Ansible: Difference between revisions

From Chorke Wiki
Jump to navigation Jump to search
 
(81 intermediate revisions by the same user not shown)
Line 1: Line 1:
<source lang="bash">
<syntaxhighlight lang="bash">
sudo apt update  && sudo apt list  --upgradeable
sudo apt update  && sudo apt list  --upgradeable
sudo apt upgrade && sudo apt install ansible
sudo apt upgrade && sudo apt install ansible ansible-lint sshpass
 
sshpass -V
ansible --version
ansible --version
</source>
ansible-lint --version
</syntaxhighlight>
 
== Playbook ==
{|
| valign="top" colspan="2" |
chorke-academia-project
├─ main_playbook.yml
└─ inventories/
    ├─ staging/
    │  └─ academia/
    │    ├─ inventory.yml
    │    └─ group_vars/
    │        ├─ academia_group.yaml
    │        └─ all.yaml
    └─ test/
      └─ academia/
          ├─ inventory.yml
          └─ group_vars/
              ├─ academia_group.yaml
              └─ all.yaml
 
| valign="top" |
<syntaxhighlight lang="properties">
all:
  children:
    gtw_servers:
      hosts:
        10.20.30.1:
    dmz_servers:
      hosts:
        10.20.30.100:
    dns_servers:
      hosts:
        10.20.30.[100:102]:
      vars:
        ansible_port: 4321
        ansible_user: deploy
        ansible_ssh_pass: sadaqah
</syntaxhighlight>
 
|-
| colspan="3" |
----
|-
| valign="top" colspan="3" |
<syntaxhighlight lang="bash">
mkdir -p chorke-academia-project/inventories/{staging,test}/academia/{group_vars,host_vars}
touch    chorke-academia-project/inventories/{staging,test}/academia/group_vars/{all,academia_group}.yaml
touch    chorke-academia-project/inventories/{staging,test}/academia/inventory.yml
touch    chorke-academia-project/main_playbook.yml
 
cd chorke-academia-project
ansible-playbook  -i inventories/staging main_playbook.yml
ansible-inventory -i inventories/staging --list
</syntaxhighlight>
|}
 
== Playbook » LXD==
{|
|valign="top"|
<syntaxhighlight lang="yaml" highlight="4,12,36,39-43,65-67" line>
mkdir -p ~/Documents/ansible-playground
cd      ~/Documents/ansible-playground
 
cat << 'YML' | tee ./lxd-launch-ubuntu-24-lts.yml >/dev/null
---
- name: LXD Launch Ubuntu 24.04 LTS
  hosts: localhost
  connection: local
  vars:
    cpu_architecture: "{{ ansible_architecture }}"
    os_family: "{{ ansible_os_family }}"
    container_name: ubuntu-24-lts
 
  tasks:
    - name: Dirty Facts
      set_fact:
        raw_cpu_family: >
          {% if ansible_architecture == 'x86_64' %}
            amd64
          {% elif ansible_architecture == 'aarch64' %}
            arm64
          {% else %}
            {{ ansible_architecture }}
          {% endif %}
      delegate_to: localhost
 
    - name: Clean Facts
      set_fact:
        cpu_family: "{{ raw_cpu_family | trim }}"
      delegate_to: localhost
 
    - name: Launch Container
      community.general.lxd_container:
        name: "{{ container_name }}"
        ignore_volatile_options: true
        type: container
        state: started
        source:
          mode: pull
          type: image
          protocol: simplestreams
          server: https://cloud-images.ubuntu.com/releases
          alias: 24.04/{{ cpu_family }}
        profiles: ["default"]
        wait_for_ipv4_addresses: true
        timeout: 600
 
    - name: Check Python
      delegate_to: "{{ container_name }}"
      ansible.builtin.raw: |
        lxc exec {{ container_name }} -- dpkg -s python3.11
      register: python_install_check
      failed_when: python_install_check.rc not in [0, 1]
      changed_when: false
 
