lxd-container: expose ports on ipv4

playbooks/roadhouse.yml

@@ -34,6 +34,9 @@
       ip: 10.0.0.2
       image: debian/jessie/amd64
 
+      expose_ports:
+        - 2222
+
 
     - role: lxd-container
       name: bromuro

roles/lxd-container/defaults/main.yml

+---
+
+expose_ports: []

roles/lxd-container/tasks/networking.yml

@@ -11,3 +11,14 @@
   notify:
     - lxd.restart-bridge
     - "lxd-container.restart-{{ name }}"
+
+
+- name: "Expose {{ name }} ports"
+  template:
+    src: firewall.sh.j2
+    dest: "/usr/local/share/firewall.d/lxd-container-{{ name }}.sh"
+    mode: 0700
+
+  when: expose_ports
+  notify:
+    - common.reload-firewall

roles/lxd-container/templates/firewall.sh.j2

+#!/bin/bash
+{% for port in expose_ports %}
+iptables -t nat -A PREROUTING -p tcp -i eth0 --dport {{ port }} -j DNAT --to-destination {{ ip }}:{{ port }}
+{% endfor %}