Ansible-Bootstrap

More to come here. This is a role for doing some basic boostrap magic, on a stock system (so not deployed with some fancy Kickstart or the like.)

Role Variables

Available variables are listed below, along with default values (see defaults/main.yml):

remote_ansible_user_key_location: 'sshkeys/ansible.pub'

This is the location of the public key for the ansible user. Ideally this is the public key that is paired to the private key ansible will use to connect via SSH to your hosts.

remote_ansible_user: ansible

The name of the remote ansible user. Ideally, this user will have already been created (with bare-bones config) and Ansible will use this user to administer hosts.

selinux_enable: true

Do you want Ansible to be successful in an SELinux environment? True or false. On Debian systems, this will install SELinux. If you hate SELinux, you can disable this, but you'll want to disable SELinux on EL systems (Centos/RHEL/Fedora) or Ansible may not work the way you want it to.

Dependencies

If you are enabling the SSH lockdown, this role will not install an SSH server, and will therefore fail if this is enabled, but SSH is not installed.

Example Playbook

- hosts: all
  vars_files:
    - vars/main.yml
  roles:
    - williampiv.bootstrap

Inside vars/main.yml:

remote_ansible_user_key_location: 'sshkeys/ansible.pub'
remote_ansible_user: ansible
selinux_enable: true

Playbook Run

In most cases, you'll need to provide a password (and sudo password) to get a stock system bootstrapped.

This assumes you have defined ansible_ssh_user: someuser somewhere in your variables. It is also assumed that your remote_ansible_user will probably be the same as the ansible_ssh_user (but this role give you the option to have them differ).

In your initial run, you'll most likely need to use -K and -k to allow you to provide the SSH user password, and sudo password. Once bootstrap has run, you should have access to run Ansible against the target machine, without having to provide a password.

License

GNU GPLv3

Author Information

This role was created in 2020 by William Perdue