mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 16:03:51 +01:00
58 lines
2.0 KiB
Ruby
58 lines
2.0 KiB
Ruby
|
# -*- mode: ruby -*-
|
||
|
|
# apparmor.d - Full set of apparmor profiles
|
||
|
|
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
|
||
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
||
|
|
|
||
|
|
require 'yaml'
|
||
|
|
|
||
|
|
machines = YAML.load_file(File.join(File.dirname(__FILE__), 'boxes.yml'))
|
||
|
|
|
||
|
|
Vagrant.require_version '>= 2.0.0'
|
||
|
|
|
||
|
|
Vagrant.configure("2") do |config|
|
||
|
|
|
||
|
|
config.ssh.keys_only = true
|
||
|
|
config.ssh.insert_key = false
|
||
|
|
config.ssh.private_key_path = [ '~/.ssh/id_ed25519' ]
|
||
|
|
config.ssh.username = 'user'
|
||
|
|
|
||
|
|
machines['boxes'].each do |instance|
|
||
|
|
|
||
|
|
# Configure the VMs per details in boxes.yml
|
||
|
|
config.vm.define instance['name'] do |srv|
|
||
|
|
srv.vm.box = instance['box']
|
||
|
|
srv.vm.box_check_update = false
|
||
|
|
srv.vm.post_up_message = instance.to_yaml
|
||
|
|
srv.vm.synced_folder '../', '/home/user/Projects/apparmor.d', type: 'virtiofs'
|
||
|
|
|
||
|
|
# Configure Libvirt provider
|
||
|
|
srv.vm.provider 'libvirt' do |libvirt|
|
||
|
|
libvirt.driver = 'kvm'
|
||
|
|
libvirt.connect_via_ssh = false
|
||
|
|
libvirt.storage_pool_name = 'default'
|
||
|
|
libvirt.memory = instance['ram']
|
||
|
|
libvirt.cpus = instance['cpu']
|
||
|
|
libvirt.cpu_mode = 'host-passthrough'
|
||
|
|
libvirt.machine_type = 'q35'
|
||
|
|
libvirt.video_type = 'virtio'
|
||
|
|
libvirt.graphics_type = 'spice'
|
||
|
|
libvirt.sound_type = 'ich9'
|
||
|
|
libvirt.tpm_model = 'tpm-crb'
|
||
|
|
libvirt.tpm_type = 'emulator'
|
||
|
|
libvirt.tpm_version = '2.0'
|
||
|
|
libvirt.random model: 'random'
|
||
|
|
libvirt.memorybacking 'source', type: 'memfd'
|
||
|
|
libvirt.memorybacking 'access', mode: 'shared'
|
||
|
|
libvirt.channel type: 'unix', target_name: 'org.qemu.guest_agent.0', target_type: 'virtio'
|
||
|
|
(1..2).each do
|
||
|
|
libvirt.redirdev :type => "spicevmc"
|
||
|
|
end
|
||
|
|
if instance['uefi']
|
||
|
|
libvirt.loader = '/usr/share/edk2-ovmf/x64/OVMF_CODE.fd'
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|