Getting Started

  • Now that you have read the installation guide and installed Ansible on a control node, you are ready to learn how Ansible works. A basic Ansible command or playbook:
    • selects machines to execute against from inventory
    • connects to those machines (or network devices, or other managed nodes), usually over SSH
    • copies one or more modules to the remote machines and starts execution there

Ansible can do much more, but you should understand the most common use case before exploring all the powerful configuration, deployment, and orchestration features of Ansible. This page illustrates the basic process with a simple inventory and an ad-hoc command. Once you understand how Ansible works, you can read more details about ad-hoc commands, organize your infrastructure with inventory, and harness the full power of Ansible with playbooks.

Selecting machines from inventory

Ansible reads information about which machines you want to manage from your inventory. Although you can pass an IP address to an ad-hoc command, you need inventory to take advantage of the full flexibility and repeatability of Ansible.

Action: create a basic inventory

For this basic inventory, edit (or create) /etc/ansible/hosts and add a few remote systems to it. For this example, use either IP addresses or FQDNs:

  1. 192.0.2.50
  2. aserver.example.org
  3. bserver.example.org

Beyond the basics

Your inventory can store much more than IPs and FQDNs. You can create aliases, set variable values for a single host with host vars, or set variable values for multiple hosts with group vars.

Connecting to remote nodes

Ansible communicates with remote machines over the SSH protocol. By default, Ansible uses native OpenSSH and connects to remote machines using your current user name, just as SSH does.

Action: check your SSH connections

Confirm that you can connect using SSH to all the nodes in your inventory using the same username. If necessary, add your public SSH key to the authorized_keys file on those systems.

Beyond the basics

You can override the default remote user name in several ways, including: passing the -u parameter at the command line setting user information in your inventory file setting user information in your configuration file setting environment variables

See Controlling how Ansible behaves: precedence rules for details on the (sometimes unintuitive) precedence of each method of passing user information. You can read more about connections in Connection methods and details.

Copying and executing modules

Once it has connected, Ansible transfers the modules required by your command or playbook to the remote machine(s) for execution.

Action: run your first Ansible commands

Use the ping module to ping all the nodes in your inventory:

  1. $ ansible all -m ping

Now run a live command on all of your nodes:

  1. $ ansible all -a "/bin/echo hello"

You should see output for each host in your inventory, similar to this:

  1. aserver.example.org | SUCCESS => {
  2.     "ansible_facts": {
  3.         "discovered_interpreter_python": "/usr/bin/python"
  4.     },
  5.     "changed": false,
  6.     "ping": "pong"
  7. }

Beyond the basics

By default Ansible uses SFTP to transfer files. If the machine or device you want to manage does not support SFTP, you can switch to SCP mode in Configuring Ansible. The files are placed in a temporary directory and executed from there.

If you need privilege escalation (sudo and similar) to run a command, pass the become flags:

  1. # as bruce
  2. $ ansible all -m ping -u bruce
  3. # as bruce, sudoing to root (sudo is default method)
  4. $ ansible all -m ping -u bruce --become
  5. # as bruce, sudoing to batman
  6. $ ansible all -m ping -u bruce --become --become-user batman

You can read more about privilege escalation in Understanding privilege escalation: become.

Congratulations! You have contacted your nodes using Ansible. You used a basic inventory file and an ad-hoc command to direct Ansible to connect to specific remote nodes, copy a module file there and execute it, and return output. You have a fully working infrastructure.

Next steps

Next you can read about more real-world cases in Introduction to ad-hoc commands,explore what you can do with different modules, or read about the AnsibleWorking With Playbooks language. Ansible is not just about running commands, italso has powerful configuration management and deployment features.

See also