Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Ansible talk at Loadays 2014
Search
Ton Kersten
April 05, 2014
Technology
0
420
Ansible talk at Loadays 2014
Ansible, why and how I use it.
Ton Kersten
April 05, 2014
Tweet
Share
More Decks by Ton Kersten
See All by Ton Kersten
Building an Ansible AAP cluster - Design and implementation
tonk
0
210
ARA on RHEL7 - Welcome to Hell
tonk
0
770
Ansible in a dev, tst, acc and prod enviroment
tonk
0
830
Testing Ansible Roles with Molecule
tonk
2
830
Ansible Presentation @ iSense
tonk
1
340
Puppet Introduction @ iSense
tonk
0
190
Ansible at AT TechTrack
tonk
0
260
Ansible. Why and how I use it
tonk
3
1.5k
Puppet deployment, an introduction
tonk
2
480
Other Decks in Technology
See All in Technology
大規模イベントに向けた ABEMA アーキテクチャの遍歴 ~ Platform Strategy 詳細解説 ~
nagapad
0
190
LLMでAI-OCR、実際どうなの? / llm_ai_ocr_layerx_bet_ai_day_lt
sbrf248
0
430
バクラクによるコーポレート業務の自動運転 #BetAIDay
layerx
PRO
1
830
僕たちが「開発しやすさ」を求め 模索し続けたアーキテクチャ #アーキテクチャ勉強会_findy
bengo4com
0
1.8k
AI時代の経営、Bet AI Vision #BetAIDay
layerx
PRO
1
1.7k
Segment Anything Modelの最新動向:SAM2とその発展系
tenten0727
0
230
「育てる」サーバーレス 〜チーム開発研修で学んだ、小さく始めて大きく拡張するAWS設計〜
yu_kod
1
250
データ基盤の管理者からGoogle Cloud全体の管理者になっていた話
zozotech
PRO
0
320
マルチプロダクト×マルチテナントを支えるモジュラモノリスを中心としたアソビューのアーキテクチャ
disc99
0
260
相互運用可能な学修歴クレデンシャルに向けた標準技術と国際動向
fujie
0
200
Claude Codeは仕様駆動の夢を見ない
gotalab555
0
130
Vision Language Modelと自動運転AIの最前線_20250730
yuyamaguchi
3
1.1k
Featured
See All Featured
Imperfection Machines: The Place of Print at Facebook
scottboms
267
13k
Fireside Chat
paigeccino
37
3.6k
We Have a Design System, Now What?
morganepeng
53
7.7k
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
PRO
21
1.4k
What's in a price? How to price your products and services
michaelherold
246
12k
Building a Modern Day E-commerce SEO Strategy
aleyda
43
7.4k
Intergalactic Javascript Robots from Outer Space
tanoku
272
27k
Agile that works and the tools we love
rasmusluckow
329
21k
Fight the Zombie Pattern Library - RWD Summit 2016
marcelosomers
234
17k
Side Projects
sachag
455
43k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
31
1.3k
The World Runs on Bad Software
bkeepers
PRO
70
11k
Transcript
Ansible Why and how I use it! Ton Kersten AT
Computing Antwerp, Belgium
Introduction Why How Recap Resources Questions? Agenda 1 Introduction 2
Why 3 How 4 Recap 5 Resources 6 Questions? tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 2 / 29
Introduction Why How Recap Resources Questions? $ who am i
UNIX/Linux consultant and Trainer @ AT Computing UNIX Nerd (started in 1986 with SunOS 3) Linux Geek (started in 1992 with 0.96α) Scripting nerd Free and Open Source Software enthusiast Programming Plain text aficionado Big fan of things that just work · · · tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 3 / 29
Introduction Why How Recap Resources Questions? Long ago Shell scripts
SSH loops Parallel SSH Cluster SSH Screen synchronized windows tmux synchronized panes · · · Things got out of control tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 4 / 29
Introduction Why How Recap Resources Questions? Next CF Engine Puppet
Chef Salt Stack Juju Capistrano Fabric · · · tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 5 / 29
Introduction Why How Recap Resources Questions? What I want Simple
command root@dns1 # ansible-playbook playbooks/vtun/main.yml PLAY [tunservers] *************************************** TASK: [install package vtun] **************************** TASK: [deploy vtun config] ****************************** TASK: [ensure vtund is running] ************************* NOTIFIED: [restart vtund] ******************************* PLAY RECAP ********************************************** tun1 : ok=1 changed=4 unreachable=0 failed=0 tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 6 / 29
Introduction Why How Recap Resources Questions? Why Ansible No master
server No more daemons No more agents No databases No separate PKI Uses standard SSH functionality Very, very powerful Configuration, deployment, ad-hoc, continuous delivery Simple configuration files Idempotent tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 7 / 29
Introduction Why How Recap Resources Questions? Easy From nothing to
