An Ansible role to idempotently configure a VyOS Appliance

The reason I created this is that the Ansible provider for VyOS hasn't been updated since VyOS 1 and lacks quite a few important modules. Also, it lacks any way to remove config entries, it just knows how to add them, and (sometimes) update them.

This role simply takes a jinja2 template and produces the relevant config section with it.

This role deletes the relevant config section before applying the configuration. This means that everytime you run the role, it will overwrite your config, but it also means that when it does this the output will be a 1 to 1 mapping of what you define in your Ansible variables. This is helpful because you know that the config you define via the variables is the config that will always be applied.

If you ever want to see how a config will look without actually applying it, simply run the role with the tags never,dry-run.

If you want the output even cleaner, just pipe using the following one liner:

| grep '"' | grep -v '"msg":' | awk -F'"' '{print $$2}'

This will result with a print out of the exact set commands used to configure.

If you need a VyOS image, see my other repository here which is a VyOS 1.4 Sagitta build with Tailscale and Netbird clients included along with a qcow2 image with cloud-init support for Proxmox.

I have defined in this role what I need for my use case. If you find that you need more, feel free to add to it (just a jinja2 template of VyOS commands that create the relevant config section). Feel free to create a PR, I'd love to expand this!

• @astr0n8t