Ansible sounds interesting

Comments

• vegetaaaaaaa@lemmy.world ⁨9⁩ ⁨months⁩ ago

  If you needs are simple, write a simple playbook using the proxmox ansible module docs.ansible.com/…/proxmox_kvm_module.html

  Terraform/Opentofu provides more advanced stuff but then you have to worry about persistent state storage, the clunky DSL… used it when acsolutely needed, you can do 90% of this stuff with the proxmox ansible module.

  If you need to make your playbook less verbose, move the logic to a role so that you can configure your VMs from a few lines in the playbook/host_vars. Mine looks like this (it’s for libvirt and not proxmox, but the logic is the same)

  # playbook.yml
  - hosts: hypervisor.example.org
    roles:
      - libvirt
  
  # host_vars/hypervisor.example.org.yml
  libvirt_vms:
    - name: vm1.example.org
      xml_file: "{{ playbook_dir }}/data/libvirt/vm1.example.org.xml"
      state: running
      autostart: yes
    - name: vm2.example.org
      xml_file: "{{ playbook_dir }}/data/libvirt/vm2.example.org"
      autostart: no
    - name: vm3.example.org
      xml_file: "{{ playbook_dir }}/data/libvirt/vm3.example.org"
      autostart: no
    - name: vm4.example.org
      xml_file: "{{ playbook_dir }}/data/libvirt/vm4.example.org"
      autostart: no
      disk_size: 100G
  

  source
• cichy1173@szmer.info ⁨10⁩ ⁨months⁩ ago

  Sounds like you are looking for Opentofu/Terraform. I use Opentofu to fastly create VMs on Proxmox with Cloud Init scripts. In scenario where one VM hosts one service I try to build IaC that way I can destroy VM and create a new one without loosing anything, data nor configuration.

  source
• corsicanguppy@lemmy.ca ⁨10⁩ ⁨months⁩ ago

  Please, for the love of god, look at other things instead of Ansible.

  Definitely do openTofu for infrastructure and deployment, but for configuration of VMs please learn about puppet, saltstack, chef(cinc.sh) and especially mgmtConfig .

  Ansible, by comparison, better matches what we were doing in 2002 at 1/10th the speed, and it’s like pascal levels of wordy.

  Learning about options and finding one that works well for you will often give you a much better experience than fucking Ansible.

  If you do abandon all hope, though, then go ahead and do Ansible; but remember if you do: there are better options, and hating Ansible doesn’t mean you hate automation.

  source
• arcayne@lemmy.today ⁨10⁩ ⁨months⁩ ago

  I’d recommend using OpenTofu (Terraform) for initial provisioning of VMs and then use Ansible for post-provisioning config & management. That way you’re letting both tools play to their strengths.

  registry.terraform.io/providers/bpg/…/docs

  source
• possiblylinux127@lemmy.zip ⁨10⁩ ⁨months⁩ ago

  You need a combination of playbooks

  Start by creating a VM template in Proxmox. Male sure the template regenerates things like SSH host keys and machine-id on startup. Inside the template create a user with passwordless sudo and setup SSH public key authentication.

  One the host with the private key install Ansible in a python virtual environment.

  To execute this create a VM in proxmox, get its IP from the DHCP server and then add it to the hosts file for Ansible. From there you can use your playbooks.

  The automated way to do this would be to use the Ansible Proxmox collection to create the MAC of the VM and then use a different collection to fetch the IP and set it static. From there you could dynamically add it to the hosts file. This is hard and requires more Ansible knowledge.

  Another tool you could look into is pyinfra. Pyinfra has less of a learning curve since it is just python.

  source
• irmadlad@lemmy.world ⁨10⁩ ⁨months⁩ ago

  Watching this thread. I too would like to dip into Ansible. Looks like a really powerful way to automate things.

  source
• mutual_ayed@sh.itjust.works ⁨10⁩ ⁨months⁩ ago

  NixOS and OpenTody are pretty great. Add OpenBao to secure ssh keys and passwords and you can get a job as a sysops if you get good enough.

  source
• Zwuzelmaus@feddit.org ⁨10⁩ ⁨months⁩ ago

  Besides ansible, also have a look at “templates” and “cloud-init” for VM generation.

  source

  • possiblylinux127@lemmy.zip ⁨10⁩ ⁨months⁩ ago

    I personally would avoid Cloud init as it is largely a Ubuntu thing.

    Instead look into Flatcar or bootable containers

    source

    • smashing3606@feddit.online ⁨10⁩ ⁨months⁩ ago

      It works on debian too, which of course is ubuntu's base distro. Just adding info.

      source

      • -> View More Comments
• solrize@lemmy.ml ⁨10⁩ ⁨months⁩ ago

  I use it to initialize new VPS with my usual setup, but it might be easier to use a container format. I think Ansible itself has become a bit unfashionable since I started using it. I don’t know what is cool instead now. It was Saltstack for a while but idk how long that lasted. Ansible is working mostly ok for me so I’ve stayed with it, til whenever.

  source
• just_another_person@lemmy.world ⁨10⁩ ⁨months⁩ ago

  If you don’t want another dependency, just get familiar with the provisioning tools of whatever distro you intend to use (Fedora Kickstart, for example), and learn how to quickly provision custom scripted thing with cloud-init when you provision something.

  source
• beerclue@lemmy.world ⁨10⁩ ⁨months⁩ ago

  Oversimplifying it, Ansible playbooks are nothing more than some commands that should be run on a remote machine via ssh. Ansible knows or has modules for a variety of different package managers (apt, yum, etc) and automagically knows how to handle services or various config files.

  It can get complex, but I think just the startup phase, until you have an inventory of remote machines, the ssh keys are in place, etc. I second the Jeff Geerling recommendation, his stuff is solid, both ready to use playbooks, and tutorials.

  I would suggest to also look into cloudinit. Makes setting up VMs on proxmox easier, faster, more consistent, with users, networking, ssh keys, etc ready to use (by you or by Ansible).

  source

  • chrisp@cyberplace.social ⁨10⁩ ⁨months⁩ ago

    @beerclue Exactly. You can take wiki bash instructions on how a system was set up and translate it to ansible, or back again. The ansible modules are python, but theoretically you could make a bash implementation that just calls dnf/systemctl/etc. directly, like a sys admin would have done.

    source
  • IsoKiero@sopuli.xyz ⁨10⁩ ⁨months⁩ ago

    Or, if you’re using only one or few distributions you can preseed the image and have the installer do the stuff for you.

    source