[ansible-project] Re: win_domain_controller "controller for the domain could not be contacted"

somehow, waiting like 1/2hr and it works. any ideas? On Saturday, September 7, 2019 at 8:01:14 PM UTC-7, pixel fairy wrote: > > After making a new domain, and adding a server to it, cant promote that > server to domain controller. > > heres how im trying, > > - hosts

[ansible-project] win_domain_controller "controller for the domain could not be contacted"

After making a new domain, and adding a server to it, cant promote that server to domain controller. heres how im trying, - hosts: domaincontrollers[1:] tasks: - name: set dns for other domain controllers win_dns_client: adapter_names: '*' ipv4_addresses:

[ansible-project] win_domain, win_reboot, what to wait or test_command for?

When making a domain in ansible, ive been a playbook like this, - hosts: domaincontrollers[0] tasks: - name: make the domain win_domain: dns_domain_name: foo.local safe_mode_password: A1!vagrant register: check_domain - name: Reboot to complete domain setup

[ansible-project] Re: Whats the right way to protect a backup script in windows?

this seems to work. seems the easiest way to "clear" existing permissions to start over by disabling the inherited permissions. a normal user cant list and gets access denied if they try to open a specific file that they know the path to. an admin can do anything. am i missing anything? is

[ansible-project] Whats the right way to protect a backup script in windows?

I have a robocopy batch script to use with diskshadow to sync files to a backup server. in vagrant, i tried this, but it prevents the upload of the script - name: make a folder for backup scripts win_file: path: C:\backupscripts state: directory - name: set permissions for

Re: [ansible-project] trying vagrant + ansible for windows server target. cant win_ping

Yes, but without so much verbose. turns out to be a known bug in pywinrm, fixed in current tree. installing from github fixed it. if you have the same problem, wait till pywinrm-0.3.1 (or whatever version) is out, or git clone https://github.com/diyan/pywinrm cd pywinrm pip install --upgrade

[ansible-project] trying vagrant + ansible for windows server target. cant win_ping

host: ubuntu-16.04 vagrant: 2.0.4 vagrant-hostmanager (1.8.8) vagrant-libvirt (0.0.43) vagrant-mutate (1.2.0) vagrant-sshfs (1.3.1) there is a virtualbox version of the same windows box. used pip to update winrm (and also had to use pip for openssl) same results without the pywinrm warning.

[ansible-project] safely provisioning windows VMs from templates

How is this done? with linux, the template has no password or ssh host keys, just public ssh keys. ansible does the rest. whats the standard practice with windows? install windows instances by hand, and put their individual passwords in the vault? also thought template + sysprep, but then

Re: [ansible-project] cloning a service for HA?

> > > > > I totally agreed with Dick solution, but out of completeness's you > have > > > the > > > slurp module [1] that stores the data in memory. > > > But if the control machine has swap and is swapping some data could > end up > > > on the disk. > > > > > > [1]

[ansible-project] trouble slurping archives

using ansible 2.3.2.0 on fedora 26, the vagrant boxes run ubuntu 16.04 slurp fails on tar.gz archives --- - hosts: alice become: true tasks: - name: archive etc archive: path: /etc dest: /etc.tgz - name: read in slurp: src: /etc.tgz register: etc - hosts:

Re: [ansible-project] cloning a service for HA?

On Friday, August 25, 2017 at 1:02:20 AM UTC-7, Kai Stian Olstad wrote: > > On fredag 25. august 2017 03.28.23 CEST pixel fairy wrote: > > maybe a script to randomly generate a key, archive, compress, and > encrypt > > the folder, fetch to local, copy t

Re: [ansible-project] cloning a service for HA?

> > I totally agreed with Dick solution, but out of completeness's you have > the > slurp module [1] that stores the data in memory. > But if the control machine has swap and is swapping some data could end up > on > the disk. > i like this approach better. one less ansible folder with a

Re: [ansible-project] cloning a service for HA?

