Chapter 1. Introduction to RHEL System Roles
By using RHEL System Roles, you can remotely manage the system configurations of multiple RHEL systems across major versions of RHEL. RHEL System Roles is a collection of Ansible roles and modules. To use it to configure systems, you must use the following components:
- Control node
- A control node is the system from which you run Ansible commands and playbooks. Your control node can be an Ansible Automation Platform, Red Hat Satellite, or a RHEL 9, 8, or 7 host. For more information, see Preparing a control node on RHEL 8.
- Managed node
- Managed nodes are the servers and network devices that you manage with Ansible. Managed nodes are also sometimes called hosts. Ansible does not have to be installed on managed nodes. For more information, see Preparing a managed node.
- Ansible playbook
- In a playbook, you define the configuration you want to achieve on your managed nodes or a set of steps for the system on the managed node to perform. Playbooks are Ansible’s configuration, deployment, and orchestration language.
- Inventory
- In an inventory file, you list the managed nodes and specify information such as IP address for each managed node. In an inventory, you can also organize managed nodes, creating and nesting groups for easier scaling. An inventory file is also sometimes called a hostfile.
On Red Hat Enterprise Linux 8, you can use the following roles provided by the rhel-system-roles package, which is available in the AppStream repository:
| Role name | Role description | Chapter title |
|---|---|---|
|
| Certificate Issuance and Renewal | Requesting certificates using RHEL System Roles |
|
| Web console | Installing and configuring web console with the cockpit RHEL System Role |
|
| System-wide cryptographic policies | Setting a custom cryptographic policy across systems |
|
| Firewalld | Configuring firewalld using System Roles |
|
| HA Cluster | Configuring a high-availability cluster using System Roles |
|
| Kernel Dumps | Configuring kdump using RHEL System Roles |
|
| Kernel Settings | Using Ansible roles to permanently configure kernel parameters |
|
| Logging | Using the logging System Role |
|
| Metrics (PCP) | Monitoring performance using RHEL System Roles |
|
| Microsoft SQL Server | Configuring Microsoft SQL Server using the microsoft.sql.server Ansible role |
|
| Networking | Using the network RHEL System Role to manage InfiniBand connections |
|
| Network Bound Disk Encryption client | Using the nbde_client and nbde_server System Roles |
|
| Network Bound Disk Encryption server | Using the nbde_client and nbde_server System Roles |
|
| Postfix | Variables of the postfix role in System Roles |
|
| SELinux | Configuring SELinux using System Roles |
|
| SSH client | Configuring secure communication with the ssh System Roles |
|
| SSH server | Configuring secure communication with the ssh System Roles |
|
| Storage | Managing local storage using RHEL System Roles |
|
| Terminal Session Recording | Configuring a system for session recording using the tlog RHEL System Role |
|
| Time Synchronization | Configuring time synchronization using RHEL System Roles |
|
| VPN | Configuring VPN connections with IPsec by using the vpn RHEL System Role |
Additional resources
- Red Hat Enterprise Linux (RHEL) System Roles
-
/usr/share/doc/rhel-system-roles/provided by therhel-system-rolespackage
