systemd-vmspawn gained a new --firmware= option to configure or list
firmware definitions for Qemu, a new --tpm= option to enable or
disable the use of a software TPM, a new...

systemd-boot now understands two new Boot Loader Specification Type #1
stanzas: "uki" and "uki-url" <...> The latter is particularly relevant for implementing a fully
UKI based boot process, but with network provided UKI images.

If systemd-pcrextend (i.e. the tool making the various userspace TPM
PCR measurements) fails to do its thing, an immediate reboot is now
triggered, ensuring that somehow making PCR extensions fails cannot
be used to gain access to TPM objects to which access should have
been blocked already via PCR measurements.

[defaults]
inventory = ./inventory/terraform_state.yml
private_key_file = ../internal/ctf_master_key
host_key_checking = False

[ssh_connection]
ssh_args = -F ./ssh_config

plugin: cloud.terraform.terraform_state
backend_type: local
backend_config:
  path: /home/ne_bknn/absolute/path/to/terraform/terraform.tfstate
search_child_modules: true
strict: true
hostnames:
  - name
compose:
  ansible_host: >-
    network_interface[0].nat_ip_address
      if (network_interface is defined and network_interface|length > 0
          and network_interface[0].nat_ip_address)
      else network_interface[0].ip_address
provider_mapping:
  - provider_name: "registry.terraform.io/yandex-cloud/yandex"
    types:
      - yandex_compute_instance
keyed_groups:
  - key: labels["type"]

❯ time ansible-inventory --graph

@all:
  |--@ungrouped:
  |--@_group1:
  |  |--jump
  |  |--vm1_internal
  |--@_group2:
  |  |--vm2_internal
  |  |--vm3_internal
ansible-inventory --graph  1.51s user 0.52s system 17% cpu 11.485 total

[ne_bknn@GrayStorage ~]$ lsblk
NAME        MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINTS
sda           8:0    0   7.3T  0 disk
sdb           8:16   0   7.3T  0 disk
sdc           8:32   0   7.3T  0 disk
sdd           8:48   0   7.3T  0 disk