playbook1.yaml<\/strong><\/pre>\nThe check mode (dry-run!) can be forced on a play by using the following option:<\/p>\n
check_mode: yes\r\n\r\nOR\r\n\r\ncheck_mode: no<\/pre>\nMore useful command:<\/p>\n
ansible all<\/strong> -m gather_facts\r\n<\/strong>ansible all -m gather_facts --limit 192.168.1.1\r\n<\/strong>ansible all -m apt -a update_cache=true --become --ask-become-pass\r\n<\/strong>ansible all -m apt -a name=locate<\/strong> --become --ask-become-pass\r\nansible all -m apt -a \"name=locate state=latest\"<\/strong> --become --ask-become-pass\r\nansible all -m apt -a upgrade=dist<\/strong> --become --ask-become-pass<\/pre>\nROLES<\/strong><\/p>\nThe PlayBook can be broken into pieces or sections called roles to make the file easier to manage.<\/p>\n
- name: ROLES THAT APPLY TO SERVERS<\/strong>\r\n hosts: servers\r\n become: true\r\n roles:\r\n - base_role\r\n - server_role<\/span><\/strong>\r\n\r\n- name: ROLES THAT APPLY TO WORKSTATIONS<\/strong>\r\n hosts: workstations\r\n become: true\r\n roles:\r\n - base_role\r\n - workstation_role<\/strong><\/span><\/pre>\nHANDLERS<\/strong><\/p>\n- name: CHANGE VARIABLE DATA IN FILE<\/strong>\r\n lineinfile:\r\n path: \/etc\/nginx\/nginx.conf\r\n regexp: '^server_name'\r\n line: server_name example.com;\r\n notify: restart_nginx<\/strong><\/span><\/pre>\nFile structure for Roles with Tasks and Handlers:<\/p>\n
roles\/<\/strong>\r\n base_role<\/strong>\/\r\n tasks\/main.yml<\/strong><\/span>\r\n handlers\/main.yml<\/span><\/strong><\/span>\r\n<\/span> server_role<\/strong>\/\r\n tasks\/main.yml<\/strong><\/span>\r\n handlers\/<\/strong>main.yml<\/strong><\/span><\/span>\r\n<\/span> workstation_role<\/strong>\/\r\n tasks\/main.yml<\/strong><\/span>\r\n handlers\/<\/strong>main.yml<\/strong><\/span><\/pre>\nPLAYBOOK OPTIMIZATION<\/strong><\/p>\nUsing callback plugins to identify tasks that might be slowing down the playbook:<\/p>\n
At ansible.cfg<\/strong> add the following line:<\/p>\n[defaults]\r\n<\/span>inventory<\/span> = .\/hosts\r\ncallbacks_enabled<\/span> = timer, profile_tasks, profile_roles<\/strong><\/pre>\nThe default parallelism (forks<\/strong>) number defines how many tasks are executed at the same time.<\/p>\nAt ansible.cfg<\/strong> add the following line with the desired number:<\/p>\n[defaults]\r\ninventory = .\/hosts\r\nforks=25\r\n<\/strong><\/pre>\nOr dynamically at the playbook execution:<\/p>\n
ansible-playbook playbookName.yaml --forks 25<\/pre>\nOptimize the SSH connections\u00a0 by reusing the established connections for a defined period:<\/p>\n
[ssh_connection]\r\nssh_args = -o ControlMaster=auto<\/strong> -o ControlPersist=30s<\/strong><\/pre>\nIn a controlled and dynamic environment, the host SSH key check can be disabled to increase performance by:<\/p>\n
[defaults]\r\nhost_key_checking = False<\/strong><\/pre>\nTo make the tasks run freely the servers (without waiting for all to finish each task before moving to the next):<\/p>\n
---\r\n- name: PLAYBOOK\r\n hosts: all\r\n strategy: free\r\n<\/strong><\/pre>\n <\/p>\n
\nPULL<\/strong><\/p>\nInstead of push configuration to many servers from a manager host, Ansible makes it possible to pull a configuration file from a git repository and execute locally:<\/p>\n
ansible-pull -U http:\/\/example.com\/file.git<\/strong><\/pre>\n
\nBONUS<\/strong><\/p>\nAnsible does not offer a graphical interface but using it combined with Ansible Semaphore the user experience can be strongly improved [Link<\/a>].<\/p>\n","protected":false},"excerpt":{"rendered":"Ansible is a tool for automating provisioning, configuration, and deployment in multiple hosts via SSH. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,6],"tags":[],"class_list":["post-1475","post","type-post","status-publish","format-standard","hentry","category-linux","category-raspberry-pi"],"_links":{"self":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/1475","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1475"}],"version-history":[{"count":17,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/1475\/revisions"}],"predecessor-version":[{"id":3789,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/1475\/revisions\/3789"}],"wp:attachment":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1475"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1475"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1475"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}