Introduction

This repository contains the necessary infrastructure-as-code for setting up a SonarQube instance running in Docker containers on a Ubuntu server host.

Preparation

You will need a Linux host to run Ansible scripts from, but to avoid issues around compatibility between different versions of Vagrant it's recommended that you use the included Vagrant control01 host for development and production runs of Ansible playbooks. Whether running on Linux yourself or in Git Bash from Windows, you must ensure that you have an SSH key-pair in ~/.ssh.

The included Vagrantfile needs the hostmanager plugin, so if you are going to use the Vagrant boxes please run he following to install it: vagrant plugin install vagrant-hostmanager.

If you are doing development against the Vagrant hosts, the Vagrantfile will take care of copying your private key to the control host and the public key to the target hosts.

If instead you are going to be working on production you should use something like ssh-copy-id infrastructure@192.168.2.160 to add your public key to the target host's ~/.ssh/authorized_keys file.

Setting up the Vagrant DEV environment

To set up the Vagrant local DEV environment run the following commands:

vagrant plugin install vagrant-hostmanager
vagrant up

Setting up targets

Now to set up the target VM locally on develop run:

vagrant ssh
cd /vagrant
ansible-playbook plays/sonar.yml -i inventories/dev

Wait a little bit after the play finishes for everything to start up, then try to hit http://localhost:9000.

Inventories

• inventories/dev: Unencrypted local DEV without any LDAP authentication configured.
• inventories/dev_ldap: Encrypted local DEV with LDAP authentication configured.
• inventories/prd: Encrypted production configuration.
• inventories/host_vars/*: Encrypted additional production certificate configuration variables.

To use the encrypted file you need to add the --vault-id @prompt option as follows:

ansible-playbook -i inventories/dev_ldap --vault-id @prompt plays/sonar.yml

To deploy to production:

ansible-playbook -i inventories/prd --vault-id @prompt plays/sonar.yml

If you ever need to edit an encrypted inventory:

ansible-vault edit inventories/prd