advertisement
Ansible Tower Quick Install
Release Ansible Tower 3.0.1
Red Hat, Inc.
Jun 06, 2017
CONTENTS
1 Preparing for the Tower Installation
2
Installation and Reference guide
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2
Prerequisites and Requirements
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2
Additional Notes on Tower Requirements
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4
Platform-specific Installation Notes
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6
2 Download the Tower Installation Program
8
Using Vagrant/Amazon AMI Images
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8
Using the Bundled Tower Installation Program
. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9
10
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
12
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
13
6 Copyright © 2016 Red Hat, Inc.
14
15
16
17
i
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
Thank you for your interest in Ansible Tower by Red Hat. Ansible Tower is a commercial offering that helps teams manage complex multi-tier deployments by adding control, knowledge, and delegation to Ansible-powered environments.
The Ansible Tower Quick Installation Guide covers basic installation instructions for installing Ansible Tower on Red
Hat Enterprise Linux, CentOS, and Ubuntu systems. This document has been updated to include information for the latest release of Ansible Tower 3.0.1.
Ansible Tower Version 3.0.1; July 28, 2016; https://access.redhat.com/
CONTENTS 1
CHAPTER
ONE
PREPARING FOR THE TOWER INSTALLATION
This guide helps you get your Ansible Tower installation up and running as quickly as possible.
At the end of the installation, using your web browser, you can access and fully utilize Tower.
1.1 Installation and Reference guide
While this guide covers the basics, you may find that you need the more detailed information available in the Installation and Reference Guide .
You should also review the General Installation Notes before starting the installation.
1.2 Prerequisites and Requirements
For platform information, refer to Installation Notes in the Ansible Tower Installation and Reference Guide.
Note: Tower is a full application and the installation process installs several dependencies such as PostgreSQL,
Django, Apache, and others. It is required that you install Tower on a standalone VM or cloud instance and do not co-locate any other applications on that machine (beyond possible monitoring or logging software). Although Tower and Ansible are written in Python, they are not just simple Python libraries. Therefore Tower cannot be installed in a Python virtualenv, a Docker container, or any similar subsystem; you must install it as described in the installation instructions in this guide.
Ansible Tower has the following requirements:
• Supported Operating Systems:
– Red Hat Enterprise Linux 6 64-bit
– Red Hat Enterprise Linux 7 64-bit
– CentOS 6 64-bit
– CentOS 7 64-bit
– Ubuntu 12.04 LTS 64-bit
– Ubuntu 14.04 LTS 64-bit
Note: Starting with version 3.0 of Ansible Tower, support for running Tower on Red Hat Enterprise
Linux 6 and CentOS 6 has been deprecated, and will be removed in a future release.
2
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
Starting with version 3.0 of Ansible Tower, support for running Tower on Ubuntu 12.04 has been deprecated and will be removed in a future release.
• An HTML5 compliant web browser
• 2 GB RAM minimum (4+ GB RAM recommended)
– 2 GB RAM (minimum and recommended for Vagrant trial installations)
– 4 GB RAM is recommended per 100 forks
• 20 GB of dedicated hard disk space
– 10 GB of the 20 GB requirement must be dedicated to /var/, where Tower stores its files and working directories (dedicating less space will cause the installation to fail)
• 64-bit support required (kernel and runtime)
• For Amazon EC2:
– Instance size of m3.medium or larger
– An instance size of m3.xlarge or larger if there are more than 100 hosts
• For Passive/Active Redundancy setups:
– If you plan to run in a redundancy setup, the following guidelines provide a rough estimate for the amount of space required. The basic calculation is:
(number of hosts in inventory) * (number of scans) *
((average module fact size) * (number of modules scanning)
/ 3)
– For example, assuming a schedule of 1 scan per day for a year:
(hosts = 1,000) * (number of scans = 365) * ((average module fact size = 100 kb) *
(number of modules = 4) / 3) = 48 GB
The default scan operation has the four (4) modules listed, but you can add your own. Depending on the kinds of modules and the size of the facts you are gathering, that size might be larger.
