| development: | |
| adapter: mysql2 | |
| encoding: utf8 | |
| database: my_database | |
| username: root | |
| password: |
| name "base" | |
| description "Baseline configuration for all systems." | |
| run_list( | |
| "recipe[ohai]", | |
| "recipe[chef-client::delete_validation]", | |
| "recipe[chef-client]", | |
| "recipe[zsh]", | |
| "recipe[git]", | |
| "recipe[users]", |
I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.
What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.
Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.
| #!/bin/bash | |
| # ansible -i hosts all -m raw -a " curl -s -L http://gist.github.com/ravibhure/ansibleready.sh | bash" -k | |
| apt-get update | |
| apt-get -y install software-properties-common git python-crypto sshpass python-pip libssl-dev openssl | |
| pip install --upgrade pip |
Install latest Ansible via pip + dependencies via a shell script
This file is used to install ansible in test kitchen when you set in the kitchen.yaml file
require_ansible_omnibus: true
By default test kitchen will always download and use the latest version of this install file.
WARNING: AS SOON AS YOU MERGE CODE HERE IT IS INSTANTLY AVAILABLE TO EVERYONE DOING OMNIBUS KITCHEN ANSIBLE INSTALLS:
The steps in this guide are available as an autobuild shell script
Because the OpenConnect package from Ubuntu is a bit outdated, and if you have a recent AnyConnect server, you need a newer OpenConnect to play with it.
| sudo netstat -ant | awk '{print $6}' | tr ')' ' ' | sort | uniq -c |
| #!/bin/bash | |
| # Bootstrap for ansiblized node | |
| # Author: Ravi Bhure <[email protected]> | |
| # Usages: curl -L https://raw.githubusercontent.com/ravibhure/terraform-provisioner-ansible/master/bootstrap_ansible_node.sh | sudo bash | |
| machine=`uname -m` | |
| os=`uname -s` | |
| if test -f "/etc/lsb-release" && grep -q DISTRIB_ID /etc/lsb-release && ! grep -q wrlinux /etc/lsb-release; then | |
| platform=`grep DISTRIB_ID /etc/lsb-release | cut -d "=" -f 2 | tr '[A-Z]' '[a-z]'` |
| #!/usr/bin/env python | |
| # vim:syntax=python | |
| import argparse | |
| import collections | |
| import json | |
| import os | |
| import os.path | |
| from ansible.vars import VariableManager |
This feature adds Linux 2.2-like transparent proxy support to current kernels. To use it, enable the socket match and the TPROXY target in your kernel config. You will need policy routing too, so be sure to enable that as well.