Marc, THANK YOU so much for this one. As usual another winner for the folks who need some help. I have only ONE note - I spent almost one day in trying to get the proxmox dynamic inventory. yml to work. I COULD NOT with the most frustrating error of invalid SSL certificate, which the "validate_cers: false" should fix... and it did NOT. The REAL problem was the URL value, which must be included in DOUBLE quotes. I don't know if this is a problem with Proxmox 7.2 (which I run), but I was getting very annoyed at EVERYBODY. 😉😉😉😉 You asked for suggestions. Having a follow up on rundeck would be a good one IMHO. Again, THANK YOU so much.
Another great video ! So now you should make a video on the other missing Ansible story- important for home labs: ansible-pull, for targets behind NAT. Thus a client install is needed for reverse ssh access to Ansible server.
Hi Marc. Found a few things in the docker files that are problematic. I changed them. Would you like me to put it on Git repo? The problems are around a few volumes that are missing. So when you bouncy the CTs you loose your changes.
I've been losing my head for a few days trying to make ansible semaphore or awx work in Kubernetes. They both can't run jobs and have problems with websockets and others. Well, let's try a traditional VM with Rundeck. Your approach looks very robust as well. I will automate some tasks in a cloud environment.
Nice approach, just for curiosity, wouldn't be good just to setup a python environment for ansible/rundeck user, where the python binary and libraries are isolated for that user? I believe that pyenv can help with that. That would manage the python versions and environment for different users without breaking the system and without the need of root installation. And for binary usage just use the Ansible/Rundeck user.
Thanks for the video. On debian 12 LXC, use 'pip install ansible --break-system-packages', otherwise you get "error: externally-managed-environment". I hope there is a better solution for this.
Thanks for the great video. But I have problem to run rundeck publicDNS:4440 ,cannot log in(admin,admin). So i change url in the /home/rundeck/etc/framework.properties to my publicDNS, add publicDNS in etc/host . Still cannot log in.I can open vscode on publicDNS:8080. I use aws. Which part did i miss? Could you give me some hints? Thanks
Hallo Marc, vielen Dank für das tolle Video. Ich habe ein Problem beim einlesen der Nodes in Rundeck. Ich habe Rundeck in einem LXC Container am laufen. VS Code funktioniert auch. Ich habe die Ordner wie beschrieben angelegt. Wenn ich die Nodes in der Shell suchen lasse (ansible-invertroy --graph) dann funktioniert das auch. Allerdings muss ich hier ein Passwort (sudo) angeben damit er es ausführt. Wenn ich nun in Rundeck deinen Schritten folge, dann sucht er nur den localhost und nicht im Inventory. Eine Idee? Mit freundlichen Grüßen
Bitte lege (als root) eine Datei /etc/sudoers.d/rundeck an und kopiere den folgenden Inhalt (ohne Quotes) hinein : "rundeck ALL=(ALL) NOPASSWD: ALL" - das erlaubt dem rundeck user sudo ohne Passwort. Ich überlege mir solange eine bessere Lösung
@@OneMarcFifty Hallo, ich bekomme es außerdem nicht hin ein Playbook zu starten. Egal ob ich /home/rundeck/ansible/playbooks/deploy-ansible.yaml oder ~/ansible/playbooks/deploy-ansible.yaml eintrage, es wird mir immer die Fehlermeldung angezeigt, dass das Playbook nicht gefunden werden kann. Hast du auch hierfür eine Idee?
Hast Du das Verzeichnis angelegt? In einer shell mal cat und dann den pfad zum file reinkopieren (cat /var/lib/rundeck/…). Groß/Kleinschreibung ? /var/lib/rundeck/ansible ist der richtige Pfad in der script version
![ทางเดินชีวิต - ธีเดช ทองอภิชาติ x อ.ไข่ มาลีฮวนน่า [Official MV]](http://i.ytimg.com/vi/1f3wcG16dd4/mqdefault.jpg)
Awesome work 👌 ....very informative and laid out for easy following! Keep up the great work Marc, we really love your content!
Thank you so much.
this was exactly what I needed - so excited to rebuild my homelab to follow this. Great Job Marc!!
Hi Danie, many thanks !!!
We miss you and your great work. I hope you're well
YES, a new video with the content I want.
Awesome - thank you very much ;-)
This goes into my bookmarks! Awesome video. Ty!
Hi Henrik, great to hear - thank you very much ;-)
Marc, THANK YOU so much for this one. As usual another winner for the folks who need some help. I have only ONE note - I spent almost one day in trying to get the proxmox dynamic inventory. yml to work. I COULD NOT with the most frustrating error of invalid SSL certificate, which the "validate_cers: false" should fix... and it did NOT. The REAL problem was the URL value, which must be included in DOUBLE quotes. I don't know if this is a problem with Proxmox 7.2 (which I run), but I was getting very annoyed at EVERYBODY. 😉😉😉😉
You asked for suggestions. Having a follow up on rundeck would be a good one IMHO.