To help keep the size down, you can use a management job to purge old facts. Refer to Management
Jobs in the Ansible Tower Administration Guide for more information
Note: Ansible Tower 3.0 moved away from MongoDB in favor of using Postgres. The new Postgres data-type consumes about one-third (1/3) less space than the equivalent human-readable JSON with no whitespace or newlines. If you are using an older version of Ansible Tower, you should use the following example to determine how much space may be required:
(hosts = 1,000) * (number of scans = 365) * (average module fact size = 100 kb) * (number of modules = 4) = 146 GB
1.3 Additional Notes on Tower Requirements
While other operating systems may technically function, currently only the above list is supported to host an Ansible
Tower installation. If you have a firm requirement to run Tower on an unsupported operating system, please contact Ansible Support via the Red Hat Customer Portal at https://access.redhat.com/ . Management of other operating systems (nodes) is documented by the Ansible project itself and allows for a wider list.
1.3. Additional Notes on Tower Requirements 3
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
Actual RAM requirements vary based on how many hosts Tower will manage simultaneously (which is controlled by the forks parameter in the job template or the system ansible.cfg file). To avoid possible resource conflicts,
Ansible recommends 4 GB of memory per 100 forks. For example, if forks is set to 100, 4 GB of memory is recommended; if forks is set to 400, 16 GB of memory is recommended.
A larger number of hosts can of course be addressed, though if the fork number is less than the total host count, more passes across the hosts are required. These RAM limitations are avoided when using rolling updates or when using the provisioning callback system built into Tower, where each system requesting configuration enters a queue and is processed as quickly as possible; or in cases where Tower is producing or deploying images such as AMIs. All of these are great approaches to managing larger environments. For further questions, please contact Ansible Support via the Red Hat Customer Portal at https://access.redhat.com/ .
The requirements for systems managed by Tower are the same as for Ansible at: http://docs.ansible.com/intro_getting_ started.html
1.4 Ansible Software Requirements
While Ansible Tower depends on Ansible Playbooks and requires the installation of the latest stable version of Ansible before installing Tower, manual installations of Ansible are no longer required.
Beginning with Ansible Tower version 2.3, the Tower installation program attempts to install Ansible as part of the installation process. Previously, Tower required manual installations of the Ansible software release package before running the Tower installation program. Now, Tower attempts to install the latest stable Ansible release package.
If performing a bundled tower installation, the installation program attempts to install Ansible (and its dependencies) from the bundle for you (refer to
Using the Bundled Tower Installation Program
for more information).
If you choose to install Ansible on your own, the Tower installation program will detect that Ansible has been installed and will not attempt to reinstall it. Note that you must install Ansible using a package manager like yum and that the latest stable version must be installed for Ansible Tower to work properly.
For convenience, summaries of those instructions are in the following sections.
1.5 Platform-specific Installation Notes
1.5.1 Notes for Red Hat Enterprise Linux and CentOS setups
• PackageKit can frequently interfere with the installation/update mechanism. Consider disabling or removing
PackageKit if installed prior to running the setup process.
• Only the “targeted” SELinux policy is supported. The targeted policy can be set to disabled, permissive, or enforcing.
• When performing a bundled install (refer to
Using the Bundled Tower Installation Program
for more information), Red Hat Enterprise Linux customers must enable the following repositories which are disabled by default:
– Red Hat Enterprise Linux 7 users must enable the extras repositories.
– Red Hat Enterprise Linux 6 users must enable the optional repository.
1.5.2 Configuration and Installation of Ansible with Red Hat Enterprise Linux and
CentOS
The following steps help you configure access to the repository as well as install Ansible on older versions of Tower.
1.4. Ansible Software Requirements 4
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
Configure Repository Access
Configure the EPEL repository and any others needed.
As the root user, for Red Hat Enterprise Linux 6 and CentOS 6: root@localhost:~$ yum install http://dl.fedoraproject.org/pub/epel/epel-release-
,→ latest-6.noarch.rpm
Note:
• For users of Red Hat Enterprise Linux 6, you must enable the optional repository.
