<div dir="ltr"><div>I did take a look at Vagrant but I dont get it. All the docs seem to be missing something. I get what it is, its a containerized pre configed machine but something is lost in "doing it"</div><div> </div></div><div class="gmail_extra"><br><div class="gmail_quote">On 30 July 2015 at 13:59, Michael Crilly <span dir="ltr"><<a href="mailto:michael@mcrilly.me" target="_blank">michael@mcrilly.me</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">There are modules at <a href="http://docs.ansible.com" target="_blank">docs.ansible.com</a> for all those things. </p>
<p dir="ltr">It'll be more efficient because it will be OS agnostic if you develop the Playbook correctly. It will also be sharable and easier to read than a shell script. </p>
<p dir="ltr">You can version Ansible "code" using git like the rest of the industry. Use git tags to version your specific commits. </p>
<p dir="ltr">You can use Vagrant to deploy a DO Droplet and apply Ansible to it automatically - one command once you've written the Vagrantfile. </p><div class="HOEnZb"><div class="h5">
<div class="gmail_quote">On 30 Jul 2015 10:54 pm, "Stuart Burns" <<a href="mailto:stuart.james.burns@gmail.com" target="_blank">stuart.james.burns@gmail.com</a>> wrote:<br type="attribution"><blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" class="gmail_quote"><div dir="ltr"><div>Ok so I want to do two things (and this is the challenge)</div><div> </div><div>I want to automate virtualhost configs. They are trivial and repetative but easy to fat finger. Script to create a db user followed by a virtual host file creation and a2ensite, reload and it should be good. How could ansible/whatever be more efficient.</div><div> </div><div>Secondly how do I integrate it from my desktops so I can just pop out a master server with tuned/pre set configs ? Oh and I want versioning too ;)</div><div> </div><div>If you can tell me how to do that lot simply and easily I will retract my thus truthful statement re: Ansible et all.</div><div> </div><div> </div></div><div class="gmail_extra"><br><div class="gmail_quote">On 30 July 2015 at 13:47, Michael Crilly <span dir="ltr"><<a href="mailto:michael@mcrilly.me" target="_blank">michael@mcrilly.me</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" class="gmail_quote"><p dir="ltr">Niche? Virtually industry standard alongside Puppet. </p>
<p dir="ltr">Unworkable? I've got it automatically provisioning entire environments with HAProxy, NodeJS apps, MongoDB, Java apps, MySQL, the lot. </p>
<p dir="ltr">Whatever happened to a tradesmen never blaming his tools?</p>
<p dir="ltr">Also, OSS generally accepts pull requests for bugs and improvements - hop to it ;-) </p><div><div>
<div class="gmail_quote">On 30 Jul 2015 10:45 pm, "Stuart Burns" <<a href="mailto:stuart.james.burns@gmail.com" target="_blank">stuart.james.burns@gmail.com</a>> wrote:<br type="attribution"><blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" class="gmail_quote"><div dir="ltr"><div>We woud Mike if it wasn't so friggin' niche and unworkable for the most part ;)</div><div> </div></div><div class="gmail_extra"><br><div class="gmail_quote">On 30 July 2015 at 13:42, Michael Crilly <span dir="ltr"><<a href="mailto:michael@mcrilly.me" target="_blank">michael@mcrilly.me</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" class="gmail_quote"><p dir="ltr">Steve,</p>
<p dir="ltr">Consider uses Vagrant for testing and development. It'll run the VM locally and cost you nothing. </p><div><div>
<div class="gmail_quote">On 30 Jul 2015 10:41 pm, "Steve Lilley" <<a href="mailto:steve.lilley@beebl.co.uk" target="_blank">steve.lilley@beebl.co.uk</a>> wrote:<br type="attribution"><blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" class="gmail_quote">
<div lang="EN-GB" vlink="purple" link="blue">
<div>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri",sans-serif;font-size:11pt">I personally feel as safe logging in as root with a key (and 2 factor on DO) then I do logging on with a password as a normal user
If that user is setup to sudo anyway. Then again I only use it for test and dev.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri",sans-serif;font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri",sans-serif;font-size:11pt">Steve<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri",sans-serif;font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri",sans-serif;font-size:11pt"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri",sans-serif;font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-family:"Calibri",sans-serif;font-size:11pt" lang="EN-US">From:</span></b><span style="font-family:"Calibri",sans-serif;font-size:11pt" lang="EN-US"> Chester [mailto:<a href="mailto:chester-bounces@mailman.lug.org.uk" target="_blank">chester-bounces@mailman.lug.org.uk</a>]
<b>On Behalf Of </b>Les Pritchard<br>
<b>Sent:</b> 30 July 2015 13:24<br>
<b>To:</b> chester <<a href="mailto:chester@mailman.lug.org.uk" target="_blank">chester@mailman.lug.org.uk</a>><br>
<b>Subject:</b> Re: [Chester LUG] Digitalocean users.. a question<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Yes, I'd agree with Mike on that. If you're creating the VPS manually you could use a temporary password for root, then create a standard user and disable the root.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">If you can, I'd also recommend locking down SSH to specific IPs or at least ranges.<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On 30 July 2015 at 13:17, Michael Crilly <<a href="mailto:michael@mcrilly.me" target="_blank">michael@mcrilly.me</a>> wrote:<u></u><u></u></p>
<blockquote style="border-width:medium medium medium 1pt;border-style:none none none solid;border-color:currentColor currentColor currentColor rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-right:0cm;margin-left:4.8pt">
<p>The initial root login is designed to give you an easy way in so you can configure the system, locking down root login and removing that key from the system (after adding additional users and allowing them to sudo to root.)<u></u><u></u></p>
<p>Think of that initial SSH key as a deployment key - login once with it, then use Ansible to setup your system with new users and various other state.