    - name: Install Python
      delegate_to: "{{ container_name }}"
      ansible.builtin.raw: |
        lxc exec {{ container_name }} -- apt-get update
        lxc exec {{ container_name }} -- apt-get install -y python3.11
        lxc exec {{ container_name }} -- apt-get clean
      when: python_install_check.rc == 1
YML
 
ansible-playbook lxd-launch-ubuntu-24-lts.yml
lxc exec ubuntu-24-lts -- bash
lxc rm  ubuntu-24-lts -f
lxc ls
</syntaxhighlight>
 
|valign="top"|
<syntaxhighlight lang="yaml" highlight="4,12,36,39-43,65-67" line>
mkdir -p ~/Documents/ansible-playground
cd      ~/Documents/ansible-playground
 
cat << 'YML' | tee ./lxd-launch-ubuntu-24-lts-vm.yml >/dev/null
---
- name: LXD Launch Ubuntu 24.04 LTS
  hosts: localhost
  connection: local
  vars:
    cpu_architecture: "{{ ansible_architecture }}"
    os_family: "{{ ansible_os_family }}"
    container_name: ubuntu-24-lts-vm
 
  tasks:
    - name: Dirty Facts
      set_fact:
        raw_cpu_family: >
          {% if ansible_architecture == 'x86_64' %}
            amd64
          {% elif ansible_architecture == 'aarch64' %}
            arm64
          {% else %}
            {{ ansible_architecture }}
          {% endif %}
      delegate_to: localhost
 
    - name: Clean Facts
      set_fact:
        cpu_family: "{{ raw_cpu_family | trim }}"
      delegate_to: localhost
 
    - name: Launch Container
      community.general.lxd_container:
        name: "{{ container_name }}"
        ignore_volatile_options: true
        type: virtual-machine
        state: started
        source:
          mode: pull
          type: image
          protocol: simplestreams
          server: https://cloud-images.ubuntu.com/releases
          alias: 24.04/{{ cpu_family }}
        profiles: ["default"]
        wait_for_ipv4_addresses: true
        timeout: 600
 
    - name: Check Python
      delegate_to: "{{ container_name }}"
      ansible.builtin.raw: |
        lxc exec {{ container_name }} -- dpkg -s python3.11
      register: python_install_check
      failed_when: python_install_check.rc not in [0, 1]
      changed_when: false
 
    - name: Install Python
      delegate_to: "{{ container_name }}"
      ansible.builtin.raw: |
        lxc exec {{ container_name }} -- apt-get update
        lxc exec {{ container_name }} -- apt-get install -y python3.11
        lxc exec {{ container_name }} -- apt-get clean
      when: python_install_check.rc == 1
YML
 
ansible-playbook lxd-launch-ubuntu-24-lts-vm.yml
lxc exec ubuntu-24-lts-vm -- bash
lxc rm  ubuntu-24-lts-vm -f
lxc ls
</syntaxhighlight>
|}
 
== Molecule ==
mkdir molecule-example && cd molecule-example
python3 -m venv .venv --prompt="molecule"
source ./.venv/bin/activate
pip install 'molecule[lint]'
pip install  molecule-podman
pip freeze  > requirements.txt
molecule init role 'acme.mywebapp' --driver-name podman


== Modules ==
== Modules ==
Line 60: Line 275:
| valign="top" |
| valign="top" |
* [https://docs.ansible.com/ansible/latest/collections/community/general/yarn_module.html <code>community.general.yarn</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/general/yarn_module.html <code>community.general.yarn</code>]
| valign="top" |
| valign="top" |
|-
| colspan="3" |
----
|-
| valign="top" |
* [https://docs.ansible.com/ansible/latest/collections/community/docker/docker_config_module.html <code>community.docker.docker_config</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/docker/docker_image_module.html <code>community.docker.docker_image</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/docker/ <code>Community.Docker</code>]


