Real-time Ansible Interview Questions and Answers

1. How would you ensure that a specific package is installed on multiple servers?

Answer: You can use the package module in an Ansible playbook to ensure a specific package is installed across multiple servers. For example:

- name: Ensure package is installed
  package:
    name: httpd
    state: present
    

2. How do you handle different environments (development, testing, production) with Ansible?

Answer: You can manage different environments by using separate inventory files and group variables. Each environment can have its own inventory file (e.g., dev.ini, test.ini, prod.ini), and you can define environment-specific variables using group_vars directories. This allows you to target specific groups or environments.

3. How would you restart a service after updating a configuration file?

Answer: Use the notify feature to trigger a handler that restarts the service once the configuration file is updated. For example:

- name: Update configuration file
  copy:
    src: config.conf
    dest: /etc/service/config.conf
  notify:
    - Restart service

handlers:
  - name: Restart service
    service:
      name: my_service
      state: restarted
    

4. How can you ensure idempotency in your Ansible playbook?

Answer: Ansible modules are designed to be idempotent, meaning they won’t change the system state if it's already in the desired state. For instance, using the file module to create a file will not recreate the file if it already exists, ensuring that running the playbook multiple times has no additional effect.

5. How do you handle secrets or sensitive data in Ansible?

Answer: Sensitive data can be handled using Ansible Vault. You can encrypt variables or files to securely store sensitive information such as passwords or API keys. For example, use the ansible-vault command to encrypt a file:

ansible-vault encrypt secrets.yml
    

6. Can you explain how you would deploy an application using Ansible?

Answer:

• Define Inventory: Create an inventory file listing the target hosts.
• Create a Playbook: Write a playbook with tasks such as pulling the application code from a repository, installing dependencies, configuring files, and starting services.

Example playbook:

- hosts: webservers
  tasks:
    - name: Pull application code
      git:
        repo: 'https://github.com/user/app.git'
        dest: /var/www/app
    - name: Install dependencies
      package:
        name: "{{ item }}"
        state: present
      with_items:
        - python3
        - nginx
    - name: Restart nginx service
      service:
        name: nginx
        state: restarted
    

7. How would you handle task failures and retries in Ansible?

Answer: You can specify the retries and delay parameters to retry a task after failure. The when directive can also be used to control task execution.

Example:

- name: Retry task if it fails
  command: /bin/false
  retries: 3
  delay: 5
  register: result
  until: result.rc == 0
    

8. How would you roll back a deployment if the new version fails?

Answer: To roll back a deployment, you can keep the previous application version in a separate directory or backup and use a playbook to check the health of the new version. If the health check fails, revert to the old version. You could use git or rsync to switch versions.

9. How can you manage firewall rules across multiple servers using Ansible?

Answer: You can use the firewalld or iptables modules to manage firewall rules. Example:

- name: Open port 80 on firewalld
  firewalld:
    service: http
    permanent: yes
    state: enabled
    immediate: yes
    

10. How do you implement a continuous deployment pipeline using Ansible?

Answer: Integrate Ansible with a CI/CD tool like Jenkins, GitLab CI, or GitHub Actions. You can create a playbook that is triggered automatically by these tools when there is a change in your code repository, ensuring continuous deployment with automated testing, deployment, and rollback capabilities.

11. How can you check if a file exists and create it if it doesn’t?

Answer: You can use the stat module to check if a file exists, and if not, use the copy or template module to create it.

Example:

- name: Check if file exists
  stat:
    path: /path/to/file
  register: file_stat

- name: Create file if it does not exist
  copy:
    content: "File content"
    dest: /path/to/file
  when: not file_stat.stat.exists
    

12. How can you execute a command on remote hosts and capture its output?

Answer: You can use the command or shell module to run commands on remote hosts and register the output to a variable.

Example:

- name: Run a command on remote hosts
  shell: "uptime"
  register: uptime_output

- name: Display the output
  debug:
    var: uptime_output.stdout