Before you begin

Log in to galaxy-jump.tacc.utexas.edu, our landing space inside TACC. I recommend you start a tmux session in case your connection is interrupted or you need to disconnect while something is running.

Perform these steps as your own TACC user. If you don't have a TACC user or are unable to log in to our TACC hosts, create an account at the TACC Portal and send your TACC username to Nate.

Your TACC user will also need various privileges, give Nate your public key and ask nicely for assistance.

First, on your own system, configure SSH agent forwarding by adding the following to your ~/.ssh/config:

Host *.tacc.utexas.edu
    User <your-tacc-username>
    ForwardAgent yes

Now ssh galaxy-jump.tacc.utexas.edu.

Install Ansible per instructions below (see requirements)

Create virtualenvs like so:

$ python3 -m venv ansible
$ . ./ansible/bin/activate
(ansible)$ pip install --upgrade pip
(ansible)$ pip install ansible

Clone the playbook:

$ git clone https://github.com/galaxyproject/usegalaxy-playbook.git

It's very useful to have pass set up over on galaxy-jump so you don't have to use your clipboard to manage the vault password. pass is already installed, so all you need to do is clone the password store to `~/.password-store

$ git clone https://github.com/galaxyproject/password-store.git ~/.password-store

It used to be necessary to set up gpg-agent, but modern Rocky does this for you now. You do need to import your public and private gpg keys, however. Guide here. You can copy all your GnuPG data to galaxy-jump like so:

scp -r ~/.gnupg galaxy-jump.tacc.utexas.edu:

This allows you to run Ansible like:

$ ansible-playbook ...