On Thursday, August 24, 2017 at 9:45:30 PM UTC-7, Dick Visser wrote: > > So you're running a playbook against one host, then want to clone the > resulting configuration state to other hosts? > As you already mentioned that sounds indeed like a lot of work. > Why not simply run the playbook

[ansible-project] cloning a service for HA?

when making a service thats set up remotely, in this case openvpn, id like to set it up on two machines that already have keepalived between them and have it listen on the floating address, so all requests will go to "active" instead of standby. Stouts.openvpn runs on a single host and does

[ansible-project] Capture ansible playbook command line

see script(1). it starts a logged shell. when you exit, it leaves a file called typescript where you ran it. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to

[ansible-project] Re: Ansible for Windows

On Thursday, February 23, 2017 at 8:57:13 AM UTC-8, Frank Mehlhop wrote: > > Hi, > > I work with Windows. > I would like to use Vagrant on with gitolite my machine and therefore I > need Ansible. > Is it a piece of Software to download and install? > Where do I get it? > Or how do I get Ansible

[ansible-project] reboot with ignore_errors still errors out

trying to reboot with ignore_errors: true still errors out. control machine and all ceph nodes run ubuntu 16.04. ansible 2.2.1.0 installed with pip --- - hosts: osds serial: 1 tasks: - name: Set the noout flag command: ceph osd set noout - name: Reboot the server command:

[ansible-project] rebooting and detecting failure

https://support.ansible.com/hc/en-us/articles/201958037-Reboot-a-server-and-wait-for-it-to-come-back - name: restart machine command: shutdown -r now "Ansible updates triggered" async: 0 poll: 0 ignore_errors: true if your ignoring errors, is there a way to detect failure to reboot?

[ansible-project] windows, secrets, and remote plays

how does one manage secrets and remote plays? when we only had linux to deal with, no big deal to ssh -A to a control node, tmux, and have no secrets stored there at all. but now, we have to deal with windows, which doesnt speak ssh. of course we can keep a vault remotely, and copy paste the

[ansible-project] Re: ansible not reading group_vars/windows.yml

my control machine is ubuntu 16.04, ansible and winrm installed with pip. whats yours? ill try from source. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to

[ansible-project] Re: ansible not reading group_vars/windows.yml

cant wait till MS ditches this winrm nonsense for ssh! On Monday, February 6, 2017 at 6:05:09 AM UTC-8, pixel fairy wrote: > > seems ansible is not reading group_vars/windows.yml > tried renaming to group_vars/windows same result > > $ ansible --version > ansible 2.2.1.0 >

[ansible-project] ansible not reading group_vars/windows.yml

seems ansible is not reading group_vars/windows.yml tried renaming to group_vars/windows same result $ ansible --version ansible 2.2.1.0 $ ansible windows --list-hosts hosts (1): ex-domain1 $ cat group_vars/windows.yml ansible_user: Administrator ansible_port: 5986 ansible_connection:

[ansible-project] Re: ansible on android?

On Saturday, January 28, 2017 at 9:14:56 PM UTC-8, mukti pukti wrote: > > You might have more luck with termux which might have the extra apt > packages required for the build dependencies. > it would take some work. pip install ansible errors out, with 'stdio.h' file not found its present,

[ansible-project] cant install ubuntu ppa

on ubuntu xenial, when trying to apt update, E: The repository 'http://ppa.launchpad.net/ansible/ansible/ubuntu xenial Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for

[ansible-project] too many unfinished roles on ansible galaxy

there are many unfinished roles on galaxy. role authors, can you please wait until your role is functional and ready before posting it on galaxy? -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop

Re: [ansible-project] when: var is defined deprecated?

users` > also. The problem is that `when` statements are evaluated *after* > `with_items`, since the `when` statement is evaluated per item in the loop. > > On Tue, Sep 20, 2016 at 5:42 AM, pixel fairy <pixel...@gmail.com > > wrote: > >> using ansible 2.1.1.0 >> >>

[ansible-project] when: var is defined deprecated?

using ansible 2.1.1.0 running a task with 'when: users is defined' works fine for hosts that have that variable. for hosts that dont, the play still runs, but gives a warning that in the future, an undefined variable will be a fatal error. is there another way of running tasks based on the

Re: [ansible-project] loops, file globs, ssh_keys...

