Webarchitects systemd Ansible role

An Ansible role for configuring systemd services on Debian, this role has been designed to be as generic as possible in order to enable to it be used to configure any systemd service.

Role variables

See the defaults/main.yml file for the default variables.

systemd

Set the systemd variable to false to prevent any tasks in this role being run, it defaults to true.

systemd_timesyncd_reboot

Set the systemd_timesyncd_reboot variable to true for servers which have incorrect clocks to be rebooted by this role in order to correct their clocks, this variable defaults to false.

systemd_units

A list of System units to configure, for example:

systemd_units:
  - name: systemd-timesyncd
    files:
      - path: /etc/systemd/timesyncd.conf
        comment: |
          Entries in this file show the compile time defaults.
          You can change settings by editing this file.
          Defaults can be restored by simply deleting this file.
          See timesyncd.conf(5) for details.
        conf:
          Time:
            NTP: 0.pool.ntp.org 1.pool.ntp.org 3.pool.ntp.org 2.pool.ntp.org
        state: templated
    pkgs:
      - systemd-timesyncd
    state: present
    unit_state: started

The only required variables is name, see the meta/argument_specs.yml for the variable types.

For each service required .deb packages, the state of the service and the files to be created / amended and their content in YAML can be specified.

Files are read using the JC ini parser and only updated if the conf is to be changed.

Files can have one of three states set:

• absent - the file will be deleted.
• edited - the existing file will be edited using the Ansible ini module.
• templated - the file will be created if it does not exist or updated if it already exists using the templates/unit.j2 template.

Note that the edited option can not remove variables and, unlike the templated option, it preserves existing comments.

When files are updated or deleted backups are created based on the existing file name but prefixed with a leading . and suffixed with a timestamp in ISO8601 format and the file extension .bak.

Read existing Systemd files using JC

You can read existing systemd files as YAML on the command line using JC, for example:

cat /etc/systemd/timesyncd.conf | jc --ini -py
---
Time:
  NTP: 0.pool.ntp.org 1.pool.ntp.org 3.pool.ntp.org 2.pool.ntp.org

Dependencies

This role requires Ansible 2.11 or newer, JC and JMESPath to be installed using pip3 on the Ansible controller.

Repository

The primary URL of this repo is https://git.coop/webarch/systemd however it is also mirrored to GitHub and available via Ansible Galaxy.

If you use this role please use a tagged release, see the release notes.

License

This role is released under the same terms as Ansible itself, the GNU GENERAL PUBLIC LICENSE, Version 3.

Author

Chris Croome.