Initial import

Author: pbrezina

.gitignore

@@ -0,0 +1,5 @@
+.vagrant/
+shared-data/
+!shared-data/README
+shared-enrollment/
+!shared-enrollment/README

Vagrantfile

@@ -0,0 +1,90 @@
+BOX_LINUX    = "fedora/26-cloud-base"
+BOX_AD_ROOT  = "peru/windows-server-2016-standard-x64-eval"
+BOX_AD_CHILD = "peru/windows-server-2012-r2-standard-x64-eval"
+
+def Guest(guest, box, hostname, ip, memory)
+  guest.vm.box = box
+  guest.vm.hostname = hostname
+  guest.vm.network "private_network", ip: ip
+  
+  guest.vm.provider :libvirt do |libvirt|
+    libvirt.memory = memory
+  end
+end
+
+# Create a Linux guest.
+# Hostname should be fully qualified domain name.
+def LinuxGuest(box, config, name, hostname, ip, memory)
+  config.vm.define name do |this|
+    Guest(this, box, hostname, ip, memory)
+    
+    this.vm.synced_folder ".", "/vagrant", disabled: true
+
+    this.vm.synced_folder "./shared-data",       "/shared/data"
+    this.vm.synced_folder "./shared-enrollment", "/shared/enrollment"
+    
+    if ENV.has_key?('SSSD_SOURCE')
+      this.vm.synced_folder ENV['SSSD_SOURCE'],    "/shared/sssd"
+    end
+    
+    if ENV.has_key?('INCLUDE_DIR')
+      this.vm.synced_folder ENV['INCLUDE_DIR'],    "/shared/scripts"
+    end
+
+    this.vm.provision :shell do |shell|
+      shell.path = "./provision/install-packages.sh"
+      shell.args = name
+    end
+
+    SetupAnsibleProvisioning(this)
+  end
+end
+
+# Create a windows guest.
+# Hostname must be a short machine name not a fully qualified domain name.
+def WindowsGuest(box, config, name, hostname, ip, memory)
+  config.vm.define name do |this|
+    Guest(this, box, hostname, ip, memory)
+
+    this.vm.guest = :windows
+    this.vm.communicator = "winrm"
+    this.winrm.username = ".\\Administrator"
+    
+    SetupAnsibleProvisioning(this)
+  end
+end
+
+# We have to setup ansible provisioning everywhere in the same way
+# in order to let vagrant create inventory file automatically.
+#
+# Ansible Windows user needs to be Administrator as it can detect domain
+# on run-time. But vagrant command for rdp needs to know the domain.
+#
+# Also we need to disable certificate validation and increase winrm
+# timeout to make ansible work for Windows guests.
+def SetupAnsibleProvisioning(config)
+  windows_settings = {
+    "ansible_winrm_server_cert_validation" => "ignore",
+    "ansible_winrm_operation_timeout_sec" => 60,
+    "ansible_winrm_read_timeout_sec" => 70,
+    "ansible_user" => "Administrator"
+  }
+  
+  config.vm.provision :ansible do |ansible|
+    ansible.playbook = "./provision/ping.yml"
+    ansible.host_vars = {
+      "ad"       => windows_settings,
+      "ad-child" => windows_settings
+    }
+  end
+end
+
+# Currently each windows machine must be created with different box
+# so it has different SID. Otherwise we fail to create a domain controller.
+Vagrant.configure("2") do |config|
+  LinuxGuest(  "#{BOX_LINUX}",    config, "ipa",      "master.ipa.vm",    "192.168.100.10",  1792)
+  LinuxGuest(  "#{BOX_LINUX}",    config, "ldap",     "master.ldap.vm",   "192.168.100.20",  512)
+  LinuxGuest(  "#{BOX_LINUX}",    config, "client",   "master.client.vm", "192.168.100.30",  1024)
+  WindowsGuest("#{BOX_AD_ROOT}",  config, "ad",       "root",             "192.168.100.110", 1024)
+  WindowsGuest("#{BOX_AD_CHILD}", config, "ad-child", "child",            "192.168.100.120", 1024)
+end