Embed Size (px)
Citation preview
Ansible 101Jeff Geerling
Ansible St. Louis Meetup - July 8, 2015
Who am I?
• Jeff Geerling (geerlingguy)
• Technical Architect, Acquia
• Owner, Midwestern Mac LLC
• Dev (mainly), Ops
Ansible for DevOps
• On LeanPub
• Nearly complete!
• 50% off: http://bit.ly/ansible-stl
My Story• First 'real' server build: a 486 PC, RedHat Linux 6
Gateway 2000 4DX2-66v RedHat Linux 6.x
Today
Midwestern Mac Server Check.in Hosted Apache Solr
Personal
= 50+ prod servers, one very part-time sysadmin
• “Configuration management for humans.”
• Uses SSH
• Secure, fast, simple
• 300+ built-in modules
• Don't need configuration management to manage your configuration management.
• “Configuration management for humans.”
• Uses SSH
• Secure, fast, simple
• 300+ built-in modules
• Don't need configuration management to manage your configuration management.
___________ < And cows! > -‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐ \ ^__^ \ (oo)\_______ (__)\ )\/\ ||-‐-‐-‐-‐w | || ||
Installation
• Python pip: sudo pip install ansible
• Mac: brew install ansible
• RHEL/CentOS/Fedora: sudo yum install ansible
• Deb/Ubuntu:sudo apt-add-repository ppa:ansible/ansible sudo apt-get update sudo apt-get install ansible
Ansible 101
1. Inventory: Describe your infrastructure
2. Ad-Hoc commands: Run one-off tasks
3. Playbooks: "Infrastructure as code"
4. Roles: Encapsulate configuration
http://robmyers.org/cc-ironies/no_flash_photography_sign/
Please help me avoid theXenon Death Flash
• 6-node Raspberry Pi cluster
CPU 24 cores / 5.4 GHz
RAM 6 GB
Storage 96 GB microSD
Network 10/100 over Gig
https://github.com/geerlingguy/raspberry-pi-dramble
The #Dramble
Inventory[balancer]10.0.1.60
[webservers]10.0.1.6110.0.1.6210.0.1.6310.0.1.64
[database]10.0.1.65
[dramble:children]balancerwebserversdatabase
[dramble:vars]ansible_ssh_user=pi
• INI-syntax (can also use YAML and dynamic sources)
• Default location: /etc/ansible/hosts (can override with -i)
• Check connectivity (always a good first step!) $ ansible all -m ping
• Have fun with RGB LEDs! $ ansible webservers -a "rgb red" -s
Ad-Hoc Commands
• Check connectivity (always a good first step!) $ ansible all -m ping
• Have fun with RGB LEDs! $ ansible webservers -a "rgb red" -s
Ad-Hoc Commands
________ < Shiny! > -‐-‐-‐-‐-‐-‐-‐-‐ \ ^__^ \ (oo)\_______ (__)\ )\/\ ||-‐-‐-‐-‐w | || ||
Demo# Test connectivity.ansible all -m ping # Raspberry Pi RGB LEDs.ansible all -a "rgb green" -sansible all -a "rgb blue" -s --forks=1ansible all -a "rgb green" -s --forks=2ansible all -a "colors 255 255 255" -s # More useful commands.ansible all -m setupansible all -a "free -m"ansible all -m shell -a "ifconfig | grep inet" -sansible all -m user -a "name=pgibbons state=absent remove=yes" -sansible webservers -m service -a "name=nginx state=restarted" -s --forks=2
Download playbook examples
Playbooks
• Ad-Hoc commands don't solve the snowflake problem
• "infrastructure as code"
• Simple YAML files
• Run with: ansible-playbookUnique, by Pen Waggener
Playbooks#!/bin/bash# Shell script to install/configure Apache.
# Install Apache.yum install --quiet -y httpd httpd-devel
# Copy configuration files.cp /path/to/config/httpd.conf \ /etc/httpd/conf/httpd.confcp /path/to/config/httpd-vhosts.conf \ /etc/httpd/conf/httpd-vhosts.conf
# Start Apache.service httpd start
# Set Apache to run on startup.chkconfig httpd on
Playbooks#!/bin/bash# Shell script to install/configure Apache.
# Install Apache.yum install --quiet -y httpd httpd-devel
# Copy configuration files.cp /path/to/config/httpd.conf \ /etc/httpd/conf/httpd.confcp /path/to/config/httpd-vhosts.conf \ /etc/httpd/conf/httpd-vhosts.conf
# Start Apache.service httpd start
# Set Apache to run on startup.chkconfig httpd on
---# Playbook to install/configure Apache.hosts: alltasks: - name: Install Apache. yum: name={{ item }} state=present with_items: - httpd - httpd-devel
- name: Copy configuration files. copy: "src={{ item.src }} dest={{ item.dest }}" with_items: - { src: "/path/to/config/httpd.conf", dest: "/etc/httpd/conf/httpd.conf" } - { src: "/path/to/config/httpd-vhosts.conf", dest: "/etc/httpd/conf/httpd-vhosts.conf" }
- name: Ensure Apache is started and runs on startup. service: name=httpd state=started enabled=yes
Demo
# Run just the users playbook.ansible-playbook users.ml
# Run the users playbook again, to demonstrate idempotence.ansible-playbook users.yml
# Run the web playbook (twice, again).ansible-playbook web.ymlansible-playbook web.yml
# Run the main playbook that includes users.yml and web.ymlansible-playbook main.ymlansible-playbook main.yml
Download playbook examples
Roles
• Like: Libraries, packages, config bundles
• Encapsulate configuration in smaller, reusable chunks
• 4,000+ contributed roles on Ansible Galaxy
• To create: ansible-galaxy init [role-name]
Demo
Role folder structure:
rolename/ defaults/ main.yml <-- Most variables go here, so you can override if needed. handlers/ main.yml meta/ main.yml tasks/ main.yml tests/ <-- See Testing Ansible Roles with Travis CI on GitHub vars/ main.yml <-- Special and static variables go here.
Download playbook examples
More Ansible• Ansible Tower, Jenkins integration, CI
• Docker integration
• AWS, DigitalOcean, Rackspace, Softlayer, Linode, etc.
• Notifications
• Rolling updates
• Ansible Vault
• etc...
More Ansible• Ansible Tower, Jenkins integration, CI
• Docker integration
• AWS, DigitalOcean, Rackspace, Softlayer, Linode, etc.
• Notifications
• Rolling updates
• Ansible Vault
• etc...
______________________________ < Follow @AnsiBull on Twitter! > -‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐ \ ^__^ \ (oo)\_______ (__)\ )\/\ ||-‐-‐-‐-‐w | || ||
More Resources• Ansible documentation
• Ansible Vagrant examples
• Ansible for DevOps
• 50% off: http://bit.ly/ansible-stl
• Raspberry Pi Dramble
• Example playbook from this presentation
