Minor fixes

ansible/host_vars/gpu-01.lab.alexpires.me.yml

@@ -63,6 +63,9 @@ custom_hosts_acls: true
 # This fixes polkit issues with sudoers file (CIS hardening)
 hide_pid: 0
 
+# CIS by default changes compilers permissions, Nvidia KMod needs to be build
+compilers:
+
 # aide
 install_aide: false
 

ansible/playbook_nvidia_cdi_generator.yml

@@ -0,0 +1,7 @@
+- name: Setup NVidia CDI Generator
+  hosts: nvidia
+
+  tasks:
+    - name: Setup nvidia-cdi-generator
+      ansible.builtin.include_tasks:
+        file: tasks/nvidia-cdi-generator.yml

ansible/playbook_podman_comfyui.yml

@@ -44,15 +44,8 @@
           - "{{ podman_user_home }}/output:/home/worker/output:Z"
         device:
           - "nvidia.com/gpu=all"
-        systemd:
-          enabled: false
-          state: "stopped"
 
   tasks:
-    - name: Setup nvidia-cdi-generator
-      ansible.builtin.include_tasks:
-        file: tasks/nvidia-cdi-generator.yml
-
     - name: Setup Pods
       ansible.builtin.include_tasks:
         file: tasks/podman.yml

ansible/playbook_podman_kokoro.yml

@@ -18,10 +18,6 @@
           - "nvidia.com/gpu=all"
 
   tasks:
-    - name: Setup nvidia-cdi-generator
-      ansible.builtin.include_tasks:
-        file: tasks/nvidia-cdi-generator.yml
-
     - name: Setup Pods
       ansible.builtin.include_tasks:
         file: tasks/podman.yml

ansible/playbook_podman_ollama.yml

@@ -19,10 +19,6 @@
           - "nvidia.com/gpu=all"
 
   tasks:
-    - name: Setup nvidia-cdi-generator
-      ansible.builtin.include_tasks:
-        file: tasks/nvidia-cdi-generator.yml
-
     - name: Setup Pods
       ansible.builtin.include_tasks:
         file: tasks/podman.yml

ansible/tasks/podman.yml

@@ -106,7 +106,7 @@
       containers.podman.podman_container:
         name: "{{ item.name }}"
         image: "{{ item.repo.image | default(podman_user + '/' + item.name) }}"
-        state: "{{ item.state | default('present') }}"
+        state: "{{ item.state | default('started') }}"
         device: "{{ item.device | default(omit) }}"
         env: "{{ item.env | default(omit) }}"
         network: "{{ podman_network_name | default(omit) }}"

inventory/hosts

@@ -85,4 +85,7 @@ dev-01.lab.alexpires.me
 dev-01.lab.alexpires.me
 
 [certbot]
-vh-01.lab.alexpires.me
+vh-01.lab.alexpires.me
+
+[nvidia]
+gpu-01.lab.alexpires.me