From 89e849d012cf9706d784a56f90ebb0430baf2438 Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Mon, 29 Aug 2022 10:27:19 +0200
Subject: [PATCH] new slides

---
 ansible_101/README.md              |  16 +++
 ansible_101/ansible.cfg            |  17 +++
 ansible_101/how-i-ansible-main.zip | Bin 0 -> 7736 bytes
 ansible_101/index.md               | 162 +++++++++++++++++++++++++++++
 ansible_101/play_w_roles.yml       |   8 ++
 ansible_101/requirements.txt       |   6 ++
 ansible_101/requirements.yml       |  12 +++
 ansible_101/simple_play.yml        |  16 +++
 8 files changed, 237 insertions(+)
 create mode 100644 ansible_101/README.md
 create mode 100644 ansible_101/ansible.cfg
 create mode 100644 ansible_101/how-i-ansible-main.zip
 create mode 100644 ansible_101/index.md
 create mode 100644 ansible_101/play_w_roles.yml
 create mode 100644 ansible_101/requirements.txt
 create mode 100644 ansible_101/requirements.yml
 create mode 100644 ansible_101/simple_play.yml

diff --git a/ansible_101/README.md b/ansible_101/README.md
new file mode 100644
index 0000000..c5ad56f
--- /dev/null
+++ b/ansible_101/README.md
@@ -0,0 +1,16 @@
+How I ansible
+=============
+
+How to run the slides:
+
+```sh
+pipx install present
+present slides.md
+```
+
+_[pipx](https://pypa.github.io/pipx/) installs python tools in a dedicated environment to prevent overlapping dependencies_
+
+---
+
+Made with ❤️ and 🐍.
+
diff --git a/ansible_101/ansible.cfg b/ansible_101/ansible.cfg
new file mode 100644
index 0000000..bec3b8d
--- /dev/null
+++ b/ansible_101/ansible.cfg
@@ -0,0 +1,17 @@
+[defaults]
+nocows = 1
+# private_key_file = files/id_ed25519
+# remote_user = ansible
+inventory = ./inventory
+roles_path = ./roles
+collections_paths = ./collections
+stdout_callback = yaml  # readable output
+
+[privilege_escalation]
+become_allow_same_user = True
+become = True  # also be root, su if needed
+
+[ssh_connection]
+ssh_args = -C -o ControlMaster=auto -o ControlPersist=60s
+control_path = %(directory)s/ansible-ssh-%%h-%%p-%%r
+control_path_dir = tmp/
diff --git a/ansible_101/how-i-ansible-main.zip b/ansible_101/how-i-ansible-main.zip
new file mode 100644
index 0000000000000000000000000000000000000000..a8f918c5cd26f2064ef3bdbd9febfd6379e36b5b
GIT binary patch
literal 7736
