I’ve been on an Ansible kick recently at work (domo). While working on a project, I started creating a simple workstation setup playbook. I got to thinking that someone must have done this already. I remembered boxen by github.
What follows is my journey to the creation of a tool called battleschool.
A few things that aren’t necessarily bad about boxen, but rub me the wrong way: 1) Puppet, 2) installation.
Every time I have tried a puppet tutorial (or chef, more on that later), I’ve never found them simple or easy to follow. When I found ansible, its first goal is to be simple, simple to install, configure, execute (it’s only requirement on the machine it’s going to provision is ssh and python). Ansible’s syntax is yaml, as simple a markup language as I’ve seen. You can write modules in any language you want, but library of modules is written in python.
The installation of boxen seems awkward to me. I was looking for a simple install and then point to a company setup, rather than customize a boxen fork.
I searched for an alternative to boxen and came upon kitchenplan. It’s similar to boxen, but based on chef. I have had similar issues with chef as I’ve had with puppet. Kitchenplan still involves forking, but is a little more sane.
So, I did what a good developer does and created my own: battleschool. It uses the ansible API to setup, configure and run ansible playbooks. It’s still got some rough edges, so bear with me. I use it regularly. In fact, since I started writing this post, I had to wipe my machine because of some bad partitions I created. When I tried to install OS X Mavericks, I ended up having to delete the partitions and start over. I was back up and running in 2 hours and most of that time was downloading packages to install.
In short, battleschool downloads and executes ansible playbooks against your local machine in a manner that is simple to configure and repeatable in cases of disaster (bad) or new machines (good).
Simple Install
I wanted a no forking install for battleschool.
#if needed
$ sudo easy_install pip
$ sudo pip install battleschool
That’s it. Battleschool depends on ansible, so that will be installed via pip as well. I haven’t done any work to deal with alternative installs of ansible via homebrew, macports or apt (yes, this will work on linux/bsd as well).
Private Playbook Repos
Battleschool uses the git and get_url ansible modules to download remote playbooks. That means you can use private, self-hosted git repositories, private or public github or bitbucket repositories, or dropbox to host your playbooks! Extreme flexibility without forking battleschool. Other version control systems (VCS) such as svn or mercurial should be simple to add because of ansible’s support for them.
Built On Ansible
I use ansible’s python api, so most of ansible-playbooks options are available to battleschool. All of ansible’s modules are available. I have been using ansible 1.3 to develop and plan on upgrading to 1.4 shortly. Ansible, IMHO, is the most straightforward provisioner I have tried. It’s written in python, which I have enjoyed.
TL;DR
Some of this comes from the README.md
About the Name
I learned about the term ansible from Ender’s Game. Taking a cue from Kitchenplan, I wanted to name my project with something from the enderverse. I settled on battleschool as the project name and battle as the command.
Running battleschool
battle --ask-sudo-pass #if you have setup nopasswd in sudo then omit --ask-sudo-pass
I alias battle
to battle --ask-sudo-pass
. This will fail with a
file not found: /Users/username/.battleschool/config.yml
(A better error would be nice :-). You need to create a
config file first. I plan on creating a default one if battleschool doesn’t find one. If you are following along:
mkdir ~/.battleschool
cd .battleschool
curl -L https://db.tt/aG2uyydU > config.yml #this downloads my config as a starting point
config.yml
---
sources:
local:
#- playbook.yml
url:
#- name: playbook.yml
# url: https://db.tt/VcyI9dvr
git:
- name: 'osx'
repo: 'https://github.com/spencergibb/ansible-osx'
playbooks:
#- adium.yml
explanation of ~/.battleschool/config.yml
local sources
sources:
local:
- playbook.yml
Any ansible playbooks located in ~/.battleschool/playbooks can be listed under local. Each playbook will be executed in order. This can useful for custom configuration per workstation. (You could install apps with homebrew or macports if those are installed, for example). After adding url sources (see below), this should probably be used sparingly.
url sources
url: - name: playbook.yml url: https://db.tt/VcyI9dvr
Playbooks located at a url. Each playbook will be executed in order. Helpful for bootstrapping (ie, the first time you run battleschool). For example, if you are restoring a machine, you might run:
battle --config-file=https://db.tt/aG2uyydU
or more realistically
sudo pip install battleschool && battle --ask-sudo-pass --config-file=https://db.tt/aG2uyydU
As long as there are no local sources, everything will be downloaded and run.