Again, THANK YOU so much.
Hi, that's curious - I have my URL in the config without any quotes - do you have any special characters ($%&...) that need quoting in the URL?
@@OneMarcFifty no special characters, but I do update to the newest versions of proxmox every time I get the chance.
Another great video !
So now you should make a video on the other missing Ansible story- important for home labs: ansible-pull, for targets behind NAT. Thus a client install is needed for reverse ssh access to Ansible server.
Hi, many thanks for the hint - Jay from @Learn Linux TV has already made a video about this: th-cam.com/video/sn1HQq_GFNE/w-d-xo.html
@@OneMarcFifty Cool ! This github install on managed nodes is an alternative (and better) method than what I was thinking.🤣
Marc, your solutions are priceless, thank you!
Cool video production!
I have been waiting for you grate videos
Hi Ismail, thank you very much.
Good job 👏 keep it up. Thanks!
Thank you very much.
Great one! Was just about to install AWX. But this one is much easier :).
Many thanks Rene. Let me know if you like Rundeck.
Hi Marc. Found a few things in the docker files that are problematic. I changed them. Would you like me to put it on Git repo? The problems are around a few volumes that are missing. So when you bouncy the CTs you loose your changes.
Amazing video !! I like this as opposed to Ansible Tower / AWX
Thank you very much- I love my Rundeck ;-)
mind blown
Thank you ;-)
I've been losing my head for a few days trying to make ansible semaphore or awx work in Kubernetes. They both can't run jobs and have problems with websockets and others. Well, let's try a traditional VM with Rundeck. Your approach looks very robust as well. I will automate some tasks in a cloud environment.
Nice approach, just for curiosity, wouldn't be good just to setup a python environment for ansible/rundeck user, where the python binary and libraries are isolated for that user? I believe that pyenv can help with that.
That would manage the python versions and environment for different users without breaking the system and without the need of root installation. And for binary usage just use the Ansible/Rundeck user.
Thanks for the video.
On debian 12 LXC, use 'pip install ansible --break-system-packages', otherwise you get "error: externally-managed-environment". I hope there is a better solution for this.
This is awesome. How about Rundeck vs Ansible Tower?
Thanks for the great video. But I have problem to run rundeck publicDNS:4440 ,cannot log in(admin,admin). So i change url in the /home/rundeck/etc/framework.properties to my publicDNS, add publicDNS in etc/host . Still cannot log in.I can open vscode on publicDNS:8080. I use aws. Which part did i miss? Could you give me some hints? Thanks
Might be firewall as well - I wouldn’t expose it to a public IP anyhow
Hallo Marc, vielen Dank für das tolle Video. Ich habe ein Problem beim einlesen der Nodes in Rundeck. Ich habe Rundeck in einem LXC Container am laufen. VS Code funktioniert auch. Ich habe die Ordner wie beschrieben angelegt. Wenn ich die Nodes in der Shell suchen lasse (ansible-invertroy --graph) dann funktioniert das auch. Allerdings muss ich hier ein Passwort (sudo) angeben damit er es ausführt. Wenn ich nun in Rundeck deinen Schritten folge, dann sucht er nur den localhost und nicht im Inventory. Eine Idee?
Mit freundlichen Grüßen
Bitte lege (als root) eine Datei /etc/sudoers.d/rundeck an und kopiere den folgenden Inhalt (ohne Quotes) hinein : "rundeck ALL=(ALL) NOPASSWD: ALL" - das erlaubt dem rundeck user sudo ohne Passwort. Ich überlege mir solange eine bessere Lösung
@@OneMarcFifty Jetzt funktioniert auch das suchen der Host in Rundeck
@@OneMarcFifty Hallo, ich bekomme es außerdem nicht hin ein Playbook zu starten. Egal ob ich /home/rundeck/ansible/playbooks/deploy-ansible.yaml oder ~/ansible/playbooks/deploy-ansible.yaml eintrage, es wird mir immer die Fehlermeldung angezeigt, dass das Playbook nicht gefunden werden kann. Hast du auch hierfür eine Idee?
Hast Du das Verzeichnis angelegt? In einer shell mal cat und dann den pfad zum file reinkopieren (cat /var/lib/rundeck/…). Groß/Kleinschreibung ? /var/lib/rundeck/ansible ist der richtige Pfad in der script version
@@OneMarcFifty geht, hatte mich wohl verschrieben
wouldn't it be better to have vscode in its own container and edit the files by sharing a folder in the host?
Could do that as well - yes. I don't know if it's better or worse in any way though.
Good Video. What is name of packets talk at the .. thank you.. kind regards
Hi, I am not sure if I understand what you mean?
Awesome Video - Thanks
Many thanks Peter, glad you liked it