init

ansible/roles/dns/setup_systemd_resolved_config/handlers/main.yml

@@ -0,0 +1,9 @@
+---
+- name: restart dhcpcd
+  ansible.builtin.shell: |
+    set -euo pipefail
+    dhcpcd -k eth0 || true
+    sleep 1
+    dhcpcd -f /etc/dhcpcd.conf eth0
+  args:
+    executable: /bin/bash

ansible/roles/dns/setup_systemd_resolved_config/readme.md

@@ -0,0 +1,4 @@
+```bash
+cat /etc/resolv.conf
+getent hosts ntp-edge.infra.hran
+```

ansible/roles/dns/setup_systemd_resolved_config/tasks/main.yml

@@ -0,0 +1,9 @@
+---
+- name: render dhcpcd.conf (DNS override)
+  ansible.builtin.template:
+    src: dhcpcd.conf.j2
+    dest: /etc/dhcpcd.conf
+    owner: root
+    group: root
+    mode: "0644"
+  notify: restart dhcpcd

ansible/roles/dns/setup_systemd_resolved_config/templates/dhcpcd.conf.j2

@@ -0,0 +1,45 @@
+# A sample configuration for dhcpcd.
+# See dhcpcd.conf(5) for details.
+
+# Allow users of this group to interact with dhcpcd via the control socket.
+#controlgroup wheel
+
+# Inform the DHCP server of our hostname for DDNS.
+hostname
+
+# Use the hardware address of the interface for the Client ID.
+#clientid
+# or
+# Use the same DUID + IAID as set in DHCPv6 for DHCPv4 ClientID as per RFC4361.
+# Some non-RFC compliant DHCP servers do not reply with this set.
+# In this case, comment out duid and enable clientid above.
+duid
+
+# Persist interface configuration when dhcpcd exits.
+persistent
+
+# vendorclassid is set to blank to avoid sending the default of
+# dhcpcd-<version>:<os>:<machine>:<platform>
+vendorclassid
+
+# A list of options to request from the DHCP server.
+option domain_name_servers, domain_name, domain_search
+option classless_static_routes
+# Respect the network MTU. This is applied to DHCP routes.
+option interface_mtu
+
+# Request a hostname from the network
+option host_name
+
+# Most distributions have NTP support.
+#option ntp_servers
+
+# A ServerID is required by RFC2131.
+require dhcp_server_identifier
+
+# Generate SLAAC address using the Hardware Address of the interface
+#slaac hwaddr
+# OR generate Stable Private IPv6 Addresses based from the DUID
+slaac private
+
+static domain_name_servers=192.168.0.100 1.1.1.1 8.8.8.8