zcmWIWW@h1H0D&5vJwYHEhJ_h888Y(Abu)Dn^NKT*a#D436EpMlLqk{@7}q}DkO0%k
z!2r@}+{QisI0FL%D<cDg40fGCu8uCgu6nsCa3g&C4gHuMc^InqA5ztPx2}JRoyZ=B
zg?H4lQ+0FqT)VkbrQhKRvmkH(1KS#gc?Z^ssNA_R&0VfK*6&A$W6$=P3196Qu9d!E
zUA}mMy3=WylhYU;TSPIX+A4Qfo{%h6QZC%_-1@eBQZu93`QExpk9S$86EAeP)t#T$
zcYEIH3vGuV<<DFgXERkxcd40<gh9}g*n%z(qt78vF6eySp*1HuGHq5-K<dr#2v4Px
zeJ9NrVy`pWw0cyma{IHZwx)jH)%nW*_Qc0mH^ifcg!L}<TnR=7hLem8406~*0ve!t
z$!Y2Eum}w}n8jo$u=lw(lWWGp+iO|5<!mbTzFe5?F~ir5H_g~PE$ria>&Ue?oH^d_
zooSw*CS1UtEOc*{&%ARv;bnRA-UK}2WVtJ-pC>M?6>FcDTp(d5*8MYRHP^Q#uFA<5
znNG;;Zc%$CoVKti@ZH+I%E2DIcNmIhv~WuKYc8Db@l)&L659=JsuwiQIeW?eSo})-
z#pJD}HY^u9!@eepB%7ITJ9cNW^EI{=e9@N|E|;4tb>XJrm+wdHQ;*E9a=t1iH2LiX
zF{R3_Hn(<cmNZPbz<GxKx#siiU29iLoZ5FR@7gxS-OF@#-4frB5P4AJ%YnM&hbK1u
zs#!nV|H^&GwDXE$rB}W87F6#}UHt8APT2hg>;GgI-CEFliGQu(e$>FdYNhhslYxOD
zih+Sa8GGOs<Rn(cm&X_7=cE?vRp#cvLs+-dmaD;l$L;%^N4p)Sy_#~mMWK~%ZKK+k
zKT(C%_Gf&KWXMS}y`J0fa&Oxn1_M3$!|&t238rigIUlzC-3MERnvhsC)~6QS7nxC=
zR5+{ps3rpggFbF26{QxIW)`L9rskCt>y=cLz?~Ev=5a>*oX;uGr%jhiw;iiui-|eK
z<@(cd<xvH<qB=jntRl~}x;R5|22?9o{}*06hk=2CnGt6wpje3<3c2Texegf!us*2u
zGkmaUw%Qg}bH=?L9ZTM7G@kVFxU_2f_J0c(>~1uF|2T8)RH+t@_D8LoLm8xQux>H%
z;1K>@WU8Lx(>IML;n<Yv{@ho~F3;SWsofyzGM%gM>!nW4rXJyk)1O%Uo_E3J<iAgg
zw=6S0>&$6Xxboo(;d!zbe`wd5O?;m||CIdN%G_PY+cliNeooQJ4^UM+BUV<uG!N!W
z25^xAD~Ld}B=)!lM>1xSgsEQzpZ?60)Wn>8y|ny%VvN!y(x{Zww8YY!l449VAtmOV
z)K*<11_lOGFveQeLcE9MJh+*lq8KG{U%q<v=_9Yx=llEpeLPR<oIG>h`%I_4htD}b
zAAj9#kAea&gfg6ZwJdCkh-y=%XJ=>(JV{{&mKKpdOv}tk#o|3o1NBHUFtsEZGt4jz
zH6qziJQ4h^_N#;#0|NsH+mK~&a(-S~X1ZQxUM4(uN2lfI$8r_t=cdM&CFYc-D%dI*
za&h5K<eEfUoSRybh#5kVRCU(eb1f$$1H(~91_nb?%)>}gwG$k@k2vtOzW=SwG;jOe
zquo48N>u`17Tt64vYMQG*l)6tap~9lvvbQG_2uF}?G^uI)$`-)-3@Q9tYs+B+N;K{
z|HhED)p`oU^~}J~>{rv66R&7p=>6EZ$=^mStnh<Zs#M}~F8Ap>qkWDQoD()xU3fn@
zYnh1bm!&;7ua+KPI{((G*8%z)O}(C(1tn{y^}g{mvaG19F}B=blKx<F(7g3=VY9Q6
zPj}mAuMe7Vly9D+^RbT9<(Vhk88@&UJa|ZcUK(eClmBbhoxhsz1)tXV|KRr7{Eem;
zb$P|#Y-;}AAG%<o%7lt#H+Qxzxwy!GFW1!OWwzet?5VPE!hN3cDxO*F?EmfC#<XcW
zA6@0g9bv>~l#;~aY%CcC5@Xdr4^3BLWMD96VqhRPO+yUCh_c*3!@R==Ja_(bG2P|5
z;Tg`)YV}RDP3bbHU}T9aSLeiM@0UK^m2t7hO76Yi@m=dyuWEbYmh;fIYnQ-*Vwo2a
zj4Q0YxVIeoRu=d|V1s1}m)FLRHfPs9WSCULy`s+C;Qh6~ZAw!k`xoiHk@H!tUSVu6
zrSA8OCvCAsQV8R8fn_aUr`%Y~@$G@gmzD)4w^VlgJW%uR+0K-fG~sT$Cvx&D{%V|D
zWWwxr-cn2L@UJ-<a^1{v7t>Yy4mdNKZBNV0I(uv7<jtX*D<;IppS5W_6v3P`rEXi%
z{~{gDxVsjtA`%w4A{tZJg~D78_4_z=UAmihTh?k?-iEUVht*m3B{co6?Ka%0Q+9d!
