![Inventory
● Static – ini file
● Dynamic – AWS, rackspace, linode, ...
mail.example.com
smtp.example.com ansible_ssh_port=5555
[webservers]
www[01:50].example.com ansible_ssh_host=192.168.1.50
[databases]
db-[a:f].example.com ansible_ssh_user=ansible](https://image.slidesharecdn.com/ansiblebrno1-ansibleintroduction-davidkarban-151013111019-lva1-app6892/85/Ansible-Introduction-Ansible-Brno-1-David-Karban-4-320.jpg)
![Facts
$ ansible -m setup localhost
localhost | success >> {
"ansible_facts": {
"ansible_all_ipv4_addresses": [
"10.13.3.193",
"192.168.122.1",
"10.8.0.16"
],
"ansible_all_ipv6_addresses": [
"fe80::4eeb:42ff:fe7a:21b9",
"fe80::8cb4:6eff:fed6:5743"
],
"ansible_architecture": "x86_64",
"ansible_bios_date": "01/09/2012",
...](https://image.slidesharecdn.com/ansiblebrno1-ansibleintroduction-davidkarban-151013111019-lva1-app6892/85/Ansible-Introduction-Ansible-Brno-1-David-Karban-5-320.jpg)
Ansible Introduction - Ansible Brno #1 - David Karban
- 1. Ansible
- 2. Main features ● Agentless ● Secure ● Provisioning AND deployment ● Easy to start ● Data driven – more like writing configuration file, than programming.
- 3. Terminology ● Inventory ● Facts ● Playbook ● Play ● Modules
- 4. Inventory ● Static – ini file ● Dynamic – AWS, rackspace, linode, ... mail.example.com smtp.example.com ansible_ssh_port=5555 [webservers] www[01:50].example.com ansible_ssh_host=192.168.1.50 [databases] db-[a:f].example.com ansible_ssh_user=ansible
- 5. Facts $ ansible -m setup localhost localhost | success >> { "ansible_facts": { "ansible_all_ipv4_addresses": [ "10.13.3.193", "192.168.122.1", "10.8.0.16" ], "ansible_all_ipv6_addresses": [ "fe80::4eeb:42ff:fe7a:21b9", "fe80::8cb4:6eff:fed6:5743" ], "ansible_architecture": "x86_64", "ansible_bios_date": "01/09/2012", ...
- 6. Playbook # gather all facts - include: common_scripts/gather_facts.yml # useful includes - include: common_scripts/common.yml - include: common_scripts/ntp.yml - hosts: webservers pre_tasks: - name: Ensure www user exists become: yes become_user: root user: name=www state=present group=www-data home=/dev/null shell=/bin/false roles: - apache - php - mysql tasks: - name: Aditional action not in roles authorized_keys: user: www key: “{{ lookup('file', inventory_dir + '/public_keys/www.pub') }}" state: present
- 7. Modules ● “batteries included” ● 250+ modules ● Cloud services (Amazon, Rackspace, Google Compute Platform, …) ● Packaging (apt, yum, pip, gem, ...) ● Source control (git, svn, …) ● OS stuff (service, command, file, template, ...)
- 8. Tools ● Vault (ansible-vault cmdline app) Encrypt and deencrypt variable files. ● Galaxy (https://galaxy.ansible.com) Web based hub with free to use roles fro community. ● Tower Enterprise web interface with Role based access control, periodic jobs, logs, dashboards and more.