On Monday, September 19, 2016 at 12:33:10 PM UTC-7, Kai Stian Olstad wrote > > > You could put this in it's own file, use include with with_items and > loop_control. > > https://docs.ansible.com/ansible/playbooks_loops.html#loop-control odd to have to put that into two files, but exactly what

[ansible-project] loops, file globs, ssh_keys...

looking on google, this seems to come up a lot. have users. each user has N ssh keys. sometimes, one of the users keys is revoked. for example, a crashed cellphone sent in for repair. we keep keys like this . ├── voxel │ └── voxel.pub ├── pixel │ ├── pixelphone3.pub │ ├── pixel.pub │

[ansible-project] Re: best way to switch ansible mode to simply dump the output of jinja2 templating

Ive thought about this too, and would also like a way to do this, in the mean time, i wrote this script that i call jinjacat.py #!/usr/bin/env python # public domain import sys import yaml import jinja2 if len(sys.argv) != 3: print "usage: jinjacat.py template.j2 variables.yaml"

[ansible-project] Re: display a message at the end of a ansible playbook

this as a task - debug: msg="you can now connect to http://xyz.com/setup.php to finish installation" you can also use variables in the message On Tuesday, August 30, 2016 at 1:27:45 PM UTC-7, synova.m...@gmail.com wrote: > > Hi, > > Is there a way to display a message on the screen at the

[ansible-project] Re: Error while installing ansible in OS X.

this should be a faq. I dont know the causes, but ansible wont install globally on os-x. you have to install as a user. https://gist.github.com/xahare/77ef7d3bb61f49df618ffa8bfb9142ad -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To

[ansible-project] Re: New to Ansible

sounds like a vagrant issue. ask here: https://groups.google.com/forum/?utm_medium=email_source=footer#!forum/vagrant-up On Thursday, August 18, 2016 at 9:41:38 AM UTC-7, FISH wrote: > > Hi, > > Thanks to all. > > I created the setup of “vagrant with cent OS”. > > When I do configuration, I

[ansible-project] Re: New to Ansible

i also got errors doing this as root. heres how i do it as a user in os x. you might need developers tools for some of ansibles dependencies. make sure ~/Library/Python/2.7/bin is in your path. easy_install --user pip pip install --user cryptography pip install --user ansible -- You received

[ansible-project] Re: Simple cisco IOS show version

start with - hosts: routers vars: ... tasks: ... On Wednesday, August 10, 2016 at 7:32:23 AM UTC-7, Bharath Bharadwaj wrote: > > Hi All, > > I'm new to Ansible and yml, my goal is to automate a part of network > operation, I just want to start with a very simple output, copied

[ansible-project] silly trick: you can use variables in the "- name:" part of a playbook

i realize itfits how yaml and jinja2 works so probably obvious to many of you. never thought about it until after doing this and seeing the result. could make for more readable output. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To

[ansible-project] Re: Ansible GUI

what would an ansible gui do? tower more of an ansible management system with a gui. On Tuesday, August 9, 2016 at 3:07:10 PM UTC-7, Anushri Mishra wrote: > > hi, > > are there any suggestions for ansible-gui? I know there is ansible tower > but I dont want to pay. > > I was looking for

[ansible-project] secrets and remote sites

If you want to keep secrets, and work on a mostly remote site, it seems you have a couple options. 1. encrypt the vault with gpg and run from your (hopefully) safe laptop and hope the connection is good 2. run it in tmux at the remote site, but possibly expose your vault

[ansible-project] secrets and remote sites

If you want to keep secrets, and work on a mostly remote site, it seems you have a couple options. 1. encrypt the vault with gpg and run from your (hopefully) safe laptop and hope the connection is good 2. run it in tmux at the remote site, but possibly expose your vault

[ansible-project] Re: ansible on 'brownfield' sites

if by nuke it from orbit you mean build a new, streamlined environment and wipe out the old one, thats my favorite approach. On Thursday, June 16, 2016 at 5:15:38 AM UTC-7, Dick Davies wrote: > > I've had great success using Ansible to build up multiple environments > (devs, staging, prod) from

[ansible-project] Re: ansible on 'brownfield' sites

git(or vcs of choice) is your friend! now that thats out of the way, we keep different inventory files for some stuff, and sometimes a vagrant file with its own inventory as "dev/test" for smaller or personal projects. one folder will have roles downloaded from galaxy. the others next to it

[ansible-project] Re: How to secure Ansible Vault password?

You can use gnupg to encrypt the passphrase to vault to yourself and whoever else needs it without sharing or knowing their passphrases. http://benincosa.com/?p=3235 when trying it, i found this useful too, http://sudoers.org/2013/11/05/gpg-agent.html On Thursday, May 12, 2016 at 3:57:01 PM

[ansible-project] win_dsc as an extras module?

Why is win_dsc,https://github.com/trondhindenes/Ansible-win_dsc not distributed with ansible? is it stable and production ready? -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from

[ansible-project] Re: Ansible and 'Ubuntu on Windows'

have you tried with the ppa? On Monday, April 11, 2016 at 12:16:31 PM UTC-7, Edgars wrote: > > > > > > pirmdiena, 2016. gada 11. aprīlis 21:12:17 UTC+2, Edgars rakstīja: >>

[ansible-project] ubuntu/gnome desktop settings

Is there a way ansible can manage gnome desktop settings? i use gsettings from a command line, but that requires gnome to already be running. id like to set these things while the vm is being setup. -- You received this message because you are subscribed to the Google Groups "Ansible Project"

[ansible-project] local command based on timestamp before another file?

Theres probably a better way to do this, so please tell me. for a given linux host, the netfilter rules for ipv4 and ipv6 are the same, except for when i run it in vagrant, because i dont to cut off my vagrant host. 10.0.2.15 is the ip address vagrant gives you, and before running ansible, i

[ansible-project] Re: best practice for vagrantfile in roles?

Ive been putting ENV["ANSIBLE_ROLES_PATH"] = '..' in my vagrant files. but i like your way better. On Wednesday, January 13, 2016 at 12:22:24 AM UTC-8, Mischa ter Smitten wrote: > > We do it like this: https://github.com/Oefenweb/ansible-fail2ban in all > our roles. > > Never tested

[ansible-project] best practice for vagrantfile in roles?

Is there any consensus on where to put a Vagrantfile for testing? The most straight forward ive seen is the vagrant file in the root of the roles folder with a folder called roles for vagrant to pick up on, and a symlink in there to '..' (pointing back to the root of the role folder) which is

[ansible-project] Re: Dynamic Inventory Error

If your just trying to get the syntax of the json right, there are easier ways to test. heres the above as an inventory script. #!/usr/bin/env python import json inv = { "company": { "hosts": [ "server", "sensor" ] }, "_meta": {

[ansible-project] Re: How to use external variable inside an ansible inventory file.

theres probably an easier way, but since your setting up for a dynamic inventory, you might as well use it. http://docs.ansible.com/ansible/developing_inventory.html heres an example in python for lxc containers. #!/usr/bin/env python import yaml import json with open('containers.yml') as

[ansible-project] Re: dictionary subset based on inventory?

groups['web'] On Saturday, December 12, 2015 at 6:26:18 PM UTC-8, pixel fairy wrote: > > have a little lxc playbook making reverse proxies from one container to > the others. it reads from a dictionary of container definitions, and i only > want it to proxy the containers acting

