@@RedFenceAnime I thought he was cute and completely oblivious to the way corporate uses Excel worldwide. Even his worst examples seemed quite reasonable to me, allegedly.
@@ndupontnet like how the NHS lost covid cases because they converted & combined CSV to/in XLS and the rows ran out on daily cases. ps cute and oblivious, eww.
I highly recommend Jeff’s book about Ansible: Ansible for DevOps, Server and configuration management for humans. Jeff is very casual and accessible in his videos, but trust me, he’s a real pro when it comes down to server automation. Collecting technical books is my hobby. Recently I was preparing a new category of books in my collection - Linux hardening and server automation. After a thorough research I decided to place Jeff’s book (I finished reading it a couple days ago) as a go to manual for Ansible in that list. Yes, it’s that good. It’s my first comment on this channel and I don’t comment much on YT in general, but - kudos to you, Geerling Guy! Great, great stuff. Keep up the good work.
@@5TY Definitely: Mastering Linux Security and Hardening, Donald A. Tevault (for servers hardening). Also: How Linux Works, Brian Ward (linux in general). For nerds only: Site Reliability Engineering: How Google Runs Production Systems (hardcore server automation).
I know exactly what you mean about using a tool you know a lot about for as many uses as possible. After a decade spent learning everything to know about my job when I was in the Army, I started using my M1A1 Heavy tank for hard drive destruction. Turns out that a 62-ton main battle tank is perfect for destroying 3.5" platter drives on concrete. Crushes 'em flat with very little damage to the tank's track pads. I also learned how to cook using the tank's jet turbine engine. Sure, the food tasted a little like diesel fuel but the overall effort was worth it to avoid having to eat another MRE. It also worked great for chasing bad guys through houses - just put the main gun tube over the back deck and charge after them. Now I'm a network engineer and life is boring as hell.
The full phrasing of "Jeff's Rule of Golden Hammers" is great, and reminds me of a sort of dysfunction I see in some online communities, where, in short, experts gather to share their golden hammer tips without mind for newbies watching and getting bad ideas. So maybe a sort of corollary to go along, "before you start swinging, check who's watching"
Automating the deployment of Docker Swarm services is actually one my main use cases for Ansible. Docker swarm configs are a bit of a pain to update by hand, and Ansible has been a life saver here.
When you said you couldn't manage your router with Ansible, it made me wonder if I could manage mine. Sure enough, it looks like there's actually quite a few Ansible libraries and modules for managing Mikrotik devices running RouterOS!
We manage thousands of Mikrotiks via Ansible The cli is not really made for automation so we've had to write a lot of built in checks to put in some level of idempotency on some things but it works.
What a relief!!!! I'm new with Ansible and I'm using it for everything. I was starting to worry but I realize that I am not alone in this. Thanks for the video,
Jeff this was one of the--if not **THE** best presentation/video you have done. I knew we had a lot of interests in common, and this confirms it. Ansible is one of the best configuration and configuration management tools, and when combined with other leading-edge open-source (from Hashicorp, Docker, etc.), it allows one to manage many. My home "lab" depends on it to manage all of the servers, workstations, network routers and switches, and of course, IOT devices. You've earned a Sugar Fire lunch for this one for sure!
I have always loved ansible and the uri module and have always found it a really easy way to script complex http requests, rather than using a shell script. It's doubly useful because you can more easily perform selective queries on the return results, variable substitution, loops, case conversion etc, all with built in functionality. Very handy!
Everybody watching, This guy even bought a solid 24k golden hammer for the content (it is clearly not painted), Such commitment, how can you not Subscribe?
I built a fully automated VM deployment system using ansible. it's built atop a mysql dynamic inventory, it ingests yaml files for individual VM configs, creates a vm in the correct xcp-ng pool according to the yaml file, and adds it to the dynamic inventory. It then dynamically builds debian net install ISOs with templated vars that pull down the preseed files, and is set up so that it will automatically run postinstall playbooks after the OS install completes. it's kinda a frankenstein's monster of a platform, with some really ugly accounting for edge-cases, but it does work, and saves a ton of time over the many completely manual installations I had to do before I built it.
I always enjoy your videos, and especially enjoyed your dad showing his chops. This video moved you from "oh wow! I should set that up sometime on my montagnard army of Tau" to practical job skill education. Rawk on!
Looking forward to your backup script. Meanwhile, will be using the earlier Ansible projects to manage my Pi cluster & implement similar monitoring & Pi-hole applications. Thanks for the examples & the books. I'm learning a lot in my retirement.
hi Jeff, you might have seen me on the Ansible Community chat. Despite being active in the c.g collection, I actually started using Ansible little more than one year ago, and what drove me to it was almost the same motivation you had for your Mac setup. I am a Linux guy at heart, so last year when the laptop crashed for whatever reason and I had to reinstall it, I thought the same thing: "I should really automate that setup". That lead me to the `xfconf` module, which was in dire need of some TLC, which eventually made me the maintainer of that module. From that point on, I've start submitting many contributions and eventually became a co-maintainer of the collection. My personal configuration playbook has increased its size many times over since last year. Last run when through more then 500 tasks (overall, including roles and loops). Thanks for all the awesome work you have been doing with Ansible!
I automate the build of all my local kit including laptops and PIs too. Has been invaluable when having to keep in sync, migrate, duplicate or perform OS upgrades. Saved so so much time. Now looking to automate anything else I can as Ansible rocks!
Very funny. Twenty or more years ago, AWK was my "golden hammer". Anything and everything, I did with AWK. Not only in UNIX but on Windows, I used MKS Systems UNIX tools for windows, which include an AWK interpreter and an AWK compiler. Very easy way to make executables for a simple task that would run in DOS or Windows.
@Jeff would be great to have a video for Salt as well. Even though Ansible is amazing, the lack of support for doing things programmatically (meaning calling roles and playboks via an API and getting JSON results, for example) makes it less than ideal in certain circumstances, while Salt seems to do the job well for the use case.
I've been working on Ansible to automate Linux patching. Who wants to sit through several SSH sessions doing apt update && apt update -y whenever updates are available? Ansible *should* make it painless to do just that.
There used to be a way to curl pip and install it and ansible remotely in the "pre tasks". Don't know how reliable that was but it sure was satisfying.
The weird and wonderful world that can be automated with Ansible, I built a ci/cd server using ansible and cron. it would poll repos and register the hash of a branch, watching if it changed. Was pretty simple
@@JeffGeerling Ah, after searching your blog I finally understand. All this time watching your channel and hearing your name it never occurred to me it could be dutch, even though i am a native dutch speaker. I can hear it in dutch clearly now. Pindakaas for all !
The electrician example is actually pretty funny. There's a special wire stripping tool you can buy at home depot. Right tool for the job? The professional electricians I know don't use those. They just use regular linesman pliers.
Heads off to read up on Ansible... I've got a massive automation nightmare on the horizon, fingers crossed you've just saved me a lot of torn out hair.
I've never understood why Ansible looks in the playbook directory for all sorts of plugins (modules, filters, roles, etc.) but AFAICT it's impossible to put collections in the playbook directory. Otherwise git submodules would be a great way to pin the collection dependencies!
One of the things I ran into was the speed of ansible was less than ideal, because it did a python ssh connection for each and every step. There were certain things that were just much faster and more streamlined by the builtin module "script" where there were a LOT of steps. For example, we have an application install script that seems like it is built for ansible to run: creation, permission, and installation of files, directories, and packages. But the larger the build, the slower it was on ansible than it was to upload an install script and run that. Like ansible took 11 minutes versus the 5 from a bash script per server. The problem with "script" is the output of the job (its debug module) is very limited, littered with json garbage, and can't handle progress bars. So while I *could* use ansible, I realized it wasn't efficient enough where I *should* use it.
