Implement netboot VM with macvtap interface.

roles/lmn_vm/tasks/main.yml

@@ -177,12 +177,39 @@
     create: True
     mode: '0600'
 
-# FIXME #691138
+
+# FIXME #691138, better: prepare interfaces ready to use, c.f. below
 - name: Allow users to attach to bridge
   file:
     path: /usr/lib/qemu/qemu-bridge-helper
     mode: '4755'
 
+- name: Configure macvtap interface
+  ansible.builtin.copy:
+    dest: /etc/NetworkManager/system-connections/macvlan-vm-macvtap.nmconnection
+    mode: '0600'
+    content: |
+      [connection]
+      id=macvlan-vm-macvtap
+      type=macvlan
+      interface-name=vm-macvtap
+      [macvlan]
+      mode=2
+      parent={{ ansible_default_ipv4['interface'] }}
+      tap=true
+      [ipv4]
+      method=disabled
+      [ipv6]
+      method=disabled
+      [proxy]
+
+- name: Adjust interface permissions for user mode VMs
+  ansible.builtin.copy:
+    dest: /etc/udev/rules.d/80-macvlan.rules
+    content: |
+      SUBSYSTEMS=="net", KERNELS=="vm-macvtap", MODE="0666"
+
+
 - name: Create directory for local .desktop-Files
   ansible.builtin.file:
     path: "{{ item }}"