Skip to content

[FR] Provide Ansible playbook for DFIR-IRIS deployment #910

@mfeti

Description

@mfeti

I have checked the roadmap and existing issues - no Ansible automation currently exists for DFIR-IRIS deployment.

Is your feature request related to a problem? Please describe.
Currently, DFIR-IRIS supports deployment via Docker Compose and Kubernetes (Helm/Kustomize), but there is no official support for Ansible automation. For teams that rely on Ansible to manage their infrastructure, this creates inconsistency in deployment processes and requires manual steps that break their infrastructure-as-code workflows. Teams have to manually clone repositories, configure environment variables, install dependencies, and manage Docker Compose commands across multiple servers, which is error-prone and time-consuming.

Describe the solution you'd like
I would like to contribute an Ansible playbook that automates the complete DFIR-IRIS deployment process. The playbook would include:

  • Dependencies installation: Automatically install Docker and Docker Compose
  • Repository management: Clone the DFIR-IRIS repository to the target system
  • Environment configuration: Set up required environment variables and configuration files
  • Service deployment: Launch DFIR-IRIS containers using docker-compose up -d
  • Health checks: Verify that services are running correctly
  • Optional modules: Include roles for updates, backups, and multi-server deployments

This would allow teams to deploy DFIR-IRIS with a simple ansible-playbook deploy-iris.yml command.

Describe alternatives you've considered

  • Manual Docker Compose deployment: Works but requires manual steps for each server and lacks consistency across environments
  • Kubernetes with Helm/Kustomize: Already supported by DFIR-IRIS, which is excellent for containerized environments. However, not all teams run Kubernetes clusters, and some prefer traditional VM-based deployments managed by Ansible
  • Custom shell scripts: Could automate deployment but would lack the idempotency, error handling, inventory management, and cross-platform support that Ansible provides
  • Other automation tools (Terraform, Puppet, Chef): While possible, Ansible is widely adopted for application deployment and would complement existing infrastructure workflows

Additional context

  • I have already developed a working Ansible playbook for DFIR-IRIS deployment and am ready to contribute it
  • The playbook has been tested on Ubuntu/Debian and CentOS/RHEL systems
  • This would complement the existing deployment options rather than replace them, serving teams with traditional infrastructure management needs
  • Proposed location: /deploy/ansible/ directory in the repository
  • The contribution would include documentation and example inventory files

I'm happy to open a Pull Request and work with the maintainers to integrate this into the official DFIR-IRIS project.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions