ansible自動化部署之場景應用

本文轉載自查看原文 2019-10-09 19:19 750 ansible部署/ ansible

ansible自動化配置管理

官方網站： https://docs.ansible.com

一、安裝配置啟動（ansible由紅帽收購）
- （1）什么是ansible
  ansible是IT自動化配置管理工具，模塊豐富，組件豐富，可以通過一個命令完成一系列的操作。減少了維護成本和復雜性的工作，提高工作效率。
  假設完成100台nginx服務的安裝：
  ssh-->登錄-->輸入密碼-->安裝nginx-->啟動nginx-->退出登錄（重復10次）
  引入-->ansible一鍵部署
  （2）ansible可以完成哪些功能
  1、批量執行遠程命令：可以對n多台主機同時進行命令的執行
  2、批量配置軟件服務：可以進行自動化的配置和管理服務
  3、實現軟件開發功能：jumpserver
  4、編排高級IT任務：ansible的playbook是一門編程語言，可以用來描繪一整套IT架構。
  （3）ansible的特點：
  容易學習，無代理模式、操作靈活、簡單易用、安全可靠、移植性高。
  （4）inventory（主機清單）能夠對不同的主機或不同的主機組做AD-Hoc和playbook借助module(模塊-->python開發)依托於ssh進行分組批量部署。
  （5）ansible配置文件（優先級）

[root@manager ~]# cd /etc/ansible/
[root@manager ansible]# vim ansible.cfg #查看配置文件
其中
ANSIBLE_CONFIG
ansible.cfg		#當前項目目錄中
.ansible.cfg	#當前執行用戶的家目錄
[root@manager ~]# mkdir /project1
[root@manager ~]# cp /etc/ansible/ansible.cfg /project1
[root@manager ~]# cd /project1/

ansible inventory 主機清單

1、#基於IP地址+密碼的方式
[root@manager project1]# vim hosts 
[root@manager project1]# cat hosts
[webservers]
172.16.1.7 ansible_ssh_user='root' ansible_ssh_pass='1'
172.16.1.8 ansible_ssh_user='root' ansible_ssh_pass='1'


2、基於秘鑰連接，需要首先創建公鑰和私鑰，並下發公鑰至被控端
[root@manager project1]# ssh-keygen -C manager@qq.com #一路回車
[root@manager project1]# vim ansible.cfg 
# inject_facts_as_vars = True
# additional paths to search for roles in, colon separated
#roles_path    = /etc/ansible/roles
# uncomment this to disable SSH key host checking
host_key_checking = False   #秘鑰免密碼登錄
......
[root@manager ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@172.16.1.7
[root@manager ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@172.16.1.8
[root@manager project1]# cat hosts 
[webservers]
172.16.1.7 
172.16.1.8 
#測試
[root@manager project1]# ansible webservers -m ping -i hosts
[root@manager project1]# ansible webservers --list-hosts -i hosts
  hosts (2):
    172.16.1.7
    172.16.1.8
    
3、主機組使用方式
[root@manager project1]# cat hosts 
[lbservers]		#定義lbservers組
172.16.1.7 
172.16.1.8 
[root@manager project1]# cat hosts 
[webservers]	#定義webservers組
172.16.1.7 
172.16.1.8

ansible AD-Hoc

command		#執行命令
shell		#執行命令
yum_reposity #yum倉庫配置
yum  		#yum安裝軟件
get_url		#和linux的wget一致

1、command

[root@manager project1]# ansible webservers -a "ps aux |grep nginx" -i hosts		#不支持管道（會報錯（red））

2、shell

[root@manager project1]# ansible webservers -m shell -a "ps aux |grep nginx" -i hosts	#支持管道

3、yum

state:
	present 安裝
	absent	卸載
	latest	最新
enablerepo	#指定使用哪個倉庫
disablerepo	#排除使用哪個倉庫

1、安裝最新的httpd服務

[root@manager project1]# ansible webservers -m yum -a "name=httpd state=latest disablerepo=webtatic-php" -i hosts

2移除httpd服務

[root@manager project1]# ansible webservers -m yum -a "name=httpd state=absent disablerepo=webtatic-php" -i hosts

3、安裝httpd指定那個倉庫安裝

[root@manager project1]#ansible webservers -m yum -a "name=httpd state=latest enablerepo=mirrors.aliyun.com" -i hosts

