Ansible is a radically simple IT automation system.
ansible, ansible-playbook, ansible-galaxy, ansible-doc, ansible-config, ansible-lint
|
macOS, Linux, Windows
|docs.ansible.com
Otty extracts these into your secret store instead of syncing the files. Every generated manager config below leaves them out too.
inventory, roles_path, collections_path, private_key_file, vault_password_file, log_path[defaults]inventory = /Users/octocat/ops/inventory/hosts.inimachine-localroles_path = /Users/octocat/ops/roles:/Users/octocat/.ansible/rolesmachine-localcollections_path = /Users/octocat/ops/collectionsmachine-localprivate_key_file = /Users/octocat/.ssh/id_ed25519_opsmachine-localvault_password_file = /Users/octocat/.ansible/vault-passmachine-locallog_path = /Users/octocat/.ansible/ansible.logmachine-localhost_key_checking = Falseretry_files_enabled = Falsestdout_callback = yamlOtty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.
Not a subtraction from the paths above: this is everything else Ansible writes in your home directory that is state, not configuration. It keeps a whole-home manager like chezmoi from sweeping those up, and it still holds if the synced paths are ever widened.
inventoryroles_pathcollections_pathprivate_key_filevault_password_filelog_path[defaults]inventory = /Users/octocat/ops/inventory/hosts.inimachine-localroles_path = /Users/octocat/ops/roles:/Users/octocat/.ansible/rolesmachine-localcollections_path = /Users/octocat/ops/collectionsmachine-localprivate_key_file = /Users/octocat/.ssh/id_ed25519_opsmachine-localvault_password_file = /Users/octocat/.ansible/vault-passmachine-locallog_path = /Users/octocat/.ansible/ansible.logmachine-localhost_key_checking = Falseretry_files_enabled = Falsestdout_callback = yamlEach machine keeps its own copy of these.
Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.
Opens otty://sync/add/ansible. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.
Every one of these keeps the credential file out. None of them splits inventory and roles_path for you — that part is Otty’s own sync, or a template you write by hand.