As the root user, for Red Hat Enterprise Linux 7 and CentOS 7 root@localhost:~$ yum install http://dl.fedoraproject.org/pub/epel/epel-release-
,→ latest-7.noarch.rpm
Note:
• You may also need to enable the extras repository specific for your environment:
– extras on CentOS 7
– rhel-7-server-extras-rpms on Red Hat Enterprise Linux 7
– rhui-REGION-rhel-server-extras when running in EC2.
• When using the official Red Hat Enterprise Linux 7 marketplace AMI, ensure that the latest rh-amazon-rhui-client package that allows enabling the optional repository (named rhui-REGION-rhel-server-optional in EC2) is installed.
Install Ansible
Note: Tower is installed using Ansible playbooks; therefore, Ansible is required to complete the installation of Tower.
Beginning with Ansible Tower version 2.3.0, Ansible is installed automatically during the setup process.
If you are using an older version of Tower, prior to version 2.3.0, Ansible can be installed as detailed in the Ansible documentation at: http://docs.ansible.com/intro_installation.html
For convenience, those installation instructions are summarized below.
root@localhost:~$ yum install ansible
1.5.3 Configuration and Installation of Ansible with Ubuntu
The following steps help you configure access to the repository as well as install Ansible on older versions of Tower.
1.5. Platform-specific Installation Notes 5
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
Configure Repository Access
As the root user, configure Ansible PPA: root@localhost:~$ apt-get install software-properties-common root@localhost:~$ apt-add-repository ppa:ansible/ansible
Install Ansible
Note: Tower is installed using Ansible playbooks; therefore, Ansible is required to complete the installation of Tower.
Beginning with Ansible Tower version 2.3.0, Ansible is installed automatically during the setup process.
If you are using an older version of Tower, prior to version 2.3.0, Ansible can be installed as detailed in the Ansible documentation at: http://docs.ansible.com/intro_installation.html
For convenience, those installation instructions are summarized below.
root@localhost:~$ apt-get update root@localhost:~$ apt-get install ansible
1.6 Tower Installation Scenarios
Tower can be installed using one of the following scenarios:
Single Machine:
• As an integrated installation:
– This is a single machine install of Tower - the web frontend, REST API backend, and database are all on a single machine. This is the standard installation of Tower. It also installs PostgreSQL from your
OS vendor repository, and configures the Tower service to use that as its database.
• With an external database (2 options available):
– Tower with remote DB configuration: This install the Tower server on a single machine and configures it to talk to a remote instance of PostgreSQL as its database. This remote PostgreSQL can be a server you manage, or can be provided by a cloud service such as Amazon RDS.
– Tower with a playbook install of a remote Postgres system: This installs the Tower server on a single machine and installs a remote Postgres database via the playbook installer (managed by Tower).
Note: 1). Tower will not configure replication or failover for the database that it uses, although Tower should work with any replication that you have. 2). The database server should be on the same network or in the same datacenter as the Tower server for performance reasons.
Active/Passive Redundancy Multi-Machine:
Tower can be installed in an active-passive redundancy mode. In this mode, Tower runs with one ‘primary’ node active at any time, and any number of passive ‘secondary’ nodes that can be made active if necessary.
• An Active/Passive Tower setup can also be installed with an external database (2 options available):
1.6. Tower Installation Scenarios 6
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
– Tower with remote DB configuration: This install the Tower server on a single machine and configures it to talk to a remote instance of PostgreSQL as its database. This remote PostgreSQL can be a server you manage, or can be provided by a cloud service such as Amazon RDS.
– Tower with a playbook install of a remote Postgres system: This installs the Tower server on a single machine and installs a remote Postgres database via the playbook installer (managed by Tower).
Note: Running in a redundancy setup requires any database that Tower uses to be external–Postgres must be installed on a machine that is not one of the primary or secondary tower nodes. When in a redundant setup, the remote Postgres version requirements is Postgresql 9.4.x.