4、通過url的方式安裝

[root@manager project1]# ansible webservers -m yum -a "name=/root/zabbix-agent-4.0.0-2.el7.x86_64.rpm  state=present disablerepo=webtatic-php" -i hosts

4、copy

src		#本地路徑，可以是相對，也可以是絕對
dest	#目標位置
owner	#屬主
group	#屬組
mode	#權限
backup	#備份

[root@manager project1]# vim /etc/nginx/conf.d/ansible.oldxu.com.conf  
server {
        listen 80;
        root /code/ansible;
        location / {
        index index.html;
}
}

[root@manager project1]# ansible webservers -m copy -a "src=/etc/nginx/conf.d/ansible.oldxu.com.conf dest=/etc/nginx/conf.d/ansible.oldxu.com.conf owner=root group=root mode=644 backup=yes" -i hosts
#backup=yes  #表示在目標機上面是否備份
#訪問測試

5、service/systemd

state
	started		#啟動
	stopped		#停止
	restarted	#重啟
	reloaded	#重載
enabled
	yes			#是
	no			#否

[root@manager project1]# ansible webservers -m systemd -a "name=nginx state=restarted enabled=yes" -i hosts

6、file

#創建/code/ansible
path #路徑
state
	touch	#創建文件
	directory	#創建目錄
owner	#屬主
group	#屬組
mode	#權限
#准備站點
[root@manager project1]# mkdir /code/ansible
[root@manager project1]# ansible webservers -m file -a "path=/code/ansible state=directory mode=755 owner=www group=www" -i hosts
#准備站點代碼
[root@manager project1]# echo "test01" > /code/ansible/index.html
[root@manager project1]# ansible webservers -m copy -a "src=/code/ansible/index.html dest=/code/ansible/index.html owner=www group=www mode=644" -i hosts

7、user group

#group   整數int   小數 flot  dasdsa str    真|假   bool 
[root@manager project1]# ansible webservers -m group -a  "name=www gid=666 state=present" -i hosts

#user name            #名稱 uid             #uid group           #組名或gid create_home     #是否創建家目錄 system          #是否作為系統組 shell           #指定登錄shell state    present    absent remove groups append password
#--------------------------------------------------------------> # 程序使用    www    666 666 /sbin/nologin    /home  -->無 
[root@manager project1]# ansible webservers -m user -a "name=www uid=666 group=666 create_home=no shell=/sbin/nologin state=present" -i hosts
# 正常用戶    oldxu  1000 1000 /bin/bash   /home/oldxu [root@manager project1]# ansible webservers -m user -a "name=oldxu" -i hosts
# 移除oldxu用戶,並刪除家目錄所有內容. 
[root@manager project1]# ansible webservers -m user -a "name=oldxu state=absent remove=yes" -i hosts
# 創建 other用戶.有兩個附加組root bin,創建家目錄,指定登錄 shell,設定密碼123
#生成一個密碼 ansible all -i localhost, -m debug -a "msg={{ '123' | password_hash('sha512', 'mysecretsalt') }}"
[root@manager project1]# ansible webservers -m user -a 'name=other groups='root,bin' create_home=yes shell=/bin/bash password="$6$mysecretsalt$gIIYs0Xgc7sSQkH.zKaz8/Afa MomYzR1QZYtccwmJcUt8VpLq4D055UCCX4MlwgePOP80ZRwhppv BF72RIAVi/"' -i hosts

8、mount

#提前准備好nfs服務端 [root@web01 ~]# showmount -e 172.16.1.31 
Export list for 172.16.1.31: 
/data/zrlog 172.16.1.0/24
/data/zh    172.16.1.0/24
/data/edu   172.16.1.0/24
/data/blog  172.16.1.0/24
#用管理端操作被控端,讓被控端掛載nfs存儲數據 present     
#寫入/etc/fstab absent      
#卸載/etc/fstab
mounted     #臨時掛載 unmounted   #卸載當前掛載
#掛載過程中,如果目錄不存在,則會創建該目錄 
[root@manager project1]# ansible webservers -m mount -a "src=172.16.1.31:/data/zrlog path=/test_zrlog fstype=nfs opts=defaults state=mounted" -i hosts
[root@manager project1]# ansible webservers -m mount -a "src=172.16.1.31:/data/zrlog path=/test_zrlog fstype=nfs opts=defaults state=unmounted" -i hosts

9、cron

minute      #分
hour        #時 
day         #日 
month       #月 
week        #周 
job         #
[root@manager project1]# ansible webservers -m cron -a 'name=test_job minute=00 hour=02 job="/bin/bash /server/scripts/client_to_data_server.sh &>/dev/null"' -i hosts
[root@manager project1]# ansible webservers -m cron -a 'name=test  job="/bin/bash /server/scripts/test.sh &>/dev/null"' -i hosts
[root@manager project1]#  ansible webservers -m cron -a 'name=test  job="/bin/bash /server/scripts/test.sh &>/dev/null" state=absent' -i hosts

10、firewalld

[root@manager project1]# ansible webservers -m systemd -a "name=firewalld state=started" -i hosts
#針對服務 
[root@manager project1]# ansible webservers -m firewalld -a "service=http state=enabled" -i hosts
#針對端口 
[root@manager project1]# ansible webservers -m firewalld -a "port=9999/tcp state=enabled" -i hosts

#針對source來源


#針對rule

11、selinux

[root@manager project1]# ansible webservers -m selinux -a "state=disabled" -i hosts

12.get_url
13.yum_repositry

1.安裝http服務 yum
2.編寫簡單網頁測試內容 copy
3.啟動服務並加入開機自啟 service/systemd
4.放行對應的端口 firewalld

Ansible playbook

1、什么是playbook

playbook 劇本
- play #找誰
- task #做什么
  - 找多個明星，做多件事情
  - 找一個明星，做多個事情

2、playbook和Asd-Hoc的區別

1570668794340

3、playbook三板斧，縮進、冒號、短橫線（語法格式）

1570669070952

模塊地址：

https://docs.ansible.com/ansible/latest/modules/list_of_all_modules.html

#語法示例
[root@manager project1]# vim f1.yml
[root@manager project1]# cat f1.yml 
- hosts: webservers
  tasks:

    - name: Create New File
      file: path=/tmp/123.txt state=touch owner=root group=root mode=0600

    - name: Create New File2
      file:    
        path: /tmp/456.txt
        state: touch
        owner: root
        group: root
        mode: 0666
[root@manager project1]# ansible-playbook f1.yml -i hosts

PLAY [webservers] **************************************************************

TASK [Gathering Facts] *********************************************************
ok: [172.16.1.8]
ok: [172.16.1.7]

TASK [Create New File] *********************************************************
changed: [172.16.1.7]
changed: [172.16.1.8]

TASK [Create New File2] ********************************************************
changed: [172.16.1.7]
changed: [172.16.1.8]

PLAY RECAP *********************************************************************
172.16.1.7                 : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
172.16.1.8                 : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

案例一、使用ansible安裝並配置nfs
1、將10.0.0.7上的文件推一份至ansible控制端
[root@web01 ~]# scp -rp /etc/nginx/nginx.conf root@172.16.1.61:/project1/file/nginx.conf.j2
2、在ansible控制端書寫nfs_servers.yml腳本
[root@manager project1]# cat nfs_servers.yml #編輯nfs前端文件
- hosts: nfsservers
  tasks:
    - name: Installed NFS Server
      yum:
        name: nfs-utils
        state: present

    - name: Configure NFS Server
      copy:
        src: ./file/exports.j2
        dest: /etc/exports
        owner: root
        group: root
        mode: 0644
        backup: yes
    - name: Create NFS Group www
      group:
        name: www
        gid: 666
    - name: Create NFS User www
      user:
        name: www
        group: www
        uid: 666
        create_home: no
        shell: /sbin/nologin

    - name: Create NFS Share Directory
      file:
        path: /ansible_data
        state: directory
        owner: www
        group: www
        mode: 0755
        recurse: yes
    - name: Systemd NFS Server
      systemd:
        name: nfs
        state: restarted
        enabled: yes

#語法檢測：[root@manager project1]# ansible-playbook --syntax nfs_servers.yml -i hosts

playbook: nfs_servers.yml


3、在nfs(10.0.0.31)上編輯配置文件
[root@nfs ~]# cat /etc/exports
/ansible_data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)
4、在ansible控制端書寫nfs_client.yml腳本
[root@manager project1]# vim nfs_client.yml 
- hosts: webservers
  tasks:

