diff --git a/ansible-preparazione-vm/ansible.cfg b/ansible-preparazione-vm/ansible.cfg
new file mode 100644
index 0000000000000000000000000000000000000000..038ebcfeb1d67e5fa79afc010cda76dfc5a574ab
--- /dev/null
+++ b/ansible-preparazione-vm/ansible.cfg
@@ -0,0 +1,231 @@
+# config file for ansible -- http://ansible.com/
+# ==============================================
+# nearly all parameters can be overridden in ansible-playbook 
+# or with command line flags. ansible will read ANSIBLE_CONFIG,
+# ansible.cfg in the current working directory, .ansible.cfg in
+# the home directory or /etc/ansible/ansible.cfg, whichever it
+# finds first
+[defaults]
+# some basic default values...
+#inventory      = /etc/ansible/hosts
+#library        = /usr/share/my_modules/
+#remote_tmp     = $HOME/.ansible/tmp
+#forks          = 5
+#poll_interval  = 15
+#sudo_user      = root
+#ask_sudo_pass = True
+#ask_pass      = True
+#transport      = smart
+#remote_port    = 22
+#module_lang    = C
+# plays will gather facts by default, which contain information about
+# the remote system.
+#
+# smart - gather by default, but don't regather if already gathered
+# implicit - gather by default, turn off with gather_facts: False
+# explicit - do not gather by default, must say gather_facts: True
+#gathering = implicit
+# additional paths to search for roles in, colon separated
+#roles_path    = /etc/ansible/roles
+# uncomment this to disable SSH key host checking
+host_key_checking = False
+# change the default callback
+#stdout_callback = skippy
+# enable additional callbacks
+#callback_whitelist = timer, mail
+# change this for alternative sudo implementations
+#sudo_exe = sudo
+# What flags to pass to sudo
+# WARNING: leaving out the defaults might create unexpected behaviours
+#sudo_flags = -H -S -n
+# SSH timeout
+timeout = 30
+# default user to use for playbooks if user is not specified
+# (/usr/bin/ansible will use current user as default)
+#remote_user = root
+# logging is off by default unless this path is defined
+# if so defined, consider logrotate
+#log_path = /var/log/ansible.log
+# default module name for /usr/bin/ansible
+#module_name = command
+# use this shell for commands executed under sudo
+# you may need to change this to bin/bash in rare instances
+# if sudo is constrained
+#executable = /bin/sh
+# if inventory variables overlap, does the higher precedence one win
+# or are hash values merged together?  The default is 'replace' but
+# this can also be set to 'merge'.
+#hash_behaviour = replace
+# by default, variables from roles will be visible in the global variable
+# scope. To prevent this, the following option can be enabled, and only
+# tasks and handlers within the role will see the variables there
+#private_role_vars = yes
+# list any Jinja2 extensions to enable here:
+#jinja2_extensions = jinja2.ext.do,jinja2.ext.i18n
+# if set, always use this private key file for authentication, same as 
+# if passing --private-key to ansible or ansible-playbook
+#private_key_file = /path/to/file
+# format of string {{ ansible_managed }} available within Jinja2
+# templates indicates to users editing templates files will be replaced.
+# replacing {file}, {host} and {uid} and strftime codes with proper values.
+#ansible_managed = Ansible managed: {file} modified on %Y-%m-%d %H:%M:%S by {uid} on {host}
+# This short version is better used in templates as it won't flag the file as changed every run.
+#ansible_managed = Ansible managed: {file} on {host}
+# by default, ansible-playbook will display "Skipping [host]" if it determines a task
+# should not be run on a host.  Set this to "False" if you don't want to see these "Skipping" 
+# messages. NOTE: the task header will still be shown regardless of whether or not the 
+# task is skipped.
+#display_skipped_hosts = True
+# by default, if a task in a playbook does not include a name: field then
+# ansible-playbook will construct a header that includes the task's action but
+# not the task's args.  This is a security feature because ansible cannot know
+# if the *module* considers an argument to be no_log at the time that the
+# header is printed.  If your environment doesn't have a problem securing
+# stdout from ansible-playbook (or you have manually specified no_log in your
+# playbook on all of the tasks where you have secret information) then you can
+# safely set this to True to get more informative messages.
