home.social

#ansible — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #ansible, aggregated by home.social.

  1. CW: AI

    Out of curiosity, I have asked Claude to rewrite a tiny little SSH wrapper from Python to Go and Rust to check performance.

    Results:
    * Python = 20ms
    * Go = 3ms
    * Rust = 1.5ms

    It's totally useless if you have Mitogen because it opens the SSH connection once but if you don't, every single ms counts.

    #ssh #python #go #rust #ansible #ai

  2. CW: AI

    Out of curiosity, I have asked Claude to rewrite a tiny little SSH wrapper from Python to Go and Rust to check performance.

    Results:
    * Python = 20ms
    * Go = 3ms
    * Rust = 1.5ms

    It's totally useless if you have Mitogen because it opens the SSH connection once but if you don't, every single ms counts.

  3. CW: AI

    Out of curiosity, I have asked Claude to rewrite a tiny little SSH wrapper from Python to Go and Rust to check performance.

    Results:
    * Python = 20ms
    * Go = 3ms
    * Rust = 1.5ms

    It's totally useless if you have Mitogen because it opens the SSH connection once but if you don't, every single ms counts.

    #ssh #python #go #rust #ansible #ai

  4. CW: AI

    Out of curiosity, I have asked Claude to rewrite a tiny little SSH wrapper from Python to Go and Rust to check performance.

    Results:
    * Python = 20ms
    * Go = 3ms
    * Rust = 1.5ms

    It's totally useless if you have Mitogen because it opens the SSH connection once but if you don't, every single ms counts.

    #ssh #python #go #rust #ansible #ai

  5. CW: AI

    Out of curiosity, I have asked Claude to rewrite a tiny little SSH wrapper from Python to Go and Rust to check performance.

    Results:
    * Python = 20ms
    * Go = 3ms
    * Rust = 1.5ms

    It's totally useless if you have Mitogen because it opens the SSH connection once but if you don't, every single ms counts.

    #ssh #python #go #rust #ansible #ai

  6. I've tested Mitogen for Ansible. Now I can't tell Ansible is bad at loops anymore. It's bad at handling SSH connections by default. I feel like it runs at the speed of light now!

    mitogen.networkgenomics.com/an

    #ansible #mitogen #ssh #automation

  7. I have spent the last two days debugging why my SSH connection didn't go through The Bastion. I have automated everything with terraform so no human mistake. Network flows, user, private key, correct "from" list in the ingress key. In the end, the connection doesn't even reach the bastion. It silently dies in the wrapper in between. And of course, there is no explicit error that could have saved me hours of work. It's not lost because everything is automated now, but this is frustrating.

    When I checked the repo, there are multiple issues and pull requests to review now. So it's time to put my maintainer hat on and get things done!

    github.com/ovh/the-bastion-ans

    #ansible #bastion #ssh

  8. I have spent the last two days debugging why my SSH connection didn't go through The Bastion. I have automated everything with terraform so no human mistake. Network flows, user, private key, correct "from" list in the ingress key. In the end, the connection doesn't even reach the bastion. It silently dies in the wrapper in between. And of course, there is no explicit error that could have saved me hours of work. It's not lost because everything is automated now, but this is frustrating.

    When I checked the repo, there are multiple issues and pull requests to review now. So it's time to put my maintainer hat on and get things done!

    github.com/ovh/the-bastion-ans

  9. I have spent the last two days debugging why my SSH connection didn't go through The Bastion. I have automated everything with terraform so no human mistake. Network flows, user, private key, correct "from" list in the ingress key. In the end, the connection doesn't even reach the bastion. It silently dies in the wrapper in between. And of course, there is no explicit error that could have saved me hours of work. It's not lost because everything is automated now, but this is frustrating.

    When I checked the repo, there are multiple issues and pull requests to review now. So it's time to put my maintainer hat on and get things done!

    github.com/ovh/the-bastion-ans

    #ansible #bastion #ssh

  10. I have spent the last two days debugging why my SSH connection didn't go through The Bastion. I have automated everything with terraform so no human mistake. Network flows, user, private key, correct "from" list in the ingress key. In the end, the connection doesn't even reach the bastion. It silently dies in the wrapper in between. And of course, there is no explicit error that could have saved me hours of work. It's not lost because everything is automated now, but this is frustrating.

    When I checked the repo, there are multiple issues and pull requests to review now. So it's time to put my maintainer hat on and get things done!

    github.com/ovh/the-bastion-ans

    #ansible #bastion #ssh

  11. I have spent the last two days debugging why my SSH connection didn't go through The Bastion. I have automated everything with terraform so no human mistake. Network flows, user, private key, correct "from" list in the ingress key. In the end, the connection doesn't even reach the bastion. It silently dies in the wrapper in between. And of course, there is no explicit error that could have saved me hours of work. It's not lost because everything is automated now, but this is frustrating.

    When I checked the repo, there are multiple issues and pull requests to review now. So it's time to put my maintainer hat on and get things done!

    github.com/ovh/the-bastion-ans

    #ansible #bastion #ssh

  12. ADR-05: Ansible für die gesamte Konfiguration; ansible-vault für Geheimnisse

    StatusAngenommenEntschiedenSobald ein Host von hand existierteBezugAusnahme korrigiert durch ADR-10

    Kontext:Ein System, das durch Eintippen von Befehlen entstanden ist, existiert nur so lange, wie sich die tippende

    behindtheconsole.com/2026/09/0

    #Projekt #SystemArchitektur #ADR #ansible #Systemarchitektur #BTC

  13. @sven222 @Seraphyn @hosebei

    Bin auf NixOS umgestiegen und habe Ansible auf die Seite gelegt...

    #ansible #nixos

  14. The ProLUG Big Book of Labs by Scott Champine is free with a Leanpub Reader membership! Or you can buy it for $20.00! leanpub.com/theprolugbigbookof #systems_engineering #ansible

  15. Is your Ansible playbook safe to run 10 times in a row? If not, you're doing it wrong. Master idempotency and stop breaking production fleets. #Ansible #DevOps #SysAdmin

    valtersit.com/guides/gitlab/an

  16. @rolle @harald There are many aspects to "when ansible". Sometimes even when there are very few servers but rarely touched, it makes sense. In this case it's also about backup. I have been doing ansibles to describe mementomori.social setup. I never took full look what is there. Now when we turn it into ansible, it is clear for all what got installed and how. Also changes become documented. And if we loose a server we can quickly rebuild it from git. Only data needs backup. Or if we would scale up, we get similar servers built by automation and traffic paths reconfigured.

    At home it serves me just a reminder how something was built.

    So if you would share responsibiloities for those 60 servers, it would work as documentation and would make them all more similar, easier to maintain in group. Also molecule can be used to test the automation.

    You can follow our (slow) process in public: github.com/mementomori-social/

    #mementomori #ansible

  17. Infinito.Nexus 13.0: A Sovereign Cloud on Clearnet or Tor

    Infinito.Nexus 13.0 introduces a new choice in how organizations can operate their digital infrastructure. Until now, an Infinito.Nexus environment was primarily organized around public or private clearnet domains. Version 13.0 adds Tor onion services as a first-class deployment option. An organization can now build its application landscape on the conventional Internet, through Tor, or through a combination of both. This release includes: Tor as a first-class deployment axis Stable onion addresses generated during provisioning Tor-aware identity and Single Sign-On flows Optional parallel clearnet domains Cross-domain and cross-protocol SSO improvements Recovery tests based on real database dumps Mandatory health probes across containerized services Broader automated testing across Python, JavaScript, PHP and Ruby A consolidated and more secure CI deployment chain Together, these changes extend digital sovereignty beyond the question of who operates the servers. Infinito.Nexus 13.0 also begins addressing where services can be reached, which network infrastructure they depend on and how much an organization must disclose merely to exist online. […]

    blog.infinito.nexus/blog/2026/

  18. So #indieweb, right? yevi.org/ is already a static site in #HTML and #CSS written by hands (my hands). It’s time to fix the deployment process of it because now I’m packing it into a #Docker image with #nginx. So each of my websites is a Docker container with its own Nginx, which is definitely overkill for #indieweb.

    I want a single Nginx with several sites. What are my options for automated deployments from #Gitea? #Ansible? Simple scp? I think scp is a nice option.

  19. The ProLUG Big Book of Labs by Scott Champine is free with a Leanpub Reader membership! Or you can buy it for $20.00! leanpub.com/theprolugbigbookof #systems_engineering #ansible

  20. Mitogen 0.3.52 fixes a regression with Ansible dnf module on some targets and fixes errors seen when used with long hostnames/usernames
    🐍 pypi.org/project/mitogen/0.3.52
    🗒️ mitogen.networkgenomics.com/ch

  21. Ansible tip: Gathering facts can take 70+ seconds on macOS 15+ targets. Gathering `ansible_facts.fqdn` triggers local network privacy protections. Gather a subset of facts to avoid this delay, e.g.

    - hosts: all
    gather_facts: true
    gather_subset: ["!all", "!min", "distribution"]

    `ansible_facts.fqdn` is in the facts category `platform`. Other categories (e.g. `service_mgr`) depend on `platform`, so will indirectly trigger gathering `ansible_facts.fqdn`.

    #Ansible

  22. Hace unos años me compré una Raspberry Pi 4B (antes de que el precio de la RAM se disparase), con la idea de poner un pi-hole.net y alguna cosita más como syncthing.net que son útiles y que núnca están de más.

    Otra cosa no, pero me gusta más hacer el tonto con un ordenador que a un tonto un lápiz, así que evidentemente la cosa se complicó.

    Metí #ansible para automatizar toda la gestión de la máquina y luego poco a poco me fue apeteciendo meter más cositas:

    - github.com/dani-garcia/vaultwa que es una versión open sourcel servidor de Bitwarden que funciona muy bien.
    - readeck.org que es una aplicación tipo "Read it later"
    - Calibre Web, que usamos en casa para gestionar la colección de e-books (y para el que busco sustituto, por si alguien tiene ideas)
    - bambuddy.cool para vigilar y gestionar la impresora 3D en remoto sin tener que depender de los servidores de Bambulab
    - Docker swarm para gestionar todas las cositas que hay, porque al final no me encantaba la idea de un docker-compose sin más.
    - ... y cada días más cosas.

    Ese es un poco el problema del #homelabbing, que una vez empiezas...

    Y claro, al Raspberry Pi aguanta bastante más de lo que pueda parecer. Pero todo tiene un límite.

    El caso es que junto con todo esto hace unos 10 o 12 años, un ex-compañero de trabajo se mudaba y me vendió super barato un sobremesa con una placa mini-itx muy chulo que ha aguantado vivo hasta hoy. Solo hizo falta cambiarle la gráfica después de 4 o 5 años de uso, pero sigue vivo.

    El problema? Que después de 4 o 5 mudanzas la caja se cae ya a pedazos. Así que con la ayuda de la impresora 3d me he puesto manos a la obra para renovar la caja y así unificar todos los cacharritos del #homelab en un solo sitio... y voy a documentarlo aquí todo un poco por si le sirve de inspiración a alguien más :)

    Sigue ​👇

  23. #TIL learned about #Pyinfra which is a #Python based alternative to #Ansible that lets you write declarative, idempotent server automation in pure Python instead of YAML playbooks. It gives you built-in modules for packages, files, and services while letting you use native Python logic.

    learn more about it at
    github.com/pyinfra-dev/pyinfra

    #devops #infrastructure #automation

  24. @geerlingguy Nice! So you can now make something with you long time sleeping #ansible roles ?

    Please find some co-maintainers who will accept pull reqests because i'm still using it ...

  25. Haven't worked on my #ansible stuff for my servers in a while. Currently adding in support for Let's Encrypt wildcard subdomain certs with DNS challenge.

  26. Nach längerer Unterbrechung findet dieses Jahr wieder die #LDAPCon statt -- vom vom 6. bis 8. Oktober 2026 in #Tübingen.

    ldapcon.org/2026/

    Ich werde zu #LDAP und #Ansible vortragen. Übrigens läuft der Early Bird nur noch bis 31. August!

  27. Ansible Vault sicher und komfortabel nutzen: In unserem neuen Blogbeitrag zeigt Jens Meißner, wie sich Secrets mit GnuPG verschlüsselt speichern und über den GnuPG-Agent bequem verwenden lassen – ganz ohne unverschlüsselte Passwortdateien.

    ➡️ b1-systems.de/ansible-secrets-

    #Ansible #DevOps #Linux #GnuPG

  28. @nickbearded i think older cheap pc platform is probably better value once prices crash and they will eventually selling the sw but also the hw you know it runs really well on is a key uniter point and then you have the total package, repeat for pihole, open source pineapple, kismet, ssl/tls proxy, squid caching proxy, web server and lamp stack, etc dedicated monitoring and analytics is another, central logging is another #bashcore modules #extensions #plugins #sbom #reproducible builds #ansible playbooks

