1. ANSIBLE
INTRODUCTION TO ANSIBLE
Mattias Gees / @MattiasGees

2. WHAT IS ANSIBLE?
Started in February 2012
By Michael DeHaan
More than 600 Contributors
Orchestration Engine
Configuration Management
Application Deployment
Continuous Delivery

3. ONLINE RESOURCES

4. WEBSITE

5. DOCUMENTATION

6. MAILING LISTS
ansible-announce
ansible-project
ansible-devel

7. IRC
#ANSIBLE

8. GITHUB
HTTPS://GITHUB.COM/ANSIBLE/ANSIBLE

9. BENEFITS

10. NO AGENT REQUIRED
SSH

11. EASY TO INSTALL
#EE rp
PL eo
ymisalasbe
u ntl nil
#AalbetruhaPA
vial hog
P
atgtisalasbe
p-e ntl nil
ppisalasbe
i ntl nil

12. REQUIREMENTS
Control machine: Python 2.6
Managed node: Python 2.4
python-simplejson
libselinux-python

13. YAML SYNTAX
--ym nm=saeisald
u: ae tt=ntle
wt_tm:
ihies
-apsre
p_evr
-am_otae
cesfwr
-srie nm=p_evrsaernigealdys
evc: aeapsre tt=unn nbe=e
-tmlt:sc/p/oetmltsfoj ds=ecfocn
epae r=otcd/epae/o.2 et/t/o.of
ntf:
oiy
-rsatapsre
etr p evr

14. SCALABLE

15. CUSTOMIZABLE

16. COMMANDS
ansible
ansible-playbook
ansible-pull
ansible-doc
ansible-galaxy

17. MODULES
Run on remote host
Control system resources, executing system commands
Notification
Easy to write new modules

18. MODULES
Cloud
Commands
Database
Files
Internal
Inventory
Messaging
Monitoring
Net Infrastructure
Network
Notification
Packaging
Source Control
System
Utilities
Web Infrastructure

19. INVENTORY
Contains all the managed hosts
Can contain variables
Flat file(s) or script (dynamic inventory)
Can interact with your own CMDB
Multiple inventory sources

20. INVENTORY
mi.xml.o
aleapecm
[esres
wbevr]
foeapecm
o.xml.o
breapecm
a.xml.o
[bevr]
dsres
oeeapecm
n.xml.o
toeapecm
w.xml.o
treeapecm
he.xml.o
[evr:hlrn
srescide]
wbevr
esres
dsres
bevr

21. INVENTORY
jme asbeshpr=55asbeshhs=9.6..
upr nil_s_ot55 nil_s_ot12181
[esres
wbevr]
ww0:0.xml.o
w[15]eapecm
[esre:as
wbevrvr]
pr=0
ot8

22. ANSIBLE
Basic tasks
Information from system(s)
Execute one module
Uae asbehs-atr [pin]
sg: nil otpten otos

23. ANSIBLE
asbeal- pn nil l m ig o
asbedm - stp
nil eo m eu
asbefoeapecm- “ursi/eot
nil o.xml.o a /s/bnrbo”
asbedm - fl - "et/r/o/.x md=0"nil eo m ie a ds=svfoatt oe60 o
asbedm-n - ym- "aehtdsaeisald
nil eooe m u a nm=tp tt=ntle"
asbedm-n - srie- "aehtdsaesatd
nil eooe m evc a nm=tp tt=tre"

24. PLAYBOOKS
Execution of tasks
One task is one module
Variables
Handlers
Idempotent

25. ANSIBLE
--hss ht
ot: tp
rmt_sr ue
eoeue: sr
sd:ys
uo e
vr:
as
i_ot:
nprs
-8
0
tss
ak:
-nm:isalhtd
ae ntl tp
ato:ymnm=tp saelts
cin u aehtd tt=aet
-nm:cp htdcn
ae oy tp.of
ato:tmlt
cin epae
schtdcn.2
r=tp.ofj
ds=echtdcn/tp.of
et/t/tp/ofhtdcn
onrro
we=ot
gopro
ru=ot
md=64
oe04
sue=sse_"
esr"ytmu
stp=htdcni_"
eye"tp_ofgt
bcu=e
akpys
ntf:
oiy
-rsathtd
etr tp

26. ROLES
Reusable list of tasks
Has one goal (eg deploy apache)
Reusable
--hss dm
ot: eo
gte_at:Fle
ahrfcs as
cneto:lcl
oncin oa
sra:1
eil
vr:
as
i_ot:
nprs
-8
0
rls
oe:
-htd
tp
-msl
yq
-itbe
pals

