Install Passbolt pro server with Ansible

Hi,

i would like to install “Passbolt-pro-server” with Ansible in a non-interactive mode :
i 've written a role like this :

tasks file for passbolt

  • name: passbolt/mysql-configuration
    debconf:
    name: passbolt-pro-server
    question: passbolt/mysql-configuration
    value: true
    vtype: boolean

  • name: passbolt/mysql-passbolt-username
    debconf:
    name: passbolt-pro-server
    question: passbolt/mysql-passbolt-username
    value: Passbolt_username
    vtype: string

  • name: passbolt/mysql-passbolt-password
    debconf:
    name: passbolt-pro-server
    question: passbolt/mysql-passbolt-password
    value: Passbolt_pw_sql
    vtype: password
    no_log: true

  • name: passbolt/mysql-passbolt-dbname
    debconf:
    name: passbolt-pro-server
    question: passbolt/mysql-passbolt-dbname
    value: Passbolt_dbname
    vtype: string

  • name: passbolt/nginx-configuration
    debconf:
    name: passbolt-pro-server
    question: passbolt/nginx-configuration
    value: true
    vtype: boolean

  • name: passbolt/nginx-configuration-three-choices
    debconf:
    name: passbolt-pro-server
    question: passbolt/nginx-configuration-three-choices
    value: auto
    vtype: select

  • name: passbolt/nginx-domain
    debconf:
    name: passbolt-pro-server
    question: passbolt/nginx-domain
    value: Passbolt_domain
    vtype: string

  • name: telechargement scrpit installation dependance
    get_url:
    url: https://download.passbolt.com/pro/installer/passbolt-repo-setup.pro.sh
    dest: /root/

  • name: telechargement SHA512SUM
    get_url:
    url: https://github.com/passbolt/passbolt-dep-scripts/releases/latest/download/passbolt-pro-SHA512SUM.txt
    dest: /root/

  • name: script valide
    shell: “sha512sum -c passbolt-pro-SHA512SUM.txt && bash ./passbolt-repo-setup.pro.sh || echo "Bad checksum. Aborting" && rm -f /tmp/passbolt-repo-setup.pro.sh”

  • name: install passbolt
    environment:
    DEBIAN_FRONTEND: noninteractive
    apt:
    name: passbolt-pro-server
    state: present

When i’ve launched my playbook with right variables. The installation was blocked. i have no idea where is the issue.
I’ve looked for on Internet to solve that but i 've found nothing.

Could you help me, please ?

Thanks a lot.

hey @Luc welcome to the forum!

Could you post the output from when you run this?

Specifically any errors

i have this :

and this :

then that’stopped ans nothing

And this :

Thanks for sharing those!

Two things stand out as missing from your tasks from the helpsite page

  1. You are missing a task for passbolt/mysql-passbolt-password-repeat
  2. For passbolt/nginx-configuration-three-choices the description says “SSL configuration: When certbot package is installed, you can choose between auto, manual and none” and I don’t see certbot being manually installed here

I’d suggest trying to mysql-passbolt-password-repeat first and then checking on certbot if it doesn’t work with the repeat

Thanks for all

i’m very sorry about passbolt/mysql-passbolt-password-repeat, i’ve deleted it without wanting that.

i’ve checked with it and installed Cerbot.

That wasn’t resolved my issue.

i’ve a question. In this webpage Passbolt Help | Install Passbolt Pro on Debian 11 (Bullseye), i’ve seen we have to entry:
install sql
administrator name
administrator password
user name
password name
database name
nginx configuration

but in this page Passbolt Help | How to install passbolt in non-interactive mode ?, i’ve seen :
install sql
password name
password name repeat
database name
nginx configuration

There are differences. Could this work ? Because, i’ve setup with the second variables and would like install passbolt pro.

thanks for your answers

it should still work without the MySQL admin account name and password being set.

A thing to check though:

name: passbolt/nginx-domain
debconf:
name: passbolt-pro-server
question: passbolt/nginx-domain
value: Passbolt_domain
vtype: string

It looks like in your screenshots that Passbolt_domain is being passed for passbolt/nginx-domain this could be causing the issue as during that step of the set up it requires using either an IP address or a real domain name, otherwise it will prompt you to enter it again

Could you try with either the domain name you plan to use or an IP address? If you are going to use an IP address you’ll want to turn off the auto SSL option

Thanks a lot Clayton,

With your advices, i’ve solved my issue.

Thank you very much.

2 Likes