  29. AWX: большой рефакторинг и потеря корпоративных функций — что происходит с проектом

    Для многих технических специалистов AWX на протяжении многих лет был синонимом «бесплатного Ansible Tower» — надёжным и функциональным решением для управления Ansible-автоматизацией. Это был стандарт де-факто для тех, кто хотел получить удобство (практически) "коробочного" решения и функциональность корпоративного уровня, не вкладываясь в лицензии коммерческого решения. Однако 2 июля 2024 года вышел релиз AWX версии 24.6.1, который стал последним на данный момент выпуском проекта. С тех пор прошло более полутора лет, а новых релизов так и не появилось. В репозитории проекта на GitHub висит предупреждение: «Releases of this project are now paused during a large scale refactoring». Для сообщества, активно использующего или планирующего использовать AWX как основной инструмент централизованного управления Ansible-автоматизацией, эта ситуация вызывает закономерные вопросы: Что происходит с проектом? Есть ли у него будущее? Для конечного пользователя не совсем очевидно, но AWX не умирает, а кардинально трансформируется. В данной статье мы разберем текущую ситуацию вокруг AWX, опираясь на официальные анонсы, технические дискуссии разработчиков и статусы ключевых проектов. Проанализируем архитектурные изменения проекта. Разберемся, почему эти изменения были неизбежны, что именно было «вырезано» из проекта и что всё это значит для вас — инженеров ИТ инфраструктуры и архитекторов автоматизации, которые используют AWX в своей работе и проектах.

    habr.com/ru/companies/astralin

    #ansible #awx #eventdriven #it_automation #Infrastructure_as_a_Code_IaC #configuration_management #devops #astra_automation #network_automation

  30. Note to self: do not kill a postgres process running ALTER TABLE in a throwaway database thinking it was the application while running pg_upgrade. It was pg_upgrade, not the app.

    The "quick" rollback worked in terms of service (9 minutes of downtime) but it was an operational nightmare:

    - outdated internal documentation
    - very long Ansible loops
    - unexpected errors when starting Debezium connectors that were stopped (why "stop/resume" and not "stop/start"?)
    - pg_basebackup error: could not read COPY data: server closed the connection unexpectedly

    And you, how's your week so far?

    #postgresql #debezium #pg_upgrade #ansible

  31. Развитие Ansible: от фантастического устройства до зрелой экосистемы управления ИТ-инфраструктурой

    Ansible - один из самых популярных инструментов автоматизации, но многие до сих пор используют его, ограничиваясь лишь командой ansible-playbook. С 2012 года Ansible вырос из простого инструмента в мощную экосистему, решающую проблемы с зависимостями, тестированием и централизованным управлением. Если вы все еще боретесь с конфликтами версий Python на хосте или пишете Ansible-контент без тестов - эта статья для вас. Мы разберем современный инструментарий Ansible - от Execution Environments и Ansible Navigator до Event Driven Ansible и AWX. Вы узнаете, как эти компоненты превращают Ansible в полноценную платформу автоматизации, готовую справляться как с задачами небольших команд, так и с вызовами крупных компаний. А для начала немного истории, ведь название Ansible пришло к нам прямиком из научной фантастики...

    habr.com/ru/companies/astralin

    #ansible #awx #devops #execution_environment #IT_automation #Infrastructure_as_Code_IaC #configuration_management #astra_automation #eventdriven

  32. I’m doing a company training on #saltstack and am curious how others like to structure #configuration_management trainings? Regardless of whether it’s #ansible or #cfengine or #puppet #chef etc. I think there’s got to be some common paths people find easiest to follow.

    Do you start with examples of the syntax or with the architecture or do a quick start CLI demo first? How quickly do you dig into writing “hello world” and what directions do you like to explore? What are the hard and the easy parts for you and for the students?

  33. Another repost of this, as i've moved to my own personal instance running on GoToSocial.

    Hi, I’m Andy, a #devops techie from the UK with a particular obsession with over engineering my home network setup. I operate dimension.sh (a tilde/pubnix), I’m also a Disney parks fan, Texans fan, and when I get a spare moment I enjoy a bit of wood working and tinkering with old computers.