27. TEMPLATES
Jinja2 templating engine
Use of variables in files
Loops, Conditionals, Filters, ...
<Poyblne:/{blne_ae}>
rx aacr/{ aacrnm }
{ frhs i gop[dm-e' %
% o ot n rus'eowb] }
BlneMme ht:/{hsvr[ot.nil_t1iv.drs }
aacrebr tp/{ otashs]asbeeh.p4ades }
{ edo %
% nfr }
Odralwdn
re lo,ey
Alwfo al
lo rm l
</rx>
Poy

28. ANSIBLE-PLAYBOOK
Execute a playbook
Set-up a whole environment / host(s)
Uae asbepabo pabo.m - ivnoy- lmtt hs /gop
sg: nil-lyok lyokyl i netr l ii o ot
ru

29. EXTRA FEATURES

30. ACCELERATED MODE
--hss al
ot: l
aclrt:tu
ceeae re
#dfutpr i 59
eal ot s 09
aclrt_ot 100
ceeaepr: 00

31. ASYNCHRONOUS ACTIONS AND POLLING
--hss al
ot: l
rmt_sr ro
eoeue: ot
tss
ak:
-nm:smlt ln rnigo (5sc,wi fru t 4,pl eey5
ae iuae og unn p 1 e) at o p o 5 ol vr
cmad /i/le 1
omn: bnsep 5
ayc 4
sn: 5
pl:5
ol

32. CHECK MODE
Uae asbepabo foyl-cek
sg: nil-lyok o.m -hc
-tss
ak:
-nm:ti ts i rnee i cekmd
ae hs ak s u vn n hc oe
cmad /oehn/orn-ee-ncekmd
omn: smtigt/u -vni-hc-oe
awy_u:ys
lasrn e
Uae asbepabo foyl-cek-df -lmtfoeapecm
sg: nil-lyok o.m -hc -if -ii o.xml.o

33. ROLLING UPDATES
--nm:ts pa
ae et ly
hss wbevr
ot: esres
sra:3
eil
MAX FAILURE PERCENTAGE
--hss wbevr
ot: esres
mxfi_ecnae 3
a_alpretg: 0
sra:1
eil 0

34. DELEGATION
--hss wbevr
ot: esres
sra:5
eil
tss
ak:
-nm:tk oto la blne po
ae ae u f od aacr ol
cmad /s/i/aeoto_ol{ ivnoyhsnm }
omn: urbntk_u_fpo { netr_otae }
dlgt_o lablne.xml.o
eeaet: odaacreapecm
-nm:ata seswudg hr
ae cul tp ol o ee
ym nm=cewbsaksaelts
u: aeam-e-tc tt=aet
-nm:adbc t la blne po
ae d ak o od aacr ol
cmad /s/i/d_akt_ol{ ivnoyhsnm }
omn: urbnadbc_opo { netr_otae }
dlgt_o lablne.xml.o
eeaet: odaacreapecm

35. LOCAL ACTIONS/PLAYBOOKS
-#..
.
tss
ak:
-nm:rcrieycp flsfo mngmn sre t tre
ae eusvl oy ie rm aaeet evr o agt
lclato:cmadryc- /aht/ie { ivnoyhsnm }:pt/otre
oa_cin omn sn a pt/ofls { netr_otae }/aht/ag
Uae asbepabo pabo.m -cneto=oa
sg: nil-lyok lyokyl -oncinlcl
--hss dm
ot: eo
cneto:lcl
oncin oa

36. ERROR HANDLING / OVERRIDING OUTPUT
--nm:ti wl ntb cutda afiue
ae hs il o e one s
alr
cmad /i/as
omn: bnfle
inr_ros ys
goeerr: e
-nm:ti cmadpit FIE we i fis
ae hs omn rns ALD hn t al
cmad /s/i/xml-omn - - omn: urbneapecmad x y z
rgse:cmadrsl
eitr omn_eut
fie_hn "FIE'i cmadrsl.ter
aldwe: 'ALD n omn_eutsdr"
-sel /s/i/ilbs -md=tk m t tervr
hl: urbnblyas -oe"ae e o h ie"
rgse:bs_eut
eitr asrsl
cagdwe:"asrsl.c! 2
hne_hn bs_eutr = "

