News for hackers. Stuff that matters.
Re:Terraform is currently not reviewing community pull requests by chousuke on Monday September 06, 2021 @12:48AM (#28430383)
Terraform is a massive improvement over Ansible if you do anything non-trivial; even if it sucks, it sucks significantly less than Ansible at managing infrastructure resources.

I sometimes fool myself into thinking I can use Ansible in simple cases and that Terraform would be overkill but so far I've regretted those decisions every time.

Re:Terraform is currently not reviewing community pull requests by takeda on Monday September 06, 2021 @06:08AM (#28432147)
Ansible wasn't designed for IaC, but configuration management, and even at that wasn't the best tool.

What made it popular was that it was easiest to start with, but that's pretty much all of its strength compared to the competition.

Re:Terraform is currently not reviewing community pull requests by chousuke on Monday September 06, 2021 @10:58AM (#28434300)
Ansible is sort of bad at everything, and does a few things decently.

I use it as an orchestrator / clusterssh replacement, but for configuration management it makes me nervous because I can't trust it to just not break for stupid reasons.

Re:Terraform is currently not reviewing community pull requests by takeda on Monday September 06, 2021 @09:06PM (#28439763)
Last time I used it on Amazon Linux 2 with packer. It worked, but 1/3 of the time it failed with some strange error about yum database corruption.

I suspect what was happening is that Amazon Linux on start run yum to apply all available updates, and ansible was not respect yum locks, which is very surprising given that Ansible came from Red Hat so they should have known how important locking is for yum.

I ended up using salt (which has its own set of issues) and never looked back.