Vagrantfile

BOX_LINUX = "fedora/27-cloud-base"
BOX_AD    = "peru/windows-server-2016-standard-x64-eval"

def Guest(guest, box, hostname, ip, memory)
  guest.vm.box = box
  guest.vm.hostname = hostname
  guest.vm.network "private_network", ip: ip
  
  guest.vm.provider :libvirt do |libvirt|
    libvirt.memory = memory
  end
end

# Create a Linux guest.
# Hostname should be fully qualified domain name.
def LinuxGuest(box, config, name, hostname, ip, memory)
  config.vm.define name do |this|
    Guest(this, box, hostname, ip, memory)
    
    this.vm.synced_folder ".", "/vagrant", disabled: true

    this.vm.synced_folder "./shared-data",       "/shared/data"
    this.vm.synced_folder "./shared-enrollment", "/shared/enrollment"
    
    if ENV.has_key?('SSSD_SOURCE')
      this.vm.synced_folder ENV['SSSD_SOURCE'],    "/shared/sssd"
    end
    
    if ENV.has_key?('INCLUDE_DIR')
      this.vm.synced_folder ENV['INCLUDE_DIR'],    "/shared/scripts"
    end

    this.vm.provision :shell do |shell|
      shell.path = "./provision/install-packages.sh"
      shell.args = name
    end

    SetupAnsibleProvisioning(this)
  end
end

# Create a windows guest.
# Hostname must be a short machine name not a fully qualified domain name.
def WindowsGuest(box, config, name, hostname, ip, memory)
  config.vm.define name do |this|
    Guest(this, box, hostname, ip, memory)

    this.vm.guest = :windows
    this.vm.communicator = "winrm"
    this.winrm.username = ".\\Administrator"
    
    SetupAnsibleProvisioning(this)
  end
end

# We have to setup ansible provisioning everywhere in the same way
# in order to let vagrant create inventory file automatically.
#
# Ansible Windows user needs to be Administrator as it can detect domain
# on run-time. But vagrant command for rdp needs to know the domain.
#
# Also we need to disable certificate validation and increase winrm
# timeout to make ansible work for Windows guests.
def SetupAnsibleProvisioning(config)
  windows_settings = {
    "ansible_winrm_server_cert_validation" => "ignore",
    "ansible_winrm_operation_timeout_sec" => 60,
    "ansible_winrm_read_timeout_sec" => 70,
    "ansible_user" => "Administrator"
  }
  
  config.vm.provision :ansible do |ansible|
    ansible.playbook = "./provision/ping.yml"
    ansible.host_vars = {
      "ad"       => windows_settings,
      "ad-child" => windows_settings
    }
  end
end

# Currently each windows machine must be created with different box
# so it has different SID. Otherwise we fail to create a domain controller.
Vagrant.configure("2") do |config|
  LinuxGuest(  "#{BOX_LINUX}", config, "ipa",      "master.ipa.vm",    "192.168.100.10",  1792)
  LinuxGuest(  "#{BOX_LINUX}", config, "ldap",     "master.ldap.vm",   "192.168.100.20",  512)
  LinuxGuest(  "#{BOX_LINUX}", config, "client",   "master.client.vm", "192.168.100.30",  1024)
  WindowsGuest("#{BOX_AD}",    config, "ad",       "root",             "192.168.100.110", 1024)
  WindowsGuest("#{BOX_AD}",    config, "ad-child", "child",            "192.168.100.120", 1024)
end