| valign="top" |
| valign="top" |
Line 123: Line 351:


| valign="top" |
| valign="top" |
* [https://docs.ansible.com/ansible/latest/collections/community/rabbitmq/ <code>community.rabbitmq</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/routeros/ <code>community.routeros</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/skydive/ <code>community.skydive</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/grafana/ <code>community.grafana</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/crypto/ <code>community.crypto</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/crypto/ <code>community.crypto</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/docker/ <code>community.docker</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/docker/ <code>community.docker</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/google/ <code>community.google</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/azure/ <code>community.azure</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/azure/ <code>community.azure</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/aws/ <code>community.aws</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/aws/ <code>community.aws</code>]
* [https://docs.ansible.com/ansible/latest/collections/community/dns/ <code>community.dns</code>]


| valign="top" |
|-
| colspan="3" |
----
|-
| valign="top" |
| valign="top" |
* [https://docs.ansible.com/ansible/latest/collections/openvswitch/openvswitch/ <code>openvswitch.openvswitch</code>]
* [https://docs.ansible.com/ansible/latest/collections/openvswitch/openvswitch/ <code>openvswitch.openvswitch</code>]
Line 144: Line 372:
* [https://docs.ansible.com/ansible/latest/collections/amazon/ <code>amazon.aws</code>]
* [https://docs.ansible.com/ansible/latest/collections/amazon/ <code>amazon.aws</code>]


|-
| colspan="3" |
----
|-
| valign="top" |
| valign="top" |
* [https://docs.ansible.com/ansible/latest/collections/ansible/netcommon/ <code>ansible.netcommon</code>]
* [https://docs.ansible.com/ansible/latest/collections/ansible/netcommon/ <code>ansible.netcommon</code>]
Line 152: Line 384:


| valign="top" |
| valign="top" |
| valign="top" |
|}
==Knowledge==
{|
| valign="top" |
<syntaxhighlight lang="bash">
python3 -m venv .venv --prompt="Molecule"
# source .venv/bin/activate
# (Molecule) $
</syntaxhighlight>
| valign="top" |
<syntaxhighlight lang="bash">
python3 -m venv .venv --prompt="Molecule"
# source .venv/bin/activate
# (Molecule) $
</syntaxhighlight>
| valign="top" |
<syntaxhighlight lang="PowerShell">
python -m venv .venv --prompt="Molecule"
# .venv\Scripts\activate
# (Molecule) PS>
</syntaxhighlight>
|-
| colspan="3" |
----
|-
| valign="top" |
<syntaxhighlight lang="bash">
pip install -r requirements.txt
pip freeze  > requirements.txt
</syntaxhighlight>
| valign="top" |
<syntaxhighlight lang="ini">
[all:vars]
ansible_port=22
</syntaxhighlight>
| valign="ini" |
<syntaxhighlight lang="bash">
ansible_connection=ssh
ansible_ssh_pass=vagrant
</syntaxhighlight>
|-
| colspan="3" |
----
|-
| valign="top"|
<syntaxhighlight lang="bash">
ansible-inventory\
-i inventories/staging/\
--list
</syntaxhighlight>
| valign="top"|
<syntaxhighlight lang="bash">
ansible dns_servers\
-i inventories/staging/\
-m ping
</syntaxhighlight>
| valign="top"|
<syntaxhighlight lang="bash">
ansible-playbook\
-i inventories/staging/\
main_playbook.yml
</syntaxhighlight>
|-
| colspan="3" |
----
|-
| valign="top" |
pip install -U pip
pip install --upgrade pip
| valign="bottom" |
pip freeze  > requirements.txt
pip install -r requirements.txt --upgrade
| valign="bottom" |
pip list --outdated
pip install pip-check
|-
| colspan="3" |
----
|-
| colspan="3" |
pip list -o        | gawk -F ' ' 'NR>2{print$1}' | xargs pip install -U
pip list --outdated | gawk -F ' ' 'NR>2{print$1}' | xargs pip install --upgrade


