dnsmasq: add script for dynamic DNS updates

roles/dnsmasq/tasks/main.yml

@@ -2,6 +2,32 @@
   package:
     name:
     - dnsmasq
+    - bind-tools
+    - krb5
+    - py3-pexpect
+
+- name: Configure kerberos
+  template:
+    dest: /etc/krb5.conf
+    src: krb5.conf.j2
+
+- name: Init kerberos keytab
+  expect:
+    command: ktutil
+    responses:
+      '.*:':
+      - 'add_entry -password -p {{ password.ldap_user }} -k 1 -e aes256-cts-hmac-sha1-96'
+      - '{{ password.ldap_pass }}'
+      - 'write_kt /etc/krb5.keytab'
+      - 'exit'
+  args:
+    creates: /etc/krb5.keytab
+
+- name: Copy DNS updater script
+  template:
+    dest: "/usr/local/bin/dns-update"
+    src: "dns-update.j2"
+    mode: 0700
 
 - name: Configure dnsmasq
   template:
@@ -12,5 +38,4 @@
   - 10-ranges.conf
   notify: restart dnsmasq
 
-# TODO DNS update
 # TODO netboot config