Merge branch 'drybjed-dnsmasq-lxd-override'

CHANGELOG.rst

@@ -89,6 +89,14 @@ Updates of upstream application versions
 Fixed
 ~~~~~
 
+:ref:`debops.dnsmasq` role
+''''''''''''''''''''''''''
+
+- On Ubuntu hosts, the role will fix the configuration installed by the
+  :command:`lxd` package to use ``bind-dynamic`` option instead of
+  ``bind-interfaces``. This allows the :command:`dnsmasq` service to start
+  correctly.
+
 :ref:`debops.nfs_server` role
 '''''''''''''''''''''''''''''
 

ansible/roles/debops.dnsmasq/defaults/main.yml

@@ -276,6 +276,16 @@ dnsmasq__default_configuration:
                    (ansible_local.consul.installed|d())|bool)
                else "init" }}'
 
+  - name: 'lxd-override'
+    filename: 'lxd'
+    comment: |
+      Tell any system-wide dnsmasq instance to make sure to bind to interfaces
+      instead of listening on 0.0.0.0
+    raw: |
+      bind-dynamic
+      except-interface = lxdbr0
+    state: '{{ "present" if (ansible_distribution == "Ubuntu") else "ignore" }}'
+
   - name: 'reserved-domains.conf'
     options: