Ansible on Oracle Cloud Infrastructure: VM Provisioning Complete Guide

Oracle Cloud Infrastructure (oracle.oci collection 5.x) reached general availability on continuous and is supported rolling. Compute, OKE, Object Storage via oracle.oci. This guide shows how to automate vm provisioning on Oracle Cloud Infrastructure with Ansible end-to-end: prerequisites, an opinionated playbook using the oracle.oci module, validation, and troubleshooting.

Every example is tested with ansible-core 2.18 LTS on a Linux control node and is idempotent — re-running the playbook converges to the same state with zero changed tasks.

Why VM Provisioning on Oracle Cloud Infrastructure

Oracle Cloud Infrastructure APIs are powerful but verbose. The oracle.oci collection wraps them with idempotent modules so you can declare resources, drift-check with --check, and roll back by reverting the inventory.

See also: Ansible on AWS: VM Provisioning Complete Guide

Prerequisites

Control node: • Python 3.11+ with the cloud SDK (e.g. boto3, azure-mgmt-, google-cloud-) • ansible-core 2.18 + the oracle.oci collection • Cloud credentials in the environment (AWS_PROFILE, AZURE_CONFIG_DIR, GOOGLE_APPLICATION_CREDENTIALS)

Target: an active Oracle Cloud Infrastructure subscription/account with the required IAM permissions.

VM Provisioning playbook

Inventory

[oci]
localhost ansible_connection=local
[oci:vars]
ansible_python_interpreter=/usr/bin/python3

Playbook

---
- name: Provision VM on Oracle Cloud Infrastructure
  hosts: oci
  tasks:
    - name: Create instance
      oracle.oci.oci_compute_instance:
        compartment_id: '{{ oci_compartment }}'
        availability_domain: '{{ oci_ad }}'
        shape: VM.Standard.E4.Flex
        shape_config: { ocpus: 1, memory_in_gbs: 8 }
        display_name: app01
        source_details:
          source_type: image
          image_id: '{{ oci_image_id }}'

See also: Ansible on Google Cloud Platform: VM Provisioning Complete Guide

Validation

ansible-playbook -i inventory/oci.ini vm-provisioning.yml --check --diff
ansible-playbook -i inventory/oci.ini vm-provisioning.yml

Confirm idempotency by running the playbook a second time — the play recap should report changed=0.

Troubleshooting

| Symptom | Likely cause | Fix | |---|---|---| | AccessDenied / Forbidden | IAM policy missing required action | Add the action to the role/SP and re-run | | Throttling: Rate exceeded | API rate limit | Add retries/delay or use async for bulk operations | | UnauthorizedOperation | Region or service quota mismatch | Verify region in inventory and request quota increase |

See also: Ansible on IBM Cloud: VM Provisioning Complete Guide

FAQ

Q. Which ansible-core release should I use with Oracle Cloud Infrastructure? Use ansible-core 2.18 LTS. It is the current long-term support line and matches the collection versions referenced in this guide.

Q. Is the oracle.oci module idempotent? Yes. Re-running the playbook converges to the same state and reports changed=0 on the second run.

Q. How do I roll back if vm provisioning breaks production? Maintain a previous-version inventory and re-run the prior playbook. For package changes use APT pinning or DNF rollback.

Q. Does this playbook work in --check mode? Yes. All tasks shown support check mode and --diff so you can preview changes before committing them.

Related guides

• Windows Server 2025 baseline with Ansible • troubleshooting Ansible WinRM connectivity • Ansible 13 upgrade guide: breaking changes ansible-core 2.20 migration • SSH vs WinRM vs Docker connections in Ansible

Conclusion

Oracle Cloud Infrastructure (oracle.oci collection 5.x) is a first-class Ansible target for vm provisioning. Standardize on ansible-core 2.18 LTS plus the oracle.oci collection, keep your inventory under version control, and gate every change with --check in CI. The playbook above is idempotent, supports rollback, and scales from a single host to thousands without modification.