1.6. Tower Installation Scenarios 7
CHAPTER
TWO
DOWNLOAD THE TOWER INSTALLATION PROGRAM
Note: To obtain a trial version of Ansible Tower, visit: http://www.ansible.com/tower-trial
For pricing information, visit: http://www.ansible.com/pricing
To download the latest version of Tower directly (note, you must also obtain a license before using this), visit: https:
//releases.ansible.com/awx/setup/ansible-tower-setup-latest.tar.gz
Download and then extract the Ansible Tower installation/upgrade tool: http://releases.ansible.com/ansible-tower/ setup/ root@localhost:~$ tar xvzf ansible-tower-setup-latest.tar.gz
root@localhost:~$ cd ansible-tower-setup-<tower_version>
To install or upgrade, start by editing the inventory file in the ansible-tower-setup-<tower_version> directory, replacing <tower_version> with the version number, such as 2.4.5 or 3.0.0. directory.
2.1 Using Vagrant/Amazon AMI Images
One easy way to try Ansible Tower is to use a Vagrant box or an Amazon EC2 instance, and launching a trial of
Ansible Tower just takes a few minutes.
If you use the Vagrant box or Amazon AMI Tower images provided by Ansible, you can find the auto-generated admin password by connecting to the image and reading it from the message of the day (MOTD) shown at login.
2.1.1 Vagrant
For Vagrant images, use the following commands to connect:
$ vagrant init ansible/tower
$ vagrant up --provider virtualbox
$ vagrant ssh
Replace ansible-tower-2.4.X with the version that you are trying to install. That last command provides your admin password and the Tower log-in URL. Upon login, you will receive directions on obtaining a trial license.
An up-to-date link to Ansible’s Vagrant image is available from the LAUNCH TOWER IN VAGRANT section of
Ansible’s main website.
8
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
2.1.2 Amazon EC2
To launch the AMI, you must have an AMI ID (which varies based on you particular AWS region). A list of regions with links to AMI IDs is available in the LAUNCH TOWER IN AMAZON EC2 section of Ansible’s main website.
For Amazon AMI images, use the following command to connect: ssh root @< your amazon instance >
You must use the SSH key that you configured the instance to accept at launch time.
2.2 Using the Bundled Tower Installation Program
Beginning in Ansible Tower version 2.3.0, Tower installations can be performed using a bundled installation program.
The bundled installation program is meant for customers who cannot, or would prefer not to, install Tower (and its dependencies) from online repositories. Access to Red Hat Enterprise Linux or Centos repositories is still needed.
To download the latest version of the bundled Tower installation program directly (note, you must also obtain a license before using this), visit: https://releases.ansible.com/ansible-tower/setup-bundle/
Note: The bundled installer only supports Red Hat Enterprise Linux and CentOS. Ubuntu support has not yet been added.
Next, select the installation program which matches your distribution (el6 or el7): ansible tower setup bundle latest .
el6 .
tar .
gz ansible tower setup bundle latest .
el7 .
tar .
gz
Note: Red Hat Enterprise Linux customers must enable the following repositories which are disabled by default:
• Red Hat Enterprise Linux 7 users must enable the extras repositories.
• Red Hat Enterprise Linux 6 users must enable the optional repository.
A list of package dependencies from Red Hat Enterprise Linux repositories can be found in the bundle/ base_packages.txt
file inside the setup bundle. Depending on what minor version of Red Hat Enterprise Linux you are running, the version and release specified in that file may be slightly different than what is available in your configured repository.
2.2. Using the Bundled Tower Installation Program 9
CHAPTER
THREE
INSTALLING ANSIBLE TOWER
As Tower can be installed in various ways by choosing the best mode for your environment and making any necessary modifications to the inventory file:
3.1 Tower Installation Scenarios
Tower can be installed using one of the following scenarios:
Single Machine:
• As an integrated installation:
– This is a single machine install of Tower - the web frontend, REST API backend, and database are all on a single machine. This is the standard installation of Tower. It also installs PostgreSQL from your
OS vendor repository, and configures the Tower service to use that as its database.
