Search Results

Yes, that is possible according to this post. When a second jinja template was created and this was included in the base jinja it was called. {% include "checks/subdue.j2" %}

Either use delete=yes # or a separate state=reset task) The following snippet was added to the top of the file: --- - name: Reset UFW ufw: state: reset Once ansible was run: TASK [rolename …

Although it is unclear to me what the aim is of your question, it is possible to use a continuous integration (CI) tool like, Jenkins, gitlab, circleci that pulls the code from git, installs ansible or … use an image that contains ansible in order to run a playbook. …

[WARNING]: Could not create retry file '/etc/ansible/roles/role_under_test/tests/test.retry'. [Errno 30] Read- only file system: u'/etc/ansible/roles/role_under_test/tests/test.retry' …

Making a distinction between Ops, Dev and DevOps promotes isolation and enforces a "throw it over the wall" mindset. To increase cooperation between teams one should put everything in a repository tha …

https://docs.ansible.com/ansible/latest/modules/reboot_module.html - name: Unconditionally reboot the machine with all defaults reboot: - name: Reboot a slow machine that might have lots of updates …

I would recommend to structure the code as defined in the Ansible Best Practices document: and to follow the structure that major contributors to the ansible galaxy platform use, like geerlingguy. … If one will follow a significant different structure then it will be really hard in the future to reuse roles from the ansible galaxy community and one has to reinvent the wheel. …

Instead of using a symlink that will be stored as is in BitBucket one could use: - name: Copy docker-compose.yml copy: src: ../../../../docker-compose.yml dest: /path/to/docker-compose.yml …

Instead of storing the Ansible code centrally, one could extract the code and distribute it to every project. …

project and copy it using Ansible to my target node? … no https://serverfault.com/questions/823956/ansible-security-best-practices For servers, don't allow root access via ssh at all. Many audits scoff at this. …

Did you try -K already? I always use this option and then a sudo password has to be entered

This means the role will bring along a default value but ANYTHING in Ansible will override it. It’s just a default. … There is a number of galaxy playbooks that could be checked: https://github.com/geerlingguy/ansible-role-nginx https://github.com/shelleg/ansible-role-gradle https://galaxy.ansible.com/030/firefox/ …

It is possible to declare group and host vars http://docs.ansible.com/ansible/latest/playbooks_best_practices.html group_vars/ group1 # here we assign variables to particular groups …

Please read https://docs.ansible.com/ansible/2.4/vault.html Since Ansible 2.4 one could use --vault-id @prompt. … Encrypt a file using ansible-vault: ansible-vault encrypt /path/to/encrypted/file Run the playbook and it will result in: fatal: [localhost]: FAILED! …

To avoid such issues, that is why there are Hosts and Groups in Ansible. … /etc/ansible/group_vars/raleigh # can optionally end in '.yml', '.yaml', or '.json' /etc/ansible/group_vars/webservers /etc/ansible/host_vars/foosball …