Hello, all.
I was looking for Ansible roles that are supported on Fedora and found robertdebock's Ansible roles.
https://galaxy.ansible.com/ui/standalone/namespaces/5923/ or https://robertdebock.nl/ansible.html
These are supported on maintained versions of Fedora, appropriate versions of RHEL, Debian 12, ...
Sorry, I pressed send too soon.
Anyway, I've started a migration from my own stuff to using Robert's roles which are much better written than mine and was wondering if it made sense for us to do it as well.
Emmanuel
Linux System Roles are built-in to Fedora - https://src.fedoraproject.org/rpms/linux-system-roles - linux-system-roles.noarch.rpm - the roles are packaged as individual legacy roles, and as the fedora.linux_system_roles collection.
There is a good bit of overlap between https://robertdebock.nl/ansible.html and https://galaxy.ansible.com/ui/standalone/namespaces/4114/ - Robert has many, many more roles, and probably has better support for ubuntu/debian (if you want playbooks that span multiple platforms).
I would encourage you to use linux-system-roles, and if there are gaps in support, let's work to add those to linux-system-roles
On Thu, Jun 27, 2024 at 9:52 AM Emmanuel Seyman emmanuel@seyman.fr wrote:
Sorry, I pressed send too soon.
Anyway, I've started a migration from my own stuff to using Robert's roles which are much better written than mine and was wondering if it made sense for us to do it as well.
Emmanuel
server mailing list -- server@lists.fedoraproject.org To unsubscribe send an email to server-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/server@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Am 27.06.2024 um 18:09 schrieb Richard Megginson rmeggins@redhat.com:
Linux System Roles are built-in to Fedora - https://src.fedoraproject.org/rpms/linux-system-roles - linux-system-roles.noarch.rpm - the roles are packaged as individual legacy roles, and as the fedora.linux_system_roles collection.
Perhaps a question from a poor (Ansible-)uninitiated: What do you mean by "legacy" in this context?
There is a good bit of overlap between https://robertdebock.nl/ansible.html and https://galaxy.ansible.com/ui/standalone/namespaces/4114/ - Robert has many, many more roles, and probably has better support for ubuntu/debian (if you want playbooks that span multiple platforms).
We want to use Ansible as a means to establish specifically „Supported Fedora Server Edition Services". Therefore, support for Debian/Ubuntu etc. is not necessarily important.
Much more important is a very good support of the "Fedora way" of organizing the distribution and configuration. In particular, this means good coordination with the pre-configuration that our packers deliver with the packages.
I would encourage you to use linux-system-roles, and if there are gaps in support, let's work to add those to linux-system-roles
Building our work on something we already distribute in Fedora seems attractive to me, if only to increase Fedora's internal consistency.
The question is rather what we are missing as a consequence.
-- Peter Boy https://fedoraproject.org/wiki/User:Pboy PBoy@fedoraproject.org
Timezone: CET (UTC+1) / CEST (UTC+2)
Fedora Server Edition Working Group member Fedora Docs team contributor and board member Java developer and enthusiast
-- Peter Boy https://fedoraproject.org/wiki/User:Pboy PBoy@fedoraproject.org
Timezone: CET (UTC+1) / CEST (UTC+2)
Fedora Server Edition Working Group member Fedora Docs team contributor and board member Java developer and enthusiast
On Thu, Jun 27, 2024 at 4:41 PM Peter Boy pboy@uni-bremen.de wrote:
Am 27.06.2024 um 18:09 schrieb Richard Megginson rmeggins@redhat.com:
Linux System Roles are built-in to Fedora -
https://src.fedoraproject.org/rpms/linux-system-roles - linux-system-roles.noarch.rpm - the roles are packaged as individual legacy roles, and as the fedora.linux_system_roles collection.
Perhaps a question from a poor (Ansible-)uninitiated: What do you mean by "legacy" in this context?
By "legacy" I mean the single, standalone role format, as opposed to roles packaged within a collection - https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_reuse_roles... Ansible really wants devs to package things in collections, but the standalone role format has its use cases, and doesn't seem to be going away.
There is a good bit of overlap between
https://robertdebock.nl/ansible.html and https://galaxy.ansible.com/ui/standalone/namespaces/4114/ - Robert has many, many more roles, and probably has better support for ubuntu/debian (if you want playbooks that span multiple platforms).
We want to use Ansible as a means to establish specifically „Supported Fedora Server Edition Services". Therefore, support for Debian/Ubuntu etc. is not necessarily important.
