Panagiotis Atmatzidis atmosx

Working with ansible-vault

I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.

What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.

Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.

Code is clean if it can be understood easily – by everyone on the team. Clean code can be read and enhanced by a developer other than its original author. With understandability comes readability, changeability, extensibility and maintainability.

General rules

Follow standard conventions.
Keep it simple stupid. Simpler is always better. Reduce complexity as much as possible.
Boy scout rule. Leave the campground cleaner than you found it.
Always find root cause. Always look for the root cause of a problem.

Design rules

Semantic Commit Messages

See how a minor change to your commit message style can make you a better programmer.

Format: <type>(<scope>): <subject>

<scope> is optional

Example

Supported built-in functions

abs(float) - Returns the absolute value of a given float. Example: abs(1) returns 1, and abs(-1) would also return 1, whereas abs(-3.14) would return 3.14. See also the signum function.
basename(path) - Returns the last element of a path.
base64decode(string) - Given a base64-encoded string, decodes it and returns the original string.

	FROM ubuntu
	MAINTAINER Eric Mill "[email protected]"

	# turn on universe packages
	RUN echo "deb http://archive.ubuntu.com/ubuntu raring main universe" > /etc/apt/sources.list
	RUN apt-get update

	# basics
	RUN apt-get install -y nginx openssh-server git-core openssh-client curl
	RUN apt-get install -y nano

	var request = require('request');
	var unzip = require('unzip');
	var csv2 = require('csv2');

	request.get('http://s3.amazonaws.com/alexa-static/top-1m.csv.zip')
	.pipe(unzip.Parse())
	.on('entry', function (entry) {
	entry.pipe(csv2()).on('data', console.log);
	})
	;

	AllCops:
	RunRailsCops: true

	# Commonly used screens these days easily fit more than 80 characters.
	Metrics/LineLength:
	Max: 120

	# Too short methods lead to extraction of single-use methods, which can make
	# the code easier to read (by naming things), but can also clutter the class
	Metrics/MethodLength:

	// Usage:
	// Copy and paste all of this into a debug console window of the "Who is Hiring?" comment thread
	// then use as follows:
	//
	// query(term \| [term, term, ...], term \| [term, term, ...], ...)
	//
	// When arguments are in an array then that means an "or" and when they are seperate that means "and"
	//
	// Term is of the format:
	// ((-)text/RegExp) ( '-' means negation )

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

	salt '' cmd.run 'rm -rm /var/cache/salt/minion/files/base/'
	salt '*' saltutil.sync_all