Ansible Role - Install XO from source - Now available
-
I've mentioned it on the forums once or twice. And after @wezke explicitly asked for it. I decided to take the time to finally go ahead and publish an Ansible-role for installing XO from source.
Benefits from using any of the many installation-scripts:
Scripts are often quite big. Making them hard to validate and scrutinize for security reasons.
Ansible (imho) is easier to read and see what it does.
If you are orchestrating your environment through Ansible already, this should drop in semi-nicely
This follows the official steps from the Xen-Orchestra docs, except for ONE main thing. This does not run the xo-server as root. In the hopes that it should raise security just a tiny bit more.
Note and Disclaimer!
Do your own validation of the source. Do NOT take my word for how this works. And use it at your own risk.
Now, with all disclaimers out of the way. Feel free to use as you'd like. I hope the community takes kindly to this.https://github.com/cloudrootab/ansible_role_xoce
PS: This is ported from my private role. But should work. See the disclaimer above!
PPS: This is a re-post from a now deleted forum-post, where I mistakenly placed the topic in XCP-NG/Installation. -
Thank you for sharing your ansible role, ill have a look at it
-
@wezke said in Ansible Role - Install XO from source - Now available:
Thank you for sharing your ansible role, ill have a look at it
It's far, far from perfect. So there might be a few rough edges that I solved manually. But I welcome feedback.
-
@probain
No worries, im still learning/improving my ansible/terraform skills aswell -
@probain Your role seems to neither install or pin node js itself so it does not fully follow the official steps from Xen Orchestra docs.
Xen Orchestra docs state to use LTS node js - installing it is something that the the ronivay XO script does.
Due to this part missing in your role it can not be executed on a freshly provisioned VM, something that is not really best practice. A role that was made for the purpose of deploying a software should also install / manage it's dependencies.Other than that, thanks for sharing your role.
Every contribution towards this community is great IMO. -
Thanks for your feedback. I'll look into it over the christmas hollidays