Rearanged the playbook to use ansible roles:

http://docs.ansible.com/ansible/playbooks_roles.html

also made keystone run

roles/keystone/tasks/main.yml

@@ -0,0 +1,35 @@
+# Build and install a docker image for keystone.
+---
+- include: ../common/tasks/docker.yml
+
+- name: Make docker build dir
+  file:
+    path: /srv/keystone
+    state: directory
+    mode: 0755
+
+- name: install Dockerfile
+  copy:
+    src: files/Dockerfile
+    dest: /srv/keystone
+
+- name: build keystone image
+  docker_image:
+    path: /srv/keystone
+    name: hpc/keystone
+
+- name: install service file.
+  template:
+    src: files/keystone.service
+    dest: /etc/systemd/system/keystone.service
+    mode: 644
+    owner: root
+    group: root
+
+- name: install service file
+  command: systemctl daemon-reload
+
+- name: make sure service is started
+  systemd:
+    name: keystone.service
+    state: started