    - name: Mount NFS Server share directory
      mount:
        src: 172.16.1.31:/ansible_data
        path: /mnt
        fstype: nfs
        opts: defaults
        state: mounted


#語法檢測：[root@manager project1]# ansible-playbook --syntax nfs_client.yml -i hosts

playbook: nfs_client.yml

5、在10.0.0.7和10.0.0.8查看是否掛載成功
[root@web01 ~]# df -h
172.16.1.31:/ansible_data   38G  1.8G   37G   5% /mnt

案例二：ansible安裝nginx服務

步驟詳解#1.創建一對公鑰和私鑰
[root@manager-61 project1]#ssh-keygen -C manager@qq.com    #一路回車
[root@manager-61 project1]#ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.7
[root@manager-61 project1]#ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.8
[root@manager-61 project1]# ansible all -m ping -i hosts #測試所有主機是否能ping通
#2.配置hosts文件,添加webservers主機組
[root@manager-61 project1]# vim hosts
[webservers]
172.16.1.7 
172.16.1.8 

#3.編寫一個安裝nginx的.yml文件(統一將.yml的文件同一個目錄下)
    #編寫思路:
	         #1.安裝nginx		yum 
	         #2.配置nginx		copy
	         #3.初始化環境
	         	用戶			group user
	         	目錄			file
	        	授權			file
	#4.啟動服務  
	
[root@manager-61 project1]# vim nginx.yml 
- hosts: webservers
  tasks:
    - name: install nginx
      yum:
        name: nginx
        state: present
    - name: configure nginx
      copy:
        src: ./file/nginx.conf.j2
        dest: /etc/nginx/nginx.conf
        owner: root
        group: root
        mode: 0644
        backup: yes
      notify: Restart Nginx
    - name: systemd nginx
      systemd:
        name: nginx
        state: started
        enabled: yes
  handlers:
    - name: Restart Nginx
      systemd: 
        name: nginx
        state: restarted
#4.准備好配置文件中所需要的文件
[root@manager-61 project1]# rsync -avz root@172.16.1.7:/etc/nginx/nginx.conf ./file/nginx.conf.j2
#5.檢測語法,並執行.yml文件
[root@manager-61 project1]# ansible-playbook --syntax  nginx.yml -i hosts
[root@manager-61 project1]# ansible-playbook -i hosts nginx.yml

案例三、使用ansible-playbook編寫LAMP服務

#1.創建一對公鑰和私鑰
[root@manager-61 project1]#ssh-keygen -C manager@qq.com
[root@manager-61 project1]#ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.31
[root@manager-61 project1]#ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.41
[root@manager-61 project1]# ansible all -m ping -i hosts #測試所有主機是否能ping通
#2.配置hosts文件,添加web主機組
[root@manager-61 project1]# vim hosts
[nfsservers]
172.16.1.31
[backupservers]
172.16.1.41
[web:children]
nfsservers
backupservers
#3.編寫一個lam.yml 文件
[root@manager-61 project1]# vim lam.yml
- hosts: web
  tasks:
    - name: Installed Httpd Server
      yum: 
        name: httpd
        state: present

    - name: Installed PHP Server
      yum: 
        name: php
        state: present

    - name: Configure Httpd WebSite
      get_url:
        url: http://fj.xuliangwei.com/public/index.php
        dest: /var/www/html/index.php
        mode: 0644

    - name: Systemd Httpd Server
      systemd:
        name: httpd
        state: started

    - name: Systemd Firewalld Server
      systemd:
        name: firewalld
        state: started


    - name: Configure Firewalld Rule
      firewalld:
        service: http
        state: enabled
#4.檢測語法,並執行.yml文件
[root@manager-61 project1]# ansible-playbook --syntax  lamp.yml -i hosts 
[root@manager-61 project1]# ansible-playbook -i hosts lamp.yml

案例4：ansilble-playbook編寫kodclold網盤服務--Apache版本

#1.創建一對公鑰和私鑰
[root@manager-61 project1]#ssh-keygen -C manager@qq.com
[root@manager-61 project1]#ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.31
[root@manager-61 project1]#ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.41
[root@manager-61 project1]# ansible all -m ping -i hosts #測試所有主機是否能ping通
#2.配置hosts文件,添加web主機組
[root@manager-61 project1]# vim hosts
[nfsservers]
172.16.1.31
[backupservers]
172.16.1.41
[web:children]
nfsservers
backupservers
#3.編寫一個kod.yml 文件
[root@manager-61 project1]# vim kod.yml
- hosts: web
  tasks:
    - name: Installed Httpd Server
      yum:
        name: httpd
        state: present

    - name: Installed PHP Server
      yum:
        name: php
        state: present

    - name: Get kodcloud Code
      synchronize:              #同步
        src: ./file/kod
        dest: /var/www/html/kodcloud

    - name: Chomod kodcloud
      file:
        path: /var/www/html/
        owner: root
        group: root
        mode: 0777
        recurse: yes

    - name: Systemd Httpd Server
      systemd:
        name: httpd
        state: restarted
#4.准備文件中的文件
[root@manager-61 project1]# mkdir ./file/kod
[root@manager-61 project1]# rz 
[root@manager-61 project1]# unzip kodexplorer4.40.zip -d ./file/kod
#5.檢測語法,並執行.yml文件
[root@manager-61 project1]# ansible-playbook --syntax  kod.yml -i hosts 
[root@manager-61 project1]# ansible-playbook  kod.yml -i hosts

案例五:Ansible-Playbook-編寫KodCloud服務-Nginx版

#1.創建一對公鑰和私鑰
[root@manager-61 project1]#ssh-keygen -C manager@qq.com
[root@manager-61 project1]#ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.31
[root@manager-61 project1]#ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.41
[root@manager-61 project1]# ansible all -m ping -i hosts #測試所有主機是否能ping通
#2.配置hosts文件,添加web主機組
[root@manager-61 project1]# vim hosts
[nfsservers]
172.16.1.31
[backupservers]
172.16.1.41
[web:children]
nfsservers
backupservers
#3.編寫一個lnp.yml 文件
[root@manager-61 project1]# cat lnp.yml 
- hosts: web
  tasks:
    #1.配置yum源倉庫 nginx PHP
    - name: install nginx php repo
      yum_repository:
        name: nginx
        description: nginx repos
        baseurl: http://nginx.org/packages/centos/$releasever/$basearch/
        gpgcheck: no
    #2.配置yum源 PHP repo
    - name: install php repo
      yum_repository:
        name: webtatic-php
        description: php repos
        baseurl: http://us-east.repo.webtatic.com/yum/el7/x86_64/
        gpgcheck: no
    #3.安裝nginx和PHP
    - name: install nginx and php packages
      yum:
        name: "{{ packages }}"
      vars:
        packages:
          - nginx
          - php71w
          - php71w-cli
          - php71w-common
          - php71w-devel
          - php71w-gd
          - php71w-fpm
          - php71w-opcache
          - mod_php71w
    #4.創建程序啟動的用戶身份
    - name: create group www
      group:
        name: www
        gid: 666
    - name: create user www
      user:
        name: www
        uid: 666
        group: www
        create_home: no
        shell: /sbin/nologin
    #5.管理nginx配置文件
    - name: configure nginx.conf
      copy:
        src: ./file/nginx.conf.j2
        dest: /etc/nginx/nginx.conf
      notify: resatrt nginx
    #6.管理php-fpm配置文件
    - name: configure php-fpm.conf
      copy:
        src: ./file/www.conf.j2
        dest: /etc/php-fpm.d/www.conf
      notify: restart php-fpm 
    #7.添加虛擬主機
    - name: add nginx kod.ltc.com
      copy:
        src: ./file/kod.ltc.com.conf.j2
        dest: /etc/nginx/conf.d/kod.ltc.com.conf
      notify: restart nginx
    - name: Init Nginx BseEnv
      file:
        path: /code
        state: directory
        owner: www
        group: www
        recurse: yes
    - name: push kod code
      synchronize:
        src: ./file/kod
        dest: /code/
    - name: chmod kod
      file:
        path: /code
        owner: www
        group: www
        mode: 0777
        recurse: yes
    - name: systemd nginx
      systemd:
        name: nginx
        state: started
        enabled: yes
    - name: systemd php
      systemd:
        name: php-fpm
        state: started
        enabled: yes
 #當nginx或PHP配置文件發生改變時觸發重啟
  handlers:
    - name: restart nginx
      systemd:
        name: nginx
        state: restarted
    - name: restart php-fpm
      systemd:
        name: php-fpm
        state: restarted