I know some older versions didn't use a persistent SSH connection, but newer versions should by default, I think-meaning your SSH connection is shared among tasks in one playbook making it a bit faster. But even so, there are a lot of little performance issues that can add up, and I wish Red Hat took the performance more seriously :(
My favorite use for Ansible: dynamicly mounting extra EBS volumes and network interfaces on ec2 instances comming up in an ASG to get persistent storage and internal static IPs. least favorite thing: python library conficts with all the other crap runing on ec2 instances that needs python
thanks Jeff another great video. I have question as you are getting your head around Collections any plans on doing one of your great videos on it??? Thanks again Jeff
I've been using Ansible to bootstrap Salt, as the salt bootstrap script doesn't behave well on "non-baseline" distros (eg. POP_OS, etc). Ansible has also been useful for managing and running Powershell DSC configs against Windows systems (with some minor caveats).
I can't post URLs in comments, but there is a semantic versioning library out there for python that would probably make the version comparisons a lot easier.
"If it's stupid but it works..." I read a study a couple of years ago about co2 levels and its effect on our cognitive function, it dropped significantly at levels as low as 1200ppm. Think it was in the order of 10-30%. At higher levels it dropped by over 50%. High enough and it will be hazardous. Time matters though, you would need to spend some time (hours) with bad air quality for it to have that effect.
Yeah; levels in my office were sometimes reaching 2000-3000 ppm, and I definitely noticed the cognitive decline. Little things like knowing the actual level are immensely helpful. I yearn for a day when every room in an office building would include CO2 monitoring.
Jeff, what are you using for DNS these days to get nice addresses for your devices? I think in a couple of years and now the office, DNS entries should skyrocket. You still using Pi-Hole to do that?
I hate ansible sometimes. There are so many limitations, especially if I need to create a cluster setup and hosts need to know something about other hosts which is not in their facts. Also everything seems to be a string after fiddling with jinja expressions although it should output an integer. So many weird things happen that I wish I could use Python more easily with it. Also the delegate_to functionality is very restricted. At the moment I have to invest hours and hours to do simple tasks where a bash or python script would have been just easier. But I also have to use ansible because this is not my personal project. In the end it is nice to have it and it works somehow. Nevertheless debugging could be a bit easier...
I run PowerShell for all my Windows and VMware stuff, but Ansible is one of the next things I want to learn. Do you have any Windows examples in your book?
I am still shocked about the change of your T-Shirt and wonder and requesting a hybrid out of Emacs, Excel, Ansible and RedBull (not sponsored but I should stop drinking too much energy drinks).
Any chances to see an updated version of Ansible Collections and testing roles with Molecule inside a collection with the dependencies from the same, sibling and external collections? I found it quite "interesting" to figure out, how dependencies should be listed in order for Molecule to work. Other thing i do quite often is tie Ansible and Terraform together. Like... i could run Terraform to provision servers and once servers is up Terraform runs Ansible to do the final configuration. On top of that i had integrated that into CI pipeline. If i need new machine, i just push the changes to the remote git, and after couple of minutes i have a new machine ready for a workload. Like this approach pretty much. The only downside of this is that initial infrastructure provisioning should be triggered manually. :) But i think i'm close to deploying Skynet soon. :)
@@JeffGeerling Oh, that's nice! Then i could potentially mention some particular things. The Secrets. Any kind of them! There is differences do you call Ansible with remote_exec from Terraform or the other way around. If you execute Terraform from Ansible itself, then you can just utilize Ansible's Vault and safely store secrets encrypted in repo itself. If you are executing Ansible from Terraform, then... you need to think how to manage secrets. What i did, was deploying Hashicorps Vault and injected secrets (keys, passwords, TLS, etc) at CI stage (Jenkins has extensions for that). Anyway... secret management i found to be quite "interesting". Other thing i could mention is environment management. You most likely want to provision staging, production and other environments. How do you structure you project for maximal module reusability? What i did, i made some "external" TF modules, which at local development stage i sourced as local files. But when they are done, i can just switch to sourcing directly from remote git (no need for terraform cloud). Also some was just local modules. In Ansible side i also did several environment directories, each containing it's own ssh config and group/host variables. Terraform global variables. Still not quite happy with my solution with feeding in some custom *.tfvars file. For example set of dns domains which are the same for different environments. Or some paths, links to storage, etc. I am even not sure if i do things right if i am reaching for some kind of global vars. Terraform random placeholders. For example you have module which provisions some resource. If user of the module does not provide explicit name of the resource, then you could use things like "random_pet" as fall-back/default/placeholder which you can do only in locals. But again, there are some caveats and bad/good practice rules. And lastly, i found really great way to test the whole setup by utilizing "dmacvicar/libvirt" provider, which allows to to spin up virtual environment without paying for Bezos space flights. :) Overall really interesting topic!
