forked from andreasscherbaum/ansible-lxc-ssh
-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
11 additions
and
74 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,93 +1,30 @@ | ||
| # ansible-lxc-ssh | ||
| Ansible connection plugin using ssh + lxc-attach | ||
| # ansible-pct-ssh | ||
|
|
||
|  | ||
|  | ||
|
|
||
| [](https://github.com/andreasscherbaum/ansible-lxc-ssh/issues) | ||
| [](https://github.com/andreasscherbaum/ansible-lxc-ssh) | ||
| [](https://github.com/andreasscherbaum/ansible-lxc-ssh) | ||
| Ansible connection plugin using ssh + pct | ||
|
|
||
| ## Description | ||
|
|
||
| This plugin allows to use Ansible on a remote server hosting LXC containers, | ||
| without having to install SSH servers in each LXC container. | ||
|
|
||
| The plugin connects to the host using SSH, then uses `lxc` or `lxc-attach` to enter the | ||
| container. | ||
|
|
||
| For LXC version 1 this means the SSH connection must login as `root`, otherwise | ||
| `lxc-attach` will fail. | ||
|
|
||
| For LXC version 2 this means that the user must either login as `root` or must be | ||
| in the `lxc` group in order to execute the `lxc` command. | ||
| This plugin allows using Ansible to manage Proxmox containers without having to install | ||
| SSH servers in each CT. | ||
|
|
||
| The plugin connects to the host using SSH, then uses `pct` to enter the container. | ||
|
|
||
| ## Configuration | ||
|
|
||
| Add to `ansible.cfg`: | ||
| ``` | ||
| [defaults] | ||
| connection_plugins = /path/to/connection_plugins/lxc_ssh | ||
| connection_plugins = /path/to/connection_plugins/pct_ssh | ||
| ``` | ||
|
|
||
| Then, modify your `hosts` file to use the `lxc_ssh` transport: | ||
| Then, modify your `hosts` file to use the `pct_ssh` transport: | ||
| ``` | ||
| container ansible_host=server ansible_connection=lxc_ssh lxc_host=container | ||
| container ansible_host=proxmox_server ansible_connection=pct_ssh lxc_host=container_id | ||
| ``` | ||
|
|
||
| `lxc_container=container` also works for setting the LXC container name. | ||
| `lxc_container=container` also works for setting the container name. | ||
|
|
||
| ## Fork | ||
|
|
||
| This is a fork from the original plugin: | ||
|
|
||
| [ansible-lxc-ssh by Pierre Chifflier](https://github.com/chifflier/ansible-lxc-ssh) | ||
|
|
||
| This fork incorporates a few PRs from the original version, which (April 2017) were never | ||
| applied. It also works with LXC version 1 (using `lxc-*`) and LXC version 2 (just using | ||
| a single `lxc` binary). The version is autodetected on runtime. | ||
|
|
||
|
|
||
| ## How to create a container | ||
|
|
||
| The following is an extract from a Playbook which creates a container. First the hosts.cfg: | ||
|
|
||
| ``` | ||
| [containers] | ||
| web ansible_host=physical.host lxc_host=web | ||
| ``` | ||
|
|
||
| The Playbook: | ||
|
|
||
| ``` | ||
| # deploy the container | ||
| - hosts: containers | ||
| become: yes | ||
| # the container is not up, nothing to gather here | ||
| gather_facts: False | ||
| # files on the host system are changed, | ||
| # creating multiple containers in parallel might cause a race condition | ||
| serial: 1 | ||
| tasks: | ||
| - name: Create LXD Container | ||
| become: True | ||
| lxd_container: | ||
| name: "{{ inventory_name }}" | ||
| state: started | ||
| source: | ||
| type: image | ||
| mode: pull | ||
| server: https://cloud-images.ubuntu.com/releases | ||
| protocol: simplestreams | ||
| alias: 16.10/amd64 | ||
| profiles: ['default'] | ||
| wait_for_ipv4_addresses: true | ||
| timeout: 600 | ||
| register: container_setup | ||
| delegate_to: "{{ ansible_host }}" | ||
| #delegate_facts: True | ||
| ``` | ||
|
|
||
| The actual container creation is redirected to the `ansible_host`, also fact gathering is turned off because the container is not yet live. It might be a good idea to create the containers one by one, hence the serialization. In my case I also setup ssh access and hostname resolution during the container setup - this does not work well when run in parallel for multiple containers. | ||
| This is a fork from the [ansible-lxc-ssh](https://github.com/andreasscherbaum/ansible-lxc-ssh) | ||
| by Andreas Scherbaum. |