From owner-freebsd-questions@freebsd.org Mon Nov 28 19:54:26 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F3544C5AFC9 for ; Mon, 28 Nov 2016 19:54:26 +0000 (UTC) (envelope-from ml@netfence.it) Received: from smtp208.alice.it (smtp208.alice.it [82.57.200.104]) by mx1.freebsd.org (Postfix) with ESMTP id 878EA175D for ; Mon, 28 Nov 2016 19:54:26 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.ventu (79.50.22.100) by smtp208.alice.it (8.6.060.28) (authenticated as acanedi@alice.it) id 58357917011283D2 for freebsd-questions@freebsd.org; Mon, 28 Nov 2016 20:48:43 +0100 Received: from alamar.ventu (alamar.local.netfence.it [10.1.2.18]) by soth.ventu (8.15.2/8.15.2) with ESMTP id uASJmfMV022376 for ; Mon, 28 Nov 2016 20:48:44 +0100 (CET) (envelope-from ml@netfence.it) X-Authentication-Warning: soth.ventu: Host alamar.local.netfence.it [10.1.2.18] claimed to be alamar.ventu Subject: Re: Ansible and jails To: freebsd-questions@freebsd.org References: <34b5beb3-b942-d1c9-aa67-25bb9597ea98@netfence.it> From: Andrea Venturoli Message-ID: Date: Mon, 28 Nov 2016 20:48:41 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:45.0) Gecko/20100101 Thunderbird/45.5.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Nov 2016 19:54:27 -0000 On 11/27/16 16:27, Matthew Seaman wrote: > You can manage jails with ansible exactly like you manage any other type > of host. That's easiest if you have a mixed environment. Yes, you need > to run sshd and install all the ansible prerequisites in each jail, but > that's usually not a problem. Right. I forgot to mention that I don't have ssh in my jails and that most of them live on a loopback interface (like 127.1.0.1), so they wouldn't be accessible anyway (unless I set up some firewall rules). Both are things I'd like to avoid. > However, ansible does have a special connection_method method for jails > -- see https://www.keltia.net/howtos/jail-mgmt-with-ansible/ This That's one of the links I posted :) bye & Thanks av.