TIL of a deliberate source of Heisenbugs in the default sshd config:
MaxStartups 5:50:10
This means: Allow up to 5 simultaneous "starting" SSH connections. Between 5 and 10 starting connections, drop them randomly 50% of the time. Above 10: Do not allow any new SSH connections to start.
Took me a long time to diagnose why a particular combination of concurrent SSH processes would fail occasionally when connecting to this embedded machine.
https://www.simplified.guide/ssh/limit-simultaneous-connections
The ProLUG Big Book of Labs by Scott Champine is free with a Leanpub Reader membership! Or you can buy it for $20.00! http://leanpub.com/theprolugbigbookoflabs #SystemsEngineering #Ansible
Fun question for the #NixOS #Ansible bubble:
I noticed that Ansible on NixOS does not find python modules that have been installed from NixPkgs. This means, modules like the kubernetes module are not found and Ansible cannot do its work, when a task is executed on localhost (e.g. via delegate_to)
Is there a way to install those additional modules together with the Ansible package?
Or is this just some messup with autodetecting the python interpreter on localhost?
Lambda is hiring Post Sales Machine Learning Engineer
#ansible #docker #machinelearning
San Francisco, California
Full-time
Lambda
Job details https://jobsfordevelopers.com/jobs/post-sales-machine-learning-engineer-at-lambdalabs-com-oct-22-2024-15c2d2?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
In today's exercise in bravery/silliness, I'm going to complete reconfigure the gateway via #ansible.
Lately, I've just been running single updates:
ansible-playbook gateway.yml --tags=pf
Today, the tags are coming off. All the updates.
ansible-playbook gateway.yml
The @tailscale folks have some excellent YT videos on setting up self-hosted servers on Digital Ocean using Terraform, Ansible, and of course, Tailscale. I just got my first Droplet running.
Part 1 - Getting started with cloud-init: https://youtu.be/e-X5FJwrkaA?si=t3iLP-k9B4SmDAMp
Part 2 - Terraform: https://youtu.be/PEoMmZOj6Cg?si=2IwHCw4HuIa71YFZ
Part 3 - Ansible: https://youtu.be/k5Xgt31yK2U?si=28MPbwmiIOB-18nv
Dear #AWX users out there (AWX as in Ansible, not AWS as in Amazon...),
does anyone have good pointers on connecting AWX and #Hashicorp #Vault / #OpenBoa **without** having to define each secret/credential again in AWX?
I have set up a basic connection according to the documentation: https://ansible.readthedocs.io/projects/awx/en/24.6.1/userguide/credential_plugins.html#ug-credentials-hashivault
And I have created a credential using that lookup and could successfully output its value in a playbook run in AWX.
But having to define a AWX credential for each secret that I need to pull from Vault/OpenBoa sounds like a lot of unnecessary duplication.
(Yes, I know you can manage AWX via Ansible. We do that already. But still, you need to define the credentials in your code somewhere for the automation to create it in AWX)
The latest edition of the #Ansible Bullhorn is out - with updates on collections, core, and Ansible, as well as a reminder about #AnsibleFest happing in Boston in May.
https://forum.ansible.com/t/the-bullhorn-179/41401
AAP 2.5 using config-as-cod/cac how to structure multiple org project/How to to run
https://www.redhat.com/en/blog/ansible-automation-controller-cac-gitops
Discussions: https://discu.eu/q/https://www.redhat.com/en/blog/ansible-automation-controller-cac-gitops
I'm new to #k8s and am wondering how to handle templating large amounts of config files. I couldn't find anything super useful in my search so I have an #Ansible sidecar I run to generate the kustomizations and config files. My most recent Ansible change was 30 lines, it resulted in changing 5,000 lines of YAML which will further be fed to Kustomize.
There has to be a better way?
I've heard about Helm, Yoke, KRO, and using an operator pattern. My understanding of those options is:
* Helm - My Org recommends avoiding (I don't know why)
* KRO - Not stable, but FFS neither is Kustomize
* Yoke - Almost kinda operator pattern
* Operator Pattern - This feels like reinventing a fucking config manager (ala #Ansible, #Puppet, #Chef, #Saltstack) for every fucking project. What new hell this is.
I'm hoping I'm missing something because the only workable flow for this workload is:
1) Create ansible roles/playbook to generate the kustomization.yaml and resources
2) Generate those kustomizations, check them into git
3) Use Kustomize via GitOps to expand the YAML even more
4) Push a metric fuckton of YAML to production
I'm losing my mind over here.
Red Hat has been named to Fast Company’s annual list of the World’s Most Innovative Companies of 2025! Red Hat is ranked #15 in the enterprise category.
https://www.fastcompany.com/91269402/enterprise-most-innovative-companies-2025
MongoDB is hiring Lead, Site Reliability Engineering, Infrastructure Security
#golang #ansible #aws #azure #gcp #mongodb #terraform #securityengineer #techlead
Madrid, Spain
Full-time
MongoDB
Job details https://jobsfordevelopers.com/jobs/lead-site-reliability-engineering-infrastructure-security-at-mongodb-com-dec-20-2024-f49173?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Honestly, in what UNIVERSE can you remember something you don't do on a regular basis good enough to do it without having to read documentation and copy-paste stuff?
Sounds like a perfect opportunity to put that in a small #ansible role and call it with a tag or "when" clause as part of a playbook or whatever automation you have in place.
It's always a pleasure working with ansible. YML syntax is just...fun? Yeah, it's fun
Creating a Github Deploy Key Using Web Services?
#ansible #github #curl #webservices #python3 #bash #linux #discourse
https://forum.ansible.com/t/creating-a-github-deploy-key-using-web-services/41242/3?u=helpdeskaleer
Pythonの開発用適当ツールの作成・実行はuvを使うのがオススメ
https://qiita.com/ssc-ksaitou/items/9da75058489ebe8c2009?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items
Creating a Github Deploy Key Using Web Services?
#ansible #github #curl #webservices #python3 #bash #linux #discourse
https://forum.ansible.com/t/creating-a-github-deploy-key-using-web-services/41242
Ansible vs Terraform: Which is More Secure for Infrastructure Automation? – Source:hackread.com https://ciso2ciso.com/ansible-vs-terraform-which-is-more-secure-for-infrastructure-automation-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #Misconfiguration #cybersecurity #Automation #Terraform #Hackread #security #Ansible #DevOps
I don't know who needs to hear this, but...
I have lost count of the number of people who go something along the lines of: "I have been meaning to try ara for a long time but our teams have been so busy that we haven't had the chance"...
Stop. Take 10 minutes and stop. Try it.
Most users are pleasantly surprised and cannot believe they did not take the time before.
Now these teams save time troubleshooting their #ansible playbooks and have more time for other things.