I can spin up new VMs on the server in my living room and install software on it. But it's more complex than just installing the software on a baremetal server. Fortunately for me, cloud technologies such as opentofu, cloud-init, and ansible can let me spin up and configure local VMs in seconds.| ergaster.org
どうも自分は監視についての知識や技術が乏しい、ということに気付いた。 そもそも何かを監視するという習慣を持っていないのがまず良くないと反省し、まずは自宅の環境を監視する練習から始めてみることにした。 監視とは役割ではなくスキルであり、チーム内の全員がある程度のレベルに至っておくべきです。 入門 監視 ―モダンなモニタリングのためのデザイ...| すぎゃーんメモ
Over the last few months, I’ve been asked quite a few times how I test my Ansible modules and ProxLB... The post Proxmox Cloud Image & Bare-Metal Auto Installation Image first appeared on gyptazy - The DevOps Geek.| gyptazy – The DevOps Geek
Managing Proxmox subscription licenses at scale has always been a bit of a challenge. Especially in enterprise environments, where automation... The post Introducing License Management for Proxmox Nodes with the New Ansible Module proxmox_node first appeared on gyptazy - The DevOps Geek.| gyptazy – The DevOps Geek
With years, I accumulated devices on my local network, which in general run on Linux. I meticulously added them to my /etc/hosts/ file, so as not to remember their IP. Something puzzled me, though: my Synology NAS was readily available as nas.local on the network, without doing anything. I have close to zero skills in system administration, so here are my findings. The .local domain We can learn more about .local domain from Wikipedia. The domain name .local is a special-use domain name r| A Java geek
We are happy to announce the next major 6.0.0 release of the VyOS Ansible Collection. It is now available from Ansible Galaxy and is also a certified collection for the Red Hat Ansible Automation Platform. If you are an active Ansible user, you surely noticed that the Ansible collection for VyOS lost its momentum at some point and remained stagnant for quite some time. Earlier this year, we had the repositories transferred to our organization on GitHub, took over the development, and formed...| VyOS - Blog
Ende Jahr hatten wir unser erstes Event: Meet ora2know in Köln. Und wir waren positiv überrascht: Knapp 40 Teilnehmer sorgten für ein volles Haus und viele Diskussionen rund um die […] The post Rückblick: meet ora2know in Köln am 29.01.2025 first appeared on The German Oracle User Group.| The German Oracle User Group
Unser erstes Event ist für Ende Januar 2025 in Köln geplant. Mittwoch, 29. Januar 2025, 17 – 19 Uhrbei der ORDIX AG, Geschäftsstelle Köln, Edmund-Rumpler-Straße 7 (Gebäude „Grüner Punkt“), 51149 […] The post Meet ora2know Köln am 29. Januar 2025 first appeared on The German Oracle User Group.| The German Oracle User Group
Expose your Tailscale hosts as Ansible facts. Make peer node IPs and tags available in your playbooks| Ideas.Offby1
Install Ansible on your system, create an inventory file, define the automation purpose, and write an Ansible playbook to complete the Automated Server setup.|
Install/configure Ansible on the Control Node, then install/configure SSH on remote hosts. Lastly, add host IPs in the hosts file and create playbooks to automate Linux.|
Until now, automating Proxmox cluster setups with Ansible often meant relying on hacky shell or command module usages within playbooks/roles and dealing with poor error handling. That changes with my new Ansible modules, proxmox_cluster and proxmox_cluster_join and if you're following me, you might have already found this as a sneak peek in my post about| gyptazy - The DevOps Geek • DevOps, coding, cloud and open source in a geek...
We’ve always believed in building infrastructure like we write software: version-controlled, repeatable, and disposable when needed. For two years, we had credits on AWS, and during that time, we manually spun up servers and ran a self-hosted stack manually: Nomad + Consul + Vault for orchestration and secrets NGINX for| Hexmos Journal
When I first started BoxyBSD, I had a fairly straightforward goal in mind: Build a completely free VPS hosting platform with full IPv6 support aimed at beginners and small open-source projects. Something simple, lightweight, and accessible. But as the project evolved, I realized it was becoming much more than just a small personal project and| gyptazy - The DevOps Geek • DevOps, coding, cloud and open source in a geek...
A short video demonstrating the automation of multiple Oracle Databases refreshes using Workato, Slack, Ansible and Pure Storage snapshots.| Ron Ekins' - Oracle Technology, DevOps and Kubernetes Blog
In the beginning the Sysadmin created the Infrastructure and the Network.And the Infrastructure was without form, and void; and darkness was upon the face of the deep.| Kalvad
Our Ansible playbook, released as an Open Source project, helps you deploy and configure bare-metal servers in the Hetzner data centre. See how it works, and leverage it for your needs!| blog.palark.com
Post on how to make use of Prometheus to trigger changes when a certain event is detected.| Personal blog of Anurag Bhatia
Discover why monitoring is crucial, explore VictoriaMetrics & deployment steps, and seamlessly migrate from Prometheus. Perfect for all monitoring workloads.| developer-friendly.blog
Learn how to grant an Azure Virtual Machine access to AWS services without passing hard-coded credetials, with the power of OpenID Connect.| developer-friendly.blog
Learn how to use OpenID Connect to establish a trust relationship between AWS & a Kubernetes cluster to grant pods access to AWS services.| developer-friendly.blog
Version 2.17 of Ansible was released on the 20th of May 2024. This version deprecated support for Python 3.61, which is the default version of Python that ships with RHEL 8. If you upgrade to Ansible 2.17 on your machine and try to execute a playbook on a RHEL 8 target, you'll see the following e| Ian's notes
If you are getting the following error when invoking an Ansible playbook or any of the Ansible related utilities: ERROR! Invalid callback for stdout specified: yaml This means Ansible is attempting to use the new YAML callback plugin, but cannot find the Ansible Galaxy community.general module. This module is installed by the ‘ansible’ pip module, ... Ansible: resolving error “Invalid callback for stdout specified: yaml”| Fabian Lee : Software Engineer
If you have a previous investment in Ansible Configuration Management for command line automation, you may now want to invoke that same logic from a GitLab CI/CD pipeline. The cleanest way to provide Ansible to a pipeline job is to create a custom Docker image that contains all the Ansible binaries and required Galaxy modules. ... GitLab: invoking Ansible from a GitLab pipeline job| Fabian Lee : Software Engineer
If you are getting the following error when invoking ‘ansible’, ‘ansible-playbook’, ‘ansible-galaxy’ or any of the Ansible related utilities: ERROR: Ansible could not initialize the preferred locale: unsupported locale setting This means Ansible cannot find a locale ending in “.UTF-8”. Check the currently installed locales: $ locale -a Then export the LC_ALL variable to one ... Ansible: resolving ‘could not initialize the preferred locale: unsupported locale setting’| Fabian Lee : Software Engineer
The centralized system keyring for apt was deprecated starting in Ubuntu 21, and is being replaced with an explicit path to the local gpg key in the ‘signed-by’ attribute. I have written more extensive articles on this subject [here,here], but from an Ansible perspective, this means ensuring the gpg key is downloaded to ‘/usr/share/keyrings’ with ... Ansible: adding custom apt repository with ‘signed-by’ gpg key| fabianlee.org
If you have a simple directory containing multiple template files that should be generated on a target host, the ‘with_fileglob‘ lookup plugin provides an easy way to render them. Below is an example rendering all the files from the ‘templates’ directory of a role. - name: create file out of every file in template directory ... Ansible: generating templates with deep directory structure using with_filetree| fabianlee.org
How to do proper release tracking on Opbeat with Ansible.| blog.dbrgn.ch
You can set the suid/sgid bit using the regular octal numeric chmod syntax.| blog.dbrgn.ch
More specifically, Ansible is homoiconic and has syntactic macros| astrid dot tech
Anyone mildly familiar with Ansible will attest, maintaining idempotency is a key secret-sauce to stable automation. Without idempotency, it’s all but impossible to detect drift and/or …| blog.podman.io
To start out, here are the tools and blogs that helped inspire this idea, or are similar in execution:| anubissec.github.io
It has been a long time for any type of blog or content, but I’m happy to writing again.| anubissec.github.io