![[Watch Party] RoV Pro League 2024 Winter | ( Bacon Time Vs PSG )](http://i.ytimg.com/vi/zM25REvnJW4/mqdefault.jpg)
Me, using Excel for anything, "Yup, looks like a task for a spreadsheet."
... I'm going to take away the covid tracing database from you thank you very much
I stopped my spreadsheet addiction after watching Matt Parker's video: "When Spreadsheets Attack!"
@@RedFenceAnime I thought he was cute and completely oblivious to the way corporate uses Excel worldwide. Even his worst examples seemed quite reasonable to me, allegedly.
@@ndupontnet like how the NHS lost covid cases because they converted & combined CSV to/in XLS and the rows ran out on daily cases.
ps cute and oblivious, eww.
I had spreadsheet with macros to automate software installation after windows reinstall...
Woaahhh did you see that Orange Shirt Jeff transformation to Green Shirt Jeff? Mind blown. That has to be the work of Ansible.
Automate your wardrobe!
YaY Dutch soccer team!
Orange-green deployments
It was a cut.
I already liked it when I saw the Dutch orange T shirt. Thanks Jeff for supporting the Dutch team :)
I highly recommend Jeff’s book about Ansible: Ansible for DevOps, Server and configuration management for humans.
Jeff is very casual and accessible in his videos, but trust me, he’s a real pro when it comes down to server automation.
Collecting technical books is my hobby. Recently I was preparing a new category of books in my collection - Linux hardening and server automation. After a thorough research I decided to place Jeff’s book (I finished reading it a couple days ago) as a go to manual for Ansible in that list. Yes, it’s that good.
It’s my first comment on this channel and I don’t comment much on YT in general, but - kudos to you, Geerling Guy! Great, great stuff. Keep up the good work.
Thank you, and I love your nickname.
Now you have me curious about other books in your collection. Any other recommendations for Linux hardening and automation?
@@5TY Definitely: Mastering Linux Security and Hardening, Donald A. Tevault (for servers hardening). Also: How Linux Works, Brian Ward (linux in general).
For nerds only: Site Reliability Engineering: How Google Runs Production Systems (hardcore server automation).
I know exactly what you mean about using a tool you know a lot about for as many uses as possible.
After a decade spent learning everything to know about my job when I was in the Army, I started using my M1A1 Heavy tank for hard drive destruction.
Turns out that a 62-ton main battle tank is perfect for destroying 3.5" platter drives on concrete. Crushes 'em flat with very little damage to the tank's track pads.
I also learned how to cook using the tank's jet turbine engine. Sure, the food tasted a little like diesel fuel but the overall effort was worth it to avoid having to eat another MRE.
It also worked great for chasing bad guys through houses - just put the main gun tube over the back deck and charge after them.
Now I'm a network engineer and life is boring as hell.
So... what I'm hearing is every network admin should have an M1A1 tank on call?
> So... what I'm hearing is every network admin should have an M1A1 tank on call?
@@JeffGeerling America F*CK YEAH!
The full phrasing of "Jeff's Rule of Golden Hammers" is great, and reminds me of a sort of dysfunction I see in some online communities, where, in short, experts gather to share their golden hammer tips without mind for newbies watching and getting bad ideas. So maybe a sort of corollary to go along, "before you start swinging, check who's watching"
Who knew that sledges and axes are interchangeable?
the guy is so smooth that the talk footage and the yt footage just splices flawlessly together
Hehe, you barely notice the wardrobe change ;)
Automating the deployment of Docker Swarm services is actually one my main use cases for Ansible. Docker swarm configs are a bit of a pain to update by hand, and Ansible has been a life saver here.
