Prometheus node_exporter (verified)
Official node_exporter release (pinned v1.11.1) with sha256 checksum-verified install, dedicated shell-less system user, and a systemd unit on :9100; live-tested for idempotence with a functional /metrics verification.
Verification
Live-testedReally deployed to a container sandbox, proven idempotent (a second run changes nothing), verified against the role’s assertions, then torn down.
Conformance
- Static validation (yamllint · ansible-lint)
Provenance
- SHA-256 checksum
- Cosign signature
Functional
- Live-tested - applied, verified, destroyed
Last verified 2026-06-10 · how we verify
Verify this download
cosign · sha-256Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.
# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub
# 2. This module's Sigstore bundle
curl -o ansible-node-exporter-1.0.0.sigstore.json \
https://www.iac-bazaar.com/api/artifacts/ansible-node-exporter/signature
# 3. Verify the tarball you downloaded
cosign verify-blob \
--key cosign.pub \
--bundle ansible-node-exporter-1.0.0.sigstore.json \
ansible-node-exporter-1.0.0.tar.gz
# → Verified OK
# 4. (optional) confirm the checksum too
echo "204627645ccfaf7a9f254dccb2a2a87c9adc4a6ed0533d09b1b84d1de08d696f ansible-node-exporter-1.0.0.tar.gz" | sha256sum -cCite it in your README
badge · attributionPaste this beside the module in the repository that uses it. The badge is rendered from this artifact's verification record, so it reads live-tested because the record says so, and the link lands on this page.
[](https://www.iac-bazaar.com/catalog/ansible-node-exporter?utm_source=syndication&utm_medium=readme&utm_campaign=artifact)
Ansible role 1.0.0, live-tested on IaC Bazaar: [Prometheus node_exporter (verified)](https://www.iac-bazaar.com/catalog/ansible-node-exporter?utm_source=syndication&utm_medium=readme&utm_campaign=artifact)
```yaml
# Prometheus node_exporter (verified): https://www.iac-bazaar.com/catalog/ansible-node-exporter (download from your IaC Bazaar account)
```Preview:
Documentation
node-exporter
Prometheus node_exporter as an idempotent Ansible role: downloads the
official upstream release tarball (pinned version, sha256-verified against
the release's sha256sums.txt), installs the binary to /usr/local/bin,
creates a dedicated shell-less system account, and runs it as a systemd
service (Restart=on-failure, configurable --web.listen-address,
default :9100). Original work — not derived from a third-party role.
Live-tested with Molecule + podman (converge + idempotence + functional
verify: service active, /metrics answering with real metric families) on the
Rocky Linux 10 image; supports EL 9/10, Ubuntu, and Debian.
License
Commercial — IaC Bazaar EULA. © IaC Bazaar.
The role code is IaC Bazaar commercial. The node_exporter binary (Apache-2.0, © The Prometheus Authors) is not redistributed in this artifact: it is downloaded at deploy time by the buyer's machine directly from the official upstream GitHub release, with sha256 verification.
Usage code & full reference need an account
The complete copy-paste usage, the full input/output reference, and operational notes are free with an account - shown here and bundled in the download. Sign in and this section fills in.
- Variables
- Test
Related modules
ansible-alertmanager
Prometheus Alertmanager from the upstream release (sha256-verified) as a hardened system service on loopback, its cluster gossip listener switched off and its configuration checked by amtool before it lands. The live test posts an alert through the API and reads it back active, held by the default receiver, and expects no 9094 listener at all. Original role, live-tested on Rocky Linux 10.
ansible-alloy
Grafana Alloy from the upstream release (sha256-verified) as a hardened system service on loopback with --disable-reporting, a self-scrape pipeline that proves the collector runs, and its configuration checked by alloy validate before it lands. The live test reads Alloy's own metrics and asks the component API for the scrape component's health. Original role, live-tested on Rocky Linux 10.
ansible-blackbox-exporter
Prometheus Blackbox exporter from the upstream release (sha256-verified) as a hardened system service on loopback with HTTP and TCP modules, checked by --config.check before the file lands. The live test has it probe itself over HTTP and TCP (probe_success 1) and a port with nothing behind it (probe_success 0): it measures, not only answers. Original role, live-tested on Rocky Linux 10.
ansible-grafana-server
Grafana on loopback with a secret key of yours: every install that never set one shares the package's, which encrypts the data-source credentials in its database. Secure cookies and HSTS for the TLS proxy in front; public snapshots, plugin update checks, feedback links and Gravatar switched off. Settings verified through the API, not the file. Original role, live-tested on Rocky Linux 10.
ansible-grafana
Grafana (sha256-verified) on EL 10 from the upstream release, as a hardened systemd service on loopback; the live test reads back the datasource this role provisioned, creates a dashboard and finds it by search, sees anonymous and wrong-password requests refused, and reads the build metric naming the version installed. Original role, live-tested on Rocky Linux 10.
ansible-jaeger
Jaeger v2, the tracing backend built on the OpenTelemetry Collector, from the upstream release (sha256-verified against the right checksum file) as a hardened system service on loopback with badger storage and the query API on loopback. The live test pushes a span over OTLP and reads the trace back by id with its name and service. Original role, live-tested on Rocky Linux 10.