Skip to content

Latest commit

 

History

History
120 lines (91 loc) · 3.51 KB

day5warmup.md

File metadata and controls

120 lines (91 loc) · 3.51 KB
Raw

Day 5 Morning Warmup

Good morning! Today's warmup will involve the following concepts from yesterday:

  • error handling
  • Ansible-Vault
  • handlers

Below is playbook that automates installing a Minecraft server on an Ubuntu host! Minecraft is an internationally popular video game that allows players of all ages to get together online and build whatever they want! But installing/maintaining a Minecraft server can be a pain... Ansible to the rescue!

Please make the following improvements to this playbook:

  1. Add a rescue to the "Install apps for minecraft server" block.
    • Have one of the rescue tasks uninstall the applications.
    • Then have a second rescue task throw an intentional error announcing that the apps have been uninstalled.
Help me Chadly Wan Kenobi! 
  - name: Install apps for minecraft server
    block:
        - name: Install additional apps via apt
          apt:
            name:
               - fail2ban # enables the linux host to ban IPs with suspicious SSH activity
            state: present
    rescue:
      - name: first
        apt:
          name: fail2ban
          state: absent
      - name: second
        fail:
          msg: "Error in installing application! Uninstalled, exiting..."
  1. The variable mc_server_link is defined in the play vars. While it's not exactly something that needs secured, let's do it anyway! Use Ansible-Vault to save the url as an encrypted string. You can add the encrypted string in any variable location you choose.
Help me Chadly Wan Kenobi! 
ansible-vault encrypt_string "https://piston-data.mojang.com/v1/objects/c9df48efed58511cdd0213c56b9013a7b5c9ac1f/server.jar" --name "mc_server_link"

~~3. The task "Restart fail2ban" is a conditional task... we only need this task to run if a change to the app fail2ban has occurred. Change this task to a handler that is notified by the task "Copy fail2ban (ssh protection)".

Help me Chadly Wan Kenobi! 
tasks:

  - name: Copy fail2ban (ssh protection)
    copy:
      content: "get off my dang server"
      dest: jail.conf
    notify:
      - Restart fail2ban

handlers:

  - name: Restart fail2ban
    service:
      name: fail2ban
      state: restarted

STARTING CODE

---
- name: Thursday morning challenge
  hosts: bender
  connection: ssh
  gather_facts: no
  become: yes

  vars:
    mc_server_link: https://piston-data.mojang.com/v1/objects/c9df48efed58511cdd0213c56b9013a7b5c9ac1f/server.jar
    
  tasks:

  - name: Install apps for minecraft server
    block:
        - name: Install additional apps via apt
          apt:
            name:
               - fail2ban # enables the linux host to ban IPs with suspicious SSH activity
            state: present
         
#  - name: Restart fail2ban
#    service:
#      name: fail2ban
#      state: restarted

  - name: Copy fail2ban (ssh protection)
    copy:
       content: "Get off my dang server!"
       dest: "/home/{{ ansible_user }}"
       
  - name: Add a directory
    file:
      path: "/home/{{ ansible_user }}/minecraft"
      state: directory
      
  - name: Download minecraft server
    get_url:
      url: "{{ mc_server_link }}"
      dest: /home/{{ ansible_user }}/minecraft/minecraft_server.jar