"There is nothing so permanent as a temporary solution."
When you said you couldn't manage your router with Ansible, it made me wonder if I could manage mine. Sure enough, it looks like there's actually quite a few Ansible libraries and modules for managing Mikrotik devices running RouterOS!
We manage thousands of Mikrotiks via Ansible
The cli is not really made for automation so we've had to write a lot of built in checks to put in some level of idempotency on some things but it works.
You have a great talent for weaving concepts. Thanks!
What a relief!!!! I'm new with Ansible and I'm using it for everything. I was starting to worry but I realize that I am not alone in this. Thanks for the video,
2:56-3:01 is now the perfect reaction clip for many, many IT-related discussions I participate in.
Jeff this was one of the--if not **THE** best presentation/video you have done. I knew we had a lot of interests in common, and this confirms it. Ansible is one of the best configuration and configuration management tools, and when combined with other leading-edge open-source (from Hashicorp, Docker, etc.), it allows one to manage many. My home "lab" depends on it to manage all of the servers, workstations, network routers and switches, and of course, IOT devices. You've earned a Sugar Fire lunch for this one for sure!
I'll take it!
I didn't know you were such a pro, congrats!
o7
I have always loved ansible and the uri module and have always found it a really easy way to script complex http requests, rather than using a shell script. It's doubly useful because you can more easily perform selective queries on the return results, variable substitution, loops, case conversion etc, all with built in functionality. Very handy!
I like it because it's like shell scripts, but more sane.
Everybody watching,
This guy even bought a solid 24k golden hammer for the content (it is clearly not painted),
Such commitment, how can you not Subscribe?
All of this year's budget in that prop!
But seriously, I did slightly damage the paint job on our family minivan painting the thing ;)
I built a fully automated VM deployment system using ansible.
it's built atop a mysql dynamic inventory, it ingests yaml files for individual VM configs, creates a vm in the correct xcp-ng pool according to the yaml file, and adds it to the dynamic inventory.
It then dynamically builds debian net install ISOs with templated vars that pull down the preseed files, and is set up so that it will automatically run postinstall playbooks after the OS install completes.
it's kinda a frankenstein's monster of a platform, with some really ugly accounting for edge-cases, but it does work, and saves a ton of time over the many completely manual installations I had to do before I built it.
Wearing the Dutch KNVB shirt, nice ! (Netherlands soccer association)
Percussive maintenance: the terminology I didn't know I needed and can no longer do without. #RadShirtJeff
I always enjoy your videos, and especially enjoyed your dad showing his chops.
This video moved you from "oh wow! I should set that up sometime on my montagnard army of Tau" to practical job skill education. Rawk on!
Hey Jeff great video just ordered your book ansible Dev ops can't wait to read it an learn how to do some automation
Good luck, and happy automating!
A orange shirt of the Dutch KNVB. Did not know Jeff was a soccer fan...
The hardest time is when USA and NED match up. Luckily it's been pretty rare!
I need to ansible my job! Then I can go on vacation without the boss knowing!
As a web dev, this was extremely painful. Everything else was an inspiration!
Looking forward to your backup script. Meanwhile, will be using the earlier Ansible projects to manage my Pi cluster & implement similar monitoring & Pi-hole applications. Thanks for the examples & the books. I'm learning a lot in my retirement.
hi Jeff, you might have seen me on the Ansible Community chat. Despite being active in the c.g collection, I actually started using Ansible little more than one year ago, and what drove me to it was almost the same motivation you had for your Mac setup.
I am a Linux guy at heart, so last year when the laptop crashed for whatever reason and I had to reinstall it, I thought the same thing: "I should really automate that setup". That lead me to the `xfconf` module, which was in dire need of some TLC, which eventually made me the maintainer of that module. From that point on, I've start submitting many contributions and eventually became a co-maintainer of the collection. My personal configuration playbook has increased its size many times over since last year. Last run when through more then 500 tasks (overall, including roles and loops).
