Windows automation with ansible
0 likes113 views
Swapnil Dahiphale and Lokesh Jawane presented on using Ansible for Windows automation. They discussed how Ansible works using playbooks, roles, and variables to define automation tasks. They provided a use case where Ansible was used to automate the provisioning and configuration of VMs for a private cloud, including tasks like OS hardening, patching, and software installation. The presentation concluded with a demo of Ansible automation for Windows.
![#DOPPA17
As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for
social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us)
Ansible concepts: Playbooks
---
- win_get_url:
url: “{{ windows_server_iso }}”
dest: “{{ windows_temp_path }}win20121.iso”
force: yes
when: win_iso.stat.exists == false
- win_shell: ‘Mount-DiskImage -ImagePath “{{ windows_temp_path }}win20121.iso”’
- win_shell: ‘(Get-DiskImage -ImagePath “{{ windows_temp_path }}win20121.iso” | Get-Volume).DriveLetter’
register: drive_letter
# - debug: var=drive_letter
- name: net-framework-35
win_feature:
name: NET-Framework-Core
source: ‘{{ drive_letter.stdout_lines[0] }}:sourcessxs’
state: present](https://image.slidesharecdn.com/windowsautomationwithansible-2-170922031952/85/Windows-automation-with-ansible-19-320.jpg)
![#DOPPA17
As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for
social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us)
Ansible concepts: Playbooks
---
- win_get_url:
url: “{{ windows_server_iso }}”
dest: “{{ windows_temp_path }}win20121.iso”
force: yes
when: win_iso.stat.exists == false
- win_shell: ‘Mount-DiskImage -ImagePath “{{ windows_temp_path }}win20121.iso”’
- win_shell: ‘(Get-DiskImage -ImagePath “{{ windows_temp_path }}win20121.iso” | Get-Volume).DriveLetter’
register: drive_letter
# - debug: var=drive_letter
- name: net-framework-35
win_feature:
name: NET-Framework-Core
source: ‘{{ drive_letter.stdout_lines[0] }}:sourcessxs’
state: present
module
variable
List of plays
List of tasks](https://image.slidesharecdn.com/windowsautomationwithansible-2-170922031952/85/Windows-automation-with-ansible-20-320.jpg)
![#DOPPA17
As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for
social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us)
Additional Setup for Controlling Windows
- To control Windows Slave with local User Account, no additional setup
required
- To control Windows Slave with AD Account, the easiest way is to setup
Kerberos
$ apt-get install python-dev libkrb5-dev krb5-user
$ pip install pywinrm[kerberos]
$ vim /etc/krb5.conf](https://image.slidesharecdn.com/windowsautomationwithansible-2-170922031952/85/Windows-automation-with-ansible-26-320.jpg)
Windows automation with ansible
- 1. #DOPPA17 Windows Automation with Ansible Swapnil Dahiphale | Lokesh Jawane 9th September 2017
- 2. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Who Am I? - Sr. DevOps Engineer at Crevise Technologies - Passionate about Learning and implementing disruptive innovations in DevOps @Swapnil2233 swapnil@crevise.com
- 3. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Who Am I? Sr. DevOps Engineer at Crevise Technologies @lokeshjawane lokesh.jawane@crevise.com
- 4. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Agenda - Automation - Why Automation? - Windows Automation and Challenges - Automation tools - Ansible - Principles of Ansible and How it works - User case - Demo
- 5. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Automation “Automation is the key to successful DevOps adoption” - Change Management - Provisioning - Orchestration
- 6. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Change Management - System State - Define - Enforce - Example - Apache web server version 2.4.x installed - PHP 5.4.x installed - Apache web server started - Webadmin user exist with authorized key - Deviation from the state would warrant a change - Ansible operations are idempotent
- 7. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Provisioning - Built on top of Automation and Change Management - Preparing a system - Installing, updating, configuring software - Example: - Start with basic installation of OS - Update the operating system - Install the web server - Deploy the application - Configure the application - Start the web server
- 8. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Orchestration - Orchestration is not just Automation - Coordination between systems - Order sensitive tasks - Example: - Remove web1 from LB - Run tasks on web1 - Add web1 back to LB
- 9. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Why Automation? - We all have to do more with less! - Consistently deliver stable predictable environment - Increase number of deployments, decrease time between deployments - Deliver more secure environment - Innovate faster
- 10. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Linux Vs Windows
- 11. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Windows Automation
- 12. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Windows Automation Challenges - Legacy Security Models - AD dependencies - Reboot are a pain - Typically heavy software packages - We can bootstrap to a point
- 13. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Automation Tools
- 14. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) You’ve probably already heard of the most common tools
- 15. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Ansible
- 16. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Principles of Ansible SIMPLE POWERFUL AGENTLESS Human readable automation App deployment Agentless architecture No special coding skills needed Configuration management Uses OpenSSH & WinRM Tasks executed in order Workflow orchestration No agents to exploit or update Get productive quickly Orchestrate the app lifecycle More efficient & more secure
- 17. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) How Ansible Works?