production in a jiffy Python 2.6 + Paramiko, PyYAML, Jinja2 on master Python 2.4 + simplejson on nodes Can run in Python virtualenv Can run from git checkout Uses SSH for transport and login No root needed, can use sudo tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 8 / 29
Introduction Why How Recap Resources Questions? Simple components (Commands) Commands
ansible ⇒ The main Ansible command ansible-playbook ⇒ Command to run playbooks ansible-pull ⇒ The main Ansible pull command ansible-doc ⇒ Ansible documentation program ansible-galaxy ⇒ Command to interact with Galaxy ansible-vault ⇒ The Ansible password vault tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 9 / 29
Introduction Why How Recap Resources Questions? Simple components (Modules) A
lot of modules (220+ at this moment) Commands Files / templating Users Packages (yum, apt, zypper, …) Services Databases · · · (See: ansible-doc) Or, write your own tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 10 / 29
Introduction Why How Recap Resources Questions? Easy install On all
operating systems Create a Python virtualenv # pip install ansible On CentOS / RHEL / Scientific Linux Enable the EPEL repository # yum install ansible On Debian / Ubuntu Available in standard repository # apt-get install ansible From github (Bleeding edge) Install and configure git $ git clone http://github.com/ansible/ansible.git $ cd ansible $ sudo make install tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 11 / 29
Introduction Why How Recap Resources Questions? How it works Module(s)
Management node Node Node Node Playbooks or roles Hosts no daemons communication over SSH tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 12 / 29
Introduction Why How Recap Resources Questions? My example network Management
node and DNS Tunnel server Web server Web server dns1.example.net 192.168.56.11/24 web1.example.net 192.168.56.12/24 web2.example.net 192.168.56.13/24 tun1.example.net 192.168.56.14/24 tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 13 / 29
Introduction Why How Recap Resources Questions? Inventory file # cat
/etc/ansible/hosts dns1 web1 web2 tun1 [dnsservers] dns1 [webservers] web1 web2 [tunservers] tun1 tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 14 / 29
Introduction Why How Recap Resources Questions? Site playbook # cat
/etc/ansible/site.yml - hosts: all user: ansible sudo: true sudo_user: root roles: - common - sudo - include: playbooks/vtun/main.yml tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 15 / 29
Introduction Why How Recap Resources Questions? Running Ansible General ansible
command form: ansible <hosts> -m <module> -a <params> <options> # ansible all -m ping -o web2 | success >> {"changed": false, "ping": "pong"} tun1 | success >> {"changed": false, "ping": "pong"} web1 | success >> {"changed": false, "ping": "pong"} dns1 | success >> {"changed": false, "ping": "pong"} tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 16 / 29
Introduction Why How Recap Resources Questions? Running a single command
The command module is default # ansible webservers -a 'ls -l /etc/passwd' web2 | success | rc=0 >> -rw-r--r-- 1 root root 2302 Nov 25 13:20 /etc/passwd web1 | success | rc=0 >> -rw-r--r-- 1 root root 1906 Oct 26 19:31 /etc/passwd tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 17 / 29
Introduction Why How Recap Resources Questions? Installing a package #
ansible tunservers -m yum -a name=vtun tun1 | success >> { "changed": false, "msg": "", "rc": 0, "results": [ "vtun-3.0.2-1.el6.rf.x86_64 providing vtun is already installed" ] } tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 18 / 29
Introduction Why How Recap Resources Questions? Playbooks Written in YAML
Recipes of desired state, for which hosts Can use variables Can contain handlers When a state changes, take configured action Can be re-used tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 19 / 29
Introduction Why How Recap Resources Questions? Simple playbook # cat
/etc/ansible/playbooks/vtun/main.yml - hosts: tunservers tasks: - name: install package vtun yum: pkg=vtun state=present - name: deploy vtun config template: src=vtund.conf.j2 dest=/etc/vtund.conf owner=root group=root mode=0400 notify: - restart vtund - name: ensure vtund is running service: name=vtund state=started enabled=yes handlers: - name: restart vtund service: name=vtund state=restarted tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 20 / 29
