Enable LXD networking

Ensure that networking traffic is forwarded to and from LXD instances
using nftables.

Change-Id: I8b959dcfd2ebba10c24dc06442d3239ea17ec211
This commit is contained in:
James Page 2024-09-03 11:20:33 +01:00
parent 3fb100509d
commit dde5397aaa
No known key found for this signature in database
GPG Key ID: BFECAECBA0E7D8C3

View File

@ -12,6 +12,12 @@
name: snapd
become: true
- name: nftables is installed
apt:
name: nftables
become: true
when: ansible_distribution_release == 'jammy' or ansible_distribution_release == 'noble'
- name: lxd snap is installed
snap:
name: lxd
@ -22,6 +28,11 @@
command: lxd init --auto
become: true
- name: allow packets from lxd bridge
command: nft insert rule filter openstack-INPUT iif lxdbr0 accept
become: true
when: ansible_distribution_release == 'jammy' or ansible_distribution_release == 'noble'
- name: current user is in lxd group
user:
name: "{{ ansible_user }}"