Changeset - c2600e92f9f9
[Not reviewed]
0 21 0
Branko Majic (branko) - 9 months ago 2025-02-15 20:15:03
branko@majic.rs
MAR-245: Upgrade to Ansible 11.2.x:

- Update the requirements files.
- Update documentation.
- Update role meta information.
- No obvious breakages at the moment.
21 files changed with 44 insertions and 28 deletions:
0 comments (0 inline, 0 general)
docs/index.rst
Show inline comments
 
@@ -11,14 +11,14 @@ Roles cover different aspects of infrastructure, such as mail servers, web
 
servers, web applications etc. The roles are mainly well-suited for smaller
 
installations.
 

	
 
Roles are written for use with *Debian GNU/Linux*. For more details on
 
supported releases, see :ref:`rolereference`.
 

	
 
At the moment, the roles have been written for and tested against **Ansible
 
10.4.x**.
 
At the moment, the roles have been written for and tested against
 
**Ansible 11.2.x**.
 

	
 
The roles also utilise the ``ipv4/ipv6`` lookup plugins which require
 
``netaddr`` package to be installed. The ``passlib`` package is used
 
for hashing the operating system passwords. Make sure you have the
 
packages available on controller machine.
 

	
docs/releasenotes.rst
Show inline comments
 
@@ -2,20 +2,20 @@ Release notes
 
=============
 

	
 

	
 
x.y.z
 
-----
 

	
 
Upgraded to Ansible 10.4.x. Dropped support for Debian 11
 
Upgraded to Ansible 11.2.x. Dropped support for Debian 11
 
(Bullseye). Minor fixes and improvements.
 

	
 
**Breaking changes:**
 

	
 
* All roles
 

	
 
  * Upgraded to Ansible 10.4.x.
 
  * Upgraded to Ansible 11.2.x.
 
  * Dropped support for Debian 11 (Bullseye).
 
  * ``passlib`` Python package is now (explicitly) required for using
 
    the roles.
 

	
 
* ``ldap_server`` role
 

	
docs/usage.rst
Show inline comments
 
@@ -132,13 +132,13 @@ packages, and to prepare the environment a bit on the Ansible server:
 

	
 
   ::
 

	
 
     mkdir ~/mysite/
 
     mkvirtualenv -a ~/mysite/ mysite
 
     pip install -U pip setuptools
 
     pip install 'ansible~=10.4.0' netaddr passlib
 
     pip install 'ansible~=11.2.0' netaddr passlib
 

	
 
.. warning::
 
   The ``netaddr`` package is needed for ``ipv4/ipv6`` lookup plugins
 
   which is used internally by some of the roles. The ``passlib``
 
   package is required in order to hash passwords when creating system
 
   users.
requirements.in
Show inline comments
 
# Ansible and role runtime.
 
ansible~=10.4.0
 
ansible~=11.2.0
 
netaddr
 
passlib
 
python-ldap
 

	
 
# Development and testing.
 
ansible-lint
 
defusedxml
 
flake8
 
gimmecert
 
molecule[testinfra]~=24.8.0
 
molecule-plugins[vagrant]~=23.5.0
 
# @WORKAROUND: Newer versions of Molecule break with Vagrant backend
 
#   Due to introduction of more invasive changes (in 25.2.0),
 
#   running newer versions of Molecule in combination with Vagrant
 
#   is broken. For more details, see:
 
#
 
#     - https://github.com/ansible-community/molecule-plugins/issues/301
 
#
 
#   Additional issue is that the ephemeral directory location has
 
#   changed, which may cause some issues with the mail_server role
 
#   testing. The ephemeral directory is currently used to store the
 
#   ClamAV database files in order to avoid getting blocked by the
 
#   upstream because of hitting the rate limit. When Molecule does get
 
#   upgraded eventually, it might be worth it to also look into
 
#   splitting out this ClamAV database cache explicitly into some
 
#   directory like ~/.cache/majic-ansible-roles-clamavdb instead of
 
#   relying on the Molecule ephemeral directory.
 
molecule[testinfra]~=25.1.0
 
molecule-plugins[vagrant]~=23.7.0
 
paramiko
 
pytest-env
 

	
 