Introduction Why How Recap Resources Questions? Playbook run # ansible-playbook
playbooks/vtun/main.yml PLAY [tunservers] *************************************** TASK: [install package vtun] **************************** ok: [tun1] TASK: [deploy vtun config] ****************************** ok: [tun1] TASK: [ensure vtund is running] ************************* ok: [tun1] NOTIFIED: [restart vtund] ******************************* changed: [tun1] PLAY RECAP ********************************************** tun1 : ok=1 changed=4 unreachable=0 failed=0 tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 21 / 29
Introduction Why How Recap Resources Questions? Templates Ansible uses the
Jinja2 templating engine Variable substitution Loops Comments Conditionals Filters Ansible facts are available Puppet Facter facts are available (if installed) Chefs Ohai facts are available (if installed) tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 22 / 29
Introduction Why How Recap Resources Questions? Templates # cat playbooks/vtun/vtund.conf.j2
# Ansible information: # Filedate : {{ ansible_managed }} # Hostname : {{ ansible_hostname }} tunnel { passwd {{ secretpassword }}; type tun; # IP tunnel proto tcp; # UDP protocol device tun1; # Use this device up { # Connection is Up ifconfig "%% {{ srvaddr }} pointopoint {{ clntaddr }}"; }; } # (c) 2012-{{ ansible_date_time.year }} by {{ name }} tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 23 / 29
Introduction Why How Recap Resources Questions? Roles Playbooks grow large
and unreadable Standard way of writing things Can easily be shared with others (Through Galaxy) Ansible role directory structuur thisrole.............................................................Top of the role files..................................................................Role files handlers.........................................................Role handlers main.yml............................................Role handlers start tasks..................................................................Role tasks main.yml............................................Role starting point templates.......................................................Role templates vars..............................................................Role variables main.yml...........................................Role variables start tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 24 / 29
Introduction Why How Recap Resources Questions? Roles in playbooks Using
roles in playbooks - hosts: all roles: - common - users - sudo - hosts: webservers roles: - nginx - hosts: tunservers roles: - vtun tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 25 / 29
Introduction Why How Recap Resources Questions? Recap Entire Ansible configuration
is in a git repo Use sudo for root commands Configure authorized_keys for connections Run ansible script every hour Log playbook runs to /var/log/ansible.log Use Ansible callbacks to give feedback Use roles as much as possible Make roles generic Define variables for site configuration tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 26 / 29
Introduction Why How Recap Resources Questions? Resources Website: http://www.ansible.com Documentation:
http://docs.ansible.com IRC on Freenode: #ansible Twitter: ansible Reddit: http://www.reddit.com/r/ansible Google Group: https://groups.google.com Weekly newsletter: http://devopsu.com Checkout and study the source from github · · · tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 27 / 29
Introduction Why How Recap Resources Questions? Please!!!! Contribute to Ansible
code Contribute to Ansible documentation Use roles from Galaxy Share roles on Galaxy Spread the Ansible word. . . tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 28 / 29
Introduction Why How Recap Resources Questions? Questions? Questions?? Contact me
[email protected]
http://www.atcomputing.nl https://github.com/tonk https://speakerdeck.com/tonk @TonKersten on Twitter TKersten on IRC Created with L A TEX Beamer Vim Vim Snippets The Gimp Evince tk-atc-ans-v1.3 Ton Kersten © 2014 - AT Computing 29 / 29