inventory/cleanup #144

djerun · 2026-08-17T23:48:04+02:00

djerun commented

2026-08-17 23:48:04 +02:00

manage ssh connectivity in shared ssh.cfg usable outside of ansible with optional local overrides in ssh.cfg.local
use ssh.cfg in ansible and eliminate ssh config bleed from ~/.ssh/config
collect host key fingerprints in shared known_hosts file populated with fingerprints of reachable hosts
add missing user for chaosknoten
sort hosts in inventories

- manage ssh connectivity in shared ssh.cfg usable outside of ansible with optional local overrides in ssh.cfg.local - use ssh.cfg in ansible and eliminate ssh config bleed from ~/.ssh/config - collect host key fingerprints in shared known_hosts file populated with fingerprints of reachable hosts - add missing user for chaosknoten - sort hosts in inventories

djerun added 3 commits

2026-08-17 23:48:04 +02:00

[inventory] manage ssh connectivity in shared ssh.cfg usable outside of ansible with optional local overrides in ssh.cfg.local, use ssh.cfg in ansible and eliminate ssh config bleed from ~/.ssh/config, collect host key fingerprints in shared known_hosts file populated with fingerprints of reachable hosts

/ Ansible Lint (push) Successful in 2m55s

Details

52d3fd4136

[inventory] specify ssh user for chaosknoten

/ Ansible Lint (push) Successful in 2m30s

Details

c610e8fb3e

[inventory] sort hosts

/ Ansible Lint (push) Successful in 2m34s

Details

/ build (pull_request) Successful in 28s

Details

/ Ansible Lint (pull_request) Successful in 2m26s

Details

1d6c131f79

djerun requested review from bitwhisker

2026-08-17 23:48:14 +02:00

forgejo-actions commented

2026-08-17 23:48:30 +02:00

You can view your changes at https://staging.infra-docs.hamburg.ccc.de/pr144/

june requested review from june

2026-09-22 02:14:26 +02:00

june requested changes

2026-09-22 15:58:17 +02:00

ansible.cfg

					
				@ -7,1 +7,4 @@

				interpreter_python = python3

				[ssh_connection]

				ssh_args = -F ssh.cfg -o StrictHostKeyChecking=accept-new -o UserKnownHostsFile=known_hosts

Setting -F fully changed the configuration and ignores the ~/.ssh/config, right? While I see the benefit of preventing config bleed, this would then also ignore custom global SSH configuration, which one would then need to replicate in the ssh.cfg.local, which just introduces another quirk to worry about when using this repo.

Setting `-F` fully changed the configuration and ignores the `~/.ssh/config`, right? While I see the benefit of preventing config bleed, this would then also ignore custom global SSH configuration, which one would then need to replicate in the `ssh.cfg.local`, which just introduces another quirk to worry about when using this repo.