Project

General

Profile

Ansible Setup » History » Version 8

Jon Goldberg, 03/28/2018 08:30 PM

1 1 Jon Goldberg
# Ansible Setup
2
3 5 Jon Goldberg
### Installation
4 2 Jon Goldberg
Megaphone Ansible scripts assume Ansible 2.4+.  If you're using Debian 9, install Ansible from backports.
5
6 1 Jon Goldberg
```bash
7 3 Jon Goldberg
sudo apt install ansible pass expect
8 1 Jon Goldberg
sudo pip2 install python-linode #Needed for generating Linode VMs on the fly
9
# Debian 9:
10 4 Jon Goldberg
sudo apt install -t stretch-backports ansible
11 2 Jon Goldberg
```
12 5 Jon Goldberg
13 6 Jon Goldberg
### Configuration
14
TODO: Git clone the `ansible` and `passwords` repos to the appropriate place; copy `~/.passsword-store/.gpg.id.example to .gpg-id`.
15
16 5 Jon Goldberg
### Localhost setup
17
[Note: You only need this to start managing your OWN host via Ansible, not to use Ansible to manage other servers]
18 8 Jon Goldberg
19 1 Jon Goldberg
* `sudo apt install acl` (This simplifies [becoming an unprivileged user](http://docs.ansible.com/ansible/latest/user_guide/become.html))
20 8 Jon Goldberg
* After adding your local computer to the [Server List](https://crm.megaphonetech.com/server-list), create a folder for it in `<ansibleroot>/group_vars`.  Set any reasonable defaults, in particular `ansible_authorized_keys`.  This mitigates the security issue of having passwordless sudo access on each other's localhosts.