Introduction to Ansible Builder
ansible-builder you can configure and build portable, consistent, customized Ansible control nodes that are packaged as containers by Podman or Docker.
These containers are known as execution environments. You can use them on AWX or Ansible Controller, with Ansible Navigator, for local playbook development and testing, in your CI pipelines, and anywhere else you run automation.
You can design and distribute specialized execution environments for your Ansible content, choosing the versions of Python and ansible-core you want, and installing only the Python packages, system packages, and Ansible collections you need for your tasks.
Ansible Builder depends on more generalized containerization tools like Podman or Docker.
Before you start using Ansible Builder, you should understand the following concepts and terms relevant to any use of containers:
Build instruction file (called a
Containerfilein Podman and a
Dockerfilein Docker): an instruction file for creating a container image by installing and configuring the code and dependencies.
Container: a package of code and dependencies that runs a service or an application across a variety of computing environments.
Image: a complete but inactive version of a container - you can distribute images and create one or more containers based on each image.
Refer to the Getting started with Execution Environments guide for details.
To get started with Ansible Builder, you must install the
ansible-builder utility and a containerization tool.
Once you have the tools you need, create an execution environment definition file.
By default, this file is called
.yaml extension is also accepted).
In the execution environment definition file, you can specify the exact content you want to include in your
execution environment. You can specify these items:
the base container image
the version of Python
the version of ansible-core
the version of ansible-runner
Ansible collections, with version restrictions
system packages, with version restrictions
Python packages, with version restrictions
other items to download, install, or configure
You can use any base image you choose. The smaller the base image, generally, the smaller the final image. However, to make Ansible Builder more efficient, you should know what packages, if any, are already installed on the base image you use.
For example, some base images already have Python installed. Others do not. If you use a base image that already has Python installed, you can omit Python in your execution environment definition file. Not all base images have package managers installed.
Ansible Builder can execute two separate steps:
The first step is to create a build instruction file (
Dockerfilefor Docker) and a build context based on the execution environment definition file.
The second step is to run a containerization tool (Podman or Docker) to build an image based on the build instruction file and build context.
ansible-builder build command runs both steps.
ansible-builder create command runs only the first step. For more details, read through the CLI usage docs.
Ansible Builder executes four stages when it runs your containerization tool to build a container image.
The same four stages get executed if you build your container image directly with Podman or Docker, using a build instruction file and context generated by
ansible-builder create. These stages are:
Base: uses Podman or Docker to pull the base image you defined, then installs the Python version (if defined and different from any Python on the base image), pip, ansible-runner, and ansible-core or ansible. All three later stages of the build process build on the output of the Base stage.
Galaxy: downloads the collections you defined from Galaxy and stashes them locally as files.
Builder: downloads the other packages (Python packages and system packages) you defined and stash them locally as files.
Final: integrates the first three stages, installing all the stashed files on the output of the Base stage and generating a new image that includes all the content.
Ansible Builder injects hooks at each stage of the container build process so you can add custom steps before and after every build stage.
You may need to install certain packages or utilities before the Galaxy and Builder stages. For example, if you need to install a collection from GitHub, you must install git after the Base stage to make it available during the Galaxy stage.
To add custom build steps, add an
additional_build_steps section to your execution environment definition. For more details, read through the CLI usage docs.
When Ansible Builder installs collections into an execution environment, it also installs each collection’s dependencies if they are specified. Collection maintainers can learn to correctly declare dependencies for their collections from the collection-level dependencies page.
- Introduction to Ansible Builder
- Execution environment definition
- CLI Usage
- Flags for the
- Deprecated Features
- Collection-level dependencies
- Dependency introspection
- How to verify collection-level metadata
- Ansible Builder version 3 Porting Guide