tomoconnor/parallax

My collection of ansible templates, sensible defaults and an example of where to start from.

parallax

My collection of ansible templates, sensible defaults and an example of where to start from.

parallax's Issues

launched & dynamic inventory

Did you manage to get the dynamic inventory with ec2.py to work?

I noticed you resorted a static hosts file rather than the dynamic aspet in your site.yml file for the ec2 example.

Why disable host_key_checking?

This seems like it'd have some potentially bad security implications, can you expand on why you've disabled it? Is it due to the nature of AWS / Cloud type environments?

Blogish explanation doesn't underline the importance of -K

My reading of it left it unclear that -K equated to "prompt for sudo password".

For the first run, we'll need to tell ansible the SSH and Sudo passwords, because one of the thing that the common role does is to configure passwordless sudo, and deploy a SSH key.

This bit makes sense, though you then don't go and configure it to do passwordless sudo, so it's a touch confusing. I did eventually figure it out because you'd supplied two flags to the ansible-playbook command.

In order to use Ansible with SSH passwords (pretty much required for the first run of normal machines (unless you deploy keys with something far lower level, like kickstart), you'll need the sshpass program. 

This is probably why I got a touch confused about it. I'd also note that mac users (i.e. Me!) are SOL when it comes to installing sshpass easily (homebrew refuses to package it which means tedium):

custard-tart% brew install sshpass
Error: No available formula for sshpass
We won't add sshpass because it makes it too easy for novice SSH users to
ruin SSH's security.

Suggested fix: explain that -k is for providing an ssh password and -K is for providing a sudo password. Possibly link to somewhere to teach people how to configure passwordless sudo.