z-#Y#Os&6@Lb?28n3^!^x&6&)-U*}VZRK2c~T6`$Hv4&Zo5L-%>q~;dnB$g0Y^bsAS
za6^eK{>+HX+z8i#48~Igf~r{<wk6weP%)^Nf>}C2g1chL&dat83=AObL8%?Z1*yrI
zi8-i6E>sX&?B<tbq!z&o-|A|G%)GMHypsH)%J_`@;*z|?+|>BujQpY!h1yzbl+0y`
zML6@h;GVs2Y#10ATp5TjnZf2^WOGDak5<8RHNISOL`iQ&(~={Pu3TCqqs_YX%#<rf
z=G5$+5>mUMMMxaIAsNFMvU~=p?aIi&poBd>iZgQya#G_#t!k78N9j3RzGed+)(3Ng
zcT_W1=Uv#T&T(*In6u2$a~E!#i(HWp&AImZv$}M$6|=dRD7W4*<2g&xbhv*Wl5Mcs
z*`3SW(D+1bOM&O2wVaJVr><YRGxqYd_cOhnl8@A_5t$nFe$%a5R_iTH_Mb$zKC{1G
z%w=-DiG9=aKR+%6?O_eEH%YtUSMBxXp1(#`qD78M7+3tf#-@pPx77Y-ftA*f!ZkR1
zLeNwe28MiYoZZsmoXnKeV&rb=+OYWU+in8&*O$-Or91tC2j9+pPdd1lx@XEya$4Z8
zcq2PgB|mTL>NjiN2rDlAvR9x(KKNJIubqE5e+gRcjyn16uIbLU0|!rT-u(Hwx$*v+
z?(>&wPPw{fQ-{>Ft2rxO>KHSB`A(|gv!B8Hhr?-djF!)&pL4Pnip(&*we<+^e31<<
zMHeC_TF+DtS*s)9mE0a(@at;LJeAB@YW??KuYP&wRK~TI`hPW_t+%uU9uX625HZQS
zaHvPt>bU&w^7_qrjjd-|4>Mi6v@1;G%IkzjZ{sIOziqjaF*#*pgoxUHhiEUqC%>25
z+x8th?-v}j$#0*neY;NOug}66Da=8WKX)z@)7h7^^r+O<#b;u7J=uNy`G*{#&EC?g
zyOtV?Pkw%{y}$0_j74HnIja??_FdlmmBa0Bulc5RVcp3IpZsEur@Gj)E)HeyvGrWc
z>Bs!XtHPkgRUu`23`<y#)dy3LCUISHkBG~gwnZx*PO??gTpqTjh1u_F`!X5Et-i@?
z+$Udly&Z8fbj6g7m$tBMRd}CmaBkU2Pq&wj-#%FMM}^eH{|VQMj0^Kz5qt7#;)d&M
za&y>w3swiby0hg}x!8ov+;b0gtOYKt*fvSZD?3Z0D3W<sP5v>d){=xn&YcObqO9gm
z&^Z{s<@%?BhpOs}Bd_ts-4M%NaymRA>iQNvtCWoa(ia0?cxLx-^94*uF_8%5mDZkn
zMO0_njM-A>7dS^T7zN!;YZW`(+Wvh%OK_8LiKBBgYjKbF@o#&plkWF^e##quO0G~p
zjYVhMlf4D;*=MTPD&JY_{)+3_^<U;Qk8jl4;268$oa&_c7dCqG^E*j&SA07C#$@+?
z4kgv;M}#|Fb<SP5zbwP{fX#o~iYLF%+)4S;)fzD4$n?0Cc02jwZm#|pFH`YFqJ8!!
zUWb_eqyJZ3s0@82U9cyoXxH(xDzDrMAI|@J`Tw7Dr*^iTTNYeDueUe<Rpy_0zYeOJ
z+kP;V<?LRzcjk|LJGnE}4V$N~zIylZ66=tzm%p;^WhXA3pU*ECa)#;b99O&fQx(l?
