Because it's simply impossible:

• https://docs.ansible.com/ansible/devel/installation_guide/installation_distros.html#installing-ansible-on-windows
  • https://docs.ansible.com/ansible/devel/user_guide/windows_faq.html#windows-faq-ansible

    No, Ansible can only manage Windows hosts. Ansible cannot run on a Windows host natively, though it can run under the Windows Subsystem for Linux (WSL).

• https://www.microsoft.com/ja-jp/p/ubuntu-2004-lts/9n6svws3rx71
• https://www.microsoft.com/ja-jp/p/ubuntu/9nblggh4msv6

Setup step
https://docs.ansible.com/ansible/latest/user_guide/windows_setup.html#setup-winrm-listener

Error

PS C:\WINDOWS\system32> winrm quickconfig -transport:https
WinRM サービスは、既にこのコンピューターで実行されています。
WSManFault
    Message
        ProviderFault
            WSManFault
                Message = このコンピューターには適切な証明書がないため、HTTPS 上に WinRM リスナーを作成できません。SSL  に使用するには、ホスト名に一致する CN を持ち、サーバー認証に適しており、有効期限内であり、失効しておらず、自己署名されたものでない証明書が必要です。

エラー番号:  -2144108267 0x80338115
このコンピューターには適切な証明書がないため、HTTPS 上に WinRM リスナーを作成できません。SSL に使用するには、ホスト名に 一致する CN を持ち、サーバー認証に適しており、有効期限内であり、失効しておらず、自己署名されたものでない証明書が必要です。

https://support.microsoft.com/ja-jp/help/2019527/how-to-configure-winrm-for-https

Solutions

• https://serverfault.com/questions/608364/unable-to-configure-winrm-https-listener

or HTTP

• https://devblogs.microsoft.com/powershell/compromising-yourself-with-winrms-allowunencrypted-true/

still error

https://docs.ansible.com/ansible/latest/user_guide/windows_setup.html#common-winrm-issues

Winrs error:宛先のコンピューター (localhost:5986)  のサーバー証明書に次のエラーがあります:
SSL 証明書が不明の証明機関によって署名されています。
SSL 証明書にホスト名と一致しない共通名 (CN) が含まれています。

This is intended.
The final command succeeded.

i.e. skip it

Add files under host_vars/ for connection setting, etc. which is named like:

• wsl.yml.example
• win.yml.example

As configured in:

ref

https://docs.ansible.com/ansible/latest/user_guide/playbooks_best_practices.html#group-and-host-variables

list

• Ansible-WSL/hosts.ini

  Line 1 in cd72577

  [ubuntu]

• Ansible-WSL/site.yml

  Line 2 in cd72577

  - hosts: ubuntu

https://github.com/Wintus/Ansible-WSL/blob/5151f2143c205dde9705e7c106f0c52094271063/docs/concept.puml

Reason

https://docs.ansible.com/ansible/devel/reference_appendices/config.html#avoiding-security-risks-with-ansible-cfg-in-the-current-directory

Workaround

https://dev.classmethod.jp/server-side/ansible/tips-ansible-on-wsl/

export ANSIBLE_CONFIG=$(pwd)

This play is removable:

details

• no dependencies of Chocolaty:
  

  Ansible-WSL/roles/ubuntu/tasks/main.yml

  Line 1 in 991c18c

  - name: install packages

• Bash helper is truely an option:
  

  Ansible-WSL/roles/ubuntu/tasks/main.yml

  Line 18 in 991c18c

  - include_tasks: bash-d.yml

ref

https://docs.ansible.com/ansible/latest/modules/win_chocolatey_module.html#synopsis

If Chocolatey is missing from the system, the module will install it.

for easy understanding

ref #1

Tools

• PlantUML

This connection should be WinRM:
https://docs.ansible.com/ansible/latest/user_guide/windows_winrm.html#inventory-options

extract to chocolaty.yml

• Ansible-WSL/roles/chocolatey/tasks/main.yml

  Lines 10 to 13 in 991c18c

  	win_chocolatey:
  	name: "{{ item.name }}"
  	state: "{{ item.state | default('latest') }}"
  	with_items: "{{ packages }}"

• Ansible-WSL/roles/chocolatey/tasks/main.yml

  Lines 2 to 5 in 991c18c

  	win_chocolatey:
  	name: "{{ item.name }}"
  	state: "{{ item.state | default('latest') }}"
  	with_items:

and use as

 - name: self hosting chocolaty 
   import_tasks: chocolaty.yml
   var:
      packages:
        - name: chocolatey
        - name: chocolateygui

 - name: install softwares in the package list. 
   import_tasks: chocolaty.yml
   var:
      packages: "{{ chocolaty_packages }}" 

ref #1

distros

other than Ubuntu

• suse
• WLinux

causing error of WinRM WSMan setting

https://docs.ansible.com/ansible/latest/user_guide/windows_setup.html#winrm-service-options

PS C:\WINDOWS\system32> Set-Item -Path WSMan:\localhost\Service\AllowUnencrypted -Value false
Set-Item : このコンピューターのネットワーク接続の種類の 1 つが Public に設定されているため、WinRM ファイアウォール例外
は機能しません。 ネットワーク接続の種類を Domain または Private に変更して、やり直してください。
発生場所 行:1 文字:1
+ Set-Item -Path WSMan:\localhost\Service\AllowUnencrypted -Value false
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Set-Item], InvalidOperationException
    + FullyQualifiedErrorId : System.InvalidOperationException,Microsoft.PowerShell.Commands.SetItemCommand

also error:
winrm set winrm/config/service '@{AllowUnencrypted="true"}'

solutions

• https://social.technet.microsoft.com/Forums/en-US/202f962e-30e3-4c62-9593-0087842ea6d5/change-to-private-windows-10-hyperv-vethernet-internal-network-set-to-public?forum=win10itpronetworking
• https://social.msdn.microsoft.com/Forums/en-US/9348367e-ae71-43a1-904c-9cda9b026092/hyperv-how-to-make-hyperv-default-switch-private-network-on-host?forum=servervirtualization
• https://devblogs.microsoft.com/powershell/compromising-yourself-with-winrms-allowunencrypted-true/
• https://qiita.com/arachan@github/items/707ba05befb2d5a5a81a

related #13

TODOs

• add supports of other OS
  • non GNU/Linux (e.g. BSD) maybe supported: https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#control-machine-requirements
  • pywinrm
    https://docs.ansible.com/ansible/latest/user_guide/windows_faq.html#can-ansible-run-on-windows
• extract roles
  • refer another ubuntu project: https://github.com/Wintus/ansible-local
  • bash.d role
  • just delete it #8

docs

• official guide: https://docs.ansible.com/ansible/latest/user_guide/windows.html
• make the concept clear (adding diagrams?)
  • PlantUML?: http://www.plantuml.com/plantuml/uml/SyfFKj2rKt3CoKnELR1Io4ZDoSa70000

distros

other than Ubuntu

• suse
• WLinux

refs

• https://qiita.com/yunano/items/f9d5652a296931a09a70

Since every connections of provisioning is limited within a single host, no need to expose WinRM to LAN/WAN.

options:

• set the firewall to allow WinRM port only in localhost (not local subnet).
• listen WinRM port in the range of localhost IP.

refs?
https://docs.microsoft.com/en-us/windows/desktop/winrm/installation-and-configuration-for-windows-remote-management