LINT

ANSIBLE LINT

Installer Lint

Install avec pip

$ pip3 install ansible-lint

Syntaxe

$ ansible-lint --help

usage: ansible-lint [-h] [-L] [-f {rich,plain,rst,codeclimate,quiet,pep8}]
                [-q] [-p] [--parseable-severity] [--progressive]
                [--project-dir PROJECT_DIR] [-r RULESDIR] [-R]
                [--show-relpath] [-t TAGS] [-T] [-v] [-x SKIP_LIST]
                [-w WARN_LIST] [--enable-list ENABLE_LIST] [--nocolor]
                [--force-color] [--exclude EXCLUDE_PATHS] [-c CONFIG_FILE]
                [--offline] [--version]
                [lintables [lintables ...]]

Pour afficher toutes les règles utilisées par défaut il suffit de taper la commande suivante :

$ ansible-lint -v -T

Limiter à certaines règles

$ ansible-lint -t idempotency playbook.yml

Exclure certaines règles

$ ansible-lint -x formatting,metadata playbook.yml

Ignorer les warnings

$ ansible-lint -w experimental playbook.yml

Utilisation

$ ansible-lint playbook.yml -vv

DEBUG    Loading rules from /home/sadmin/.Vpy36/lib/python3.6/site-packages/ansiblelint/rules
INFO     Executing syntax check on playbook.yml (0.70s)
DEBUG    Examining playbook.yml of type playbook
WARNING  Listing 1 violation(s) that are fatal
unnamed-task: All tasks should be named
playbook.yml:67 Task/Handler: firewalld port=80/tcp permanent=True immediate=True zone=public state=enabled

You can skip specific rules or tags by adding them to your configuration file:
# .ansible-lint
warn_list:  # or 'skip_list' to silence them completely
- unnamed-task  # All tasks should be named

Finished with 1 failure(s), 0 warning(s) on 1 files.

Exemple

Exécuter la commande lint sur cet exemple et ensuite réparer

$ vi playbook.yml

---
- hosts: all
  gather_facts: no
  tasks:

    - name: this would typically fire deprecated-command-syntax
      command: chmod 644 fic

    - name: this would typically fire command-instead-of-module
      command: git pull https://github.com/ansible/awx.git

    - name: Run apt-get update
      ansible.builtin.apt:
        update_cache: true
        cache_valid_time: 3600
        force_apt_get: true
      ignore_errors: true

$ ansible-lint playbook.yml