In this lab we are going to use roles from galaxy and from other sources.

Task 1

• Search the ansible-galaxy for a nginx role
• Install such a nginx role using ansible-galaxy
• Create a tar.gz file nginx.tar.gz with the content of the role using an Ansible ad hoc command

Task 2

• Remove the nginx role using ansible-galaxy
• Create a file requirements.yml in the folder /home/ansible/techlab/roles/. The file should contain the information to install the role packed in nginx.tar.gz as mynginx
• Install the role by using an appropriate ansible-galaxy command and the requirements.yml file.
• Remove the role mynginx using ansible-galaxy
• Remove the file nginx.tar.gz and roles/requirements.yml by using an ad hoc command for each

Task 3 (CentOS/RHEL only)

• Search your yum-repository for packages containing the string roles
• Install the package providing Ansible roles for system mangement
• See what files where installed with this package

Task 4 (CentOS/RHEL only)

• Search the installed files for an example to use the rhel-system-roles.selinux role
• use the example to create a playbook selinux.yml to set selinux mode to disabled on all servers
• run the playbook

Solutions

Solution 1

$ ansible-galaxy search nginx
$ ansible-galaxy install geerlingguy.nginx
$ ansible controller -m archive -a "path=/home/ansible/techlab/roles/geerlingguy.nginx dest=/home/ansible/techlab/nginx.tar.gz format=bz2"

Solution 2

$ ansible-galaxy remove geerlingguy.nginx

$ cat roles/requirements.yml
---
- src: nginx.tar.gz
  name: mynginx

$ ansible-galaxy install -r roles/requirements.yml
---
- src: nginx.tar.gz
  name: mynginx

$ ansible-galaxy remove mynginx
$ ansible localhost -m file -a "dest=/home/ansible/techlab/nginx.tar.gz state=absent"
$ ansible localhost -m file -a "dest=/home/ansible/techlab/roles/requirements.yml state=absent"

Solution 3

$ yum search roles
$ yum install rhel-system-roles
$ repoquery -l rhel-system-roles #<-- repoquery is provided by the package `yum-utils`

Solution 4

$ repoquery -l rhel-system-roles | grep -i exa | grep selinux
$ cp /usr/share/doc/rhel-system-roles-1.0/selinux/example-selinux-playbook.yml selinux.yml
[ansible@control0 techlab]$ cat selinux.yml
---
- hosts: all
  become: true
  vars:
    selinux_policy: targeted
    #selinux_state: enforcing
    selinux_state: disabled
    selinux_booleans:
    #<-- more stuff here

$ ansible-playbook selinux.yml