Skip to content

craigpearson/mac-dev-playbook

 
 

Repository files navigation

Mac Development Ansible Playbook

CI

This playbook installs and configures most of the software needed to get you up and running for web development

Prerequisites

SSH Key Pairs

Most of the connections to development services (such as GitHub, Virtual Machines) will be done via SSH, before setting up the environment generate a new key and add it to the relevant services.

Generate local SSH Key Pair

Make the .ssh directory if it doesn't exist

mkdir ~/.ssh && cd ~/.ssh

Generate a new SSH key

ssh-keygen -t ed25519 -C "your_email@example.com"

Enter a password for the keypair, and remember where this keypair is stored, for example /Users/{your_username}/.ssh/id_ed25519

Add SSH Key to ssh-agent

Create your ssh config file

touch ~/.ssh/config

Add your key to the ssh config file:

nano ~/.ssh/config
Host *
  AddKeysToAgent yes
  UseKeychain yes
  IdentityFile ~/.ssh/id_ed25519

Add your SSH private key to the ssh-agent and store your passphrase in the keychain

ssh-add -K ~/.ssh/id_ed25519

Copy the contents of your public key to your clipboard and add this to all the required services such as Github, Bitbucket and Virtual Machines / Bastions

pbcopy < ~/.ssh/id_ed25519.pub

Test Github access:

ssh -T git@github.com

Install Apple's Command Line Tools

xcode-select --install

Install HomeBrew

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)”

For upto date installation instructions visit the HomeBrew Installation page

Install Python3

brew install python3

Add python to path

export PATH=$PATH:~/Library/Python/3.8/bin

Install / Update PIP**

pip3 install --upgrade pip

Install Ansible

pip3 install 'ansible-core==2.11.6'

Install Git Command Line**

brew install git

Clone this repo

mkdir ~/code
cd ~/code/ && git clone git@github.com:craigpearson/mac-dev-playbook.git
cd mac-dev-playbook

Install Galaxy Dependancies

ansible-galaxy install -r requirements.yml ansible-galaxy collection install geerlingguy.mac

Run the installation playbook

ansible-playbook main.yml --ask-become-pass

Installation

  1. If this is the first provision you'll need to configure the prerequisites for this repo
  2. Clone or download this repository to your local drive.
  3. Run ansible-galaxy install -r requirements.yml inside this directory to install required Ansible roles.
  4. Run ansible-playbook main.yml --ask-become-pass inside this directory. Enter your macOS account password when prompted for the 'BECOME' password.

Note: If some Homebrew commands fail, you might need to agree to Xcode's license or fix some other Brew issue. Run brew doctor to see if this is the case.

Use with a remote Mac

You can use this playbook to manage other Macs as well; the playbook doesn't even need to be run from a Mac at all! If you want to manage a remote Mac, either another Mac on your network, or a hosted Mac like the ones from MacStadium, you just need to make sure you can connect to it with SSH:

  1. (On the Mac you want to connect to:) Go to System Preferences > Sharing.
  2. Enable 'Remote Login'.

You can also enable remote login on the command line:

sudo systemsetup -setremotelogin on

Then edit the inventory file in this repository and change the line that starts with 127.0.0.1 to:

[ip address or hostname of mac]  ansible_user=[mac ssh username]

If you need to supply an SSH password (if you don't use SSH keys), make sure to pass the --ask-pass parameter to the ansible-playbook command.

Running a specific set of tagged tasks

You can filter which part of the provisioning process to run by specifying a set of tags using ansible-playbook's --tags flag. The tags available are dotfiles, homebrew, mas, extra-packages and osx.

ansible-playbook main.yml -K --tags "dotfiles,homebrew"

Overriding Defaults

Not everyone's development environment and preferred software configuration is the same.

You can override any of the defaults configured in default.config.yml by creating a config.yml file and setting the overrides in that file. For example, you can customize the installed packages and apps with something like:

homebrew_installed_packages:
  - cowsay
  - git
  - go

mas_installed_apps:
  - { id: 443987910, name: "1Password" }
  - { id: 498486288, name: "Quick Resizer" }
  - { id: 557168941, name: "Tweetbot" }
  - { id: 497799835, name: "Xcode" }

composer_packages:
  - name: hirak/prestissimo
  - name: drush/drush
    version: '^8.1'

gem_packages:
  - name: bundler
    state: latest

npm_packages:
  - name: webpack

pip_packages:
  - name: mkdocs

configure_dock: true
dockitems_remove:
  - Launchpad
  - TV
dockitems_persist:
  - name: "Sublime Text"
    path: "/Applications/Sublime Text.app/"
    pos: 5

Any variable can be overridden in config.yml; see the supporting roles' documentation for a complete list of available variables.

Included Applications / Configuration (Default)

Applications (installed with Homebrew Cask):

Packages (installed with Homebrew):

  • autoconf
  • bash-completion
  • doxygen
  • gettext
  • gifsicle
  • git
  • go
  • gpg
  • hub
  • httpie
  • iperf
  • libevent
  • sqlite
  • mcrypt
  • nmap
  • node
  • nvm
  • php
  • ssh-copy-id
  • cowsay
  • readline
  • openssl
  • pv
  • wget

My dotfiles are also installed into the current user's home directory, including the .osx dotfile for configuring many aspects of macOS for better performance and ease of use. You can disable dotfiles management by setting configure_dotfiles: no in your configuration.

Finally, there are a few other preferences and settings added on for various apps and services.

Future additions

Things that still need to be done manually

It's my hope that I can get the rest of these things wrapped up into Ansible playbooks soon, but for now, these steps need to be completed manually (assuming you already have Xcode and Ansible installed, and have run this playbook).

  1. Set JJG-Term as the default Terminal theme (it's installed, but not set as default automatically).
  2. Install all the apps that aren't yet in this setup (see below).
  3. Remap Caps Lock to Escape (requires macOS Sierra 10.12.1+).
  4. Set trackpad tracking rate.
  5. Set mouse tracking rate.
  6. Configure extra Mail and/or Calendar accounts (e.g. Google, Exchange, etc.).

Configuration to be added:

  • I have vim configuration in the repo, but I still need to add the actual installation:
    mkdir -p ~/.vim/autoload
    mkdir -p ~/.vim/bundle
    cd ~/.vim/autoload
    curl https://raw.githubusercontent.com/tpope/vim-pathogen/master/autoload/pathogen.vim > pathogen.vim
    cd ~/.vim/bundle
    git clone git://github.com/scrooloose/nerdtree.git
    

Testing the Playbook

Many people have asked me if I often wipe my entire workstation and start from scratch just to test changes to the playbook. Nope! Instead, I posted instructions for how I build a Mac OS X VirtualBox VM, on which I can continually run and re-run this playbook to test changes and make sure things work correctly.

Additionally, this project is continuously tested on GitHub Actions' macOS infrastructure.

Ansible for DevOps

Check out Ansible for DevOps, which teaches you how to automate almost anything with Ansible.

Author

This project was created by Jeff Geerling (originally inspired by MWGriffin/ansible-playbooks).

About

Mac setup and configuration via Ansible.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Shell 100.0%