Extract instead of mounting the OS ISO file

Avoid using privileged container or root permission on local machine

metal/Makefile

@@ -4,7 +4,6 @@ default: run
 
 run:
 	ansible-playbook \
-		--ask-become-pass \
 		--inventory hosts.ini \
 		main.yml
 

metal/roles/pxe-boot/tasks/server.yml

@@ -15,18 +15,14 @@
 - name: Download ISO
   get_url:
     url: "{{ iso_url }}"
-    dest: "{{ role_path }}/build/images/centos8.iso"
+    dest: "{{ role_path }}/build/images/CentOS-8.3.2011-x86_64-dvd1.iso"
     checksum: "{{ iso_checksum }}"
   delegate_to: localhost
+  register: iso
 
-- name: Mount the ISO
-  mount:
-    src: "{{ role_path }}/build/images/centos8.iso"
-    path: "{{ role_path }}/build/mnt"
-    fstype: iso9660
-    opts: loop,ro
-    state: mounted
-  become: yes
+- name: Extract the ISO
+  command: "xorriso -osirrox on -indev {{ iso.dest }} -extract / {{ role_path }}/build/mnt"
+  creates: "{{ role_path }}/build/mnt/.treeinfo"
 
 - name: Copy configs
   copy:

tools/Dockerfile

@@ -7,9 +7,11 @@ RUN yes | pacman --sync --refresh \
         ansible \
         curl \
         docker \
+        docker-compose \
         git \
         helm \
         kubectl \
+        libisoburn \
         lxd \
         make \
         neovim \