• With an external database (2 options available):
– Tower with remote DB configuration: This install the Tower server on a single machine and configures it to talk to a remote instance of PostgreSQL as its database. This remote PostgreSQL can be a server you manage, or can be provided by a cloud service such as Amazon RDS.
– Tower with a playbook install of a remote Postgres system: This installs the Tower server on a single machine and installs a remote Postgres database via the playbook installer (managed by Tower).
Note: 1). Tower will not configure replication or failover for the database that it uses, although Tower should work with any replication that you have. 2). The database server should be on the same network or in the same datacenter as the Tower server for performance reasons.
Active/Passive Redundancy Multi-Machine:
Tower can be installed in an active-passive redundancy mode. In this mode, Tower runs with one ‘primary’ node active at any time, and any number of passive ‘secondary’ nodes that can be made active if necessary.
• An Active/Passive Tower setup can also be installed with an external database (2 options available):
– Tower with remote DB configuration: This install the Tower server on a single machine and configures it to talk to a remote instance of PostgreSQL as its database. This remote PostgreSQL can be a server you manage, or can be provided by a cloud service such as Amazon RDS.
– Tower with a playbook install of a remote Postgres system: This installs the Tower server on a single machine and installs a remote Postgres database via the playbook installer (managed by Tower).
10
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
Note: Running in a redundancy setup requires any database that Tower uses to be external–Postgres must be installed on a machine that is not one of the primary or secondary tower nodes. When in a redundant setup, the remote Postgres version requirements is Postgresql 9.4.x.
If you are performing an installation, you must supply any necessary passwords in the inventory file.
For those who are upgrading, your prior configuration will migrate over and filling out the passwords in the inventory file should be unnecessary.
For installations and upgrades: If you need to make use of external databases, you must ensure the database sections of your inventory file are properly setup. Edit this file and add your external database information before running the setup script.
Note: Redis passwords must not contain spaces or any of the following characters: @, :, -, \, /
For example, Passw0rd is acceptable, but P@ssword is not. (It is not recommended that you use this example password as anything other than an example. Setting your actual password to anything other than a secure password that is only known by you or your trusted administration staff is extremly dangerous.) admin_password = 'password' redis_password = 'password' pg_password = 'password'
As an example, your inventory file may look similar to the following:
[primary] localhost ansible_connection = local
[secondary]
[database]
[ all : vars ] admin_password = 'password' redis_password = 'password' pg_host = '' pg_port = '' pg_database = 'awx' pg_username = 'awx' pg_password = 'password'
Once any necessary changes have been made, you are ready to run ./setup.sh.
Note: Root access to the remote machines is required. With Ansible, this can be achieved in different ways:
• ansible_ssh_user=root ansible_ssh_password=”your_password_here” inventory host or group variables
• ansible_ssh_user=root ansible_ssh_private_key_file=”path_to_your_keyfile.pem” inventory host or group variables
• ANSIBLE_BECOME_METHOD=’sudo’ ANSIBLE_BECOME=True ./setup.sh
• ANSIBLE_SUDO=True ./setup.sh
3.1. Tower Installation Scenarios 11
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
3.2 The Setup Playbook
Note: Ansible Tower 3.0 simplifies installation and removes the need to run ./configure/ as part of the installation setup. Users of older versions should follow the instructions available in the v.2.4.5 (or earlier) releases of the
Tower Documentation available at: http://docs.ansible.com/
The Tower setup playbook script uses the inventory file and is invoked as ./setup.sh from the path where you unpacked the Tower installer tarball.
root@localhost:~$ ./setup.sh
The setup script takes the following arguments:
• -i INVENTORY_FILE – Path to Ansible inventory file (default: inventory)
• -e EXTRA_VARS – Set additional Ansible variables as key=value or YAML/JSON (i.e.
bundle_install=false forces an online installation)
• -b – Perform a database backup in lieu of installing
• -r – Perform a database restore in lieu of installing
-e
• -h – Show this help message and exit
After calling ./setup.sh with the appropriate parameters, Tower is installed on the appropriate machines as has been configured. Setup installs Tower from RPM or Deb packages using repositories hosted on ansible.com.
