{"id":21675,"date":"2015-06-29T15:21:55","date_gmt":"2015-06-29T09:51:55","guid":{"rendered":"http:\/\/www.tothenew.com\/blog\/?p=21675"},"modified":"2015-07-06T13:45:13","modified_gmt":"2015-07-06T08:15:13","slug":"ansible-configuration-management-system","status":"publish","type":"post","link":"https:\/\/www.tothenew.com\/blog\/ansible-configuration-management-system\/","title":{"rendered":"Ansible – Configuration Management System"},"content":{"rendered":"

Purpose:<\/strong> We have seen various instances of manual configuration on multiple servers<\/a> which are similar and repetitive. When it comes to automate such tasks an easy process comes in mind – Configuration Management. There are several such tools available for this purpose. Ansible is one such tool that can be used for configuration management tasks, continuous deployment tasks and more.<\/p>\n

Scope: <\/strong>This blog covers basics of Ansible, Installation and platform(s) supported by it along with one use case.<\/p>\n

What is Ansible
\n<\/strong>
\nAnsible is a lightweight, open source configuration management system which has an Agentless architecture. It mean that the nodes do not require to install and run background daemons to connect with main control node. This type of architecture reduces the pressure on the network by preventing the nodes to poll control node.<\/p>\n

Setup<\/strong>
\nFor the demo I have launched three ubuntu<\/strong> AWS ec2 instances<\/a>. One of them will be control node and other two will be managed nodes. We have to install ansible only on control node.<\/p>\n

Installation steps<\/h3>\n

We can install ansible in two ways. Either, use apt\/yum for a stable version or install from source to get development version of Ansible which has advantage of new features when they are implemented.<\/p>\n

Run following commands to install ansible from source in control node<\/p>\n

[js] apt-get install git
\n git clone git:\/\/github.com\/ansible\/ansible.git –recursive
\n cd .\/ansible
\n source .\/hacking\/env-setup[\/js]<\/p>\n

Also install python modules(paramiko,PyYAML,Jinja2,httplib2) using pip command used by ansible<\/p>\n

Supported platform<\/strong><\/p>\n

Control node<\/strong>–
\n1. Python 2.6 or higher
\n2. Windows -not supported
\n3. OS supported: Almost all Linux and Unix distributions<\/p>\n

Managed Nodes<\/strong>–
\n1. Python 2.4 or later.
\n2. Windows nodes -from version 1.7<\/p>\n

Configuring Inventory File -Default Location -‘\/etc\/ansible\/hosts’<\/strong><\/p>\n

It is used to define which servers ansible will be managing. Since, we are running instances in same VPC it is advisable to use private ip’s.<\/p>\n

We can also logically group our servers in inventory file as follows:<\/p>\n

[webservers]
\n172.1.2.3
\n172.1.2.4<\/p>\n

[dbservers]
\n172.1.2.5<\/p>\n

We can all these grouped servers in our ansible playbook as hosts:webservers.<\/p>\n

Ansible uses SSH keys for authentication between control node and managed nodes. Use ‘ssh-keygen’ to generate public key. Copy the public key generated in ‘\/root\/.ssh\/id_rsa.pub’ to all managed nodes (location:\/root\/.ssh\/authorized_keys) you want ansible to connect to.<\/p>\n

Test the connection<\/strong><\/p>\n

From the control machine we will try pinging all the hosts mentioned in \/etc\/ansible\/hosts file<\/p>\n

[js]ansible all -m ping[\/js]<\/p>\n

all – Use all defined servers from the inventory file
\n-m ping – Use the “ping” module, which simply runs the ping command and returns the results<\/p>\n

Output:
\n\"Ping_success\"<\/p>\n

Writing Playbook<\/strong><\/p>\n

After configuring inventory file, we can run tasks against the hosts defined in inventory file. These tasks are defined in ansible playbooks which are plain english yaml scripts. By default, Ansible run all the tasks parrallelly in all the nodes. We can also configure serial execution of tasks.<\/p>\n

\"Playbook\"<\/p>\n

Output on running ansible playbook on control node<\/strong>
\n\"Screenshot<\/p>\n

Login to hosts machines for verification<\/strong><\/p>\n

\"Verify1\"<\/p>\n

\"Verify2\"<\/p>\n

This approach can be used for Continous Deployment setup where the latest version of war can be pulled from a repository like nexus and can be copied to web servers like jetty.<\/p>\n

Ansible also provides a dashboard(Ansible Tower<\/strong>) to manage hosts. It is free to use for up to 30 days beyond which license is required.<\/p>\n","protected":false},"excerpt":{"rendered":"

Purpose: We have seen various instances of manual configuration on multiple servers which are similar and repetitive. When it comes to automate such tasks an easy process comes in mind – Configuration Management. There are several such tools available for this purpose. Ansible is one such tool that can be used for configuration management tasks, […]<\/p>\n","protected":false},"author":214,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":2},"categories":[1174,1],"tags":[1933],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts\/21675"}],"collection":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/users\/214"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/comments?post=21675"}],"version-history":[{"count":0,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts\/21675\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/media?parent=21675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/categories?post=21675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/tags?post=21675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}