+#display_args_to_stdout = False
+# by default (as of 1.3), Ansible will raise errors when attempting to dereference 
+# Jinja2 variables that are not set in templates or action lines. Uncomment this line
+# to revert the behavior to pre-1.3.
+#error_on_undefined_vars = False
+# by default (as of 1.6), Ansible may display warnings based on the configuration of the
+# system running ansible itself. This may include warnings about 3rd party packages or
+# other conditions that should be resolved if possible.
+# to disable these warnings, set the following value to False:
+#system_warnings = True
+# by default (as of 1.4), Ansible may display deprecation warnings for language
+# features that should no longer be used and will be removed in future versions.
+# to disable these warnings, set the following value to False:
+#deprecation_warnings = True
+# (as of 1.8), Ansible can optionally warn when usage of the shell and
+# command module appear to be simplified by using a default Ansible module
+# instead.  These warnings can be silenced by adjusting the following
+# setting or adding warn=yes or warn=no to the end of the command line 
+# parameter string.  This will for example suggest using the git module
+# instead of shelling out to the git command.
+# command_warnings = False
+# set plugin path directories here, separate with colons
+#action_plugins     = /usr/share/ansible/plugins/action
+#callback_plugins   = /usr/share/ansible/plugins/callback
+#connection_plugins = /usr/share/ansible/plugins/connection
+#lookup_plugins     = /usr/share/ansible/plugins/lookup
+#vars_plugins       = /usr/share/ansible/plugins/vars
+#filter_plugins     = /usr/share/ansible/plugins/filter
+#test_plugins       = /usr/share/ansible/plugins/test
+# by default callbacks are not loaded for /bin/ansible, enable this if you
+# want, for example, a notification or logging callback to also apply to 
+# /bin/ansible runs
+#bin_ansible_callbacks = False
+# don't like cows?  that's unfortunate.
+# set to 1 if you don't want cowsay support or export ANSIBLE_NOCOWS=1 
+#nocows = 1
+# set which cowsay stencil you'd like to use by default. When set to 'random',
+# a random stencil will be selected for each task. The selection will be filtered
+# against the `cow_whitelist` option below.
+#cow_selection = default
+#cow_selection = random
+# when using the 'random' option for cowsay, stencils will be restricted to this list.
+# it should be formatted as a comma-separated list with no spaces between names.
+# NOTE: line continuations here are for formatting purposes only, as the INI parser
+#       in python does not support them.
+#cow_whitelist=bud-frogs,bunny,cheese,daemon,default,dragon,elephant-in-snake,elephant,eyes,\
+#              hellokitty,kitty,luke-koala,meow,milk,moofasa,moose,ren,sheep,small,stegosaurus,\
+#              stimpy,supermilker,three-eyes,turkey,turtle,tux,udder,vader-koala,vader,www
+# don't like colors either?
+# set to 1 if you don't want colors, or export ANSIBLE_NOCOLOR=1
+#nocolor = 1
+# if set to a persistent type (not 'memory', for example 'redis') fact values
+# from previous runs in Ansible will be stored.  This may be useful when
+# wanting to use, for example, IP information from one group of servers
+# without having to talk to them in the same playbook run to get their
+# current IP information.
+#fact_caching = redis
+# retry files
+# When a playbook fails by default a .retry file will be created in ~/
+# You can disable this feature by setting retry_files_enabled to False
+# and you can change the location of the files by setting retry_files_save_path
+retry_files_enabled = False
+retry_files_save_path = ~/.ansible-retry
+# prevents logging of task data, off by default
+#no_log = False
+# prevents logging of tasks, but only on the targets, data is still logged on the master/controller
+#no_target_syslog = False
+# controls the compression level of variables sent to
+# worker processes. At the default of 0, no compression
+# is used. This value must be an integer from 0 to 9.
+#var_compression_level = 9
+[privilege_escalation]
+#become=True
+#become_method=sudo
+#become_user=root
+#become_ask_pass=False
+[paramiko_connection]
+# uncomment this line to cause the paramiko connection plugin to not record new host
+# keys encountered.  Increases performance on new host additions.  Setting works independently of the
+# host key checking setting above.
