Add network flushing before setting up network (#58)

This should allow for using the nbde_client role with machines that use
static IP configurations, as network flushing should undo the network
setup done at the initramfs, allowing the system to use its regular
configuration.

Approach based on the answers posted here:
https://unix.stackexchange.com/questions/506331/networkmanager-doesnt-change-ip-address-when-dracut-cmdline-provided-static-ip/541108

files/nbde_client-network-flush

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+for f in /sys/class/net/*; do
+  iface="${f##*/}"
+  [ "${iface}" = "lo" ] && continue
+  ip -statistics address flush dev "${iface}"
+done
+
+# vim:set ts=2 sw=2 et:

files/nbde_client-network-flush.service

@@ -0,0 +1,10 @@
+[Unit]
+Description=Network flush service for nbde_client Ansible role
+Before=network-pre.target
+Wants=network-pre.target
+
+[Service]
+ExecStart=/usr/bin/nbde_client-network-flush
+
+[Install]
+WantedBy=default.target

tasks/main-clevis.yml

@@ -4,6 +4,18 @@
     name: "{{ __nbde_client_packages }}"
     state: present
 
+- name: Enable clevis askpass unit
+  service:
+    name: clevis-luks-askpass.path
+    enabled: yes
+
+- name: Generate nbde_client dracut config
+  template:
+    src: nbde_client.conf
+    dest: /etc/dracut.conf.d/nbde_client.conf
+    owner: root
+    mode: '0444'
+
 - name: Check whether devices are at the desired state
   when:
     - nbde_client_bindings | default([])
@@ -56,4 +68,27 @@
     - __nbde_client_clevis_check_state is defined
     - __nbde_client_clevis_check_state is changed
 
+- name: Set-up network flushing
+  block:
+    - name: Deploy network flushing script
+      copy:
+        src: "{{ role_path }}/files/nbde_client-network-flush"
+        dest: /usr/bin/nbde_client-network-flush
+        mode: '0755'
+
+    - name: Deploy network flushing service
+      copy:
+        src: "{{ role_path }}/files/nbde_client-network-flush.service"
+        dest: /etc/systemd/system/nbde_client-network-flush.service
+        mode: '0644'
+
+    - name: Reload systemd config
+      systemd:
+        daemon_reload: yes
+
+    - name: Enable network flushing service
+      service:
+        name: nbde_client-network-flush.service
+        enabled: yes
+
 # vim:set ts=2 sw=2 et:

templates/nbde_client.conf

@@ -0,0 +1,4 @@
+# nbde_client dracut config
+{% for line in __nbde_client_dracut_settings %}
+{{ line }}
+{% endfor %}

tests/roles/linux-system-roles.nbde_client/files

@@ -0,0 +1 @@
+../../../files

tests/roles/linux-system-roles.nbde_client/templates

@@ -0,0 +1 @@
+../../../templates

vars/CentOS_7.yml

@@ -7,6 +7,13 @@ __nbde_client_packages:
   - clevis-dracut
   - clevis-luks
   - clevis-systemd
+  - iproute
+
+__nbde_client_initramfs_update_cmd: >
+  dracut -fv --regenerate-all
+
+__nbde_client_dracut_settings:
+  - kernel_cmdline="rd.neednet=1"
+  - omit_dracutmodules+="ifcfg"
 
-__nbde_client_initramfs_update_cmd: dracut -f
 # vim:set ts=2 sw=2 et:

vars/CentOS_8.yml

@@ -7,9 +7,13 @@ __nbde_client_packages:
   - clevis-dracut
   - clevis-luks
   - clevis-systemd
-
+  - iproute
 
 __nbde_client_initramfs_update_cmd: >
-  dracut -fv --regenerate-all --hostonly-cmdline
+  dracut -fv --regenerate-all
+
+__nbde_client_dracut_settings:
+  - kernel_cmdline="rd.neednet=1"
+  - omit_dracutmodules+="ifcfg"
 
 # vim:set ts=2 sw=2 et:

vars/CentOS_9.yml

@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: MIT
+---
+# Put internal variables here with CentOS 9 specific values.
+
+__nbde_client_packages:
+  - clevis
+  - clevis-dracut
+  - clevis-luks
+  - clevis-systemd
+  - iproute
+
+__nbde_client_initramfs_update_cmd: >
+  dracut -fv --regenerate-all
+
+__nbde_client_dracut_settings:
+  - kernel_cmdline="rd.neednet=1"
+  - omit_dracutmodules+="ifcfg"
+
+# vim:set ts=2 sw=2 et:

vars/Fedora.yml

@@ -7,8 +7,13 @@ __nbde_client_packages:
   - clevis-dracut
   - clevis-luks
   - clevis-systemd
+  - iproute
 
 __nbde_client_initramfs_update_cmd: >
-  dracut -fv --regenerate-all --hostonly-cmdline
+  dracut -fv --regenerate-all
+
+__nbde_client_dracut_settings:
+  - kernel_cmdline="rd.neednet=1"
+  - omit_dracutmodules+="ifcfg"
 
 # vim:set ts=2 sw=2 et:

vars/RedHat_7.yml

@@ -7,7 +7,13 @@ __nbde_client_packages:
   - clevis-dracut
   - clevis-luks
   - clevis-systemd
+  - iproute
 
-__nbde_client_initramfs_update_cmd: dracut -f
+__nbde_client_initramfs_update_cmd: >
+  dracut -fv --regenerate-all
+
+__nbde_client_dracut_settings:
+  - kernel_cmdline="rd.neednet=1"
+  - omit_dracutmodules+="ifcfg"
 
 # vim:set ts=2 sw=2 et:

vars/RedHat_8.yml

@@ -7,8 +7,13 @@ __nbde_client_packages:
   - clevis-dracut
   - clevis-luks
   - clevis-systemd
+  - iproute
 
 __nbde_client_initramfs_update_cmd: >
-  dracut -fv --regenerate-all --hostonly-cmdline
+  dracut -fv --regenerate-all
+
+__nbde_client_dracut_settings:
+  - kernel_cmdline="rd.neednet=1"
+  - omit_dracutmodules+="ifcfg"
 
 # vim:set ts=2 sw=2 et:

vars/RedHat_9.yml

@@ -7,8 +7,13 @@ __nbde_client_packages:
   - clevis-dracut
   - clevis-luks
   - clevis-systemd
+  - iproute
 
 __nbde_client_initramfs_update_cmd: >
-  dracut -fv --regenerate-all --hostonly-cmdline
+  dracut -fv --regenerate-all
+
+__nbde_client_dracut_settings:
+  - kernel_cmdline="rd.neednet=1"
+  - omit_dracutmodules+="ifcfg"
 
 # vim:set ts=2 sw=2 et:

vars/default.yml

@@ -4,5 +4,6 @@
 
 __nbde_client_packages: []
 __nbde_client_initramfs_update_cmd: ""
+__nbde_client_dracut_settings: []
 
 # vim:set ts=2 sw=2 et: