Pfsense Installation using Ansible??

[deegupt4]

Does anyone has installed pfsense using Ansible?
I am facing challenge while giving public ip via ansible?

[uspsrackingbynumbers]

I faced same issue how can i solve it

[deegupt4]

@uspsrackingbynumbers no i couldn't find it, did you get something?

[heavymeza]

Any update, guys?

[opoplawski]

I'm not really sure I understand the question/issue. Can you explain in more detail what you are trying to do and what isn't working/

[JeGr]

As ansible requires SSH to work at all, how do you want to "install" pfSense via ansible in the first place?

Perhaps being a bit more specific what exactly you want to do with ansible would get you more responses :)

Greets

[kraduk]

I do a lot of ansible, and its not intended for os installation, its for configuration. Sure it doesnt need much to get going. Just a transport like ssh, or jexec, but it needs a functioning os. You can then bootstrap stuff like python-simplejson using the script module, and then use the more advanced modules. Non of this would really apply to pfsense though. I also havent seen any modules for pfsense, although you could probably use the uri module to push a config to pfsense.

[JeGr]

@kraduk said in Pfsense Installation using Ansible??:

I also havent seen any modules for pfsense, although you could probably use the uri module to push a config to pfsense.

Nor that I would think I'd see any module as long as there is no official API for pfSense yet.
But what you actually CAN do is take a look at the pfSense developer shell (pfSsh.php) and the possibility to script/code the things directly in the $config XML structure of pfSense. We have a lot of VLANs for virtual project networks of different customers and are ATM testing that way to create all necessary Host/Network Aliases as well as a generic ruleset for all VLANs when newly created so Jenkins can trigger a simple ansible job via SSH and run the lines against pfSsh.php to create aliases, NAT configs and firewall rules on the corresponding VLAN. It's not as rock-solid stable as a real API but it can be used to try to automate a few jobs via command line.

Cheers
Jens

[opoplawski]

Yeah, lack of an API does make it difficult. I've started what I can for an ansible module for pfsense here: https://github.com/opoplawski/ansible-pfsense

[kraduk]

Sorry to be blunt but I'm at the Xmas do. What you are asking it how to birth before the act ...