- Rearranged documentation. [drybjed]
- Properly propagate exit code when running debops [do3cc]
- Clone and update roles exclusively over HTTPS to allow operation over a proxy or in case the git protocol is blocked. [ganto]
- On OS X search config-file in
/etctoo (before searching in
~/Library/Application Support). [htgoebel]
- Make debops-init write some example values into .debops.cfg. [htgoebel]
- Add a work-around for ansible’s buggy handling of paths containing spaces. [htgoebel]
- Update role README template to point to new documentation. [drybjed]
- Make Travis mass test script less noisy. [drybjed]
library/path to default Ansible plugin paths in generated
- Define default
ansible_managedvariable in generated
- Changelog is rewritten in reStructuredText. [drybjed]
- DebOps can now use a system-wide configuration file /etc/debops.cfg. You can also install DebOps playbooks and roles in a system-wide location. [htgoebel]
- Small fixes for bugs in DebOps libraries which prevented corret script execution on platforms other than Linux. [htgoebel]
debops-padlockscript has been modified to support “lock” and “unlock” sub-commands and it is now used by the padlock wrapper script to lock and unlock EncFS-encrypted secret directory. [htgoebel]
debopsscript can now read configuration from several files:
/etc/debops.cfg $XDG_CONFIG_DIRS/debops.cfg (defaults to ~/etc/xdg/debops.cfg) $XDG_CONFIG_HOME/debops.cfg (defaults to ~/.config/debops.cfg) ./.debops.cfg
Configuration options from different files are merged together. [htgoebel]
Scripts are now tested on Travis-CI using nosetests. [drybjed]
- Scripts are completely rewritten in Python by Hartmut Goebel. This saves a lot of code allows for more fertile future changes.
Notable changed related to the shell-version are:
- Playbooks are no longer searched in
/usr/share/debops. We assume DebOps is used from a user account, so installing playbooks globally is not the common case.
.debops.cfgis no longer supported,
.debops.cfgnow is assumed to be an ini-file.
ansible_config_hook(which was undocumented anyway) is gone. Instead you can put sections
.debops.cfgwhich will go into
ansible.cfg. This allows for easy adding e.g. a
[paramiko]section to ansible.cfg.
- The padlock-script is no longer used to decide if secrets are encrypted. This is now done by testing for the encrypted keyfile and the encrypted encfs-config.
- The padlock script still exists and has been simplified a lot. Most functionality has been moved into the DebOps python library.
- all role documentation from their readme files has been moved to separate documentation page, role README files will be converted to more standardized format, and will use Markdown again, since Ansible Galaxy does not support reStructuredText.
debopsscript will automatically generate custom
ansible.cfgconfiguration file in project main directory. This file will be used to enable custom set of role and plugin paths, which allows for example to reorganize playbooks into subdirectories, “overwrite” upstream role with local ones via symlinks and enables support for custom Ansible plugins in all playbooks and roles.
- DebOps roles will be now cloned in different directory, they are moved from
debops-playbooks/roles/(one directory up). This allows to overwrite upstream DebOps roles with local modified ones, which enables easy development or customization when needed.
debopsscript gains even more integration with DebOps project directory. You can put your custom playbooks in
ansible/playbooks/directories and access them by specifying name of a playbook as first argument of
debopsscript. Roles can be put in
ansible/roles/directories and Ansible will automatically look for them there. Various plugins can also be put in their respective
- New script has been added,
debops-defaults. It can be used to easily work with defaults files present in all roles - by default it “aggregates” all of them into one stream and sends it to
STDOUT. By specifying list of roles on the command line you can select which role defaults are aggregated, and by redirecting the script to a file or a command you can manipulate it (for example grep for a string).
debops.secretmain directory has been changed from
secret(the feature that used name of the Ansible inventory as the prefix for secret directory has been dropped, because secrets are stored inside project directory). Because of that,
debops*scripts are updated to support new naming scheme.
- If you use
debops.secretrole or DebOps playbooks in general, you will need to rename your current plaintext and encrypted directories.
debops*scripts have been updated with new functions and fixed logic. You can now run DebOps commands inside project subdirectories instead of just at the root of the project directory.
debopsscript now recognizes encrypted secret directories created by
debops-padlockand automatically opens them before Ansible playbook run, and closes them afterwards.
debops-initwill check if you try to create project directory in another project and if so, will politely refuse your request.
debops-padlockscript, which is a companion Bash script to debops.secret role. It can be used to optionally encrypt secret directory using EncFS and GnuPG keys. Main
debopsscript will be able to recognize these encrypted directories and properly open/close them for
- Makefile has been rewritten and streamlined.
make installwill install all scripts, inventory skeleton and playbooks + roles in a system-wide location (by default,
make cleanwill remove installed files.
- Many different changes in the documentation in preparation of the release. Role README files will use new flat-style buttons.
- Huge update of the
debops-installscript, which has been renamed to
debops-updateand can now both install and update playbooks and roles automatically, either in the user home directory at
$HOME/.local/share/debopsor in the current directory, or a directory specified as a parameter for the script.
- DebOps project repositories can now be easily backed up using a Bash script
- New main scripts:
ansible-playbookwith custom arguments
ansiblewith custom arguments
- First iteration of the
- First iteration of the
We are starting the main project repository anew! The old
repository will be preserved for historic reasons as
debops/ginas after main
project gets up to speed. For now, if you want to play with DebOps, I suggest
heading to ginas repository and cloning that
instead. That should be fixed soon though, when new role cloning code takes