Linux/Ansible: Difference between revisions

From Wiki
No edit summary
mNo edit summary
 
(23 intermediate revisions by the same user not shown)
Line 1: Line 1:
{| class="wikitable" style="float:right; margin-left: 10px;" width="400px"
| Other articles
|-
|
<DynamicPageList>
category = Linux/Ansible
ordermethod = sortkey
</DynamicPageList>
|}


== /srv/ansible-config/roles/<role-name>/tasks/main.yml ==
= Install =
* apt:
<pre>
sudo apt update
sudo apt install ansible 
</pre>
or newer version:
<pre>
sudo apt-add-repository ppa:ansible/ansible
sudo apt install ansible
</pre>
 
 
* Install plugins
<pre>
ansible-galaxy collection install ansible.posix
ansible-galaxy collection install community.general
</pre>
 
= Commands =
<blockquote><pre>
<blockquote><pre>
- name: update apt
ansible --version
  apt:
</pre></blockquote>
    update_cache: yes
    cache_valid_time: 3600


- name: install apt packages
  apt:
    name: ["aptitude", "git", "mc", "nmap"]
</pre></blockquote>
* systemd:
<blockquote><pre>
<blockquote><pre>
- name: reload systemd config
ansible-playbook pb-machinex.yml
  systemd:
    daemon_reload: yes
 
- name: restart fail2ban
  systemd:
    name: fail2ban
    state: restarted
</pre></blockquote>
</pre></blockquote>
* copy files:
<blockquote><pre>
- name: copy openvpn client config files
  copy:
    src: ../files/
    dest: /etc/openvpn


- name: enable fail2ban config
  copy:
    src: /etc/fail2ban/fail2ban.conf
    dest: /etc/fail2ban/fail2ban.local
    remote_src: yes
</pre></blockquote>
* edit files:
<blockquote><pre>
<blockquote><pre>
- name: enable openvpn in /etc/default/openvpn
ansible hostname -m setup    # variables for "hostname"
  lineinfile:
    path: /etc/default/openvpn
    line: AUTOSTART="all"
</pre></blockquote>
</pre></blockquote>




[[Category:Linux/System]]
== Step-by-step ==
# Setup file structure
# When using ssh key access
#: <pre>ssh-copy-id -i ~/.ssh/id_rsa user@server</pre>
# When using ssh password
#: <pre>apt install sshpass</pre>
#: <pre>ansible-galaxy collection install ansible.posix    # when using ansible to set ssh key</pre>
# Run ansible playbook
#:<pre>ansible-playbook pb-hostname.yml</pre>
#:options:
#::-k (ssh pass)
#::-K (password for sudo)
 
= Links =
* https://docs.ansible.com/ansible/latest/user_guide/playbooks_best_practices.html
* https://medium.com/@tedchength/installing-docker-using-ansible-script-c182787f2fa1
 
 
[[Category:Linux/Deployment]]
[[Category:Linux]]
[[Category:Linux]]

Latest revision as of 20:16, 26 November 2023

Other articles

Install

sudo apt update
sudo apt install ansible  

or newer version:

sudo apt-add-repository ppa:ansible/ansible
sudo apt install ansible


  • Install plugins
ansible-galaxy collection install ansible.posix 
ansible-galaxy collection install community.general

Commands

ansible --version
ansible-playbook pb-machinex.yml
ansible hostname -m setup    # variables for "hostname"


Step-by-step

  1. Setup file structure
  2. When using ssh key access
    ssh-copy-id -i ~/.ssh/id_rsa user@server
  3. When using ssh password
    apt install sshpass
    ansible-galaxy collection install ansible.posix    # when using ansible to set ssh key
  4. Run ansible playbook
    ansible-playbook pb-hostname.yml
    options:
    -k (ssh pass)
    -K (password for sudo)

Links