home.social

#ansible — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #ansible, aggregated by home.social.

fetched live
  1. The ProLUG Big Book of Labs by Scott Champine is free with a Leanpub Reader membership! Or you can buy it for $20.00! leanpub.com/theprolugbigbookof #systems_engineering #ansible

  2. The ProLUG Big Book of Labs by Scott Champine is free with a Leanpub Reader membership! Or you can buy it for $20.00! leanpub.com/theprolugbigbookof #systems_engineering #ansible

  3. I have mental trouble, because I keep obsessing over how I should automate my Ansible setup for BIRD - I want to add specific sections to specific hosts only - but I don't really want to use templates and throw in dozens of different exclusion variables if I can avoid it. :| What do?

    #ansible

  4. Stop rebuilding servers at 2 AM. This GitHub Actions + Ansible setup provisions and hardens your entire VPS in minutes, not hours. See the exact workflow. #DevOps #Ansible #Automation

    valtersit.com/how-i-automated-

  5. On Thursday, I have upgraded the most important (MySQL) database at work and it went not very well. There were a few unexpected misconfigurations and unhandled errors that lead to more or less 10 minutes of downtime instead of 1 or 2 and a Debezium connector snapshot, which is VERY costly for Kafka consumers.

    Fortunately, we have learned from our mistakes and I have patched our Ansible playbooks to prevent all those issues from happening again.

    This morning, I have upgraded one of the most important Mastodon (PostgreSQL) databases without any issue.

    #mysql #postgresql #dba #ansible #automation #databases #mastodon

  6. On Thursday, I have upgraded the most important (MySQL) database at work and it went not very well. There were a few unexpected misconfigurations and unhandled errors that lead to more or less 10 minutes of downtime instead of 1 or 2 and a Debezium connector snapshot, which is VERY costly for Kafka consumers.

    Fortunately, we have learned from our mistakes and I have patched our Ansible playbooks to prevent all those issues from happening again.

    This morning, I have upgraded one of the most important Mastodon (PostgreSQL) databases without any issue.

    #mysql #postgresql #dba #ansible #automation #databases #mastodon

  7. Automate OpenSCAP remediation on RHEL 9: run `oscap xccdf eval --results arf.xml`, then `oscap xccdf generate fix --fix-type ansible` to produce a playbook that applies all failed rule fixes, like file permissions. Save time, ensure consistency. #openscap #ansible #remediation

    valtersit.com/vault/remediate-

  8. I think I have fallen in love with #Ansible.

    Upgrading to the latest version of @Mastodon is now as easy as:

    ansible-playbook playbooks/30-mastodon-compose.yml -e mastodon_upgrade_apply=true

    Which I can run from my phone. While on vacation.

    As I have, of course, just done.

    #mastoadmin

  9. I think I have fallen in love with #Ansible.

    Upgrading to the latest version of @Mastodon is now as easy as:

    ansible-playbook playbooks/30-mastodon-compose.yml -e mastodon_upgrade_apply=true

    Which I can run from my phone. While on vacation.

    As I have, of course, just done.

    #mastoadmin

  10. Spaß mit cowsay und lolcat 😊

    Für den Admin-Kollegen tat sich eine neue Welt auf.

    Und meine Ansible-Playbooks sahen noch nie so fancy aus.

    #Linux #Ansible #Terminal #CLI #sysadmin #cowsay #lolcat

  11. Kurze Frage an die #Ansible bubble. Ich habe den defaults Ordner in einer Rolle so verstanden das darin die variablen sind die eine Rolle brauch zum funktionieren. Vordefiniert. So das man sie noch uberschreiben kann. Ziel ist das die Rolle ohne weiter Angaben von variablen durchläuft. Fehlerfrei!

    Ist mein Verständnis davon richtig oder habe ich da was falsch verstanden?

  12. Kurze Frage an die #Ansible bubble. Ich habe den defaults Ordner in einer Rolle so verstanden das darin die variablen sind die eine Rolle brauch zum funktionieren. Vordefiniert. So das man sie noch uberschreiben kann. Ziel ist das die Rolle ohne weiter Angaben von variablen durchläuft. Fehlerfrei!

    Ist mein Verständnis davon richtig oder habe ich da was falsch verstanden?

  13. Updating hosts on a regular.. Something that can wait, what are the chances someone finds a vulnerability to get root access and escape containers ?

    AI walks in

    Fuck man, vulnerabilities after vulnerabilities, no matter AI hallucination or actual issues, it is out there and people are looking… I need to update that Ansible playbook and get ready to update the whole thing regularly…

    #ai #homelab #selfhosting #selfhost #selfhosted #ansible #maintenance #vulnerabilities

  14. Updating hosts on a regular.. Something that can wait, what are the chances someone finds a vulnerability to get root access and escape containers ?

    AI walks in

    Fuck man, vulnerabilities after vulnerabilities, no matter AI hallucination or actual issues, it is out there and people are looking… I need to update that Ansible playbook and get ready to update the whole thing regularly…

    #ai #homelab #selfhosting #selfhost #selfhosted #ansible #maintenance #vulnerabilities

  15. Proudly announcing a new version of the Manage My Network (MMN) #ansible collection.
    A lot has happened and I apologize for the delays. Also: Thank you very much for the rich contributions.
    Enjoy!
    github.com/imp1sh/ansible_mana

    galaxy.ansible.com/ui/repo/pub

  16. Proudly announcing a new version of the Manage My Network (MMN) #ansible collection.
    A lot has happened and I apologize for the delays. Also: Thank you very much for the rich contributions.
    Enjoy!
    github.com/imp1sh/ansible_mana

    galaxy.ansible.com/ui/repo/pub

  17. New toy for FreeBSD folks who run Ansible: a become plugin for mdo(1), the mac_do(4) counterpart to sudo/doas.

    The kernel decides whether the credential transition is allowed, so there is no password, no TTY, no doas.conf, and pipelining just works. Single file, BSD 2-Clause, tested against 15.1-RELEASE.

    github.com/chofstede/ansible-b

    Feedback welcome, especially from anyone already using mac_do in production.