+record_host_keys=False
+# by default, Ansible requests a pseudo-terminal for commands executed under sudo. Uncomment this
+# line to disable this behaviour.
+#pty=False
+[ssh_connection]
+# ssh arguments to use
+# Leaving off ControlPersist will result in poor performance, so use 
+# paramiko on older platforms rather than removing it
+#ssh_args = -o ControlMaster=auto -o ControlPersist=60s
+# The path to use for the ControlPath sockets. This defaults to
+# "%(directory)s/ansible-ssh-%%h-%%p-%%r", however on some systems with
+# very long hostnames or very long path names (caused by long user names or 
+# deeply nested home directories) this can exceed the character limit on
+# file socket names (108 characters for most platforms). In that case, you 
+# may wish to shorten the string below.
+# 
+# Example: 
+# control_path = %(directory)s/%%h-%%r
+#control_path = %(directory)s/ansible-ssh-%%h-%%p-%%r
+# Enabling pipelining reduces the number of SSH operations required to 
+# execute a module on the remote server. This can result in a significant 
+# performance improvement when enabled, however when using "sudo:" you must 
+# first disable 'requiretty' in /etc/sudoers
+#
+# By default, this option is disabled to preserve compatibility with
+# sudoers configurations that have requiretty (the default on many distros).
+# 
+pipelining = True
+# if True, make ansible use scp if the connection type is ssh 
+# (default is sftp)
+#scp_if_ssh = True
+# if False, sftp will not use batch mode to transfer files. This may cause some
+# types of file transfer failures impossible to catch however, and should
+# only be disabled if your sftp version has problems with batch mode
+#sftp_batch_mode = False
+[accelerate]
+#accelerate_port = 5099
+#accelerate_timeout = 30
+#accelerate_connect_timeout = 5.0
+# The daemon timeout is measured in minutes. This time is measured
+# from the last activity to the accelerate daemon.
+#accelerate_daemon_timeout = 30 
+# If set to yes, accelerate_multi_key will allow multiple
+# private keys to be uploaded to it, though each user must
+# have access to the system via SSH to add a new key. The default
+# is "no".
+#accelerate_multi_key = yes
+[selinux]
+# file systems that require special treatment when dealing with security context
+# the default behaviour that copies the existing context or uses the user default
+# needs to be changed to use the file system dependent context.
+#special_context_filesystems=nfs,vboxsf,fuse,ramfs
+[colors]
+#verbose = blue
+#warn = bright purple
+#error = red
+#debug = dark gray
+#deprecate = purple
+#skip = cyan
+#unreachable = red
+#ok = green
+#changed = yellow
+#diff_add = green
+#diff_remove = red
+#diff_lines = cyan
diff --git a/ansible-preparazione-vm/inventory.yml b/ansible-preparazione-vm/inventory.yml
new file mode 100644
index 0000000000000000000000000000000000000000..baf4b592defd5233baea783e00441b99416941e5
--- /dev/null
+++ b/ansible-preparazione-vm/inventory.yml
@@ -0,0 +1,6 @@
+[master]
+192.168.30.31 vm_key="ssh-rsa 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 simone.visconti@garr.it"
+
+
+[slave]
+192.168.30.[32:33]
diff --git a/ansible-preparazione-vm/master/files/id_rsa b/ansible-preparazione-vm/master/files/id_rsa
new file mode 100644
index 0000000000000000000000000000000000000000..fa7abf6661b7346208084f558ebc044b32fce72d
--- /dev/null
