terraform { required_providers { libvirt = { source = "dmacvicar/libvirt" } } } locals { cloudinit_user_data = templatefile("${path.module}/files/cloud_init.cfg.tftpl", { name = var.name, admin_authorized_keys = var.admin_authorized_keys, insecure_password = var.insecure_password, use_host_cert = var.use_host_cert, host_cert = trimspace(null_resource.cert.triggers["cert"]), private_key = tls_private_key.debian.private_key_openssh }) } resource "tls_private_key" "debian" { algorithm = "ED25519" } data "tls_public_key" "debian" { private_key_pem = tls_private_key.debian.private_key_pem } data "external" "cert" { program = ["bash", "${path.module}/files/get_cert.sh"] query = { pubkey = trimspace(data.tls_public_key.debian.public_key_openssh) host = var.name cahost = var.ca_host } } resource "null_resource" "cert" { triggers = { cert = data.external.cert.result["cert"] } lifecycle { ignore_changes = [ triggers ] } } resource "libvirt_volume" "debian" { name = "${var.name}.iso" pool = var.disk_pool size = var.disk_size base_volume_name = var.disk_base base_volume_pool = var.disk_base_pool lifecycle { replace_triggered_by = [ libvirt_cloudinit_disk.debian.id ] } } resource "libvirt_cloudinit_disk" "debian" { name = "${var.name}.iso" pool = var.cloudinit_pool user_data = local.cloudinit_user_data network_config = file("${path.module}/files/network_config.cfg") } resource "libvirt_domain" "debian" { name = var.name memory = var.memory vcpu = 4 autostart = true disk { volume_id = libvirt_volume.debian.id } dynamic "disk" { for_each = var.data_disks content { volume_id = disk.value } } network_interface { bridge = var.bridge_name hostname = var.name mac = var.mac } cloudinit = libvirt_cloudinit_disk.debian.id lifecycle { replace_triggered_by = [ libvirt_cloudinit_disk.debian.id ] } }