Ansible configuration on remote Nodegrid devices

Ansible configuration on remote Nodegrid devices

Ansible playbook can be used to automate remote devices. Every remote device needs to have one ansible user to apply the automation.
Follow this script to have complete configuration of ansible user, ssh keys, sudo permission on remote Nodegrid device.
Create these four files in one folder and later give them executable permission.

1. ansible_setup.sh 
  2. #!/bin/sh

  4. read -p " Enter Your Choice 1(yes)/2(no): " choice

  6. while [ $choice -eq 1 ]
  7. do
  8. read -p "enter the ip address : " IPADDRESS
  9. echo " The ip address is $IPADDRESS "
  10. echo "Copy all config files to Nodegrid, provide root password"
  11. scp ansible_setup* root@$IPADDRESS:/tmp/
  12. echo "Create Ansible User and Group, provide root password"
  13. ssh root@$IPADDRESS 'su admin -l -c "cli -f /tmp/ansible_setup.cli"'
  14. echo "Create Ansible sudoers file, provide root password"
  15. ssh root@$IPADDRESS '/bin/bash /tmp/ansible_setup_sudoers.sh'
  16. echo "Copy ssh-key to Ansible user, provide ansible password"
  17. ssh-copy-id -i .ssh/id_rsa.pub ansible@$IPADDRESS
  18. echo "Applying the Sudo Permission"
  19. ssh root@$IPADDRESS 'su admin -l -c "cli -f /tmp/ansible_setup_sudop.cli"'
  20. echo "Delete setup files from Nodegrid, provide root password"
  21. ssh root@$IPADDRESS 'rm /tmp/ansible_setup*'
  22. read -p "Enter Your Choice 1(yes)/2(no): " choice
  23. done
2. ansible_setup.cli
  2. cd /settings/authorization/
  3. add
  4. set name=ansible
  5. commit
  6. cd ansible/profile/
  7. set track_system_information=yes
  8. set terminate_sessions=yes
  9. set software_upgrade_and_reboot_system=yes
  10. set configure_system=yes
  11. set configure_user_accounts=yes
  12. set apply_&_save_settings=yes
  13. set shell_access=yes
  14. set restrict_configure_system_permission_to_read_only=no
  15. set menu-driven_access_to_devices=no
  16. set custom_session_timeout=no
  17. set startup_application=shell
  18. commit
  19. cd /settings/local_accounts/
  20. add
  21. set username=ansible
  22. set password=1234
  23. set hash_format_password=no
  24. set user_group=ansible
  25. commit
3. ansible_setup_sudoers.sh
  2. #!/bin/bash
  3. echo "ansible ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/ansible
  4. chmod 600 /etc/sudoers.d/ansible
4. ansible_setup_sudop.cli
  2. set /settings/authorization/ansible/profile/ sudo_permission=yes
  3. commit
Now, run the script : sudo ./ansible_setup.sh
Enter root password for remote nodegrid when asked and ansible password is what one has given in ansible_setup.cli file

    • Related Articles

    • How to: Enable Remote Access

      Remote access is one of the multiple ZPE Cloud features. It allows you to access your Nodegrid device and target devices from anywhere in the world, as long as you have an internet connection.. Here's how to enable Remote Access on your Nodegrid ...

    • How to Manually Add NetApp Storage Devices to NodeGrid via WebUI

      Select Managed Devices :: Devices, click the Add button to add a device in the system. For the purpose of this example, provide the following information:   On the Name field, enter the name of the NetApp device you want to add. Enter the IP ...

    • How to Manually Add Network Devices with SSH or Telnet Support to NodeGrid via WebUI

      Select Managed Devices :: Devices, click the Add button to add a device in the system. For the purpose of this example, provide the following information:   On the Name field, enter the name of the device you want to add (for example a critical Red ...

    • System Configuration Checksum

      Nodegrid system configuration checksum is a feature which creats a checksum for all the configuration files inside Nodegrid. This provides administrators a quick tool to verify periodically if the configuration has changed, and can be used for ...

    • How to: Enable ZPE Cloud Remote Access...Remotely

      You just got your ZPE Nodegrid up and running and it is connected and enrolled in your ZPE Cloud. But you can't access it remotely because the remote access buttons are grayed out. It is online, but no access available. The way to get remote access ...