+++ b/ansible-preparazione-vm/master/files/id_rsa
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/ansible-preparazione-vm/master/files/id_rsa.pub b/ansible-preparazione-vm/master/files/id_rsa.pub
new file mode 100644
index 0000000000000000000000000000000000000000..7c785a9028b87532a1cb426d89a36be06e33112b
--- /dev/null
+++ b/ansible-preparazione-vm/master/files/id_rsa.pub
@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwaZYAd5YVhxJkQ/wZAtkRLmOpHwIcayfMKDS3uJfrnBb1EoYNC3UUyejvqIaJv/MHxkqQ+8qUipqmTI/bvlhRyXzVHn4ISugFWhj+RFOjFaTmyGPeiLGj6aJGu55oyr2SIg2er34UG0WXwY/2VpkQBrIWSCXwSO6WrUNRU3b3DRQr3xvjp32FVpyRxbx/g/CURAc7B6lxUB77LW9oWKHUXwk6sw7Jch/UkTL+nODqEU55nhSnPlgqdd8gr6VPHfRLNAeySy5FF6F0BXl916U05lOvnNzQk4HTyT0pfqc2wUYUo57vATL0y7wLXRy1uxdibZ24mi7oMOKB532o4mP9 root@ansible
diff --git a/ansible-preparazione-vm/master/tasks/main.yml b/ansible-preparazione-vm/master/tasks/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..3f2859f15b9f40977b53ae327918a675a2498e3d
--- /dev/null
+++ b/ansible-preparazione-vm/master/tasks/main.yml
@@ -0,0 +1,25 @@
+- name: Aggiungo la chiave pubblica della VM Ansible alle chiavi per accedere a root delle VM GARRbox
+  become_method: sudo
+  authorized_key:
+    user: debian
+    key: "{{ vm_key }}"
+    state: present
+
+- name: Install ssh key
+  copy: 
+    src: "master/files/id_rsa" 
+    dest: "/home/debian/.ssh/id_rsa"
+    force: yes
+    mode: 0600
+    owner: debian
+    group: debian
+
+- name: Install ssh key
+  copy:
+    src: "master/files/id_rsa.pub"
+    dest: "/home/debian/.ssh/id_rsa.pub"
+    force: yes
+    mode: 0600
+    owner: debian
+    group: debian
+
diff --git a/ansible-preparazione-vm/playbook.yml b/ansible-preparazione-vm/playbook.yml
new file mode 100644
index 0000000000000000000000000000000000000000..53d79da3d97ccde79dc7ff28d5d768cfe59e8a06
--- /dev/null
+++ b/ansible-preparazione-vm/playbook.yml
@@ -0,0 +1,14 @@
+- name: Playbook per configurare le VM master
+  become: yes
+  hosts: master
+  remote_user: debian
+  roles:
+    - master
+
+- name: Playbook per configurare le VM master
+  become: yes
+  hosts: slave
+  remote_user: debian
+  roles:
+    - slave
+
diff --git a/ansible-preparazione-vm/slave/files/id_rsa.pub b/ansible-preparazione-vm/slave/files/id_rsa.pub
new file mode 100644
index 0000000000000000000000000000000000000000..7c785a9028b87532a1cb426d89a36be06e33112b
--- /dev/null
+++ b/ansible-preparazione-vm/slave/files/id_rsa.pub
@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwaZYAd5YVhxJkQ/wZAtkRLmOpHwIcayfMKDS3uJfrnBb1EoYNC3UUyejvqIaJv/MHxkqQ+8qUipqmTI/bvlhRyXzVHn4ISugFWhj+RFOjFaTmyGPeiLGj6aJGu55oyr2SIg2er34UG0WXwY/2VpkQBrIWSCXwSO6WrUNRU3b3DRQr3xvjp32FVpyRxbx/g/CURAc7B6lxUB77LW9oWKHUXwk6sw7Jch/UkTL+nODqEU55nhSnPlgqdd8gr6VPHfRLNAeySy5FF6F0BXl916U05lOvnNzQk4HTyT0pfqc2wUYUo57vATL0y7wLXRy1uxdibZ24mi7oMOKB532o4mP9 root@ansible
diff --git a/ansible-preparazione-vm/slave/tasks/main.yml b/ansible-preparazione-vm/slave/tasks/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..02dd124a5af3797badc3d82bf3c76606fbe0e902
--- /dev/null
+++ b/ansible-preparazione-vm/slave/tasks/main.yml
@@ -0,0 +1,6 @@
+- name: Aggiungo la chiave pubblica della VM Ansible alle chiavi per accedere a root delle VM GARRbox
+  become_method: sudo
+  authorized_key:
+    user: debian
+    key: "{{ lookup('file', 'slave/files/id_rsa.pub') }}"
+    state: present