- 18. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Ansible concepts: Playbooks Defines sequences of tasks (Plays) to be executed on a group of hosts. - Describes policies machine under management shall enforce - Contains variables, tasks, handlers, files, templates and roles - Expressed in YAML
- 19. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Ansible concepts: Playbooks --- - win_get_url: url: “{{ windows_server_iso }}” dest: “{{ windows_temp_path }}win20121.iso” force: yes when: win_iso.stat.exists == false - win_shell: ‘Mount-DiskImage -ImagePath “{{ windows_temp_path }}win20121.iso”’ - win_shell: ‘(Get-DiskImage -ImagePath “{{ windows_temp_path }}win20121.iso” | Get-Volume).DriveLetter’ register: drive_letter # - debug: var=drive_letter - name: net-framework-35 win_feature: name: NET-Framework-Core source: ‘{{ drive_letter.stdout_lines[0] }}:sourcessxs’ state: present
- 20. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Ansible concepts: Playbooks --- - win_get_url: url: “{{ windows_server_iso }}” dest: “{{ windows_temp_path }}win20121.iso” force: yes when: win_iso.stat.exists == false - win_shell: ‘Mount-DiskImage -ImagePath “{{ windows_temp_path }}win20121.iso”’ - win_shell: ‘(Get-DiskImage -ImagePath “{{ windows_temp_path }}win20121.iso” | Get-Volume).DriveLetter’ register: drive_letter # - debug: var=drive_letter - name: net-framework-35 win_feature: name: NET-Framework-Core source: ‘{{ drive_letter.stdout_lines[0] }}:sourcessxs’ state: present module variable List of plays List of tasks
- 21. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Ansible concepts: Roles Best way to organize your playbooks - Structure content into related vars, tasks, files, handlers, etc. - File structure for automated inclusion of role-specific content - Roles can be shared and pulled from Ansible Galaxy, Github, etc.
- 22. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Ansible Tower - Product by Red Hat - Web based UI - Cloud Integration (AWS, Azure, RackSpace) - Compliance: Reporting + Auditing - Every job run is logged and can be traced - Role Based Access Control - REST API - Monitoring
- 23. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Preparation
- 24. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Setup Ansible on Control Node $ add-apt-repository ppa:ansible $ apt-get update $ apt-get install ansible OR $ pip install ansible
- 25. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Limitation for Control Node - Control Node is recommended to be Linux. - Or Windows Subsystem for Linux (WSL) http://docs.ansible.com/ansible/intro_windows.html#using-a-windows-control-machine
- 26. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Additional Setup for Controlling Windows - To control Windows Slave with local User Account, no additional setup required - To control Windows Slave with AD Account, the easiest way is to setup Kerberos $ apt-get install python-dev libkrb5-dev krb5-user $ pip install pywinrm[kerberos] $ vim /etc/krb5.conf
- 27. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Additional Setup for the Windows Slave Nodes The older Windows require extra setup to meet basic requirements - Windows 7,8, Windows Server 2008 R2 - .Net Framework >= 4.0 (reboot required) - PowerShell >=3.0 (reboot required) - Windows Remote Management (WinRM) - Apply Hotfix for Windows 7, 8, Windows Server 2008 R2, 2012
- 28. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) What About Linux Slave? Nope… There’s no prerequisites for linux slave, except login user account ;-)
- 29. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Use case Setting up private cloud for an enterprise client. - Challenges: - Strict and close timelines, RHEL, Windows and all integration points automation, Security, Compliance and testing in a restricted environment. - Solution: - Provisioning of VMs is done with CloudForms - Configurations on RHEL and Windows VMs is done with Ansible - Network related activities are automated with Ansible - Integration with Hitachi Data Systems automated with Ansible
- 30. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Use case
- 31. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Use case Things Automated - OS Hardening - Updates and patches - Antivirus Configuration - Joining VM to Active Directory - Installation of softwares like MSSQL - Windows clustering and MSSQL cluster confuguration - ...
- 32. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Demo
- 33. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Ansible makes automating Windows easier! Conclusion
- 34. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) Questions?
- 35. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) github.com/swapnildahiphale linkedin.com/in/swapnil2233 @Swapnil2233 swapnil@crevise.com Thank You!
- 36. #DOPPA17 As the author of this presentation I/we own the copyright and confirm the originality of the content. I/we allow Agile testing alliance to use the content for social media marketing, publishing it on ATA Blog or ATA social medial channels - (Provided due credit is given to me/us) References http://docs.ansible.com/ansible/intro_windows.html#using-a-windows-control-machine http://docs.ansible.com/ansible/latest/intro_windows.html