module.netem_vr1_dc0_vr1_dc1.terraform_data.netem: Refreshing state... [id=1ea36d3f-e7af-984c-8157-152724a0b85a]
module.voffice1.libvirt_cloudinit_disk.seed: Refreshing state... [id=a4694210c663c9ce]
module.vvr1_dc0.libvirt_cloudinit_disk.seed: Refreshing state... [id=ff281478c6083cc3]
module.office1_storage.libvirt_pool.dc: Refreshing state... [id=5f94194c-69c1-4b04-a85f-c18d87303a03]
module.vr1_dc1_storage.libvirt_pool.dc: Refreshing state... [id=4a1df114-ee04-4c80-9233-cc0c140c8556]
module.mesh_vr1_dc0_office1.libvirt_network.link: Refreshing state... [id=8318548f-c3d6-4e06-bef4-fe3f11d68125]
module.office1_network.libvirt_network.office1_local: Refreshing state... [id=8fdd2a97-417c-44d4-89e4-ae8d65594135]
module.mesh_vr1_dc1_office1.libvirt_network.link: Refreshing state... [id=38a20d2d-cd91-4604-a5f4-8e2a6609633c]
module.vr1_dc0_uplink.libvirt_network.site_wan: Refreshing state... [id=f3500153-e4de-45f1-8854-9c92974a6094]
module.mesh_vr1_dc0_vr1_dc1.libvirt_network.link: Refreshing state... [id=9cbc8589-9f40-48e6-872e-ef3abfe29a93]
module.vr1_dc0_storage.libvirt_pool.dc: Refreshing state... [id=7ce1101c-a89e-40ca-9263-5f572bee40a9]
module.ubuntu_noble_base.libvirt_volume.base: Refreshing state... [id=/var/lib/libvirt/vr1/office1/ubuntu-24.04-base.qcow2]
module.voffice1.libvirt_volume.seed: Refreshing state... [id=/var/lib/libvirt/vr1/office1/voffice1-cloudinit.iso]
module.office1_opnsense.libvirt_volume.disk: Refreshing state... [id=/var/lib/libvirt/vr1/office1/office1-opnsense-disk.qcow2]
module.vvr1_dc0.libvirt_volume.seed: Refreshing state... [id=/var/lib/libvirt/vr1/vr1-dc0/vvr1-dc0-cloudinit.iso]
module.voffice1.libvirt_volume.disk: Refreshing state... [id=/var/lib/libvirt/vr1/office1/voffice1-disk.qcow2]
module.vvr1_dc0.libvirt_volume.disk: Refreshing state... [id=/var/lib/libvirt/vr1/vr1-dc0/vvr1-dc0-disk.qcow2]
module.office1_opnsense.libvirt_domain.vm: Refreshing state... [name=office1-opnsense]
module.voffice1.libvirt_domain.vm: Refreshing state... [name=voffice1]
module.vvr1_dc0.libvirt_domain.vm: Refreshing state... [name=vvr1-dc0]

Note: Objects have changed outside of OpenTofu

OpenTofu detected the following changes made outside of OpenTofu since the
last "tofu apply" which may have affected this plan:

  # module.vvr1_dc0.libvirt_domain.vm has changed
  ~ resource "libvirt_domain" "vm" {
      ~ id          = 4 -> 7
        name        = "vvr1-dc0"
        # (11 unchanged attributes hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create

OpenTofu will perform the following actions:

  # module.vr1_dc1_uplink.libvirt_network.site_wan will be created
  + resource "libvirt_network" "site_wan" {
      + autostart = true
      + domain    = {
          + name = "vr1-dc1-uplink"
        }
      + forward   = {
          + mode = "nat"
        }
      + id        = (known after apply)
      + ips       = [
          + {
              + address = "172.30.3.1"
              + prefix  = 24
            },
        ]
      + mtu       = {
          + size = 1500
        }
      + name      = "vr1-dc1-uplink"
      + uuid      = (known after apply)
    }

