|
state: restarted
|
||||||
|
when:
|
||||||
|
- batman_mod_conf.changed
|
||||||
|
|
||||||
|
- name: set configuration for batman bridge
|
||||||
|
template:
|
||||||
|
src: etc-network-interface.d-bridge.j2
|
||||||
|
dest: "/etc/network/interfaces.d/{{ batman_bridge_name }}"
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: o=rw,g=r,o=r
|
||||||
|
register: batman_bridge_net_conf
|
||||||
|
|
||||||
|
# immediately reconfigure the network
|
||||||
|
- name: Reconfigure mesh bridge
|
||||||
|
shell: "ifdown --force {{ batman_bridge_name }} || true ; ifup {{ batman_bridge_name }} || true"
|
||||||
|
when:
|
||||||
|
- batman_bridge_net_conf.changed
|
||||||
|
|
|
@ -0,0 +1,35 @@
|
||||||
|
# ansible managed
|
||||||
|
auto {{ batman_bridge_name }}
|
||||||
|
iface {{ batman_bridge_name }} inet6 auto
|
||||||
|
{% if batman_bridge_mtu |d(False) %}
|
||||||
|
mtu {{ batman_bridge_mtu }}
|
||||||
|
{% endif %}
|
||||||
|
pre-up batctl -m {{ batman_bridge_batman_interface }} interface create
|
||||||
|
pre-up ip link add $IFACE type bridge
|
||||||
|
pre-up ip link set {{ batman_bridge_batman_interface }} master $IFACE
|
||||||
|
{% for dev in batman_bridge_ports %}
|
||||||
|
pre-up ip link set {{ dev }} master $IFACE
|
||||||
|
pre-up batctl -m {{ batman_bridge_batman_interface }} if add {{ dev }}
|
||||||
|
pre-up ip link set {{ dev }} up
|
||||||
|
{% endfor %}
|
||||||
|
pre-up batctl -m {{ batman_bridge_batman_interface }} gw_mode server
|
||||||
|
pre-up ip link set {{ batman_bridge_batman_interface }} up
|
||||||
|
pre-up ip link set $IFACE up
|
||||||
|
pre-up sysctl -w "net.ipv6.conf.$IFACE.forwarding=0"
|
||||||
|
{% if batman_bridge_addresses |ipv6 %}
|
||||||
|
# enable ipv6 explicitly (required such as vagrant)
|
||||||
|
pre-up sysctl -w "net.ipv6.conf.$IFACE.accept_ra=0"
|
||||||
|
pre-up sysctl -w "net.ipv6.conf.$IFACE.disable_ipv6=0"
|
||||||
|
{% endif %}
|
||||||
|
{% for addr in batman_bridge_addresses |ipv4 %}
|
||||||
|
up ip -4 addr add {{ addr |ipaddr('ipv4') }} dev $IFACE
|
||||||
|
{% endfor %}
|
||||||
|
{% for addr in batman_bridge_addresses |ipv6 %}
|
||||||
|
up ip -6 addr add {{ addr |ipaddr('ipv6') }} dev $IFACE
|
||||||
|
{% endfor %}
|
||||||
|
down ip addr flush dev $IFACE
|
||||||
|
post-down ip link set $IFACE down
|
||||||
|
post-down ip link set {{ batman_bridge_batman_interface }} down
|
||||||
|
post-down ip link del $IFACE
|
||||||
|
post-down batctl -m {{ batman_bridge_batman_interface }} interface destroy
|
||||||
|
|
|
@ -0,0 +1,2 @@
|
||||||
|
localhost
|
||||||
|
|
|
@ -0,0 +1,5 @@
|
||||||
|
---
|
||||||
|
- hosts: localhost
|
||||||
|
remote_user: root
|
||||||
|
roles:
|
||||||
|
- batman-bridge-setup
|
|
@ -0,0 +1,2 @@
|
||||||
|
---
|
||||||
|
# vars file for batman-bridge-setup
|
Loading…
Reference in New Issue