    #boardgames #nfl #texans #woodworker #devops #developer #disney #disneyparks #python #ansible #tildeverse #pubnix #retrocomputing #homelab #f1 #introduction

  34. Hey you! Wanna know a secret? We're upgrading to Patroni 3.x in the next release of Crunchy Postgres via Automation. I know right?! Get the skinny on our plans in my latest blog post: hunleyd.github.io/posts/coming

  35. Added 𝗨𝗣𝗗𝗔𝗧𝗘 𝟭 - 𝗟𝘂𝗮 𝗮𝗻𝗱 𝗚𝗲𝗻𝗲𝗿𝗮𝗹 𝗣𝘂𝗿𝗽𝗼𝘀𝗲 𝗟𝗮𝗻𝗴𝘂𝗮𝗴𝗲 𝗦𝗲𝗿𝘃𝗲𝗿𝘀 to the 𝗣𝗲𝗿𝗳𝗲𝗰𝘁 𝗡𝗲𝗼𝘃𝗶𝗺 𝗔𝗻𝘀𝗶𝗯𝗹𝗲 𝗦𝗲𝘁𝘂𝗽 article.

    vermaden.wordpress.com/2024/03

    #ansible #editor #freebsd #ide #linux #make #gmake #neovim #nvim #pkg #playbook #YAML

  36. Наделяем ansible состоянием, делая похожим на terraform

    (Читать с толикой сарказма…) Все, кто работал с ansible, знают, что он не хранит состояние результата своей работы. Это нелепое поведение ansible, нельзя взять и просто удалить из git объекты конфигурации, чтобы они исчезли с управляемых систем, фу. При этом сразу вспоминается его величество terraform с tfstate. Всех, кого раздражает подобное положение дел, прошу в подкат.

    habr.com/ru/companies/rtlabs/a

    #ansible #ansible_roles #ansible_playbook #администрирование #администрирование_linuxсистем #itинфраструктура #configuration_management #configuration_management_(cm)

  37. 🚀 Greetings Fosstodonverse! 🚀

    Embark on a virtual expedition with me as I navigate the realms of virtualization, wield the magic of automation with Ansible, and craft Python spells for technological enchantments. 🧭

    Let's explore the vast landscapes of technology and open source together! Feel free to connect, share your insights, or join the conversation. 🗣️

  38. #NeuHier Noch ausständig ist meine

    Ich bin schon viele Jahre an Opensource-Software interessiert, aber erst zum Jahreswechsel auf das Fediverse (nach einem kurzen Exkurs zu Friendica vor ein paar Jahren) wirklich aufmerksam geworden.

    Für mich ist das Web 3.0 mit den bekannten und beliebten Services der Social Media-Welt, aber auf selbstgehosteter, verteilter Basis die Zukunft. Das ist die Chance von den Datenkraken loszukommen und das Web 1.0 mit deutlich verbesserter Technik weiterzuführen.

    Neben #Linux #FOSS und #Fediverse interessiert mich noch so einiges. Ich bin leidenschaftlicher #Bahnfahrer. Ich liebe die #Eisenbahn und hab mir nach langer Abstinenz diese auch als #Modellbahn wieder heimgeholt. Dabei möchte ich mich auch in #Ultrarealistic meine kleine “heile” Welt bauen.

    Auch bin ich sehr an #Selbstversorgung, eigenes #Gemüse, #Biolandbau, #Radfahren, #ÖffentlicherVerkehr #Stadtgestaltung #Bürgerbeteiligung #Dorferneuerung #Städtebau #Natur und #Umweltschutz #Klimaschutz und #Verteilungsgerechtigkeit und #Obdachlosenhilfe interessiert.

    Außerdem interessiert mich das Thema #Ernährung, #Fitness und der Erhalt der #Gesundheit im Sinne einer #Selbstverantwortung für meinen eigenen Körper sehr. Dazu gehört auch die #psychischeGesundheit und

    Und da mich sonst auch noch so einiges interessiert, und ich wohl noch 3 weitere Leben bräuchte - mindestens - um all das zu lernen, was ich gerne lernen würde… frag mich einfach.

    Ich betreibe eine eigene Matrix-Instanz und einen XMPP-Server. Außerdem nenne ich eine Peertube Instanz und eine Funkwhale Instanz und eine Mobilizon Instanz. Von Pixelfed bin ich noch nicht ganz so überzeugt. Dafür sammle ich meine Gedanken in einem eigenen Lemmy und einem Blog mit Writefreely

    Da ich momentan zeitlich sehr eingespannt bin, freue ich mich, meinen Beitrag zum #Klimaschutz leisten zu können, indem ich den Systemadmin für die Eventorganisation von climatejustice.global machen darf.

    Beruflich entwickle ich aktuell Plugins für #Jira und #Confluence, beschäftige mich mit der Absicherung von #SSH mittels #HardwareToken, #git, #ansible und #Linux

    Freue mich auf nette Kontakte und spannende Diskussionen.