Ansible

Installation using Ansible

Installation using Ansible is not streamlined, but here’s the playbook I’m using on my servers:

Playbooks

This is very much work in progress. Once I get a stable ansible script I should publish it to Ansible Galaxy.

The playbook is installing (or upgrading):

  • latest restic binary to /usr/local/bin
  • latest resticprofile binary to /usr/local/bin
  • the resticprofile configuration file from a template file found in ./resticprofile/{{ inventory_hostname }}/profiles.* to /root/resticprofile/profiles.*
  • password files that can be encrypted using ansible vault. These files are located in ./resticprofile/{{ inventory_hostname }}/keys/*: they will be decrypted and saved to /root/resticprofile/.
  • other files (like files needed for --exclude-file, --files-from or anything else you need) from ./resticprofile/{{ inventory_hostname }}/copy/* to /root/resticprofile/
Note

This new version (21st Feb 2023) installs the github3 python packages in a virtual environment. This seems to avoid having to compile the cryptography package, which is a huge time saver.

Previously, the playbook wasn’t running in a virtual environment. For that matter it needed a whole bunch of packages including cryptography, which in turn needed the libssl-dev package (on debian) and a rust compiler.

Requirements

Each target machine must have one variable named arch containing the resticprofile OS & Arch. You can see a list of all the available OS & Arch couples on the releases page.

Typically, a binary will be distributed using this convention:

resticprofile-[VERSION]_[OS]_[ARCH].tar.gz

Your host variables file should declare a arch variable containing the [OS]_[ARCH] part of the file name.

Examples:

arch: linux_amd64

or for a Raspberry pi 3+:

arch: linux_armv7

Note: I might find a way to detect this automatically at some point