IssacTran

How-to setup a simple git push deployment

These are my notes basically. At first i created this gist just as a reminder for myself. But feel free to use this for your project as a starting point. If you have questions you can find me on twitter @thomasf https://twitter.com/thomasf This is how i used it on a Debian Wheezy testing (https://www.debian.org/releases/testing/)

Discuss, ask questions, etc. here https://news.ycombinator.com/item?id=7445545

On the server (example.com)

IssacTran

input {
    kafka {
        zk_connect => "localhost:2181"
        group_id => "logstash"
        topic_id => "metric"
        reset_beginning => false
        consumer_threads => 1
        codec => "line"
        }
}

IssacTran

/* 
 * Set up your Git configuration 
 */

git config --global user.email "you@yourdomain.com"

git config --global user.name "Your Name"

git config --global core.editor "nano"

IssacTran

An Ansible summary

Jon Warbrick, July 2014, V3.2 (for Ansible 1.7)

Configuration file

intro_configuration.html

First one found from of

IssacTran

upstream gitlab {
  server                    172.17.42.1:10080 fail_timeout=0;
}

# let gitlab deal with the redirection
server {
  listen                    80;
  server_name               git.example.com;
  server_tokens             off;
  root                      /dev/null;

IssacTran

deploy_user_name: 'deployer'
# More info about password: http://docs.ansible.com/faq.html#how-do-i-generate-crypted-passwords-for-the-user-module
# password created with: python -c "from passlib.hash import sha512_crypt; print sha512_crypt.encrypt('example_password')"
deploy_user_password: <encrypted_password>
user_shell: "/bin/bash"
deploy_user_home: "/home/{{ deploy_user_name }}"
repo_api_token: <your_api_token>
repo_project_id: <your_project_id>

IssacTran

# Problem:
#
# If you use git submodules linking two private github repos, you'll need to create a separate deploy key for each.
# Multiple keys are not supported by Ansible, nor does ansible (when running git module) resort to your `.ssh/config` file.
# This means your ansible playbook will hang in this case.
#
# You can however use the ansible git module to checkout your repo in multiple steps, like this:
#
- hosts: webserver
  vars:

IssacTran

---
deployer_user: deploy
deployer_group: deploy
deployer_groups: ['admin']
deployer_user_ssh_key_file: .ssh/id_rsa
deployer_gitlab_api: https://[gitlab-domain]/api/v3/
deployer_gitlab_token: [gitlab-token-for-specific-user]
deployer_gitlab_key_title: "{{ ansible_hostname }}_deployer"

IssacTran

#Download Elementary OS from here: 
#http://sourceforge.net/projects/elementaryos/files/stable/

#First you update your system
sudo apt-get update && sudo apt-get dist-upgrade


#Install Google Chrome
wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo apt-key add -
sudo sh -c 'echo "deb http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google-chrome.list'

IssacTran

# Install ARCH Linux with encrypted file-system and UEFI
# The official installation guide (https://wiki.archlinux.org/index.php/Installation_Guide) contains a more verbose description.

# Download the archiso image from https://www.archlinux.org/
# Copy to a usb-drive
dd if=archlinux.img of=/dev/sdX bs=16M && sync # on linux

# Boot from the usb. If the usb fails to boot, make sure that secure boot is disabled in the BIOS configuration.

# Set swedish keymap