<u></u><u></u></p>
<p>Cheers,<u></u><u></u></p>
<p>Mike. <u></u><u></u></p>
<div>
<div>
<div>
<p class="MsoNormal">On 30 Jul 2015 9:50 pm, "Stuart Burns" <<a href="mailto:stuart.james.burns@gmail.com" target="_blank">stuart.james.burns@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
</div>
<blockquote style="border-width:medium medium medium 1pt;border-style:none none none solid;border-color:currentColor currentColor currentColor rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-right:0cm;margin-left:4.8pt">
<div>
<div>
<div>
<div>
<p class="MsoNormal">Hi Everyone,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">I am just in the process of moving over some sites to DO and I thought I would start using the stored SSH key system you can use when deploying your droplets. It works fine, no issues. Just I dont really feel comfortable logging in as root
directly. Years of non root logins make me feel itchy about this.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">What does everyone else think? (I know you can alter and someone trying to crack a proper PKI implementation may have a long wait!) I was more concerned with it being out the box functionality.<br clear="all">
<br>
Regards<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Stuart<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p style="margin-bottom:12pt" class="MsoNormal">_______________________________________________<br>
Chester mailing list<br>
<a href="mailto:Chester@mailman.lug.org.uk" target="_blank">Chester@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/chester" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/chester</a><u></u><u></u></p>
</blockquote>
</div>
<p style="margin-bottom:12pt" class="MsoNormal"><br>
_______________________________________________<br>
Chester mailing list<br>
<a href="mailto:Chester@mailman.lug.org.uk" target="_blank">Chester@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/chester" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/chester</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
<br>_______________________________________________<br>
Chester mailing list<br>
<a href="mailto:Chester@mailman.lug.org.uk" target="_blank">Chester@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/chester" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/chester</a><br>
<br></blockquote></div>
</div></div><br>_______________________________________________<br>
Chester mailing list<br>
<a href="mailto:Chester@mailman.lug.org.uk" target="_blank">Chester@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/chester" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/chester</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div>Stuart Burns <br>E: <a href="mailto:stuart.james.burns@gmail.com" target="_blank">stuart.james.burns@gmail.com</a><br>M: <a href="tel:[redacted]" target="_blank" value="+447981869603">[redacted]</a><br><br></div>
</div>
<br>_______________________________________________<br>
Chester mailing list<br>
<a href="mailto:Chester@mailman.lug.org.uk" target="_blank">Chester@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/chester" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/chester</a><br>
<br></blockquote></div>
</div></div><br>_______________________________________________<br>
Chester mailing list<br>
<a href="mailto:Chester@mailman.lug.org.uk" target="_blank">Chester@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/chester" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/chester</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div>Stuart Burns <br>E: <a href="mailto:stuart.james.burns@gmail.com" target="_blank">stuart.james.burns@gmail.com</a><br>M: <a href="tel:[redacted]" target="_blank" value="+447981869603">[redacted]</a><br><br></div>
</div>
<br>_______________________________________________<br>
Chester mailing list<br>
<a href="mailto:Chester@mailman.lug.org.uk" target="_blank">Chester@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/chester" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/chester</a><br>
<br></blockquote></div>
</div></div><br>_______________________________________________<br>
Chester mailing list<br>
<a href="mailto:Chester@mailman.lug.org.uk">Chester@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/chester" rel="noreferrer" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/chester</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature">Stuart Burns <br>E: <a href="mailto:stuart.james.burns@gmail.com" target="_blank">stuart.james.burns@gmail.com</a><br>M: [redacted]<br><br></div>
</div>