This post discusses somewhat lesser known type of Ansible loop: "until" loop, which is used for retrying task until certain condition is met.| TTL255 - Przemek Rogala's blog
In this post we focus on Jinja2 filters. We learn what filters are and how to use them. Then you will see how to write custom filters. We finish with usage examples for selected filters.| TTL255 - Przemek Rogala's blog
Ansible is a great tool for configuration management but because of the way it’s designed a common complaint is that it’s not as fast as other tools like Salt, Chef or Puppet. This is because Ansible doesn’t have an agent that listens (although it can) on a host and uses a different type of deployment methodology that is based on SSH. This post isn’t about the pros and cons of each tool, but rather about ways to improve upon Ansible’s default configuration values. By default Ansible...| Chris Bergerons Tech Blog
I wrote a very simple little playbook for updating my local DNS records for my piholes. For me it’s easier than manually sshing onto each node and editing a file and restarting the service. Here’s the playbook:| Chris Bergerons Tech Blog
I’m limited to about 80MB/s on downloads on my VPC at Digital Ocean, but I run Nzbget for downloading large files from usenet. It doesn’t take long to download at all, but out of curiosity I wanted to see if I could parallelize this and download multiple files at the same. I use Sonarr for searching usenet for freely distributable training videos which then sends them to NZBget for downloading. Since Sonarr can send multiple files to nzbget which get queued up, I figured I can reduce the ...| Chris Bergerons Tech Blog
I’m limited to about 40MB/s on downloads on my VPC at Digital Ocean, but I run Sabnzbd for downloading large files from usenet. It doesn’t take long to download at all, but out of curiosity I wanted to see if I could parallelize this and download multiple files at the same. I use Sonarr for searching usenet for freely distributable training videos which then sends them to SABnzbd for downloading. Since Sonarr can send multiple files to sabnzbd which get queued up, I figured I can reduce t...| Chris Bergerons Tech Blog
Knock Knock is a Sherlock from HackTheBox that provides a PCAP for a ransomware incident. I’ll find where the attacker uses a password spray to compromise a publicly facing FTP server. In there, the attacker finds a configuration file for a port-knocking setup, and uses that to get access to an internal FTP server. On that server, they find lots of documents, including a reference to secrets on the company GitHub page. In that repo, the attacker found SSH creds, and used an SSH session to d...| 0xdf hacks stuff
Third post in the Jinja2 tutorial series deals with whitespace control. We learn where whitespaces come from and how to control them.| TTL255 - Przemek Rogala's blog
In allen Bereichen des Lebens gibt es viele Probleme, die uns nicht bewusst sind. Um diese Probleme zu messen, verwenden wir die sogenannte Erfüllungsrate (Fulfillment Rate). Beispiele: Bei einer Erfüllungsrate von 90% würde ein Herzschlag alle 85 Sekunden aussetzen und auf einer durchschnittlichen A4-Seite Text wären 30 Tippfehler. Eine Erfüllungsrate von 99,9% (was sehr viel erscheint) bedeutet immer noch 22.000 falsche Bankbuchungen pro Stunde und insgesamt 32.000 verpasste Herzschlä...| ATIX AG
This weekend has seen a variety of systems being issued either of, or combination of, the following commands; yum -y update yum –enablerepo=kolab-16-updates-testing -y update puppet agent -t …| kanarip
Whenever someone asks me what tools do you use to provision your infrastructure within AWS - the answer is it can be done with a variety of tools - but people usually use one of the following three CloudFormation Terraform Ansible The next question that comes up of course - is which one is easier/better to use? The answer of course (as always..) is - “It Depends”. There are really good reasons to use each and everyone of the tools.| Technodrone
The feedback I received from the first comparison was great – thank you all. Obviously the example I used was not really something that you would use in the real world – because no-one actually creates a only a VPC – and does not create anything inside it, that is pretty futile. So let’s go to the next example. The scenario is to create a VPC, with a public presences and a private presence.| Technodrone