1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
community.general/README.md

217 lines
6.7 KiB
Markdown
Raw Normal View History

2012-02-23 20:17:24 +01:00
Ansible
=======
Ansible is a extra-simple tool/API for doing 'parallel remote things' over SSH -- whether
2012-02-27 05:03:06 +01:00
executing commands, running "modules", or executing larger 'playbooks' that
can serve as a configuration management or deployment system.
2012-02-23 20:17:24 +01:00
2012-02-24 03:47:31 +01:00
While [Func](http://fedorahosted.org/func), which I co-wrote,
aspired to avoid using SSH and have it's own daemon infrastructure,
Ansible aspires to be quite different and more minimal, but still able
to grow more modularly over time. This is based on talking to a lot of
users of various tools and wishing to eliminate problems with connectivity
and long running daemons, or not picking tool X because they preferred to
2012-02-27 05:03:06 +01:00
code in Y. Further, playbooks take things a whole step further, building the config
and deployment system I always wanted to build.
2012-02-24 03:47:31 +01:00
Why use Ansible versus something else? (Fabric, Capistrano, mCollective,
Func, SaltStack, etc?) It will have far less code, it will be more correct,
and it will be the easiest thing to hack on and use you'll ever see --
regardless of your favorite language of choice. Want to only code plugins
in bash or clojure? Ansible doesn't care. The docs will fit on one page
and the source will be blindingly obvious.
Design Principles
=================
2012-02-23 20:17:24 +01:00
2012-02-28 03:26:23 +01:00
* Dead simple setup
* Super fast & parallel by default
* No server or client daemons; use existing SSHd
* No additional software required on client boxes
* Modules can be written in ANY language
* Awesome API for creating very powerful distributed scripts
* Be usable as non-root
* Create the easiest config management system to use, ever.
2012-02-23 20:17:24 +01:00
Requirements
============
2012-02-23 20:28:39 +01:00
For the server the tool is running from, *only*:
2012-02-28 03:26:23 +01:00
* paramiko
* python 2.6 (or the 2.4/2.5 backport of the multiprocessing module)
* PyYAML (only if using playbooks)
2012-02-23 20:17:24 +01:00
2012-02-27 05:03:06 +01:00
Optional -- If you want to push templates, the nodes need a template library,
which for bonus points you can install with ansible! Easy enough.
2012-02-28 03:26:23 +01:00
* python-jinja2
2012-02-23 20:17:24 +01:00
Inventory file
==============
2012-02-27 05:03:06 +01:00
To use ansible you must have a list of hosts somewhere. The default inventory file (override with -H) is /etc/ansible/hosts and is a list of all hostnames to manage with ansible, one per line. These can be hostnames or IPs.
2012-02-23 20:17:24 +01:00
Example:
abc.example.com
def.example.com
192.168.10.50
192.168.10.51
2012-02-27 05:03:06 +01:00
This list is further filtered by the pattern wildcard (-p) to target
specific hosts. This is covered below. You can also organize groups of systems by having multiple inventory files (i.e. keeping webservers different from dbservers, etc)
2012-02-23 22:32:58 +01:00
2012-02-27 04:51:23 +01:00
Massive Parallelism, Pattern Matching, and a Usage Example
==========================================================
2012-02-23 20:17:24 +01:00
2012-02-27 04:51:23 +01:00
Reboot all web servers in Atlanta, 10 at a time:
2012-02-23 20:40:17 +01:00
ssh-agent bash
ssh-add ~/.ssh/id_rsa.pub
ansible -p "atlanta-web*" -f 10 -n command -a "/sbin/reboot"
2012-02-23 20:17:24 +01:00
2012-02-27 05:03:06 +01:00
Other than the comamnd module, though, ansible modules are not scripts. They make
the remote system look like you state, and run the commands neccessary to get it
there.
2012-02-28 05:38:21 +01:00
[Read the manpage](https://github.com/mpdehaan/ansible/blob/master/docs/man/man1/ansible.1.asciidoc)
2012-02-28 05:36:22 +01:00
2012-02-27 04:51:23 +01:00
File Transfer
=============
2012-02-25 07:00:37 +01:00
2012-02-27 04:51:23 +01:00
Ansible can SCP lots of files to lots of places in parallel.
2012-02-23 20:17:24 +01:00
ansible -p "web-*.acme.net" -f 10 -n copy -a "/etc/hosts /tmp/hosts"
2012-02-23 20:17:24 +01:00
2012-02-27 04:51:23 +01:00
Templating
==========
2012-02-24 04:47:03 +01:00
2012-02-27 04:51:23 +01:00
JSON files can be placed for template metadata using Jinja2. Variables
placed by 'setup' can be reused between ansible runs.
