devops with ansible

general use

ansible controller: AWSEFEDDEV001

git: https://git.mediabrandsww.de/federation/engineering/devops

server path: /opt/devops

download url: https://awsefedweb001.emea.corp.ipgnetwork.com/ivanti/

host file: /opt/devops/inventory/hosts

examples:

ansible-playbook linux/ping.yml -i inventory
ansible-playbook linux/ping.yml -i inventory -e "target_hosts=<name>"

checks

• openssh installed and running Get-Service sshd
• set powershell as default shell

$NewItemPropertyParams = @{
    Path         = "HKLM:\SOFTWARE\OpenSSH"
    Name         = "DefaultShell"
    Value        = "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"
    PropertyType = "String"
    Force        = $true
}
New-ItemProperty @NewItemPropertyParams

reboot checks

• mwg linux server
  • AZREMWGDBS001 DB Service prüfen: systemctl status mysql = Active: active (running)
  • AZREMWGAPP001 mit /usr/local/cavok/control-cavok status überprüfen ob alle Cavok Services laufen (Sind mehrere)
  • AZREMWGCVK001 mit /usr/local/cavok/control-cavok status überprüfen ob alle Cavok Services laufen (Aus dem Kopf, ist das nur der Webservice)

windows: sshd_config (minimal)

AuthorizedKeysFile      .ssh/authorized_keys

PubkeyAuthentication yes
PasswordAuthentication yes

# override default of no subsystems
Subsystem       sftp    sftp-server.exe

Match Group administrators
       AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys