MacOS DevOps Ansible Configuration

This playbook installs and configures most of the software I use on my Mac for DevOps and Cloud Engineering. Some things in macOS are slightly difficult to automate, so I still have a few manual installation steps, but at least it's all documented here.

Installation

1. Ensure Apple's command line tools are installed (xcode-select --install to launch the installer).

2. Install Ansible:

   1. Run the following command to add Python 3 to your $PATH: export PATH="$HOME/Library/Python/3.9/bin:/opt/homebrew/bin:$PATH"
   2. Upgrade Pip: sudo pip3 install --upgrade pip
   3. Install Ansible: pip3 install ansible

3. Clone or download this repository to your local drive.

4. Run ansible-galaxy install -r requirements.yml inside this directory to install required Ansible roles.

5. Run ansible-playbook main.yml --ask-become-pass inside this directory. Enter your macOS account password when prompted for the 'BECOME' password.

Note: If some Homebrew commands fail, you might need to agree to Xcode's license or fix some other Brew issue. Run brew doctor to see if this is the case.

Running a specific set of tagged tasks

You can filter which part of the provisioning process to run by specifying a set of tags using ansible-playbook's --tags flag. The tags available are dotfiles, homebrew, mas, extra-packages and osx.

ansible-playbook main.yml -K --tags "dotfiles,homebrew"

Overriding Defaults

Not everyone's development environment and preferred software configuration is the same.

You can override any of the defaults configured in default.config.yml by creating a config.yml file and setting the overrides in that file. For example, you can customize the installed packages and apps with something like:

homebrew_installed_packages:
  - cowsay
  - git
  - go

mas_installed_apps:
  - { id: 443987910, name: "1Password" }
  - { id: 498486288, name: "Quick Resizer" }
  - { id: 557168941, name: "Tweetbot" }
  - { id: 497799835, name: "Xcode" }

pip_packages:
  - name: mkdocs

configure_dock: true
dockitems_remove:
  - Launchpad
  - TV
dockitems_persist:
  - name: "Google Chrome"
    path: "/Applications/Google Chrome.app/"
    pos: 5

Any variable can be overridden in config.yml; see the supporting roles' documentation for a complete list of available variables.

Included Applications / Configuration

Applications (installed with Homebrew Cask):

• 1Password
• Bitwarden
• Google Chrome
• Slack
• Visual Studio Code

Packages (installed with Homebrew):

• coreutils
• colima
• docker
• git
• gnu-sed
• gnu-which
• gnutls
• go
• gpg
• helm
• helmfile
• kubectl
• kubectx
• neovim
• openssl
• ssh-copy-id
• sops
• terraform
• terraform-docs
• tflint
• telnet
• velero
• watch
• wget
• zsh
• zsh-history-substring-search

My dotfiles are also installed into the current user's home directory, including the .osx dotfile for configuring many aspects of macOS for better performance and ease of use. You can disable dotfiles management by setting configure_dotfiles: no in your configuration.

Finally, there are a few other preferences and settings added on for various apps and services.

Author

This project was created by Jeff Geerling (originally inspired by MWGriffin/ansible-playbooks).