|}
|}
Line 160: Line 490:
* [https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-ansible-on-ubuntu-20-04 Ansible » Install & Configure on Ubuntu 20.04]
* [https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-ansible-on-ubuntu-20-04 Ansible » Install & Configure on Ubuntu 20.04]
* [https://www.ansible.com/blog/ansible-best-practices-essentials Ansible » Essentials Best Practices]
* [https://www.ansible.com/blog/ansible-best-practices-essentials Ansible » Essentials Best Practices]
* [https://www.digitalocean.com/community/tutorials/how-to-define-tasks-in-ansible-playbooks Ansible » Playbook » Define Tasks]
* [https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_variables.html Ansible » Playbook » Variables]
* [https://docs.ansible.com/ansible/latest/inventory_guide/ Ansible » Building Inventories]
* [https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_filters.html Ansible » Playbook » Filters]
* [https://www.redhat.com/sysadmin/developing-ansible-role Ansible » Developing Role]
* [https://molecule.readthedocs.io/en/latest/ Ansible » Test » Molecule]
* [https://testinfra.readthedocs.io/en/latest/ Ansible » Test » Testinfra]
* [https://tox.wiki/en/latest/ Ansible » Test » Tox]


| valign="top" |
| valign="top" |
* [https://stackoverflow.com/questions/64905347/ Ansible » Resolve <code>inventory</code>, <code>group_vars</code> & <code>host_vars</code>]
* [https://www.ansible.com/blog/developing-and-testing-ansible-roles-with-molecule-and-podman-part-1 Ansible » Test » Molecule » Podman » Roles » Part 1]
* [https://www.ansible.com/blog/developing-and-testing-ansible-roles-with-molecule-and-podman-part-2 Ansible » Test » Molecule » Podman » Roles » Part 2]
* [https://molecule.readthedocs.io/en/latest/getting-started.html Ansible » Test » Molecule » Getting Started]
* [https://molecule.readthedocs.io/en/latest/ci.html Ansible » Test » Molecule » CI/CD]
* [https://www.cherryservers.com/blog/how-to-set-up-ansible-inventory-file Ansible » Set Up Inventory File]
* [https://marketplace.visualstudio.com/items?itemName=redhat.ansible Ansible » VS Code Extension]
* [https://www.digitalocean.com/community/tutorials/how-to-set-up-ansible-inventories Ansible » Set Up Inventories]
* [https://spacelift.io/blog/ansible-variables Ansible » Types of Variables]
* [https://docs.ansible.com/ansible-tower/latest/html/userguide/ Ansible » Tower]


| valign="top" |
| valign="top" |
* [https://serverfault.com/questions/628989/ Ansible » Set Default User/Password for SSH]
* [https://stackoverflow.com/questions/37004686/ Ansible » Prompt User/Password from CLI]


|-
|-
Line 170: Line 520:
|-
|-
| valign="top" |
| valign="top" |
* [https://realpython.com/python-virtual-environments-a-primer/ Python Virtual Environments]
* [https://stackoverflow.com/questions/62209131/ Dependency File in Python]
* [[VS Code on iPad Pro]]
* [https://docs.fileformat.com/programming/yaml/ What is a YAML File]
* [https://docs.fileformat.com/programming/yml/ What is a YML File]
* [[Docker Compose]]
* [[Linux Containers]]
* [[Kubernetes]]
* [[Podman]]
* [[Docker]]


| valign="top" |
| valign="top" |
* [[Academia JavaEE Workspace in Raspbian]]
* [[Academia JavaEE Workspace in Ubuntu]]
* [[Academia JavaEE Workspace in MacOS]]
* [https://dev.to/aws-builders/ssh-setup-and-tunneling-via-bastion-host-3kcc AWS » Bastion Host SSH Tunneling]
* [[Sed Replace A Multi-Line String]]
* [https://serverfault.com/questions/283129/ SSH Connection Hang Forever]
* [https://pip.pypa.io/en/stable/cli/pip_freeze/ Python Pip Freeze]
* [[Terraform]]
* [[OpenVPN]]
* [[Vagrant]]


