add proxmox vm setup

ansible/inventory/host_vars/harambe.sops.yaml

@@ -1,6 +1,9 @@
 kind: Secret
-ansible_user: ENC[AES256_GCM,data:UTFecNs=,iv:qkCrjdeun+RoV1P/We+ZSqL11sCYVZfLKhaimBUiMS8=,tag:COv/VnuLjzt4KtbqqU4FnA==,type:str]
-ansible_become_pass: ENC[AES256_GCM,data:qbXOPejUmhz3t3Mg,iv:WIGFJl3ZBj/6DWocpkMk6P/laonKeeFILiQCUJh/E1c=,tag:ZLW+vmlhfqJ0bGNF/kKSbQ==,type:str]
+ansible_user: ENC[AES256_GCM,data:11aI7ks=,iv:7aO/YOuIMPlYMRZdT541aag/ttHsNiWy089YF4SqAG4=,tag:WuN6vXLu8mut4rYsThC9zw==,type:str]
+ansible_become_pass: ENC[AES256_GCM,data:87s40TrFulH3j0uv,iv:/1lGP//u0zFWz0S0HbBGUH8iiUMwZ58FQadbEP+GrZQ=,tag:eTdy5eO0/5diWbWb+yrpZA==,type:str]
+proxmox__api_user: ENC[AES256_GCM,data:63OZ1zmG0nCz,iv:eyLl8bxph9UXp0IMqd1f6yG/dW25p4MqYRzJqEkuz5I=,tag:s4wMb5EZjYfMMZQ+J9xKeQ==,type:str]
+proxmox__api_password: ENC[AES256_GCM,data:0GBMfZ+qViWzS09W5LGnopC88GGHPEviBeQPjCMJ0f9yUKns,iv:xnfI1ByaWv4O6tr0wX4odxlsHRDoz6zzV7CF/eL2b0o=,tag:RTkyp1/xfrRVV2wiGV17dA==,type:str]
+proxmox__api_host: ENC[AES256_GCM,data:5mfsFu68Kw==,iv:Hv+Y5PaKZ6pFXRMAwxBbZXWo6F8i9yzPcG7CB+JNmCM=,tag:x14QKrA+SLLrvWtPQRNwSA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -10,14 +13,14 @@ sops:
         - recipient: age148wprsnqjq8jughvywnzmvs8gffhrkendpr7g60q8u4rdsj4jvuqk7ltrs
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzd1hnUlJjY2FqRk5VNUJB
-            T0pnQVJwVUFtOERQNlc3RWhTZVMwU2pBUHpJCmc4WkxUUW02eE5iTjZBRjhXNm1U
-            TnB0aWc1aHlxcXYzdmRJN3lUQlh0OGsKLS0tIFo3RTA3Y3pDZXdHaEpZMFdUMmhF
-            a1hVVld3R0tLUUxOMFZVRVg4VGpPTkEKWveSvgHFasUfzCl/TzmcRoQGaxetECoN
-            ZGAij/QT2rcLXQKlGREp5OIiZIkwaLaf+kEmfa8hh3CPZ+oWLrkyhg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2R3hKMU1Qeklpemo5TS8w
+            VmpCZVRrUUc0TDY5TTBWd3habjJIQU9Xb1NZClFDTVllZFBIVDE5R1ZqcWJ0dU1v
+            elJVS2xtN09kR0tPdFpwS2tSMGZ6d28KLS0tIDZFWnJvRTFPYjFyR2YzaXBuK3kx
+            aWx2Sjc5UjcvMkNFVXZTTjlIY2p5Z1UKQQxWNixEWbbmEFw+cfOZmWsG1lnzimCD
+            xzo36KT+QOmnUEhky5rStGsFs+YYfWoeB3Z9disgYXX+RWqR+UwE3g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-06-04T20:10:54Z"
-    mac: ENC[AES256_GCM,data:sLpakZwDIfrj93qBtY5UBEn79FgAMX7YXCi8TqHGKgESN2dDzZMn4ZPi94F1LLgOV50SLp7h0skUQ19BEjiyGB+6V/SpjkG26mWpkUIZulqPXjY/XtqgHE/6RJ84URPIC1/7zjXceurmXjfUYYVDzsGU5GD5X1iXfXR6SzxB8i4=,iv:T7lopUg5BoUr3JaZseE4FfAuU/oMcnkWiOKWQkdVOvs=,tag:SXgtIaZkV14wg5NAkim+3Q==,type:str]
+    lastmodified: "2024-06-19T19:36:26Z"
+    mac: ENC[AES256_GCM,data:l8Lxph6kFM/x/AC6vxRT0OwKGQzRXDkGotP/3SkKyzbbrOb8WvMFhiqswjcjPXVgwpDJ38TN74PGvg6mvGg54l83Xlmf8lXTGTQGrbamHzHJ5Vwc2HRBLAaUXlhCfMYScGBBBOsNDqEGCLcsg3hud0h1WdrBzmUhz3IMX/mczIQ=,iv:8xMY6NyYjsuG1Wxm+XgF0IeYk6QPYo0hUo2ghxcaahk=,tag:OmDhI/JU5xgQpF7KqAQ80A==,type:str]
     pgp: []
     unencrypted_regex: ^(kind)$
     version: 3.8.1

ansible/playbooks/proxmox.yaml

@@ -4,3 +4,36 @@
   become: true
   roles:
     - role: proxmox
+  post_tasks:
+    # /etc/pve/qemu-server/<vmid>.conf
+    - name: Create NFS VM
+      community.general.proxmox_kvm:
+        api_user: "{{ proxmox__api_user }}"
+        api_password: "{{ proxmox__api_password }}"
+        api_host: "{{ proxmox__api_host }}"
+        name: bogota
+        node: "{{ proxmox__api_host }}"
+        state: present
+        vmid: 104
+        agent: 1
+        onboot: true
+        bios: ovmf
+        cores: 2
+        cpu: x86-64-v2-AES
+        memory: 32768
+        efidisk0:
+          storage: local-lvm
+          format: raw
+          efitype: 4m
+          pre_enrolled_keys: true
+        boot: order=sata0;ide2;net0
+        # boot: order=ide2;sata0;net0
+        sata:
+          sata0: local-lvm:vm-104-disk-1,size=64G,ssd=1
+        hostpci:
+          # SATA controller
+          hostpci0: "0000:06:00.0"
+        net:
+          net0: virtio=BC:24:11:54:B2:56,bridge=vmbr0
+        # ide:
+        #   ide2: "local:iso/archlinux-2023.12.01-x86_64.iso,media=cdrom,size=20G"