cyverse/atmosphere-ansible

Atmosphere的Ansible实例部署设置

概述

这是https://github.com/cyverse/atmosphere%E7%9A%84%E6%89%A9%E5%B1%95%E7%82%B9%EF%BC%8C%E9%80%9A%E8%BF%87Ansible%E5%AE%9A%E4%B9%89Atmosphere%E5%AE%9E%E4%BE%8B%E5%9C%A8%E7%9B%AE%E6%A0%87%E4%BA%91%E6%8F%90%E4%BE%9B%E5%95%86%E4%B8%AD%E7%9A%84%E9%83%A8%E7%BD%B2%E6%96%B9%E5%BC%8F%E3%80%82%E8%8B%A5%E6%83%B3%E4%BA%86%E8%A7%A3Atmosphere%E5%A6%82%E4%BD%95%E4%BD%BF%E7%94%A8%E6%AD%A4%E6%A8%A1%E5%9D%97%EF%BC%8C%E5%8F%AF%E6%9F%A5%E7%9C%8Bhttps://github.com/cyverse/atmosphere/blob/master/service/deploy.py%E5%92%8Chttps://github.com/cyverse/subspace%E6%A8%A1%E5%9D%97%E3%80%82

扩展点说明

该术语表示Atmosphere的安装可通过修改此处定义的playbooks，自定义/修改将虚拟机实例部署到云提供商时执行的操作。

执行顺序

playbook名称前的数字前缀（例如：20_atmo_user_install.yml）用于确定https://github.com/iPlantCollaborativeOpenSource/subspace%E7%9A%84%E6%89%A7%E8%A1%8C%E9%A1%BA%E5%BA%8F%E3%80%82%6020_atmo_user_install.yml%60%E5%9C%A8%6018_atmo_local_user_account.yml%60%E4%B9%8B%E5%90%8E%E6%89%A7%E8%A1%8C%EF%BC%8C%6066_atmo_user_ssh_keys.yml%60%E4%BC%9A%E6%9C%80%E5%90%8E%E6%89%A7%E8%A1%8C%EF%BC%88%E5%8D%B3%E4%BD%BF%E7%9B%AE%E5%BD%95%E5%88%97%E8%A1%A8%E4%B8%AD%E6%8E%92%E7%AC%AC%E4%BA%8C%EF%BC%89%E3%80%82%E7%A1%AE%E4%BF%9Dplaybook%E5%90%8D%E7%A7%B0%E5%89%8D%E7%BC%80%E4%B8%8D%E8%B6%85%E8%BF%87100%E5%8F%AF%E9%81%BF%E5%85%8D%E6%AD%A4%E9%97%AE%E9%A2%98%E3%80%82%E5%BD%93%E5%89%8D%E6%89%A7%E8%A1%8C%E7%9A%84playbook%E5%88%97%E8%A1%A8%EF%BC%9A

ansible/playbooks/instance_deploy/
├── 00_setup_ssh.yml
├── 10_setup_pkg_mgr.yml
├── 18_atmo_local_user_account.yml
├── 20_atmo_user_install.yml
├── 30_post_user_install.yml
├── 41_shell_access.yml
└── 42_globus_connect.yml

instance_deploy后，运行以下playbook添加用户SSH密钥并执行启动脚本：

ansible/playbooks/user_deploy/
├── 00_inject_ssh_keys.yml
└── 10_post_boot.yml

配置说明

通过在Ansible group_vars中设置对应变量为true启用可选功能：

Guacamole信息

Guacamole是VNC/SSH网关，使用时需定义GUACAMOLE_SERVER_IP。
安全警告：Guacamole需未加密VNC连接，确保通过可信网络连接实例，避免流量被监听。

Docker部署示例

Docker Run命令

挂载本地playbooks目录并执行指定playbook：

bash
docker run -v $(pwd)/ansible:/ansible cyverse/atmosphere-ansible ansible-playbook /ansible/playbooks/instance_deploy/00_setup_ssh.yml

Docker Compose示例

yaml
version: '3'
services:
  atmosphere-ansible:
    image: cyverse/atmosphere-ansible
    volumes:
      - ./ansible:/ansible  # 挂载本地Ansible配置目录
    command: ansible-playbook /ansible/playbooks/instance_deploy/10_setup_pkg_mgr.yml  # 执行指定playbook

其他Playbooks

工具Playbooks

验证部署状态的工具playbooks：

ansible/playbooks/utils/
├── atmo_check_novnc.yml
├── atmo_check_vnc.yml
├── check_networking.yml
├── play_role.yml
└── print_variables.yml

实例操作Playbooks

部署后操作（如挂载卷）的playbooks：

ansible/playbooks/instance_actions/
├── check_volume.yml
├── mount_volume.yml
└── unmount_volume.yml

用户自定义Playbooks

用户可选安装的自定义playbooks：

ansible/playbooks/user_customizations/
├── README.md
├── add_user.yml
└── remove_user.yml

镜像Playbooks

准备实例镜像的playbook：

ansible/playbooks/imaging/prepare_instance_snapshot.yml

故障排除

查看文档：Troubleshooting Atmosphere Ansible

贡献指南

新角色需使用https://github.com/cyverse-ansible/ansible-role-template%E5%88%9B%E5%BB%BA%EF%BC%8C%E5%8F%AF%E9%80%89Travis CI测试，详情见https://github.com/c-mart/atmosphere-guides/blob/91106b7422fb24ccc87280519147d0c7bcbe629a/src/contribution_guide/contribution_guide.md#ansible-galaxy-roles%E3%80%82

许可证

详见LICENSE文件。