| valign="top" |
| valign="top" |
* [https://www.activestate.com/resources/quick-reads/how-to-update-all-python-packages/ Update All Python Packages]


|}
|}

Latest revision as of 07:54, 19 May 2024

sudo apt update  && sudo apt list  --upgradeable
sudo apt upgrade && sudo apt install ansible ansible-lint sshpass

sshpass -V
ansible --version
ansible-lint --version

Playbook

chorke-academia-project
├─ main_playbook.yml
└─ inventories/
   ├─ staging/
   │  └─ academia/
   │     ├─ inventory.yml
   │     └─ group_vars/
   │        ├─ academia_group.yaml
   │        └─ all.yaml
   └─ test/
      └─ academia/
         ├─ inventory.yml
         └─ group_vars/
             ├─ academia_group.yaml
             └─ all.yaml

all:
  children:
    gtw_servers:
      hosts:
        10.20.30.1:
    dmz_servers:
      hosts:
        10.20.30.100:
    dns_servers:
      hosts:
        10.20.30.[100:102]:
      vars:
        ansible_port: 4321
        ansible_user: deploy
        ansible_ssh_pass: sadaqah

mkdir -p chorke-academia-project/inventories/{staging,test}/academia/{group_vars,host_vars}
touch    chorke-academia-project/inventories/{staging,test}/academia/group_vars/{all,academia_group}.yaml
touch    chorke-academia-project/inventories/{staging,test}/academia/inventory.yml
touch    chorke-academia-project/main_playbook.yml

cd chorke-academia-project
ansible-playbook  -i inventories/staging main_playbook.yml
ansible-inventory -i inventories/staging --list

Playbook » LXD

mkdir -p ~/Documents/ansible-playground
cd       ~/Documents/ansible-playground

cat << 'YML' | tee ./lxd-launch-ubuntu-24-lts.yml >/dev/null
---
- name: LXD Launch Ubuntu 24.04 LTS
  hosts: localhost
  connection: local
  vars:
    cpu_architecture: "{{ ansible_architecture }}"
    os_family: "{{ ansible_os_family }}"
    container_name: ubuntu-24-lts

  tasks:
    - name: Dirty Facts
      set_fact:
        raw_cpu_family: >
          {% if ansible_architecture == 'x86_64' %}
            amd64
          {% elif ansible_architecture == 'aarch64' %}
            arm64
          {% else %}
            {{ ansible_architecture }}
          {% endif %}
      delegate_to: localhost

    - name: Clean Facts
      set_fact:
        cpu_family: "{{ raw_cpu_family | trim }}"
      delegate_to: localhost

    - name: Launch Container
      community.general.lxd_container:
        name: "{{ container_name }}"
        ignore_volatile_options: true
        type: container
        state: started
        source:
          mode: pull
          type: image
          protocol: simplestreams
          server: https://cloud-images.ubuntu.com/releases
          alias: 24.04/{{ cpu_family }}
        profiles: ["default"]
        wait_for_ipv4_addresses: true
        timeout: 600

    - name: Check Python
      delegate_to: "{{ container_name }}"
      ansible.builtin.raw: |
        lxc exec {{ container_name }} -- dpkg -s python3.11
      register: python_install_check
      failed_when: python_install_check.rc not in [0, 1]
      changed_when: false