Much more important is a very good support of the "Fedora way" of organizing the distribution and configuration. In particular, this means good coordination with the pre-configuration that our packers deliver with the packages.
In many cases, the maintainers of the Linux System Roles are also the maintainers of the underlying package in Fedora/EL.
I would encourage you to use linux-system-roles, and if there are gaps
in support, let's work to add those to linux-system-roles
Building our work on something we already distribute in Fedora seems attractive to me, if only to increase Fedora's internal consistency.
The question is rather what we are missing as a consequence.
Right. I would really like to know what are the gaps.
-- Peter Boy https://fedoraproject.org/wiki/User:Pboy PBoy@fedoraproject.org
Timezone: CET (UTC+1) / CEST (UTC+2)
Fedora Server Edition Working Group member Fedora Docs team contributor and board member Java developer and enthusiast
-- Peter Boy https://fedoraproject.org/wiki/User:Pboy PBoy@fedoraproject.org
Timezone: CET (UTC+1) / CEST (UTC+2)
Fedora Server Edition Working Group member Fedora Docs team contributor and board member Java developer and enthusiast
-- _______________________________________________ server mailing list -- server@lists.fedoraproject.org To unsubscribe send an email to server-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/server@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
* Richard Megginson [27/06/2024 10:09] :
Linux System Roles are built-in to Fedora - https://src.fedoraproject.org/rpms/linux-system-roles - linux-system-roles.noarch.rpm - the roles are packaged as individual legacy roles, and as the fedora.linux_system_roles collection.
This actually solves the distribution problem (I really do not want to tell users to download from galaxy.ansible.com).
There is a good bit of overlap between https://robertdebock.nl/ansible.html and https://galaxy.ansible.com/ui/standalone/namespaces/4114/ - Robert has many, many more roles, and probably has better support for ubuntu/debian (if you want playbooks that span multiple platforms).
Support for EL systems is a nice-to-have. Support for other distributions is probably not our goal (except maybe in a "more support means more users which means more contributions" sense).
* Richard Megginson [27/06/2024 16:55] :
Right. I would really like to know what are the gaps.
The roles that interest us the most in Robert's are probably:
* autofs * httpd * mysql * nfsserver * nginx * php-fpm
I'm also looking at:
* backup * maintenance * restore * software
Emmanuel
Am 28.06.2024 um 00:55 schrieb Richard Megginson rmeggins@redhat.com:
Thanks for these information.
Right. I would really like to know what are the gaps.
We have defined what we want to achieve with Ansible in our technical specification, specifically in the section Server Roles (https://docs.fedoraproject.org/en-US/server-working-group/docs/server-techni...) In addition to the type and location of configuration files, the file system, LVM, is also special for Fedora Server, whereby we recommend a dedicated LV each at least for relevant services and a strict separation between user and system files. As a minimum, we would therefore recommend a separate LV for data in addition to a root LV.
Maybe, you could give us some advice?
I'm also looking at:
- backup
- maintenance
- restore
I think those are important for Server administration in general, as well.
-- Peter Boy https://fedoraproject.org/wiki/User:Pboy PBoy@fedoraproject.org
Timezone: CET (UTC+1) / CEST (UTC+2)
Fedora Server Edition Working Group member Fedora Docs team contributor and board member Java developer and enthusiast
On Fri, Jun 28, 2024 at 5:13 AM Peter Boy pboy@uni-bremen.de wrote:
Am 28.06.2024 um 00:55 schrieb Richard Megginson rmeggins@redhat.com:
Thanks for these information.
Right. I would really like to know what are the gaps.
We have defined what we want to achieve with Ansible in our technical specification, specifically in the section Server Roles ( https://docs.fedoraproject.org/en-US/server-working-group/docs/server-techni... )
In addition to the type and location of configuration files, the file system, LVM, is also special for Fedora Server, whereby we recommend a dedicated LV each at least for relevant services and a strict separation between user and system files. As a minimum, we would therefore recommend a separate LV for data in addition to a root LV.
The storage system role can do this https://github.com/linux-system-roles/storage/ and the snapshot role can create/extend/mount/revert etc. LVM snapshots https://github.com/linux-system-roles/snapshot/ Both of these roles are developed by members of the same team that develop blivet and other storage subsystem components.
Maybe, you could give us some advice?
I wrote up some notes - not sure if/where there is a more appropriate venue for such a document - https://gist.github.com/richm/b6f4c498a7d429d877f1aac25bfc97bd
I'm also looking at:
- backup
e.g. something like deja dup? or something like the snapshot role for LVM snapshot management?
- maintenance
What does "maintenance" mean in this content? maintenance of backups and the storage used for backups?
