Ansible Setup » History » Version 7
Jon Goldberg, 03/28/2018 03:47 PM
| 1 | 1 | Jon Goldberg | # Ansible Setup |
|---|---|---|---|
| 2 | |||
| 3 | 5 | Jon Goldberg | ### Installation |
| 4 | 2 | Jon Goldberg | Megaphone Ansible scripts assume Ansible 2.4+. If you're using Debian 9, install Ansible from backports. |
| 5 | |||
| 6 | 1 | Jon Goldberg | ```bash |
| 7 | 3 | Jon Goldberg | sudo apt install ansible pass expect |
| 8 | 1 | Jon Goldberg | sudo pip2 install python-linode #Needed for generating Linode VMs on the fly |
| 9 | # Debian 9: |
||
| 10 | 4 | Jon Goldberg | sudo apt install -t stretch-backports ansible |
| 11 | 2 | Jon Goldberg | ``` |
| 12 | 5 | Jon Goldberg | |
| 13 | 6 | Jon Goldberg | ### Configuration |
| 14 | TODO: Git clone the `ansible` and `passwords` repos to the appropriate place; copy `~/.passsword-store/.gpg.id.example to .gpg-id`. |
||
| 15 | |||
| 16 | 5 | Jon Goldberg | ### Localhost setup |
| 17 | [Note: You only need this to start managing your OWN host via Ansible, not to use Ansible to manage other servers] |
||
| 18 | 7 | Jon Goldberg | * `sudo apt install acl` (This simplifies [becoming an unprivileged user](http://docs.ansible.com/ansible/latest/user_guide/become.html)) |
| 19 | 5 | Jon Goldberg | After adding your local computer to the [Server List](https://crm.megaphonetech.com/server-list), create a folder for it in `<ansibleroot>/group_vars`. Set any reasonable defaults, in particular `ansible_authorized_keys`. This mitigates the security issue of having passwordless sudo access on each other's localhosts. |