Ansible 101 - Episode 12 - Real-world Ansible Playbooks

Jeff Geerling (geerlingguy) walks everyone through a few real-world Ansible playbooks.

Contents:

00:00:00 - Start
00:00:29 - Intro
00:07:03 - Questions from previous episode
00:14:55 - My real-world LAMP playbooks
00:26:09 - Complexity vs Simplicity
00:28:24 - Deploying Apps behind Load Balancer
00:40:15 - Capistrano and Ansistrano deployments
00:43:05 - Multi-server zero-downtime deployments
00:53:18 - Serial and max fail percentage
00:54:46 - A word on dependencies
00:56:26 - Introducing Collections
00:57:00 - Outtro

[joazes]

NIce work Jeff, I found your channel about two months ago. I'm enjoing and learning so much with the kubernetes-101 and the ansible-101 series, thank you again and God bless you and your family. By the way I'm from Sao Paulo, Brazil!!

[suchyysuchar]

Hi Jeff, thanks for this series. I don't seriously work with Linux servers, but part of my job is network administration. I kept hearing about automation and even started a few python courses in the past, but since I only do network stuff one day a week or so, and my infrastructure is quite small, it always felt like too much effort for little reward. But the way you introduced Ansible was great, I started using it, and even though I don't need to deploy multiple switches every week, I still managed to find some useful things to do with Ansible. And I am sure that understanding how it works will benefit me in future. Thanks!

[seddikalaouiismaili]

i appreciate your book ..ansible for devops
great job man :)

[autohmae]

Born, raised and living also from the Netherlands. :-)
On the presentation, I watch Naomi 'SexyCyborg' Wu for her technology and open source videos and getting some idea how things in China work. So I very well know how some content is: catch the eye thumbnails and titles but keep them engages after that with real content.
My open source money goes to LWN site ( Linux Weekly News ), OpenBSD project (they created/maintain OpenSSH and PF/CARP, etc.),
Also Mozilla, EFF and a Bountysource.

[brandonmtaylor]

Jeff, is there a way to execute only certain tasks in a playbook with X11 forwarding? I put -X in ssh_args in ansible.cfg and that seems to work. However, for 99% of my tasks I do not need X11 forwarding.

[Oswee]

Thank you for sharing all this series!!! Would like to ask... how do i control cleanups? Let's say in order to manage ports or services for HAproxy i need to introduce semanage-python3 package. Later, i decide that i want to remove HAproxy completely. First idea is just to reverse dnf latest to absent and basicaly remove all installed packages for that HAproxy role and make some directory cleanup. But... this introduces the problem, because that semanage-python3 is also used by Libvirt or... nmcli. So i can't remove it. Mby semanage-python3 is not the best example, but there are other packages which can be required by many roles. Wget, tar, etc. Not allways i want to go with clean idempotent system setup from scratch. And so... i would like to have proper cleanup strategy (don't like to leave garbage behind). How do i control is removable package/module used by other services or roles?

[F]

serial: 1 is quite important in the rolling update...if we only have 2 hosts

[GrahamLillico]

Hi, I was wondering if you could possibly go into a little more detail about how you setup Ansible on your Mac? The reason I ask is that I have tried using the MacOS bundled version of pip3 but find that this needs to be run using sudo to install anything else i.e. ansible-lint, molecule etc. I am currently wondering about using homebrew to install Python3 and using the version of pip3 it installs to reinstall Ansible and the other modules. Being as this is not ideal I was therefore wondering if you had a better way?