Thanks for all the awesome work you have been doing with Ansible!
I automate the build of all my local kit including laptops and PIs too. Has been invaluable when having to keep in sync, migrate, duplicate or perform OS upgrades. Saved so so much time. Now looking to automate anything else I can as Ansible rocks!
Man, you are helpful! Your ansible chroot role made things very easy for me, thanks so much!
THAT SHIRT!! You earned a like just with the thumbnail of this video!
Thanks!
Well darn. I may have to learn Ansible. You convinced me
Very funny. Twenty or more years ago, AWK was my "golden hammer". Anything and everything, I did with AWK. Not only in UNIX but on Windows, I used MKS Systems UNIX tools for windows, which include an AWK interpreter and an AWK compiler. Very easy way to make executables for a simple task that would run in DOS or Windows.
Not gonna lie, I did not learn a thing, but I enjoyed this video nonetheless. Still waiting for that RX6X00 on the Pi update!
Still working on it :(
I love this video. Great inspiration!
5:15 I guess you need to switch to OpenWRT then you can very much use ansible :D
Great session btw!
first thing I googled was to see what popular router firmwares could be managed with ansible.
No way Orange shirt😁 Much love from the Netherlands😊
You get points for the guitar on the wall.
That's a golden Birmingham screwdriver!
Maybe the conference should have used ansible to record and distribute the great man's speech....
13:20 Bro, Jeff tagged his repo with "gore" . RIP my man
Learning Ansible Tower right now for my new job. This was super interesting.
Hammering a screw.
Subscribed, as a bit of an IT nerd I love this.
@Jeff would be great to have a video for Salt as well. Even though Ansible is amazing, the lack of support for doing things programmatically (meaning calling roles and playboks via an API and getting JSON results, for example) makes it less than ideal in certain circumstances, while Salt seems to do the job well for the use case.
That is what i call "an explanation" good job ma man!
Like your Shirt :) ! (the orange one that is)
I've been working on Ansible to automate Linux patching. Who wants to sit through several SSH sessions doing apt update && apt update -y whenever updates are available? Ansible *should* make it painless to do just that.
Jeff's Rule of Golden Hammers 😃. I guess Red-Shirt-Jeff got the rest of the golden toolbox: saws and blow torches anyone?
I haven't yet revealed the law of hacksaws and blowtorches.
There used to be a way to curl pip and install it and ansible remotely in the "pre tasks". Don't know how reliable that was but it sure was satisfying.
Thanks Jeff
This is a great talk. Thanks Jeff.
(Now all I have to do is figure out what Ansible is...)
:D
Cheers,
The weird and wonderful world that can be automated with Ansible, I built a ci/cd server using ansible and cron. it would poll repos and register the hash of a branch, watching if it changed. Was pretty simple
Simple is good. Simple is easy to maintain!
is ... is that a dutch soccer shirt ??
Why yes, it is! 🇳🇱
@@JeffGeerling Ah, after searching your blog I finally understand. All this time watching your channel and hearing your name it never occurred to me it could be dutch, even though i am a native dutch speaker. I can hear it in dutch clearly now. Pindakaas for all !
@@thygate Mmm, add a little nutella for one of the best treats.
The electrician example is actually pretty funny. There's a special wire stripping tool you can buy at home depot. Right tool for the job? The professional electricians I know don't use those. They just use regular linesman pliers.
Heads off to read up on Ansible... I've got a massive automation nightmare on the horizon, fingers crossed you've just saved me a lot of torn out hair.
Nice dutch football shirt!
Ansible sounds like a good thing to look at for homelab
I'd be up a creek without it! It's reassuring knowing I can rebuild any part of my homelab in minutes without even a full disk image backup.
I've never understood why Ansible looks in the playbook directory for all sorts of plugins (modules, filters, roles, etc.) but AFAICT it's impossible to put collections in the playbook directory. Otherwise git submodules would be a great way to pin the collection dependencies!
Even RedHat used to swear by Ansible to configure Ceph but have finally realized its not the correct tool.....