2012-02-23 20:17:24 +01:00
ansible -p "*" -n setup -a "favcolor=red ntp_server=192.168.1.1"
ansible -p "*" -n template /srv/motd.j2 /etc/motd
ansible -p "*" -n template /srv/ntp.j2 /etc/ntp.conf
Need something like the fqdn in a template? If facter or ohai are installed, data from these projects
will also be made available to the template engine, using 'facter_' and 'ohai_'
prefixes for each.
2012-02-27 05:03:06 +01:00
2012-02-27 04:51:23 +01:00
Git Deployments
===============
2012-02-27 04:51:23 +01:00
Deploy your webapp straight from git
ansible -p "web*" -n git -a "repo=git://foo dest=/srv/myapp version=HEAD"
2012-02-23 20:17:24 +01:00
2012-02-27 04:51:23 +01:00
Take Inventory
==============
2012-02-23 20:17:24 +01:00
2012-02-27 04:51:23 +01:00
Run popular open-source data discovery tools across a wide number of hosts.
2012-02-27 05:03:06 +01:00
This is best used from API scripts that want to learn about remote systems.
2012-02-23 20:17:24 +01:00
ansible -p "dbserver*" -n facter
ansible -p "dbserver"" -n ohai
2012-02-23 20:28:39 +01:00
2012-02-27 04:51:23 +01:00
Other Modules
=============
2012-02-27 04:51:23 +01:00
See the library directory for lots of extras. There's also a manpage,
2012-02-28 05:38:21 +01:00
[ansible-modules(5)](https://github.com/mpdehaan/ansible/blob/master/docs/man/man5/ansible-modules.5.asciidoc) that covers all the options they take. You can
2012-02-27 05:03:06 +01:00
read the asciidoc in github in the 'docs' directory.
2012-02-23 22:32:58 +01:00
Playbooks
=========
2012-02-25 23:31:23 +01:00
Playbooks are particularly awesome. Playbooks can batch ansible commands
2012-02-27 04:51:23 +01:00
together, and can even fire off triggers when certain commands report changes.
2012-02-25 23:31:23 +01:00
2012-02-28 05:54:56 +01:00
They are the basis for a really simple configuration management system, unlike
any that already exist, and one that is very well suited to deploying complex
multi-machine applications.
An example showing just once pattern in a playbook is below. Playbooks can contain
multple patterns in a single file.
---
- pattern: 'webservers*'
comment: webserver setup steps
hosts: '/etc/ansible/hosts'
tasks:
- name: configure template & module variables for future template calls
action: setup http_port=80 max_clients=200
- name: write the apache config file
action: template src=/srv/templates/httpd.j2 dest=/etc/httpd/conf
notify:
- restart apache
- name: ensure apache is running
action: service name=httpd state=started
handlers:
- name: restart apache
- action: service name=httpd state=restarted
See the playbook format manpage -- [ansible-playbook(5)](https://github.com/mpdehaan/ansible/blob/master/docs/man/man5/ansible-playbook.5.asciidoc) for more details.
2012-02-25 23:31:23 +01:00
To run a playbook:
2012-02-28 03:27:18 +01:00
ansible -r playbook.yml
2012-02-25 23:31:23 +01:00
API
===
The Python API is pretty powerful.
import ansible.runner
runner = ansible.runner.Runner(
module_name='ping',
module_args='',
pattern='web*',
forks=10
)
datastructure = runner.run()
And returns results per host, for hosts we could contact
and also ones that we failed to contact.
{
"dark" : {
"web1.example.com" : "failure message"
}
"contacted" : {
"web2.example.com" : 1
}
}
A module can return any type of JSON data it wants, so Ansible can
be used as a framework to build arbitrary applications and very powerful
scripts.
2012-02-23 20:17:24 +01:00
Future plans
============
See github's issue tracker for what we're thinking about
2012-02-23 22:32:58 +01:00
License
=======
MIT
2012-02-23 20:17:24 +01:00
Mailing List
============
Join the mailing list to talk about Ansible!
[ansible-project](http://groups.google.com/group/ansible-project)
2012-02-23 20:17:24 +01:00
Author
======
2012-02-24 03:47:31 +01:00
Michael DeHaan -- michael.dehaan@gmail.com
2012-02-23 20:28:39 +01:00
2012-02-24 03:47:31 +01:00
[http://michaeldehaan.net](http://michaeldehaan.net/)
2012-02-23 20:28:39 +01:00