Once setup is complete, use your web browser to access the Tower server and view the Tower login screen. Your
Tower server is accessible from port 80 (http://tower.company.com/ ).
3.2. The Setup Playbook 12
Ansible Tower Quick Install, Release Ansible Tower 3.0.1
If the installation of Tower fails, please contact Ansible Support via the Red Hat Customer Portal at https://access.
redhat.com/ .
3.3 Changing the Password
Once installed, if you log into the Tower instance via SSH, the default admin password is provided in the prompt. You can then change it with the following command (as root or as AWX user): tower manage changepassword admin
After that, the password you have entered will work as the admin password in the web UI.
3.3. Changing the Password 13
CHAPTER
FOUR
CONGRATULATIONS
Once the installation of Tower is complete, you are ready to set up and launch your first Ansible playbook using Tower.
If you are wondering what to do next, refer to the following list of Ansible documentation sets for information on getting started, administration, and more:
• Ansible Tower Quick Setup Guide
• Ansible Tower Installation and Reference Guide
• Ansible Tower User Guide
• Ansible Tower Administration Guide
• Ansible Tower API Guide
• http://docs.ansible.com/
14
• genindex
CHAPTER
FIVE
INDEX
15
CHAPTER
SIX
COPYRIGHT © 2016 RED HAT, INC.
Ansible, Ansible Tower, Red Hat, and Red Hat Enterprise Linux are trademarks of Red Hat, Inc., registered in the
United States and other countries.
If you distribute this document, or a modified version of it, you must provide attribution to Red Hat, Inc. and provide a link to the original version.
Third Party Rights
Ubuntu and Canonical are registered trademarks of Canonical Ltd.
The CentOS Project is copyright protected. The CentOS Marks are trademarks of Red Hat, Inc. (“Red Hat”).
Microsoft, Windows, Windows Azure, and Internet Explore are trademarks of Microsoft, Inc.
VMware is a registered trademark or trademark of VMware, Inc.
Rackspace trademarks, service marks, logos and domain names are either common-law trademarks/service marks or registered trademarks/service marks of Rackspace US, Inc., or its subsidiaries, and are protected by trademark and other laws in the United States and other countries.
Amazon Web Services”, “AWS”, “Amazon EC2”, and “EC2”, are trademarks of Amazon Web Services, Inc. or its affiliates.
OpenStack™ and OpenStack logo are trademarks of OpenStack, LLC.
Chrome™ and Google Compute Engine™ service registered trademarks of Google Inc.
Safari® is a registered trademark of Apple, Inc.
Firefox® is a registered trademark of the Mozilla Foundation.
All other trademarks are the property of their respective owners.
16
INDEX
A active/passive, external database installation multi-machine,
Amazon AMI image,
Ansible prerequisites,
Ansible, 1.9.4,
Ansible, 2.0,
Ansible, configure repository access,
Ansible, installation,
Ansible, latest stable,
B bundled installer,
C
CentOS,
M multi-machine active/passive, external database, installation,
O operating system requirements,
P password, changing,
platform-specfic notes
CentOS,
Red Hat Enterprise Linux,
platform-specific notes
CentOS,
Red Hat Enterprise Linux,
playbook setup,
setup.sh,
prerequisites,
Ansible,
D download Ansible Tower,
E external database installation single machine,
I installation,
multi-machine active/passive, external database,
platform-specific notes,
scenarios,
single machine external database,
single machine integrated,
installation prerequisites,
installation program,
installation requirements,
installation script playbook setup,
integrated installation single machine,
R
Red Hat Enterprise Linux,
requirements,
requirements, Ansible,
resources,
S single machine external database, installation,
integrated, installation,
U
Ubuntu,
V
Vagrant image,
17
advertisement
* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project