No way, it's the guy who autocloses all pull requests :D
One of the things I ran into was the speed of ansible was less than ideal, because it did a python ssh connection for each and every step. There were certain things that were just much faster and more streamlined by the builtin module "script" where there were a LOT of steps. For example, we have an application install script that seems like it is built for ansible to run: creation, permission, and installation of files, directories, and packages. But the larger the build, the slower it was on ansible than it was to upload an install script and run that. Like ansible took 11 minutes versus the 5 from a bash script per server. The problem with "script" is the output of the job (its debug module) is very limited, littered with json garbage, and can't handle progress bars. So while I *could* use ansible, I realized it wasn't efficient enough where I *should* use it.
I know some older versions didn't use a persistent SSH connection, but newer versions should by default, I think-meaning your SSH connection is shared among tasks in one playbook making it a bit faster.
But even so, there are a lot of little performance issues that can add up, and I wish Red Hat took the performance more seriously :(
My golden hammer is "write an over-engineered project in C#". At least you get stuff done!
I wish I had Ansible at Yahoo in ‘98, I’d own the planet now.
Yahoo in 98 was like a different universe.
Just in time for those new MBP's next week...
Exactly!
Did Red Shirt Jeff snug the screw in, instead of a nail (2:00). 😉😁
Take a shot every time he says "Ansible"
That’s suicide
My favorite use for Ansible: dynamicly mounting extra EBS volumes and network interfaces on ec2 instances comming up in an ASG to get persistent storage and internal static IPs. least favorite thing: python library conficts with all the other crap runing on ec2 instances that needs python
I had my homeautomation running via ansible playbooks .. if that's uncommon enough :D
thanks Jeff another great video. I have question as you are getting your head around Collections any plans on doing one of your great videos on it???
Thanks again Jeff
Remember BATCH file in DOS, well it's a bit of a same story too here 😙
I've been using Ansible to bootstrap Salt, as the salt bootstrap script doesn't behave well on "non-baseline" distros (eg. POP_OS, etc). Ansible has also been useful for managing and running Powershell DSC configs against Windows systems (with some minor caveats).
Over the past weekend, i learned how to get and deploy a SSL cert from let's encrypt.
i ve been using Ansible to automate Cloud datacenter build
"if it's stupid and it works, it's not stupid"
I can't post URLs in comments, but there is a semantic versioning library out there for python that would probably make the version comparisons a lot easier.
True connoisseurs will call Orange Shirt Jeff: Oranje Shirt Jeff
11:54 Nothing is more permanent than a temporary solution that works
Percussive maintenance, thats what i call my DIY.
"If it's stupid but it works..."
I read a study a couple of years ago about co2 levels and its effect on our cognitive function, it dropped significantly at levels as low as 1200ppm. Think it was in the order of 10-30%. At higher levels it dropped by over 50%. High enough and it will be hazardous. Time matters though, you would need to spend some time (hours) with bad air quality for it to have that effect.
Yeah; levels in my office were sometimes reaching 2000-3000 ppm, and I definitely noticed the cognitive decline. Little things like knowing the actual level are immensely helpful.
I yearn for a day when every room in an office building would include CO2 monitoring.
I'm working on a playbook to set up a bash environment on my workstation and any remote environment.
Me, 21 minutes after pressing play, "I have no idea what I just watched".
21 minutes of your life, right into the realm of the unknown!
Jeff, what are you using for DNS these days to get nice addresses for your devices? I think in a couple of years and now the office, DNS entries should skyrocket. You still using Pi-Hole to do that?
Pi-hole at home, unbound at office
@@JeffGeerling Nice! I hope you publish the playbooks you use for the equipments in your office network soon!
Anyone noticed that the video is not perfectly synced with audio? (video is slower)
I hate ansible sometimes. There are so many limitations, especially if I need to create a cluster setup and hosts need to know something about other hosts which is not in their facts. Also everything seems to be a string after fiddling with jinja expressions although it should output an integer. So many weird things happen that I wish I could use Python more easily with it. Also the delegate_to functionality is very restricted.