    #FreeBSD #Ansible #RunBSD #DevOps #Automation

  18. New toy for FreeBSD folks who run Ansible: a become plugin for mdo(1), the mac_do(4) counterpart to sudo/doas.

    The kernel decides whether the credential transition is allowed, so there is no password, no TTY, no doas.conf, and pipelining just works. Single file, BSD 2-Clause, tested against 15.1-RELEASE.

    github.com/chofstede/ansible-b

    Feedback welcome, especially from anyone already using mac_do in production.

    #FreeBSD #Ansible #RunBSD #DevOps #Automation

  19. The Bullhorn #234 is out!

    Plus new Ansible Core, Antsibull and Ansible Community Package releases. The Ansible 15 roadmap vote accepted, dellemc.unity inclusion requirements violation and community.okd maintenance status discussions.

    New collection updates too!

    Read more: forum.ansible.com/t/the-bullho

  20. The #Ansible Bullhorn #234 is out!

    Plus new Ansible Core, Antsibull and Ansible Community Package releases. The Ansible 15 roadmap vote accepted, dellemc.unity inclusion requirements violation and community.okd maintenance status discussions.

    New collection updates too!

    Read more: forum.ansible.com/t/the-bullho

    #OpenSource #Automation

  21. Master rolling deployments in #ansible with `serial` for batch control and `max_fail_percentage` to abort on threshold breaches. Ansible runs batch-by-batch, counting failures mid-run. Perfect for zero-downtime updates on any Linux. #snippet #rolling #serial #ValtersIT

    valtersit.com/vault/rolling-up

  22. Nerd sniped again. Starting to write #ansible playbooks for home and work.

  23. A bug in my Ansible connection plugin needed a real FreeBSD jail to reproduce. So I put three of them on an idle 512 MB free-tier VPS.

    With pkgbase, the base userland is just 33 MB. And persistent jails use zero idle processes. Here’s the build, the regression test, and the two sharp edges that cost me twenty minutes:

    blog.hofstede.it/three-test-ja

    #FreeBSD #Ansible #pkgbase #SysAdmin #Devops

  24. A bug in my Ansible connection plugin needed a real FreeBSD jail to reproduce. So I put three of them on an idle 512 MB free-tier VPS.

    With pkgbase, the base userland is just 33 MB. And persistent jails use zero idle processes. Here’s the build, the regression test, and the two sharp edges that cost me twenty minutes:

    blog.hofstede.it/three-test-ja

    #FreeBSD #Ansible #pkgbase #SysAdmin #Devops

  25. Annual looking for work post. I worked as a devops engineer/linux admin for the last five years, with strong ansible skills, but I'm willing even do level 1 if it's available.

    #fedihired #fedihire #ansible #linux

  26. Annual looking for work post. I worked as a devops engineer/linux admin for the last five years, with strong ansible skills, but I'm willing even do level 1 if it's available.

    #fedihired #fedihire #ansible #linux

  27. Ansible is easy to install. A sane, reproducible development environment takes more thought.

    My downstream-first setup uses RHEL 10.2, Podman, VS Code Dev Containers, and Red Hat-packaged Ansible Development Tools, while keeping the boundaries between upstream projects, downstream products, development containers, and production Execution Environments explicit.

    blog.hofstede.it/sane-developm

    #Ansible #RHEL #Podman #devop #linux

  28. 📧 progmaticltd/homebox

    A set of ansible scripts to build a personal mail server / private cloud / etc.

    Automates secure self-hosted email, calendar, and file server setup with automatic updates, LDAP auth, and DNS security

    ⭐ Stars: 491
    📅 Last Update: Jul 31, 2026

    github.com/progmaticltd/homebox

    #selfhosted #homelab #selfhost #selfhosting #opensource #ansible

  29. After a long hiatus, I finally had some time to put into my k3s-ansible repo that helps you bootstrap a Kubernetes cluster in minutes.

    One of the biggest things holding me back from updating it was being able to run k3s cluster tests in CI. Well, I finally have that working again and I can merge in confidence!

    k3s_version: v1.36.2+k3s1

    #homelab #kubernetes #ansible

    github.com/timothystewart6/k3s

  30. In case you missed it, there's a lot of cool stuff in the latest release of ara records #ansible!

    Check out the blog post about 1.8.0: ara.recordsansible.org/blog/20

  31. Ruby developers, we could really use your help on morph.io.

    The jobs: Ruby 2.7 to 3.x. Rails 6.0 to 7. A supported OS underneath it. A pile of held-back gems retired. Or just a README fix telling us what broke when you tried to run it locally.

    Every step is useful on its own. Pick one and open a PR.

    oaf.org.au/2026/07/30/morph-io

    #Ruby #Rails #CivicTech #OpenSource #Ansible

  32. All prepped and tested for #mastodon 4.6 update on #DomumSocial

    Going to take the shot today 2026-07-27 at 2300UTC

    There's some substantial changes both upstream and in our #ansible deploy path where i refactored a lot of things to enable better testing. Ironically this makes me more nervous about the push to prod, though next time (if this goes to plan) I'll feel better about it 😁

    It should take all of 2min and be virtually unnoticeable on the user side and worst case we have tons of backups and can fully redeploy in a couple hours, so deep breath and jump in...