ansible/README.md

158 lines
4.3 KiB
Markdown
Raw Normal View History

2012-02-23 20:17:24 +01:00
Ansible
=======
Ansible is a extra-simple Python API for doing 'remote things' over SSH.
2012-02-24 03:47:31 +01:00
While [Func](http://fedorahosted.org/func), which I co-wrote,
aspired to avoid using SSH and have it's own daemon infrastructure,
Ansible aspires to be quite different and more minimal, but still able
to grow more modularly over time. This is based on talking to a lot of
users of various tools and wishing to eliminate problems with connectivity
and long running daemons, or not picking tool X because they preferred to
code in Y.
Why use Ansible versus something else? (Fabric, Capistrano, mCollective,
Func, SaltStack, etc?) It will have far less code, it will be more correct,
and it will be the easiest thing to hack on and use you'll ever see --
regardless of your favorite language of choice. Want to only code plugins
in bash or clojure? Ansible doesn't care. The docs will fit on one page
and the source will be blindingly obvious.
Design Principles
=================
2012-02-23 20:17:24 +01:00
2012-02-23 20:28:39 +01:00
* Dead simple setup
2012-02-23 20:40:17 +01:00
* Super fast & parallel by default
2012-02-23 20:28:39 +01:00
* No server or client daemons, uses existing SSHd
2012-02-23 20:40:17 +01:00
* No additional software required on client boxes
2012-02-24 03:47:31 +01:00
* Everything is self updating on the clients
* Encourages use of ssh-agent
* Plugins can be written in ANY language
* API usage is an equal citizen to CLI usage
* Can be controlled/installed/used as non-root
2012-02-23 20:17:24 +01:00
Requirements
============
2012-02-23 20:28:39 +01:00
For the server the tool is running from, *only*:
2012-02-23 20:40:17 +01:00
* python 2.6 -- or the 2.4/2.5 backport of the multiprocessing module
2012-02-23 20:28:39 +01:00
* paramiko
2012-02-23 20:17:24 +01:00
Inventory file
==============
2012-02-24 03:47:31 +01:00
The inventory file is a required list of hostnames that can be
potentially managed by ansible. Eventually this file may be editable
via the CLI, but for now, is edited with your favorite text editor.
2012-02-23 20:40:17 +01:00
2012-02-24 03:47:31 +01:00
The default inventory file (-H) is /etc/ansible/hosts and is a list
2012-02-23 20:28:39 +01:00
of all hostnames to target with ansible, one per line. These
can be hostnames or IPs
2012-02-23 20:17:24 +01:00
Example:
abc.example.com
def.example.com
192.168.10.50
192.168.10.51
2012-02-23 20:17:24 +01:00
This list is further filtered by the pattern wildcard (-P) to target
specific hosts. This is covered below.
2012-02-23 20:17:24 +01:00
2012-02-23 22:32:58 +01:00
You can organize groups of systems by having multiple inventory
files (i.e. keeping webservers different from dbservers, etc)
Command line usage example
2012-02-23 20:17:24 +01:00
==========================
Run a module by name with arguments
2012-02-23 20:40:17 +01:00
* ssh-agent bash
* ssh-add ~/.ssh/id_rsa.pub
* ansible -p "*.example.com" -n modName -a "arg1 arg2"
2012-02-23 20:17:24 +01:00
API Example
===========
The API is simple and returns basic datastructures.
import ansible
2012-02-23 22:32:58 +01:00
runner = ansible.Runner(
pattern='*',
2012-02-24 03:47:31 +01:00
module_name='inventory',
module_args='...'
2012-02-23 22:32:58 +01:00
)
data = runner.run()
2012-02-23 20:17:24 +01:00
{
'xyz.example.com' : [ 'any kind of datastructure is returnable' ],
'foo.example.com' : None, # failed to connect,
...
}
2012-02-23 20:17:24 +01:00
2012-02-23 22:32:58 +01:00
Additional options to Runner include the number of forks, hostname
2012-02-24 03:47:31 +01:00
exclusion pattern, library path, arguments, and so on.
Read the source, it's not complicated.
2012-02-23 20:17:24 +01:00
Patterns
========
To target only hosts starting with "rtp", for example:
2012-02-24 03:47:31 +01:00
* ansible -p "rtp*" -n command -a "yum update apache"
2012-02-23 20:17:24 +01:00
Parallelism
===========
Specify the number of forks to use, to run things in greater parallelism.
* ansible -f 10 "*.example.com" -n command -a "yum update apache"
2012-02-23 20:17:24 +01:00
2012-02-23 20:28:39 +01:00
10 forks. The default is 3. 5 is right out.
File Transfer
=============
2012-02-23 22:32:58 +01:00
Ansible can SCP lots of files to lots of places in parallel.
2012-02-24 03:47:31 +01:00
* ansible -p "web-*.acme.net" -f 10 -n copy -a "/etc/hosts /tmp/hosts"
2012-02-24 03:47:31 +01:00
Ansible Library (Bundled Modules)
=================================
2012-02-23 20:17:24 +01:00
See the example library for modules, they can be written in any language
and simply return JSON to stdout. The path to your ansible library is
specified with the "-L" flag should you wish to use a different location
2012-02-24 03:47:31 +01:00
than "/usr/share/ansible". This means anyone can use Ansible, even without
root permissions.
There is potential for a sizeable community to build
2012-02-23 20:28:39 +01:00
up around the library scripts.
2012-02-23 20:17:24 +01:00
2012-02-24 03:47:31 +01:00
Modules include:
2012-02-23 21:31:35 +01:00
2012-02-23 23:19:06 +01:00
* command -- runs commands, giving output, return codes, and run time info
* ping - just returns if the system is up or not
* facter - retrieves facts about the host OS
* copy - add files to remote systems
2012-02-23 22:32:58 +01:00
2012-02-23 20:17:24 +01:00
Future plans
============
2012-02-24 03:47:31 +01:00
* see TODO.md
2012-02-23 22:32:58 +01:00
License
=======
* MIT
2012-02-23 20:17:24 +01:00
Author
======
2012-02-24 03:47:31 +01:00
Michael DeHaan -- michael.dehaan@gmail.com
2012-02-23 20:28:39 +01:00
2012-02-24 03:47:31 +01:00
[http://michaeldehaan.net](http://michaeldehaan.net/)
2012-02-23 20:28:39 +01:00