NOTE: playbooks under the local
or url
sections, cannot reference anything outside of their own contents (e.g.
files, templates, roles, etc…). See git sources below for more advanced playbooks.
git sources
git:
- name: 'osx'
repo: 'https://github.com/spencergibb/ansible-osx'
playbooks:
- adium.yml
Any git repo that hosts ansible playbooks (specific to battleschool or not) will work here. Each item under playsbooks is the relative location to a playbook in the specified git repository. In the example above, adium.yml is in the root of the ansible-osx repository.
git repo sources
Directory Layout
The top level of the directory would contain files and directories like so:
local.yml # optional master playbook, automatically run, no need to list under playbooks
dev.yml # example playbook for dev
ux.yml # example playbook for ux
chrome.yml # example playbook for the chrome browser
dir/myapp.yml # example playbook, supports nesting one level deep
roles/ # optional standard ansible role hierarchy
library/ # optional remote module definitions
See the roles docs for information about ansible roles and their
directory layout. The library
directory is the location for placing
custom ansible modules.
the mac_pkg module
This is the meat of battleschool. How do you install mac apps?
If you look most of the playbooks in this git repo you will see the use of the mac_pkg module. Mac apps are usually a pkg (or mpgk) installer, or the bare .app directory. They can be archived in a number of formats: DMG or zip commonly. Pkg files may not be archived at all. Less common formats (tar or 7zip) are not supported yet.
Lets look at adium.yml
---
- hosts: workstation
tasks:
- name: install Adium
mac_pkg: pkg_type=app
url=http://sourceforge.net/projects/adium/files/Adium_1.5.7.dmg/download
archive_type=dmg archive_path=Adium.app
sudo: yes
- hosts: workstation
this is required in each playbook as it targets the local workstation. Though this is generally
arbitrary for most ansible users, it must be workstation
in battleschool.
pkg_type=app
type must be pkg, app or script. Defaults to pkg.
This is an example of a script
pkg_type.
url=....
the url of the app to download, alternatively a local src path, such as src=/local/path/to/app.dmg
, may be
used instead.
archive_type=dmg
one of dmg, zip or none. Defaults to none.
archive_path=Adium.app
The path to the app or pkg in the archive.
sudo: yes
required for mac_pkg tasks (this will prompt you to enter you sudo password only once)
From java7.yml
---
- hosts: workstation
tasks:
- name: install java 7 update 25
mac_pkg: pkg_name=com.oracle.jdk7u25 pkg_version=1.1
url=https://edelivery.oracle.com/otn-pub/java/jdk/7u25-b15/jdk-7u25-macosx-x64.dmg
curl_opts='--cookie gpw_e24=http%3A%2F%2Fwww.oracle.com'
archive_type=dmg archive_path='JDK 7 Update 25.pkg'
sudo: yes
pkg_name=com.oracle.jdk7u25
the name of the pkg found by pkgutil --packages
pkg_version=1.1
the version of the package as reported by pkgutil --pkg-info com.oracle.jdk7u25
curl_opts=...
cookie needed to download java from oracle, supports all curl options
NOTE: battleschool, currently does not install apps from the Apple App Store.
Homebrew
So, you like homebrew and want to use it to install apps on you mac. No problem. Battleschool can install homebrew for you (see this playbook). Already have homebrew installed? No, problem, it won’t try and install it again.
Where to start?
Probably the easiest way to start is by looking at my configuration:
Config file: https://db.tt/aG2uyydU
My url playbook: https://db.tt/VcyI9dvr
My playbook git repo: https://github.com/spencergibb/ansible-osx
How to contact me or the community?
Google group: https://groups.google.com/d/forum/battle-school
Github project for issues, forks, pull requests: https://github.com/spencergibb/battleschool