# Documentation.
 
sphinx
 
sphinx-rtd-theme
requirements.txt
Show inline comments
 
@@ -3,19 +3,19 @@
 
# by the following command:
 
#
 
#    pip-compile --allow-unsafe
 
#
 
alabaster==1.0.0
 
    # via sphinx
 
ansible==10.4.0
 
ansible==11.2.0
 
    # via -r requirements.in
 
ansible-compat==25.1.2
 
    # via
 
    #   ansible-lint
 
    #   molecule
 
ansible-core==2.17.8
 
ansible-core==2.18.2
 
    # via
 
    #   ansible
 
    #   ansible-compat
 
    #   ansible-lint
 
    #   molecule
 
ansible-lint==25.1.2
 
@@ -94,17 +94,17 @@ markdown-it-py==3.0.0
 
markupsafe==3.0.2
 
    # via jinja2
 
mccabe==0.7.0
 
    # via flake8
 
mdurl==0.1.2
 
    # via markdown-it-py
 
molecule[testinfra]==24.8.0
 
molecule[testinfra]==25.1.0
 
    # via
 
    #   -r requirements.in
 
    #   molecule-plugins
 
molecule-plugins[vagrant]==23.5.3
 
molecule-plugins[vagrant]==23.7.0
 
    # via -r requirements.in
 
mypy-extensions==1.0.0
 
    # via black
 
netaddr==1.3.0
 
    # via -r requirements.in
 
packaging==24.2
roles/backup/meta/main.yml
Show inline comments
 
@@ -8,11 +8,11 @@ dependencies:
 
galaxy_info:
 
  role_name: backup
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Specify what files should be backed-up to the backup server.
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/backup_client/meta/main.yml
Show inline comments
 
@@ -3,11 +3,11 @@
 
galaxy_info:
 
  role_name: backup_client
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up backup client (using duplicity/duply)
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/backup_server/meta/main.yml
Show inline comments
 
@@ -6,11 +6,11 @@ dependencies:
 
galaxy_info:
 
  role_name: backup_server
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up server to act as backup storage for the backup clients, exposing SFTP on dedicated port with dedicated OpenSSH server instance
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/bootstrap/meta/main.yml
Show inline comments
 
@@ -3,11 +3,11 @@
 
galaxy_info:
 
  role_name: bootstrap
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Performs basic bootstrap of server for use with Ansible
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/common/meta/main.yml
Show inline comments
 
@@ -17,11 +17,11 @@ dependencies:
 
galaxy_info:
 
  role_name: common
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Apply common configuration and hardening on server
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/database/meta/main.yml
Show inline comments
 
@@ -13,11 +13,11 @@ dependencies:
 
galaxy_info:
 
  role_name: database
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Creates MariaDB database and accompanying user to access it
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/database_server/meta/main.yml
Show inline comments
 
@@ -6,11 +6,11 @@ dependencies:
 
galaxy_info:
 
  role_name: database_server
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up MariaDB database server
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/ldap_client/meta/main.yml
Show inline comments
 
@@ -3,11 +3,11 @@
 
galaxy_info:
 
  role_name: ldap_client
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Configures OpenLDAP client (default configuration)
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/ldap_server/meta/main.yml
Show inline comments
 
@@ -12,11 +12,11 @@ dependencies:
 
galaxy_info:
 
  role_name: ldap_server
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up an OpenLDAP server
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/mail_forwarder/meta/main.yml
Show inline comments
 
@@ -6,11 +6,11 @@ dependencies:
 
galaxy_info:
 
  role_name: mail_forwarder
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up local SMTP server for sending out mails and receiving mails for local users
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/mail_server/meta/main.yml
Show inline comments
 
@@ -11,11 +11,11 @@ dependencies:
 
galaxy_info:
 
  role_name: mail_server
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up mail server with SMTP and IMAP services, using LDAP as source of allowed destinations (domains, mail addresses)
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/php_website/meta/main.yml
Show inline comments
 
@@ -9,11 +9,11 @@ dependencies:
 
galaxy_info:
 
  role_name: php_website
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up a website powered by PHP application
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/preseed/meta/main.yml
Show inline comments
 
@@ -3,11 +3,11 @@
 
galaxy_info:
 
  role_name: preseed
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Generates preseed files for Debian
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/web_server/meta/main.yml
Show inline comments
 
@@ -6,11 +6,11 @@ dependencies:
 
galaxy_info:
 
  role_name: web_server
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up generic web server
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/wsgi_website/meta/main.yml
Show inline comments
 
@@ -9,11 +9,11 @@ dependencies:
 
galaxy_info:
 
  role_name: wsgi_website
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up a website powered by WSGI application
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
roles/xmpp_server/meta/main.yml
Show inline comments
 
@@ -11,11 +11,11 @@ dependencies:
 
galaxy_info:
 
  role_name: xmpp_server
 
  namespace: azaghal
 
  author: Branko Majic
 
  description: Sets-up a Prosody XMPP server using LDAP directory as source of domain/user information
 
  license: BSD
 
  min_ansible_version: "10.4"
 
  min_ansible_version: "11.2"
 
  platforms:
 
    - name: Debian
 
      versions:
 
        - bookworm
0 comments (0 inline, 0 general)