[ansible-project] dictionary subset based on inventory?

have a little lxc playbook making reverse proxies from one container to the others. it reads from a dictionary of container definitions, and i only want it to proxy the containers acting as web servers, which are in the group "web" in the inventory. how can i do this? the reverse proxy runs

[ansible-project] how to proxy to containers behind nat?

ansible 1.9.4 from pip on os x. make an lxc host with no other purpose. all the containers are behind nat, so cant directly ssh to them, but i can ssh to the physical host. this works, ssh n.n.n.n -o "ProxyCommand ssh lxctest -W %h:%p" and so does ssh n.n.n.n -F sshoptions, which looks like

[ansible-project] pass variable to handler?

Using the lxc module, and want to do this. is there a way? - name: skip dns lookup so ssh doesnt take forever lineinfile: line: UseDNS no dest: /var/lib/lxc/{{ item.key }}/rootfs/etc/ssh/sshd_config with_dict: "{{ containers }}" notify: restart ssh handlers: - name:

Re: [ansible-project] Re: cant install on os x 10.11

, 2015 at 4:17 AM, <tiny...@gmail.com > wrote: > >> I believe recommended way is to use homebrew. >> >> >> On Tuesday, November 10, 2015 at 12:20:09 PM UTC+3, pixel fairy wrote: >>> >>> easy install pip worked. but when trying to install ansible, this

[ansible-project] cant install on os x 10.11

easy install pip worked. but when trying to install ansible, this happens. it looks like a connection error. maybe intermittent failure? $ sudo pip install ansible Downloading/unpacking ansible Cleaning up... Exception: Traceback (most recent call last): File

Re: [ansible-project] cant install on os x 10.11

U pip > sudo pip install -U ansible > > > On Tuesday, November 10, 2015, pixel fairy <pixel...@gmail.com > > wrote: > >> easy install pip worked. but when trying to install ansible, this >> happens. it looks like a connection error. maybe intermittent failure

[ansible-project] Re: syntax error while loading yaml script

theres an intro to yaml syntax here. http://docs.ansible.com/ansible/YAMLSyntax.html be carefull cutting and pasting from groups because things can get reformatted. heres an example with the code highlighting. i hope it comes out ok. also, you can put multiple variables in a single module call

[ansible-project] Testing dynamic inventory in python, order of hosts in lists change

Im trying to test an inventory source in python with unittest. the correct output was written by had following the docs. while the orders dont matter in dictionaries, they do in lists. and in this list, that order changes, thus giving the test a false negative. is there a way to test lists

[ansible-project] os x yosimite, pip tries to make ansible run in python3

bonechar:~# pip install ansible Collecting ansible Downloading ansible-1.9.2.tar.gz (927kB) 100% || 929kB 641kB/s Requirement already satisfied (use --upgrade to upgrade): paramiko in /usr/local/lib/python3.4/site-packages (from ansible) Requirement already

[ansible-project] os x yosimite, strange vault problems with gvim

gvim never saves changes to files in vault. vim does just fine. just putting this here for google to find before someone else wastes $i_wont_admit time on it. dont have time to do the right thing and figure out why. -- You received this message because you are subscribed to the Google Groups

[ansible-project] disable hostname lookups for winrm? 20 - 40 second delay unless controllers ip has a hostname.

Using winrm, i always get an18 - 45 second delay. only tried with the "setup" and "win_ping" modules, unless running ansible from an ip with a hostname set in dns. is there a way to disable hostname lookups for winrm? -- You received this message because you are subscribed to the Google

[ansible-project] Re: Basic question about managing Windows targets with Ansible

use on windows is described here http://docs.ansible.com/ansible/intro_windows.html list of windows modules here, http://docs.ansible.com/ansible/list_of_windows_modules.html workaround for a current winrm bug here, https://github.com/ansible/ansible/issues/10294#issuecomment-93629047 that

[ansible-project] winrm best practices? can we use ssh on windows instead?

