# This is a POSIX shell fragment                -*- sh -*-

# OVN_CTL_OPTS: Extra options to pass to ovs-ctl.  This is, for example,
# a suitable place to specify --ovn-northd-wrapper=valgrind.
OVN_CTL_OPTS=\
  --db-nb-create-insecure-remote=yes \
  --db-sb-create-insecure-remote=yes \
  --db-nb-addr={{ ovn_local_ip }} \
  --db-sb-addr={{ ovn_local_ip }} \
{% if ovn_local_ip != ovn_cluster_remote_ip %}
  --db-nb-cluster-remote-addr={{ ovn_cluster_remote_ip }} \
  --db-sb-cluster-remote-addr={{ ovn_cluster_remote_ip }} \
{% endif %}
  --db-nb-cluster-local-addr={{ ovn_local_ip }} \
  --db-sb-cluster-local-addr={{ ovn_local_ip }} \
  --ovn-northd-nd-db={% for host in groups['incus'] %}tcp:{{ hostvars[host]['ovn_local_ip'] }}:6641{% if not loop.last %},{% endif %}{% endfor %} \
  --ovn-northd-sb-db={% for host in groups['incus'] %}tcp:{{ hostvars[host]['ovn_local_ip'] }}:6642{% if not loop.last %},{% endif %}{% endfor %}

# {{ ansible_managed }}

domain (ip ip6) {
	table filter {
		chain INPUT {
			# https://access.redhat.com/documentation/de-de/red_hat_openstack_platform/13/html/networking_with_open_virtual_network/open_virtual_network_ovn
			proto udp dport 6081 saddr {{ ovn_cluster_network }} ACCEPT;
			proto tcp mod multiport destination-ports 6641:6644 saddr {{ ovn_cluster_network }} ACCEPT;
		}
	}
}

❯ ./result/bin/wyoming-satellite --help
usage: wyoming-satellite [-h] [--mic-uri MIC_URI] [--mic-command MIC_COMMAND] [--mic-command-rate MIC_COMMAND_RATE] [--mic-command-width MIC_COMMAND_WIDTH]
                         [--mic-command-channels MIC_COMMAND_CHANNELS] [--mic-command-samples-per-chunk MIC_COMMAND_SAMPLES_PER_CHUNK] [--mic-volume-multiplier MIC_VOLUME_MULTIPLIER]
                         [--mic-noise-suppression {0,1,2,3,4}] [--mic-auto-gain {0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31}]
                         [--mic-seconds-to-mute-after-awake-wav MIC_SECONDS_TO_MUTE_AFTER_AWAKE_WAV] [--mic-no-mute-during-awake-wav] [--mic-channel-index MIC_CHANNEL_INDEX]
                         [--snd-uri SND_URI] [--snd-command SND_COMMAND] [--snd-command-rate SND_COMMAND_RATE] [--snd-command-width SND_COMMAND_WIDTH]
                         [--snd-command-channels SND_COMMAND_CHANNELS] [--snd-volume-multiplier SND_VOLUME_MULTIPLIER] [--wake-uri WAKE_URI] [--wake-word-name name [pipeline ...]]
                         [--wake-command WAKE_COMMAND] [--wake-command-rate WAKE_COMMAND_RATE] [--wake-command-width WAKE_COMMAND_WIDTH] [--wake-command-channels WAKE_COMMAND_CHANNELS]
                         [--wake-refractory-seconds WAKE_REFRACTORY_SECONDS] [--vad] [--vad-threshold VAD_THRESHOLD] [--vad-trigger-level VAD_TRIGGER_LEVEL]
                         [--vad-buffer-seconds VAD_BUFFER_SECONDS] [--vad-wake-word-timeout VAD_WAKE_WORD_TIMEOUT] [--event-uri EVENT_URI] [--startup-command STARTUP_COMMAND]
                         [--detect-command DETECT_COMMAND] [--detection-command DETECTION_COMMAND] [--transcript-command TRANSCRIPT_COMMAND] [--stt-start-command STT_START_COMMAND]
                         [--stt-stop-command STT_STOP_COMMAND] [--synthesize-command SYNTHESIZE_COMMAND] [--tts-start-command TTS_START_COMMAND] [--tts-stop-command TTS_STOP_COMMAND]
                         [--tts-played-command TTS_PLAYED_COMMAND] [--streaming-start-command STREAMING_START_COMMAND] [--streaming-stop-command STREAMING_STOP_COMMAND]
                         [--error-command ERROR_COMMAND] [--connected-command CONNECTED_COMMAND] [--disconnected-command DISCONNECTED_COMMAND] [--awake-wav AWAKE_WAV]
                         [--done-wav DONE_WAV] --uri URI [--name NAME] [--area AREA] [--no-zeroconf] [--zeroconf-name ZEROCONF_NAME] [--zeroconf-host ZEROCONF_HOST]
                         [--debug-recording-dir DEBUG_RECORDING_DIR] [--debug] [--log-format LOG_FORMAT] [--version]

  ovn-central.service                                                                                              loaded active exited    Open Virtual Network central components
  ovn-controller-vtep.service                                                                                      loaded active running   Open Virtual Network VTEP gateway controller daemon
  ovn-controller.service                                                                                           loaded active running   Open Virtual Network host control daemon
  ovn-host.service                                                                                                 loaded active exited    Open Virtual Network host components
  ovn-northd.service                                                                                               loaded active running   Open Virtual Network central control daemon
  ovn-ovsdb-server-nb.service                                                                                      loaded active running   Open vSwitch database server for OVN Northbound database
  ovn-ovsdb-server-sb.service                                                                                      loaded active running   Open vSwitch database server for OVN Southbound database
  ovs-record-hostname.service                                                                                      loaded active exited    Open vSwitch Record Hostname
  ovs-vswitchd.service                                                                                             loaded active running   Open vSwitch Forwarding Unit
  ovsdb-server.service                                                                                             loaded active running   Open vSwitch Database Unit

# incus launch images:nixos/unstable test
Launching test
Error: Failed instance creation: Failed creating instance from image: Failed to run: rbd --id admin --cluster ceph --pool incus_rbd map image_2eadc6e7ec07d26a23a72fe092f79369317fce83f04b2179e00e6c5216cb2e0a_ext4: exit status 110 (rbd: sysfs write failed
rbd: map failed: (110) Connection timed out)

[265181.093176] libceph: mon2 (1)[2001:41b8:41:41:9618:82ff:fe08:ea7c]:6789 session established
[265181.093815] libceph: another match of type 1 in addrvec
[265181.094280] libceph: corrupt full osdmap (-22) epoch 256 off 1066 (00000000f270e95d of 0000000079bf1b0b-000000003a874c07)
[...]