[SAC] [OSGeo] #2684: new VM for demo.pygeoapi.io

[OSGeo]

#2684: new VM for demo.pygeoapi.io
---------------------------+----------------------------------------
 Reporter:  pvgenuchten    |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  normal         |   Milestone:  Sysadmin Contract 2021-II
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+----------------------------------------

Comment (by just):

 Thanks @robe !
 Yes, I can login on the VM, also directly using the SSH Proxy config and
 with key. Sudo works. btw the domain name of the demo server is
 demo.pygeoapi.io (not .org). I've changed in the Wiki.

 Now the challenge is to get Ansible working both from my/a local system
 and later from within the GitHub CI/CD (GitHub Workflows). Usually Ansible
 with (key) root access is used as it will provision system daemons etc.
 This should be fully automated without any password-prompts etc. We will
 setup a dedicated admin user. Think there are two challenges:

 * how a CI/CD process can access the VM directly over the hop (needs SSH
 Proxy Config)
 * how Ansible (within the CI/CD processes) can make direct sudo-changes
 without password prompts

 And yes, could be first tested with a staging server (domain).

 Within the project we need to decide if we first move to full GitOps (GH
 Workflows) or migrate with the existing Ansible setup and commit webhooks.
 Also the Docker build is currently migrated from DockerHub to GitHub.

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2684#comment:5>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.