- restore
I guess the backup tool would handle this.
I think those are important for Server administration in general, as well.
-- Peter Boy https://fedoraproject.org/wiki/User:Pboy PBoy@fedoraproject.org
Timezone: CET (UTC+1) / CEST (UTC+2)
Fedora Server Edition Working Group member Fedora Docs team contributor and board member Java developer and enthusiast
-- _______________________________________________ server mailing list -- server@lists.fedoraproject.org To unsubscribe send an email to server-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/server@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
* Richard Megginson [28/06/2024 14:57] :
- backup
e.g. something like deja dup? or something like the snapshot role for LVM snapshot management?
This is https://galaxy.ansible.com/ui/standalone/roles/robertdebock/backup/ which creates archives, mysql and postgresql dumps on the managed node and copies them over to the control node.
I really like the design, which seems easily extendable.
- maintenance
What does "maintenance" mean in this content? maintenance of backups and the storage used for backups?
This is https://galaxy.ansible.com/ui/standalone/roles/robertdebock/maintenance/ which empties a number of caches, cleans up logs and removes a selection of files.
The gory details are in https://galaxy.ansible.com/ui/standalone/roles/robertdebock/maintenance/
- restore
I guess the backup tool would handle this.
This is https://galaxy.ansible.com/ui/standalone/roles/robertdebock/restore/ which takes the objects created by the backup role and restores them.
In practice, the two roles go hand in hand.
Emmanuel
Am 28.06.2024 um 22:57 schrieb Richard Megginson rmeggins@redhat.com:
Maybe, you could give us some advice?
I wrote up some notes - not sure if/where there is a more appropriate venue for such a document - https://gist.github.com/richm/b6f4c498a7d429d877f1aac25bfc97bd
Many thanks for these informations! It will help to fine-tune our plannings.
-- Peter Boy https://fedoraproject.org/wiki/User:Pboy PBoy@fedoraproject.org
Timezone: CET (UTC+1) / CEST (UTC+2)
Fedora Server Edition Working Group member Fedora Docs team contributor and board member Java developer and enthusiast
* Richard Megginson [27/06/2024 10:09] :
I would encourage you to use linux-system-roles, and if there are gaps in support, let's work to add those to linux-system-roles
We've already identified a few components that could be added (freeipa, samba, apache, wildfly, ...). Apache is my favourite of these to be added. How do we make this happen ?
Emmanuel
On Wed, Jul 3, 2024 at 4:08 PM Emmanuel Seyman emmanuel@seyman.fr wrote:
- Richard Megginson [27/06/2024 10:09] :
I would encourage you to use linux-system-roles, and if there are gaps in support, let's work to add those to linux-system-roles
We've already identified a few components that could be added (freeipa,
freeipa - there is already https://src.fedoraproject.org/rpms/ansible-freeipa
samba, apache, wildfly, ...). Apache is my favourite of these to be added.
How do we make this happen ?
Is the issue that there is no Fedora RPM package containing the robertdebock roles?
I think it is relatively straightforward to create a Fedora RPM package given an Ansible Galaxy collection - maybe @gotmax23 (aka Maxwell G) can help with that.
Perhaps the answer is to simply create a Fedora RPM package for https://galaxy.ansible.com/ui/repo/published/robertdebock/roles/?
Emmanuel
server mailing list -- server@lists.fedoraproject.org To unsubscribe send an email to server-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/server@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
* Richard Megginson [03/07/2024 16:26] :
freeipa - there is already https://src.fedoraproject.org/rpms/ansible-freeipa
Ah, I hadn't realized the collection had been packaged. This is a good thing.
Is the issue that there is no Fedora RPM package containing the robertdebock roles?
The issue is: a) we should have roles to configure httpd, mariadb, nfs, ... packaged in Fedora. b) I really feel we should leverage existing roles instead of writing our own.
The email that kicked off this conversation asked "Should we use/endorse Robert's roles?". There's been a lot of interesting things said since then but nobody has actually expressed an opinion on said roles.
I'm going to assume that everyone who's interested in the subject either thinks Robert's code is of suitable quality or doesn't care. Given that, yes, it's probably time to package it and submit it to Fedora. Which starts with auditing the 227 roles to determine if they need to be packaged or not... :-(
I think it is relatively straightforward to create a Fedora RPM package given an Ansible Galaxy collection - maybe @gotmax23 (aka Maxwell G) can help with that.
I'll give it a shot and ask for help if I feel I'm getting stuck.
Emmanuel
server@lists.fedoraproject.org