    - name: Install Python
      delegate_to: "{{ container_name }}"
      ansible.builtin.raw: |
        lxc exec {{ container_name }} -- apt-get update
        lxc exec {{ container_name }} -- apt-get install -y python3.11
        lxc exec {{ container_name }} -- apt-get clean
      when: python_install_check.rc == 1
YML

ansible-playbook lxd-launch-ubuntu-24-lts.yml
lxc exec ubuntu-24-lts -- bash
lxc rm   ubuntu-24-lts -f
lxc ls

mkdir -p ~/Documents/ansible-playground
cd       ~/Documents/ansible-playground

cat << 'YML' | tee ./lxd-launch-ubuntu-24-lts-vm.yml >/dev/null
---
- name: LXD Launch Ubuntu 24.04 LTS
  hosts: localhost
  connection: local
  vars:
    cpu_architecture: "{{ ansible_architecture }}"
    os_family: "{{ ansible_os_family }}"
    container_name: ubuntu-24-lts-vm

  tasks:
    - name: Dirty Facts
      set_fact:
        raw_cpu_family: >
          {% if ansible_architecture == 'x86_64' %}
            amd64
          {% elif ansible_architecture == 'aarch64' %}
            arm64
          {% else %}
            {{ ansible_architecture }}
          {% endif %}
      delegate_to: localhost

    - name: Clean Facts
      set_fact:
        cpu_family: "{{ raw_cpu_family | trim }}"
      delegate_to: localhost

    - name: Launch Container
      community.general.lxd_container:
        name: "{{ container_name }}"
        ignore_volatile_options: true
        type: virtual-machine
        state: started
        source:
          mode: pull
          type: image
          protocol: simplestreams
          server: https://cloud-images.ubuntu.com/releases
          alias: 24.04/{{ cpu_family }}
        profiles: ["default"]
        wait_for_ipv4_addresses: true
        timeout: 600

    - name: Check Python
      delegate_to: "{{ container_name }}"
      ansible.builtin.raw: |
        lxc exec {{ container_name }} -- dpkg -s python3.11
      register: python_install_check
      failed_when: python_install_check.rc not in [0, 1]
      changed_when: false

    - name: Install Python
      delegate_to: "{{ container_name }}"
      ansible.builtin.raw: |
        lxc exec {{ container_name }} -- apt-get update
        lxc exec {{ container_name }} -- apt-get install -y python3.11
        lxc exec {{ container_name }} -- apt-get clean
      when: python_install_check.rc == 1
YML

ansible-playbook lxd-launch-ubuntu-24-lts-vm.yml
lxc exec ubuntu-24-lts-vm -- bash
lxc rm   ubuntu-24-lts-vm -f
lxc ls

Molecule

mkdir molecule-example && cd molecule-example
python3 -m venv .venv --prompt="molecule"
source ./.venv/bin/activate

pip install 'molecule[lint]'
pip install  molecule-podman
pip freeze   > requirements.txt
molecule init role 'acme.mywebapp' --driver-name podman

Modules

Namespaces

Knowledge

python3 -m venv .venv --prompt="Molecule"
# source .venv/bin/activate
# (Molecule) $

python3 -m venv .venv --prompt="Molecule"
# source .venv/bin/activate
# (Molecule) $

python -m venv .venv --prompt="Molecule"
# .venv\Scripts\activate
# (Molecule) PS>

pip install -r requirements.txt
pip freeze   > requirements.txt

[all:vars]
ansible_port=22

ansible_connection=ssh
ansible_ssh_pass=vagrant

ansible-inventory\
 -i inventories/staging/\
 --list

ansible dns_servers\
 -i inventories/staging/\
 -m ping

ansible-playbook\
 -i inventories/staging/\
 main_playbook.yml

pip install -U pip
pip install --upgrade pip

pip freeze   > requirements.txt
pip install -r requirements.txt --upgrade

pip list --outdated
pip install pip-check

pip list -o         | gawk -F ' ' 'NR>2{print$1}' | xargs pip install -U
pip list --outdated | gawk -F ' ' 'NR>2{print$1}' | xargs pip install --upgrade

References

Retrieved from "https://cdn.chorke.org/weke/index.php?title=Ansible&oldid=11506"