2012-02-23 20:17:24 +01:00
Ansible
=======
Ansible is a extra-simple Python API for doing 'remote things' over SSH.
2012-02-23 20:28:39 +01:00
While Func, which I co-wrote, aspired to avoid using SSH and have it's own daemon infrastructure, Ansible aspires to be quite different and more minimal, but still able to grow more modularly over time.
2012-02-23 20:17:24 +01:00
2012-02-23 20:40:17 +01:00
Why use Ansible versus something else? (Fabric, Capistrano, mCollective, Func, SaltStack, etc?) It will have far less code, it will be more correct, and it will be the easiest thing to hack on and use you'll ever see -- regardless of your favorite language of choice.
2012-02-23 20:17:24 +01:00
Principles
==========
2012-02-23 20:28:39 +01:00
* Dead simple setup
2012-02-23 20:40:17 +01:00
* Super fast & parallel by default
2012-02-23 20:28:39 +01:00
* No server or client daemons, uses existing SSHd
2012-02-23 20:40:17 +01:00
* No additional software required on client boxes
* Everything is self updating on the clients. "Modules" are remotely transferred to target boxes and exec'd, and do not stay active or consume resources.
2012-02-23 20:28:39 +01:00
* Only SSH keys are allowed for authentication
2012-02-23 20:40:17 +01:00
* usage of ssh-agent is more or less required (no passwords)
2012-02-23 20:28:39 +01:00
* plugins can be written in ANY language
* as with Func, API usage is an equal citizen to CLI usage
* use Python's multiprocessing capabilities to emulate Func's forkbomb logic
2012-02-23 20:40:17 +01:00
* all file paths can be specified as command line options easily allowing non-root usage
2012-02-23 20:17:24 +01:00
Requirements
============
2012-02-23 20:28:39 +01:00
For the server the tool is running from, *only* :
2012-02-23 20:40:17 +01:00
* python 2.6 -- or the 2.4/2.5 backport of the multiprocessing module
2012-02-23 20:28:39 +01:00
* paramiko
2012-02-23 20:17:24 +01:00
Inventory file
==============
2012-02-23 20:40:17 +01:00
The inventory file is a required list of hostnames that can be potentially managed by
ansible. Eventually this file may be editable via the CLI, but for now, is
edited with your favorite text editor.
2012-02-23 20:17:24 +01:00
The default inventory file (-H) is ~/.ansible_hosts and is a list
2012-02-23 20:28:39 +01:00
of all hostnames to target with ansible, one per line. These
can be hostnames or IPs
2012-02-23 20:17:24 +01:00
2012-02-23 22:07:10 +01:00
Example:
abc.example.com
def.example.com
192.168.10.50
192.168.10.51
2012-02-23 20:17:24 +01:00
This list is further filtered by the pattern wildcard (-P) to target
2012-02-23 22:07:10 +01:00
specific hosts. This is covered below.
2012-02-23 20:17:24 +01:00
Comamnd line usage example
==========================
Run a module by name with arguments
2012-02-23 20:40:17 +01:00
* ssh-agent bash
* ssh-add ~/.ssh/id_rsa.pub
2012-02-23 22:07:10 +01:00
* ansible -p "*.example.com" -n modName -a "arg1 arg2"
2012-02-23 20:17:24 +01:00
API Example
===========
The API is simple and returns basic datastructures.
2012-02-23 22:07:10 +01:00
import ansible
runner = ansible.Runner(command='inventory', host_list=['xyz.example.com', '...'])
data = runner.run()
2012-02-23 20:17:24 +01:00
2012-02-23 22:07:10 +01:00
{
'xyz.example.com' : [ 'any kind of datastructure is returnable' ],
'foo.example.com' : None, # failed to connect,
...
}
2012-02-23 20:17:24 +01:00
Additional options to runner include the number of forks, hostname
2012-02-23 20:28:39 +01:00
exclusion pattern, library path, and so on. Read the source, it's not
complicated.
2012-02-23 20:17:24 +01:00
2012-02-23 22:07:10 +01:00
Patterns
========
To target only hosts starting with "rtp", for example:
* ansible "rtp*" -n command -a "yum update apache"
2012-02-23 20:17:24 +01:00
Parallelism
===========
Specify the number of forks to use, to run things in greater parallelism.
2012-02-23 22:07:10 +01:00
* ansible -f 10 "*.example.com" -n command -a "yum update apache"
2012-02-23 20:17:24 +01:00
2012-02-23 20:28:39 +01:00
10 forks. The default is 3. 5 is right out.
2012-02-23 22:07:10 +01:00
File Transfer
=============
Yeah, it does that too.
* ansible -n copy -a "/etc/hosts /tmp/hosts"
2012-02-23 20:17:24 +01:00
Bundled Modules
===============
See the example library for modules, they can be written in any language
and simply return JSON to stdout. The path to your ansible library is
specified with the "-L" flag should you wish to use a different location
2012-02-23 20:28:39 +01:00
than "~/ansible". There is potential for a sizeable community to build
up around the library scripts.
2012-02-23 20:17:24 +01:00
2012-02-23 20:28:39 +01:00
Features not supported from Func (yet?)
2012-02-23 20:17:24 +01:00
============================================
2012-02-23 20:28:39 +01:00
* Delegation for treeish topologies
* Asynchronous modes for polling long running operations
2012-02-23 20:17:24 +01:00
2012-02-23 21:31:35 +01:00
Existing library modules
========================
* ping
* facter
2012-02-23 20:17:24 +01:00
Future plans
============
2012-02-23 20:40:17 +01:00
* modules including:
2012-02-23 21:31:35 +01:00
* a command execution module
2012-02-23 20:40:17 +01:00
* users, groups, files, permissions, etc
* inventory gathering (w/ accompanying ansible-inventory & RSS)
2012-02-23 21:31:35 +01:00
* very simple option constructing/parsing for modules
2012-02-23 20:40:17 +01:00
* Dead-simple declarative configuration management engine using
a runbook style recipe file, written in JSON or YAML
2012-02-23 21:31:35 +01:00
* maybe it's own fact engine, not required, that also feeds from facter
* add/remove/list hosts from the command line
* list available modules from command line
2012-02-23 20:17:24 +01:00
Author
======
2012-02-23 22:07:10 +01:00
Michael DeHaan < michael.dehaan @ gmail . com >
2012-02-23 20:28:39 +01:00
2012-02-23 22:07:10 +01:00
http://michaeldehaan.net/
2012-02-23 20:28:39 +01:00