37. LOOKUPS
--hss al
ot: l
tss
ak:
-dbg mg"{lou(ev,HM' } i a evrnetvral"
eu: s={ okp'n''OE) } s n niomn aibe
-dbg mg"{ie } i aln fo tersl o ti cmad
eu: s={ tm } s
ie rm h eut f hs omn"
wt_ie:
ihlns
-ct/t/od
a ecmt
-dbg mg"{lou(pp''ae)} i terwrsl o rnigti cmad
eu: s={ okp'ie,dt' } s h a eut f unn hs omn"
-dbg mg"{lou(rdsk' 'ei:/oahs:39smky)} i vlei
eu: s={ okp'ei_v, rds/lclot67,oee' } s au n
-dbg mg"{lou(dsx' 'xml.o' } i aDSTTrcr freape
eu: s={ okp'ntt, eapecm) } s
N X eod o xml.
-dbg mg"{lou(tmlt' '/oetmlt.2)} i avlefo eaut
eu: s={ okp'epae, .sm_epaej' } s
au rm vla

38. PROMPTS
--hss al
ot: l
rmt_sr ro
eoeue: ot
vr:
as
fo:"aeo"
rm cmlt
vr_rmt
aspop:
nm:"hti yu nm?
ae wa s or ae"
qet "hti yu qet"
us: wa s or us?
vr_rmt
aspop:
-nm:"ees_eso"
ae rlaevrin
pop:"rdc rlaevrin
rmt Pout ees eso"
dfut "."
eal: 10

39. TAGS
-tss
ak:
-ym nm={ie } saeisald
u: ae{ tm } tt=ntle
wt_tm:
ihies
-htd
tp
-mmahd
ecce
tg:
as
-pcae
akgs
-tmlt:sctmltsscj ds=ecfocn
epae r=epae/r.2 et/t/o.of
tg:
as
-cniuain
ofgrto
Uae asbepabo eapeyl-tg "ofgrto,akgs
sg: nil-lyok xml.m -as cniuainpcae"
-rls
oe:
-{rl:wbevr pr:50,tg:['e' 'o']}
oe esre, ot 00 as
wb, fo
--icue foyltg=e,o
nld: o.m aswbfo

40. BEST PRACTICES
pouto
rdcin
sae
tg
gopvr/
ru_as
gop
ru1
gop
ru2
hs_as
otvr/
hsnm1
otae
hsnm2
otae
#ivnoyfl frpouto sres
netr ie o rdcin evr
#ivnoyfl frsaeevrnet
netr ie o tg niomn
#hr w asg vralst priua gop
ee e sin aibe o atclr rus
#"
"
#i ssesne seii vrals ptte hr
f ytm ed pcfc aibe, u hm ee
#"
"
st.m
ieyl
wbevr.m
esresyl
dsresyl
bevr.m
#mse pabo
atr lyok
#pabo frwbevrte
lyok o esre ir
#pabo frdsre te
lyok o bevr ir
rls
oe/
cmo/
omn
tss
ak/
mi.m
anyl
hnlr/
ades
mi.m
anyl
tmlts
epae/
npcn.2
t.ofj
fls
ie/
brtt
a.x
fos
o.h
vr/
as
mi.m
anyl
#ti heacyrpeet a"oe
hs irrh ersns
rl"
#
# <-tssfl cnicuesalrflsi wratd
- ak ie a nld mle ie f arne
#
# <-hnlr fl
- ades ie
# <-flsfruewt tetmlt rsuc
- ie o s ih h epae eore
# <--- tmltsedi .2
---- epae n n j
#
# <-flsfruewt tecp rsuc
- ie o s ih h oy eore
# <-srp flsfruewt tesrp rsuc
- cit ie o s ih h cit eore
#
# <-vralsascae wt ti rl
- aibe soitd ih hs oe

41. ANSIBLE-PULL
Host gets Ansible configuration
Git
SVN
NFS
...
Runs the playbook on itself
No central machine needed
Enforcing of configuration
Uae asbepl [pin]pabo.m
sg: nil-ul otos lyokyl

42. ANSIBLE-DOC
View documentation of modules
Uae asbedcym- mdl_ah
sg: nil-o u M ouept

43. ANSIBLE-GALAXY
Download roles
http://galaxy.ansible.com
Uae asbeglx isalbnoo.gn
sg: nil-aay ntl enjynix

44. THANK YOU
MATTIAS GEES
@MattiasGees / mattias.gees@btr-services.be