Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Oct 2019 22:26:37 +0700
From:      Victor Sudakov <vas@sibptus.ru>
To:        freebsd-questions@freebsd.org
Subject:   Re: Ansible for FreeBSD - use cases?
Message-ID:  <20191008152637.GA63418@admin.sibptus.ru>
In-Reply-To: <c4174ccb-8f12-5738-c444-e7236c9885d8@FreeBSD.org>
References:  <20191005141507.GA1223@admin.sibptus.ru> <20191006184205.sr4gt3gmnzzzuzua@deathbolt.927589452.space> <20191007042856.GB98441@admin.sibptus.ru> <c4174ccb-8f12-5738-c444-e7236c9885d8@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--ReaqsoxgOBHFXBhH
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Matthew Seaman wrote:
> On 07/10/2019 05:28, Victor Sudakov wrote:
> > If I have packages in multiple jails, can ansible help me keep them all
> > up-to-date? Without sshd inside jails?
>=20
> Yes.  Ansible has a 'jail connector' which effectively lets you use
> jexec(8) to run programs within your jails.  It has some limitations:
>=20
>    - you can only run ansible on the host system to access jails on the
> same machine

Alas, this would not be useful to me.

>=20
>    - you have to run ansible as root
>=20
> Aside from that, basically you can do anything with ansible inside a
> jail that you could do by ssh'ing in.
>=20
> There is an improved version of the jail connector floating around on
> GitHub which those limitations -- see
> https://github.com/austinhyde/ansible-sshjail
>=20
> Of course, pkg(8) also has native functionality for managing packages in
> jails. eg:

Well, ansible's pkgng module does have the "jail" parameter, I've tried
it and it works. But it is not very useful because the service module
does not have this parameter.  This means you can install a daemon in a
jail, but you cannot make it start on boot, restart after update etc.



--=20
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/

--ReaqsoxgOBHFXBhH
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJdnKqtAAoJEA2k8lmbXsY0PEYH/3IlZ2rggkQfYgXEshSDDNbJ
1SSiXWoCGOVOBrtxV06VkKBsrREXefk4Tm3WWB0gf3wG/NEwzaJPDqqdBM8KF1lV
1c3t1h9Hnkb8YTuRcvZCiC+Ce/yFrvI6mU8sAs6fYUNXfoGpyzjgQ+9WIBQlNMy9
nJkAVRHiZzWTriFWwGzHhXlQPDmVXNsaqBTE/1vth837GjzGZFPHjGqutE+e1R4d
3mwja8axPWtHIhJ2NnIaGwyzZncgKqYDPGGyxF2z1/AziZepQS5TU4m8x/nYhZ+l
KXCdO5knGSfClZZuzoVy396BxtiQ5y1quH1CjvO7VoTm+KtGI+1PIqyKrTGezzg=
=6QfO
-----END PGP SIGNATURE-----

--ReaqsoxgOBHFXBhH--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20191008152637.GA63418>