From fd7f34e3809fa46e1d0fb49b2d35a411e2fc6438 Mon Sep 17 00:00:00 2001
From: "Andreas B. Mundt" <andreas.mundt@steinbeisschule-reutlingen.de>
Date: Thu, 2 Jun 2022 11:01:56 +0200
Subject: [PATCH] Add user 'virti' to run libvirt VMs.

---
 fvs-desktop.yml                | 10 ++++++++++
 roles/fvs-mount/tasks/main.yml |  6 +++---
 2 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/fvs-desktop.yml b/fvs-desktop.yml
index d4ca258..07aa8f3 100644
--- a/fvs-desktop.yml
+++ b/fvs-desktop.yml
@@ -46,3 +46,13 @@
     ## Choose either gnome or KDE:
     - gnome
     #- kde
+
+  tasks:
+    - name: Add local user 'virti' in the 'libvirt' group
+      ansible.builtin.user:
+        name: virti
+        password: $y$j9T$DuSvAO63v5LvoJmJ1rB0B0$D4tovIz79AdLHs5I6tYa7rxr3SWknQeUFvGaaKvUpo3
+        comment: Libvirt VM User,,,
+        shell: /bin/bash
+        groups: libvirt
+        append: yes
diff --git a/roles/fvs-mount/tasks/main.yml b/roles/fvs-mount/tasks/main.yml
index 76520e2..6b84542 100644
--- a/roles/fvs-mount/tasks/main.yml
+++ b/roles/fvs-mount/tasks/main.yml
@@ -17,7 +17,7 @@
         mountpoint="/home/%(USER)"
         options="allow_other,default_permissions,reconnect,password_stdin"
         ssh="0" noroot="0"
-      ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user></or></not></volume>
+      ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user><user>virti</user></or></not></volume>
 
       <volume
         fstype="cifs"
@@ -25,7 +25,7 @@
         path="{{ smb_home }}"
         mountpoint="/media/%(USER)/winhome"
         options="dir_mode=0750,file_mode=0640"
-      ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user></or></not></volume>
+      ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user><user>virti</user></or></not></volume>
 
       <volume
         fstype="cifs"
@@ -33,7 +33,7 @@
         path="{{ smb_share }}"
         mountpoint="/media/%(USER)/winshare"
         options="dir_mode=0750,file_mode=0640"
-      ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user></or></not></volume>
+      ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user><user>virti</user></or></not></volume>
     insertafter: "<!-- Volume definitions -->"
 
 - name: make sure .ssh exists