Changeset 13839

Timestamp:

20 Apr 2016, 08:24:23 (9 years ago)

Author:

uli

Message:

Tell about bootstrapping and add respective playbook.

Location:

main/waeup-ansible

Files:

• README.rst (modified) (1 diff)
• bootstrap.yml (added)

main/waeup-ansible/README.rst

@@ -91 +91 @@
   https://docs.ansible.com/ansible/playbooks_best_practices.html#directory-layout
 
+
+Bootstrapping - Freshmechs
+--------------------------
+
+We call those nachines "freshmech" that are freshly delivered from the
+hosting provider or that were freshly provisioned by `vagrant` (see
+above).
+
+These machines are expected to have only a single root account and
+normally a (security-wise) poor SSH configuration.
+
+Bootstrapping these machines means we secure SSH, restart the SSH
+daemon and then add important accounts: "uli", "henrik", "ansible".
+
+Any host you want to "bootstrap" must be entered in a local hosts
+file, normally ``hosts-virtual``, with a line like this:
+
+  [yet-untouched]
+  vh5.sample.org ansible_host=192.168.36.10 ansible_user=root
+
+in the "yet-untouched" section.
+
+Afterwards try:
+
+  $ ansible-playbook -i hosts-virtual --ask-pass bootstrap.yml
+
+The ``ask-pass`` parameter is needed to enter the password given by
+the provider on the commandline. For the local `vagrant` machines this
+will be `vagrant`.