Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/carissaallen/ansible-sandbox
Reading Ansible Up & Running, and working through examples here.
https://github.com/carissaallen/ansible-sandbox
ansible ansible-playbooks configuration-management deployment devops devops-tools provisioning yaml
Last synced: 5 days ago
JSON representation
Reading Ansible Up & Running, and working through examples here.
- Host: GitHub
- URL: https://github.com/carissaallen/ansible-sandbox
- Owner: carissaallen
- Created: 2019-03-08T17:25:30.000Z (almost 6 years ago)
- Default Branch: master
- Last Pushed: 2019-03-09T06:05:03.000Z (almost 6 years ago)
- Last Synced: 2024-10-31T02:23:15.398Z (about 2 months ago)
- Topics: ansible, ansible-playbooks, configuration-management, deployment, devops, devops-tools, provisioning, yaml
- Language: Ruby
- Homepage:
- Size: 89.8 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Learning Ansible
## Playbooks
A list of dictionaries! Or, more specifically, a list of _plays_. A playbook should contain:
* A set of _hosts_ to configure
* A list of _tasks_ to be executed on those hosts
Plays also support optional settings, such as:
`name` _A comment that describes what the play is about; Ansible prints this out when the play starts to run._
`become` _If true, Ansible will run every task by becoming (by default) the root user. This is useful when managing Ubuntu servers, since by default you cannot SSH as the root user._
`vars` _A list of variables and values._
### Playbook: web-notls-playbook.yml
Configures a host to run an Nginx web server. Although a proper website should have Transport Layer Security (TLS) encryption enabled, I am leaving this out for simplicity's sake in my first playbook.
#### Run
`ansible-playbook web-notls-playbook.yml`
#### Output
Any Ansible task that runs has the potential to change the state of the host in some way. Ansible modules will first check to see whether the state of the host needs to be changed before taking any action. If the state of the host matches the arguments of the module, Ansible takes no action on the host and responds with a state of `ok`. If there is a difference between the state of the host and the arguments to the module, Ansible will change the state of the host and return `changed`.
```
PLAY [Configure webserver with nginx] ***************************************************************
TASK [Gathering Facts] ******************************************************************************
ok: [testserver]
TASK [install nginx] ********************************************************************************
ok: [testserver]
TASK [copy nginx config file] ***********************************************************************
changed: [testserver]
TASK [enable configuration] *************************************************************************
ok: [testserver]
TASK [copy index.html] ******************************************************************************
changed: [testserver]
TASK [restart nginx] ********************************************************************************
changed: [testserver]
PLAY RECAP ******************************************************************************************
testserver : ok=6 changed=3 unreachable=0 failed=0
```
Ansible's detection of state change: The `install nginx` task was unchanged, which means that, before I ran the playbook, the _nginx_ package had already been installed on the host. The `enable configuration` task was unchanged, which meant that there was already a configuration file on the server that was identical to the file I was copying over. However, the `copy index.html` task was changed, which means the _index.html_ file had not been previously copied to the host.
#### HTML Rendered
### Playbook: web-tls-playbook.yml
Manually generate a TLS self-signed certificate. The following command generates files _nginx.key_ and _nginx.crt_ in the _files_ directory. The certificate has an expiration date of 10 years (3,650 days) from the day you create it.
```
req -x509 -nodes -days 3650 -newkey rsa:2048 -subj /CN=localhost -keyout files/nginx.key -out files/nginx.crt
```
## Handlers
A conditional form that runs only if it has bee notified by a task. A task will fire the notification if Ansible recognizes that the task has changed the state of the system. Tasks may use the `notify` key, passing the handler's name as the argument, to fire the notification if the condition is met.
Handlers run after all the tasks are run at the end of the play. They run once, even if they are notified multiple times.
## Modules
Scripts that come packaged with Ansible to perform some action on a host. To show documentation for a particular module:
`ansible-doc module-name`
### Example Modules
`apt`
_Installs or removes packages by using the apt package manager._
`copy`
_Copies a file from local machine to the hosts._
`file`
_Sets the attribute of a file, symlink, or directory._
`service`
_Starts, stops, or restarts a service._
`template`
_Generates a file from a template and copies it to the hosts._