  # module.vvr1_dc1.libvirt_cloudinit_disk.seed will be created
  + resource "libvirt_cloudinit_disk" "seed" {
      + id             = (known after apply)
      + meta_data      = <<-EOT
            instance-id: vvr1-dc1-d124a
            local-hostname: vvr1-dc1
        EOT
      + name           = "vvr1-dc1-cloudinit"
      + network_config = <<-EOT
            version: 2
            ethernets:
              transit:
                match:
                  name: "enp1s0"
                addresses: ["172.31.0.6/30"]
                routes:
                  - to: "10.10.0.0/22"
                    via: "172.31.0.5"
              uplink:
                match:
                  name: "enp2s0"
                dhcp4: false
                dhcp6: false
            bridges:
              br-vr1-dc1-wan:
                interfaces: [uplink]
                dhcp4: false
                dhcp6: false
                parameters:
                  stp: false
                  forward-delay: 0
        EOT
      + path           = (known after apply)
      + size           = (known after apply)
      + user_data      = <<-EOT
            #cloud-config
            hostname: vvr1-dc1
            fqdn: vvr1-dc1.cloud.neumatrix.local
            manage_etc_hosts: true
            users:
              - name: jessea123
                groups: [adm, sudo]
                shell: /bin/bash
                sudo: "ALL=(ALL) NOPASSWD:ALL"
                ssh_authorized_keys:
                  # D-126 per-env-key: vvr1-dc1 authorizes the DEDICATED dc1 key ONLY
                  # (~/vr1-dc1-creds/, D-124 amendment 2026-07-21). Inner root's qemu+ssh matches.
                  - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAWB2qmc9Qrb/iaWYy6aNioqARVM/H+VHaHPqBi+4g2t vr1-dc1_svc (D-126 per-env key)
            package_update: true
            packages:
              - qemu-guest-agent
            runcmd:
              - [systemctl, enable, --now, qemu-guest-agent]
        EOT
    }

  # module.vvr1_dc1.libvirt_domain.vm will be created
  + resource "libvirt_domain" "vm" {
      + autostart   = false
      + cpu         = {
          + features = []
          + mode     = "host-passthrough"
        }
      + devices     = {
          + disks      = [
              + {
                  + driver = {
                      + type = "qcow2"
                    }
                  + source = {
                      + volume = {
                          + pool   = "vr1-dc1-pool"
                          + volume = "vvr1-dc1-disk.qcow2"
                        }
                    }
                  + target = {
                      + bus = "virtio"
                      + dev = "vda"
                    }
                },
              + {
                  + device = "cdrom"
                  + source = {
                      + volume = {
                          + pool   = "vr1-dc1-pool"
                          + volume = "vvr1-dc1-cloudinit.iso"
                        }
                    }
                  + target = {
                      + bus = "sata"
                      + dev = "sda"
                    }
                },
            ]
          + interfaces = [
              + {
                  + model  = {
                      + type = "virtio"
                    }
                  + source = {
                      + network = {
                          + network = "mesh-vr1-dc1-office1"
                        }
                    }
                },
              + {
                  + model  = {
                      + type = "virtio"
                    }
                  + source = {
                      + network = {
                          + network = "vr1-dc1-uplink"
                        }
                    }
                },
            ]
        }
      + features    = {
          + acpi = true
          + apic = {}
        }
      + id          = (known after apply)
      + memory      = 425984
      + memory_unit = "MiB"
      + name        = "vvr1-dc1"
      + os          = {
          + type         = "hvm"
          + type_arch    = "x86_64"
          + type_machine = "q35"
        }
      + running     = true
      + type        = "kvm"
      + uuid        = (known after apply)
      + vcpu        = 108
    }

  # module.vvr1_dc1.libvirt_volume.disk will be created
  + resource "libvirt_volume" "disk" {
      + allocation    = (known after apply)
      + backing_store = {
          + format = {
              + type = "qcow2"
            }
          + path   = "/var/lib/libvirt/vr1/office1/ubuntu-24.04-base.qcow2"
        }
      + capacity      = 3221225472000
      + id            = (known after apply)
      + key           = (known after apply)
      + name          = "vvr1-dc1-disk.qcow2"
      + path          = (known after apply)
      + physical      = (known after apply)
      + pool          = "vr1-dc1-pool"
      + target        = {
          + format = {
              + type = "qcow2"
            }
          + path   = (known after apply)
        }
    }

  # module.vvr1_dc1.libvirt_volume.seed will be created
  + resource "libvirt_volume" "seed" {
      + allocation = (known after apply)
      + capacity   = (known after apply)
      + create     = {
          + content = {
              + url = (known after apply)
            }
        }
      + id         = (known after apply)
      + key        = (known after apply)
      + name       = "vvr1-dc1-cloudinit.iso"
      + path       = (known after apply)
      + physical   = (known after apply)
      + pool       = "vr1-dc1-pool"
    }

Plan: 5 to add, 0 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so OpenTofu can't
guarantee to take exactly these actions if you run "tofu apply" now.