Pfsense Installation using Ansible??
-
Does anyone has installed pfsense using Ansible?
I am facing challenge while giving public ip via ansible? -
I faced same issue how can i solve it
-
@uspsrackingbynumbers no i couldn't find it, did you get something?
-
Any update, guys?
-
I'm not really sure I understand the question/issue. Can you explain in more detail what you are trying to do and what isn't working/
-
As ansible requires SSH to work at all, how do you want to "install" pfSense via ansible in the first place?
Perhaps being a bit more specific what exactly you want to do with ansible would get you more responses :)
Greets
-
I do a lot of ansible, and its not intended for os installation, its for configuration. Sure it doesnt need much to get going. Just a transport like ssh, or jexec, but it needs a functioning os. You can then bootstrap stuff like python-simplejson using the script module, and then use the more advanced modules. Non of this would really apply to pfsense though. I also havent seen any modules for pfsense, although you could probably use the uri module to push a config to pfsense.
-
@kraduk said in Pfsense Installation using Ansible??:
I also havent seen any modules for pfsense, although you could probably use the uri module to push a config to pfsense.
Nor that I would think I'd see any module as long as there is no official API for pfSense yet.
But what you actually CAN do is take a look at the pfSense developer shell (pfSsh.php) and the possibility to script/code the things directly in the $config XML structure of pfSense. We have a lot of VLANs for virtual project networks of different customers and are ATM testing that way to create all necessary Host/Network Aliases as well as a generic ruleset for all VLANs when newly created so Jenkins can trigger a simple ansible job via SSH and run the lines against pfSsh.php to create aliases, NAT configs and firewall rules on the corresponding VLAN. It's not as rock-solid stable as a real API but it can be used to try to automate a few jobs via command line.Cheers
Jens -
Yeah, lack of an API does make it difficult. I've started what I can for an ansible module for pfsense here: https://github.com/opoplawski/ansible-pfsense
-
Sorry to be blunt but I'm at the Xmas do. What you are asking it how to birth before the act ...