z{A<FiVrTKNcB^l!Seh|YA@AtpiT9hFC&^6<JT~c}aK)uC!I%7#6Rvy~k+xgDC$+^W
zGV_ed&D{HMx9$IQ-|pPqZ{`d)a<_k6koLvt>i1oB!ZG1rrd&Gxz~fvW-;?9%F>`~$
zW?uPppr+UFj#`fc`}QE0woBj7sCQdxual8q9nic}<ka)2dn+cq;de?uaQ5RbuD$zb
zB^zFrTU@e6YE9;gT>&!xtLK}34&EqsE5BK8^Mm90Q{&F;S~k)0tA58@>3i)vUB#c>
zP@3J)mnnC~?fvuLU4IJh+1~$f?!o2*7S&5nWY2q~bX)d&{`{9k`&pB@`5&ru>$83G
z&|Y}tsp7<5eg3qrT~{xaN=iFw{|Ro~_?9L44#%S2jYlPY;`TBfJ$%Ki+;8386KuAR
zo_48!f8g?DPsGgs%kD^eC)&!+z0-Pqy?W=33w!tr>KgAJmrk?((-E<$_vXDjjr?IQ
zi~OG@=j;9A$Tx6Od({8<zQj=zH$&U5q<iktC(O&@HLRwoM$eeKCoW?8^y)P~-t}+)
zuqjpj;m%|GCq0P|@MdIUVBiAR(4YY~Fat_}hUy?p0SHB4;0|UIq>Mx#x&s-(2qGA)
z7#OgbggKCha2&))^f54yX%Hh_7_l0OZA1*+Q1r1MgrN(Wuo?=gv#^c?p_`08go7~I
zgc+;JD5ERL13Ks?qmR@eOkPfe$;jh22$LaADUeAp3>qDQutD+P%Yxm_paC)Dh8Zjs
zV44RSEkT%f7N2=YgA?$6FFvP&Mo$n%OR(Z`Dw5IgaStqZKvEp~XbQ*<NQ%oL)eemI
z7C!%gx_}_N7#Ki7|BFbwFh)*r#|5ZYg0R4wjko}VSO9AAV+k?L2nY325SA<;*%GvF
z1*&h}p^dG8EP_PMPqHimburLJTJXgXXjBDcB_xK5*og~3^f4BgmmsMPeUt@cKEz9h
zNHL#+l%~u{oIfBV1y~XR#3Sf~4+xKxkYoW#K0!^=AGwJ13A~4l#W#eKv>P|6mJpqH
zKpk;VutCz-e6lRUn|~mNLr74^9Kr$>H-E^s43vjZyXmk54hc#0jylLrNCHpbAtxk3
z9)#Kn?V+P|+lkM=JiNqNUxwBbhj|Z@?9uz;2=B#^Vm_W!53vWme~qx`19p3G^|lcK
z1Th%BUyCsKA|KWO!tCV+c(byBv`I5aGX!!mFsu}2V9;Q&G)*!|Nlr;JNHVuDG)YWO
cOinU0ut-fcNi{SzwJ<R-NlG(FPBBOW0Qgj7g#Z8m

literal 0
HcmV?d00001

diff --git a/ansible_101/index.md b/ansible_101/index.md
new file mode 100644
index 0000000..188e377
--- /dev/null
+++ b/ansible_101/index.md
@@ -0,0 +1,162 @@
+---
+title: Ansible 101
+description: A small overview and best practice guide for ansible
+author: Ricardo Band
+keywords: automation,basics
+---
+
+# Ansible 101
+
+## A small overview and best practice guide for ansible
+
+---
+
+# Python
+
+- 🐍 use python 3.6+
+  - newer = better ✨
+- Dedicated virtualenv
+- 📦 container
+
+```dockerfile
+FROM python:3-slim
+ADD .
+RUN pip install -r requirements.txt
+ENTRYPOINT ["ansible-playbook"]
+CMD ["--help"]
+```
+
+- `podman run -it --rm ansible my-playbook.yml`
+
+---
+
+# Ansible
+
+- `ansible` package is only the CLI
+- `ansible-core` is the actual library
+- only versions 2.19 and later are semantic
+- CLI versions increase quite fast currently at version 6
+- Red Hat Ansible Automation Platform 2.2 (tm)
+
+---
+
+# ansible.cfg
+
+- Define inventory path
+  - Could be sourced by a plugin from a DCIM
+- Define roles path
+  - Can be ommitted if all roles are externally sourced
+- Switch output plugin
+  `stdout_callback = yaml`
+- Always use root
+  - Easier then writing `become: yes` everywhere
+  - 90% of tasks require root anyway
+- SSH options
+  - Faster ssh by reusing connections
+    ```ini
+    [ssh_connection]
+    pipelining = True
+    ssh_args = -o ControlMaster=auto -o ControlPersist=600
+    ```
+
+---
+
+# requirements.txt
+
+_Python dependencies_
+
+- Ansible dependencies
+  - `ansible~=6.0`
+  - Libraries needed by ansible modules or plugins
+- Role dependencies
+  - Libraries needed by roles
+- Collection dependencies
+  - Libraries needed by collections
+
+---
+
+# requirements.yml
+
+_Ansible dependencies_
+
+- Roles
+- Collections
+- Get dependencies from Ansible docs, example: [podman](https://docs.ansible.com/ansible/latest/collections/containers/podman/podman_container_module.html)
+
+---
+
+# Variables
+
+- `group_vars`
+- `host_vars`
+- "Task vars"
+- Role vars
+- Role defaults
+
+---
+
+# Playbooks
+
+- Simple playbook
+- Playbook with roles
+
+---
+
+# Roles
+
+```
+roles/<github_username>.<rolename>/
+├── defaults
+│   └── main.yml
+├── files
+│   └── etc
+│       └── foo
+│           └── config.ini
+├── meta
+│   ├── argument_specs.yml
+│   └── main.yml
+├── tasks
+│   └── main.yml
+├── templates
+│   └── etc
+│       └── foo
+│           └── conf.d
+│               └── special.ini.j2
+└── vars
+    └── main.yml
+```
+---
+# Roles
+
+- `meta`
+- `defaults` vs `vars`
+- `files` vs `templates`
+- Advanced tasks
+
+---
+
+# Advances topics
+
+- 🔐 Secrets
+- Create your own roles
+- Create your own collections
+  - If you need your own plugins or modules
+
+---
+
+# Secrets
+
+`$ ansible-galaxy collection install community.general`
+
+```yaml
+password: "{{ lookup('community.general.passwordstore', 'accounts/foobar.com') }}"
+aws_secret_key: "{{ lookup('community.general.passwordstore', 'accounts/aws subkey=secret_key') }}"
+aws_access_key: "{{ lookup('community.general.passwordstore', 'accounts/aws subkey=access_key') }}"
+```
+
+See: https://docs.ansible.com/ansible/latest/collections/community/general/passwordstore_lookup.html
+
+---
+
+# ❓ questions ❓
+
diff --git a/ansible_101/play_w_roles.yml b/ansible_101/play_w_roles.yml
new file mode 100644
index 0000000..35d442e
--- /dev/null
+++ b/ansible_101/play_w_roles.yml
@@ -0,0 +1,8 @@
+---
+
+- hosts: all
+  roles:
+    - common
+    - role: that_other_role
+      some_var: 2342
+
diff --git a/ansible_101/requirements.txt b/ansible_101/requirements.txt
new file mode 100644
index 0000000..243e4c4
--- /dev/null
+++ b/ansible_101/requirements.txt
@@ -0,0 +1,6 @@
+# ansible
+ansible~=6.0
+
+# roles
+
+# collections
diff --git a/ansible_101/requirements.yml b/ansible_101/requirements.yml
new file mode 100644
index 0000000..cb36e75
--- /dev/null
+++ b/ansible_101/requirements.yml
@@ -0,0 +1,12 @@
+---
+
+collections:
+  - name: community.general
+    version: '>=2.5.1'  # parted, copr module
+  - name: ansible.posix
+    version: '>=1.2.0'  # mount, firewalld module
+  - name: community.libvirt
+    version: '>=1.0.1'  # virt_pool, virt_net module
+
+roles: []
+
diff --git a/ansible_101/simple_play.yml b/ansible_101/simple_play.yml
new file mode 100644
index 0000000..e857dd5
--- /dev/null
+++ b/ansible_101/simple_play.yml
@@ -0,0 +1,16 @@
+---
+- hosts: all, !supermicro
+  tasks:
+    - name: Install foo
+      tags: install
+      ansible.builtin.apt:
+        name: foo
+
+    - name: Setup foo
+      tags: configure
+      ansible.builtin.copy:
+        src: etc/foo/config.ini
+        dest: /etc/foo/config.ini
+      notify:
+        - reload foo
+