Project

General

Profile

Ansible Setup » History » Revision 8

Revision 7 (Jon Goldberg, 03/28/2018 03:47 PM) → Revision 8/30 (Jon Goldberg, 03/28/2018 08:30 PM)

# Ansible Setup 

 ### Installation 
 Megaphone Ansible scripts assume Ansible 2.4+.    If you're using Debian 9, install Ansible from backports. 

 ```bash 
 sudo apt install ansible pass expect 
 sudo pip2 install python-linode #Needed for generating Linode VMs on the fly 
 # Debian 9: 
 sudo apt install -t stretch-backports ansible 
 ``` 

 ### Configuration 
 TODO: Git clone the `ansible` and `passwords` repos to the appropriate place; copy `~/.passsword-store/.gpg.id.example to .gpg-id`. 

 ### Localhost setup 
 [Note: You only need this to start managing your OWN host via Ansible, not to use Ansible to manage other servers] 

 
 * `sudo apt install acl` (This simplifies [becoming an unprivileged user](http://docs.ansible.com/ansible/latest/user_guide/become.html)) 
 * After adding your local computer to the [Server List](https://crm.megaphonetech.com/server-list), create a folder for it in `<ansibleroot>/group_vars`.    Set any reasonable defaults, in particular `ansible_authorized_keys`.    This mitigates the security issue of having passwordless sudo access on each other's localhosts.