sys_airgap

Airgapped installation

Currently, one-deploy does not provide a dedicated way to do airgapped installations.

However, since release 1.1.1 it should be possible to configure/override the APT/DNF repositories used by one-deploy. If all machines where OpenNebula will be deployed use mirrored repositories for their DEB/RPM packages, then airgapped installation should be possible.

The five APT/DNF repositories used by one-deploy are:

• Ceph Community
• Free Range Routing (DEB) / Free Range Routing (RPM)
• Grafana (DEB) / Grafana (RPM)
• OpenNebula (CE) / OpenNebula (EE)
• Passenger (DEB) / Passenger (RPM)

An example inventory configuration for the base OpenNebula repository would look like this:

---
all:
  vars:
    # Use custom / local / insecure OpenNebula repo.
    opennebula_repo_force_trusted: true
    opennebula_repo_url:
      RedHat: http://10.11.12.13/repo/6.8/AlmaLinux/
      Ubuntu: http://10.11.12.13/repo/6.8/Ubuntu/22.04/

Important

The *_force_trusted: true parameter completely disables GPG key management and SSL verification for specific repos.

A complete list of parameters can be found in the README and in the defaults of the repository for the role.

With all systems and the five mentioned repos appropriately configured, it should be possible to achieve airgapped installations. 👍