ARA Records Ansible on Ubuntu 24.04 LTS

Azure Developer Tools

records every Ansible playbook run and turns the plays, tasks, hosts and results into a searchable web reporting interface and REST API.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

ARA Records Ansible is an open source, self hosted reporting tool for Ansible. A lightweight callback plugin captures every play, task, host and result as your playbooks run and sends it to a small API server, which stores the data and renders it in a clean web interface backed by a REST API. Point Ansible at the recorder, run your playbooks exactly as you already do, and a durable, queryable record of what ran, on which hosts, in what order and what changed builds up automatically, so you can see at a glance which task failed on which host and browse the full history of a run.

It suits anyone running Ansible beyond a laptop, from an operator who wants to troubleshoot a failed run to a platform team that needs a shared, searchable audit trail of every change across many playbooks and control nodes, and who would rather keep that execution history on infrastructure they own than send it to a hosted service.

Why the cloudimg image

ARA defaults to unauthenticated read and write, which on an exposed port means anyone who can reach it could read every recorded run or inject and delete data. cloudimg closes both before the server is ever reachable: the reporting UI and the REST API are configured to require authentication for reads and writes alike, the application server is bound to the loopback interface behind an nginx reverse proxy as the single public listener, and no account or shared password ships in the image. On the first boot of every instance a fresh application secret key is generated and a unique administrator credential is created and written to a root only file, and the service is held back from starting until that first boot has run, so an instance can never come up with an open endpoint or a known default. Ansible and the callback are installed and wired in, so the appliance records runs out of the box, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.

Common uses

  • Recording and troubleshooting Ansible playbook runs across a fleet
  • A searchable audit trail of what Ansible changed, where and when
  • Self hosted Ansible reporting you own instead of a hosted service

See it running

Real screenshots taken while testing this image against its deployment guide.

ARA Records Ansible on Ubuntu 24.04 LTS screenshot 1 ARA Records Ansible on Ubuntu 24.04 LTS screenshot 2 ARA Records Ansible on Ubuntu 24.04 LTS screenshot 3 ARA Records Ansible on Ubuntu 24.04 LTS screenshot 4