At the moment I have to invest hours and hours to do simple tasks where a bash or python script would have been just easier. But I also have to use ansible because this is not my personal project.
In the end it is nice to have it and it works somehow. Nevertheless debugging could be a bit easier...
Summary: if u find yourself writting lots of shell scripts frequently or creating lots of images ... well, Ansible is your tool
I run PowerShell for all my Windows and VMware stuff, but Ansible is one of the next things I want to learn.
Do you have any Windows examples in your book?
I am still shocked about the change of your T-Shirt and wonder and requesting a hybrid out of Emacs, Excel, Ansible and RedBull (not sponsored but I should stop drinking too much energy drinks).
Ansible runs my D2lod bots like a charm.
Gekoloniseerd
Every tool's a hammer.
When is the Radxa video going to be aired? Can't wait for it :)
It's going to be a big one. Probably some time in November. Plenty of other fun things brewing between now and then though!
nail screw or bolt - who care, hammer is gold. ;)
Mac's in Racks was the unwritten sequel to Fox in Socks 🦊🧦
haha
so ansible is an API? a language or something else?
Hey great video, learning a lot. Can you make video on local DNS server with raspberry pi?
Any chances to see an updated version of Ansible Collections and testing roles with Molecule inside a collection with the dependencies from the same, sibling and external collections? I found it quite "interesting" to figure out, how dependencies should be listed in order for Molecule to work.
Other thing i do quite often is tie Ansible and Terraform together. Like... i could run Terraform to provision servers and once servers is up Terraform runs Ansible to do the final configuration. On top of that i had integrated that into CI pipeline. If i need new machine, i just push the changes to the remote git, and after couple of minutes i have a new machine ready for a workload. Like this approach pretty much. The only downside of this is that initial infrastructure provisioning should be triggered manually. :) But i think i'm close to deploying Skynet soon. :)
I'm actually working on some Terraform + Ansible work for my 2nd Ansible book, 'Ansible for Kubernetes'. It's been a long time coming though :O
@@JeffGeerling Oh, that's nice! Then i could potentially mention some particular things.
The Secrets. Any kind of them!
There is differences do you call Ansible with remote_exec from Terraform or the other way around. If you execute Terraform from Ansible itself, then you can just utilize Ansible's Vault and safely store secrets encrypted in repo itself. If you are executing Ansible from Terraform, then... you need to think how to manage secrets. What i did, was deploying Hashicorps Vault and injected secrets (keys, passwords, TLS, etc) at CI stage (Jenkins has extensions for that).
Anyway... secret management i found to be quite "interesting".
Other thing i could mention is environment management. You most likely want to provision staging, production and other environments. How do you structure you project for maximal module reusability? What i did, i made some "external" TF modules, which at local development stage i sourced as local files. But when they are done, i can just switch to sourcing directly from remote git (no need for terraform cloud). Also some was just local modules.
In Ansible side i also did several environment directories, each containing it's own ssh config and group/host variables.
Terraform global variables. Still not quite happy with my solution with feeding in some custom *.tfvars file. For example set of dns domains which are the same for different environments. Or some paths, links to storage, etc.
I am even not sure if i do things right if i am reaching for some kind of global vars.
Terraform random placeholders. For example you have module which provisions some resource. If user of the module does not provide explicit name of the resource, then you could use things like "random_pet" as fall-back/default/placeholder which you can do only in locals. But again, there are some caveats and bad/good practice rules.
And lastly, i found really great way to test the whole setup by utilizing "dmacvicar/libvirt" provider, which allows to to spin up virtual environment without paying for Bezos space flights. :)
Overall really interesting topic!
Sooo. When are you going to start lecturing on my university?
Being Dutch myself I really like to know the story behind your KNVB t-shirt.
The Geerlings family name comes from part of Holland, and there are still a number left there today!
@@JeffGeerling No doubt! I know a few, probably not related. Love your shows btw. They always hit my g.a.s. spot!
(But maybe not for screws) 3:28 😂
But can ansible do faster then light communication