9 ms·

Great! But I wonder if/when Ansible Tower is going to get open sourced. I remember some posts from RedHat people saying it'd be open sourced "very soon" ~1.5

Great! But I wonder if/when Ansible Tower is going to get open sourced. I remember some posts from RedHat people saying it'd be open sourced "very soon" ~1.5 years ago, but other than a landing page nothing has come of it...

lima 9y ago
We're using Jenkins instead but an open source release would sure be nice. I've also heard of people using Rundeck. ARA is useful for these sort of setups: https://github.com/dmsimard/ara https://github.com/dmsimard/ara
dec0dedab0de 9y ago
Someone from the Ansible team came to the local PUG meetup recently. They said it would be open sourced this year.
Androider 9y ago
I was always surprised that Ansible didn't ever think to offer Tower as SaaS. I'd like to use it, but I'm really not interested in managing another box just for it.
- user5994461 9y ago
  This is really a thing that cannot be SaaS. You can't allow a remote software in a random place in the world ssh to your servers as root and execute random commands.
  - subway 9y ago
    Hosted Chef is effectively this. Not that I think it's a good idea.
  - Androider 9y ago
    That just shows a lack of imagination, I can think of many ways to do it securely. Also, in many cases there is no longer any "on-site" location to run things from. If your servers are in AWS, your code in GitHub/BitBucket/AWS CodeCommit, your CI pipeline is in Circle/Travis/Codeship/AWS CodePipeline... running an Ansible playbook on a service professionally managed by Red Hat is fine. It's likely to be better managed and more secure than your average never-been-patched ad-hoc on-site Jenkins box or your devops guy running the play from his MacBook.
    - user5994461 9y ago
      Just because it's possible doesn't mean it's a good idea. RFC 1925: https://www.ietf.org/rfc/rfc1925.txt https://www.ietf.org/rfc/rfc1925.txt With sufficient thrust, pigs fly just fine. However, this is not necessarily a good idea. It is hard to be sure where they are going to land, and it could be dangerous sitting under them as they fly overhead.
      - Androider 9y ago
        Unless you are doing deploys from on-prem, to on-prem servers (a shrinking market), I think it is a good idea for the average company to let a professional company manage the infrastructure for them. I've never seen a self-hosted git, CI, etc. be more reliable or secure than the SaaS equivalent in any of the companies I've been, big or small.
        frik 9y ago
        > I've never seen a self-hosted git, CI, etc. be more reliable or secure E.g. a self hosted subversion repo sitting on a network share is 100% reliable. What's so special about such things. It's a solved problem.

lima 9y ago

We're using Jenkins instead but an open source release would sure be nice. I've also heard of people using Rundeck. ARA is useful for these sort of setups: https://github.com/dmsimard/ara https://github.com/dmsimard/ara

dec0dedab0de 9y ago

Someone from the Ansible team came to the local PUG meetup recently. They said it would be open sourced this year.

Androider 9y ago

I was always surprised that Ansible didn't ever think to offer Tower as SaaS. I'd like to use it, but I'm really not interested in managing another box just for it.

user5994461 9y ago
This is really a thing that cannot be SaaS. You can't allow a remote software in a random place in the world ssh to your servers as root and execute random commands.
- subway 9y ago
  Hosted Chef is effectively this. Not that I think it's a good idea.
- Androider 9y ago
  That just shows a lack of imagination, I can think of many ways to do it securely. Also, in many cases there is no longer any "on-site" location to run things from. If your servers are in AWS, your code in GitHub/BitBucket/AWS CodeCommit, your CI pipeline is in Circle/Travis/Codeship/AWS CodePipeline... running an Ansible playbook on a service professionally managed by Red Hat is fine. It's likely to be better managed and more secure than your average never-been-patched ad-hoc on-site Jenkins box or your devops guy running the play from his MacBook.
  - user5994461 9y ago
    Just because it's possible doesn't mean it's a good idea. RFC 1925: https://www.ietf.org/rfc/rfc1925.txt https://www.ietf.org/rfc/rfc1925.txt With sufficient thrust, pigs fly just fine. However, this is not necessarily a good idea. It is hard to be sure where they are going to land, and it could be dangerous sitting under them as they fly overhead.
    - Androider 9y ago
      Unless you are doing deploys from on-prem, to on-prem servers (a shrinking market), I think it is a good idea for the average company to let a professional company manage the infrastructure for them. I've never seen a self-hosted git, CI, etc. be more reliable or secure than the SaaS equivalent in any of the companies I've been, big or small.
      - frik 9y ago
        > I've never seen a self-hosted git, CI, etc. be more reliable or secure E.g. a self hosted subversion repo sitting on a network share is 100% reliable. What's so special about such things. It's a solved problem.