I was thinking about that given this workaround, https://github.com/ansible/ansible/issues/10294#issuecomment-93629047 any windows experts here? how do you handle winrm in your server templates? everything below is easily learned from the ssh man page. i couldnt find much of this on

[ansible-project] Re: Basic question about managing Windows targets with Ansible

For now those are the only ones i know of. when wmf 5 is out, we can use dsc from ansible, and i think that will become the staple of how we manage windows. if you want to try it, https://github.com/trondhindenes/Ansible-win_dsc On Wednesday, August 26, 2015 at 2:24:21 PM UTC-7, Joshua

[ansible-project] delegate_to from inventory? copy between remote hosts

making a playbook to set up ceph clients, so want to transfer a client key from server (a monitor host) to client. since the server and client are both far away and sitting next to each other, id like to copy between them, so of course, i tried - name: make sure the client key is in place

Re: [ansible-project] dynamic inventory script doesnt run under ansible, but a script that cats its output works just fine.

turns out homebrew set that python path. running from git works as it should. pixel$ cat `which ansible` #!/bin/bash PYTHONPATH=/usr/local/Cellar/ansible/1.9.2/libexec/lib/python2.7/site-packages:/usr/local/Cellar/ansible/1.9.2/libexec/vendor/lib/python2.7/site-packages exec

Re: [ansible-project] dynamic inventory script doesnt run under ansible, but a script that cats its output works just fine.

Yes, the rest the script (stripped out for brevity) works fine. checked for all needed packages in both versions of python, but ansible insists on its own (python2) version of yaml. is there a way around that? like telling ansible not to use its own yaml? ill probably just generate a static

[ansible-project] inventory script doesnt work as dynamic inventory, but its output does.

wrote a dynamic inventory in python3 for proxmox. it makes virtual machines, sets up their network config, and dns and dhcp in dnsmasq -- You received this message because you are subscribed to the Google Groups Ansible Project group. To unsubscribe from this group and stop receiving emails

[ansible-project] dynamic inventory script doesnt run under ansible, but a script that cats its output works just fine.

wrote a dynamic inventory for ansible, which seems to run fine on its own, but when run in ansible, it complains that it cant import yaml. a script that just cats out the output (cut and paste) of the first script works just fine. the parts that actually make and configure the virtual

[ansible-project] howto start and reuse ssh for pre ansible python provisioning script

Making a script that setups guest machines on proxmox, then gives inventory to ansible. The problem is everything is done with a call to subprocess.check_output ... 'ssh {proxmoxhost} ...' its been solid, but also seems kinda silly to go through all that. ControlPath helps, but id rather

[ansible-project] module docs on ansible 2?

are there docs up yet on making modules for ansible 2? -- You received this message because you are subscribed to the Google Groups Ansible Project group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To post

[ansible-project] error in module docs

http://docs.ansible.com/developing_modules.html the verbose educational example dumped this ansible/hacking/test-module -m ./timex.py -a time=\March 14 12:23\ * including generated source, if any, saving to: /Users/pixel/.ansible_module_generated * this may offset any line numbers in

[ansible-project] Re: error in module docs

34784b7a61) last updated 2015/02/14 14:50:31 (GMT -700) v2/ansible/modules/extras: (detached HEAD 312d59061c) last updated 2015/02/14 14:50:35 (GMT -700) configured module search path = None On Friday, February 20, 2015 at 4:39:30 PM UTC-8, pixel fairy wrote: http://docs.ansible.com

[ansible-project] ansible -m setup takes extra 2 min on Fedora 20

the setup module (and any playbooks) takes an extra 2 min for a fedora 20 based vm. other ansible modules, at least command(date) and yum (upgrade all), take less than a second, on an up to date machine. tried from os x 10.10 (homebrew) and ubuntu 14.04, both running ansible 1.7.2. heres, the