#4.准備playbook中需要的文件
[root@manager-61 project1]# rsync -avz root@172.16.1.7:/etc/nginx/nginx.conf ./file/nginx.conf.j2
[root@manager-61 project1]# rsync -avz root@172.16.1.7:/etc/php-fpm.d/www.conf ./file/www.conf.j2
#5.檢測語法,並執行.yml文件
[root@manager-61 project1]# ansible-playbook --syntax  lnp.yml -i hosts
[root@manager-61 project1]# ansible-playbook lnp.yml -i hosts

Ansible varialbes

1、什么是變量？

*** 定義：一個固定的字符串表示一個不固定的值。

*** 場景還原：三個地方、三個目錄位置，當有一天目錄發生變更，難道我們要去逐一改正?

** ----------->引出-------->設定變量

1.在playbook中定義變量
vars  關鍵字
[root@manager project1]# cat f2.yml 
- hosts: webservers
  vars:
    - file_name: playbook_vars

  tasks:
    - name: Create New File
      file:
        path: /tmp/{{ file_name }}
        state: touch

vars_file 屬於一種共享的方式

[root@manager project1]# cat vars_file.yml 
web_packages: httpd
ftp_packages: vsftpd

[root@manager project1]# cat f2.yml 
- hosts: webservers
  vars:
    - file_name: playbook_vars

 #調用共享vars_file文件,只不過剛好文件名叫vars_file
  vars_files: ./vars_file.yml

  tasks:
    - name: Create New File
      file:
        path: /tmp/{{ file_name }}
        state: touch

    - name: Installed Packages {{ web_packages }}
      yum:
        name: "{{ web_packages }}"
        state: present

2、在inventory主機清單中定義變量

1、清單文件中直接定義hosts文件定義
[webservers]
172.16.1.7
172.16.1.8 
[webservers:vars]
file_name=hostsfile_group_vars


2、創建hosts_vars  group_vars 目錄
[root@manager project1]# mkdir host_vars	#單個主機
[root@manager project1]# mkdir group_vars	#主機組
#1.單個主機定義和使用方式 (host_vars能分別對不同的主機定義變量)
[root@manager project1]# cat host_vars/172.16.1.7 
host_vars_name: 172.16.1.7

[root@manager project1]# cat host_vars/172.16.1.8 
host_vars_name: 172.16.1.8

[root@manager project1]# cat f4.yml 
- hosts: webservers

  tasks:
    - name: Create New File
      file:
        path: /opt/{{ host_vars_name }}
        state: touch

#2、針對主機組定義的方式
#給指定的主機webserver組設定變量，其他組主機無法使用該變量。

[root@manager project1]# vim group_vars/webservers 
group_host_vars: webservers

[root@manager project1]# vim f5.yml 
- hosts: webservers
  tasks:
    - name: Create New File {{ group_host_vars }}
      file:
        path:  /opt/{{ group_host_vars }}
        state: touch

#3、針對主機組定義的方式  （給所有的主機和主機組設定變量）
[root@manager project1]# vim group_vars/all 
group_host_vars: all

[root@manager project1]# vim f5.yml 
- hosts: webservers
  tasks:
    - name: Create New File {{ group_host_vars }}
      file:
        path:  /opt/{{ group_host_vars }}
        state: touch

3、通過外置傳參數定義變量 -e

[root@manager project1]# ansible-playbook -i hosts f6.yml  -e "web_vars=123"

如果變量沖突？？？優先級解決。。。

6.定義相同的變量不同的值，測試變量的優先級。操作步驟如下   file_name:
  1）在plabook中定義vars變量
  2）在playbook中定義vars_files變量
  3）在inventory主機定義變量
  4）在inventory主機組定義變量
  5）在host_vars中定義變量
  6）在group_vars中定義變量  組      all組
  7）通過執行命令傳遞變量
  
優先級測試:
外置傳入參數優先級最高 ---> playbook ( vars_files(共享)--->vars(私有) )  
---> host_vars  --> group_vars/group_name ---> group_vars/all

4、變量注冊

[root@manager project1]# cat f8.yml 
- hosts: webservers
  tasks:
        # System_Status=$(netstat -lntp)
    - name: Get Network Status
      shell: netstat -lntp | grep "nginx"
      register: System_Status

        # echo "$System_Status"
    - name: Debug output Variables
      debug:
        msg: "{{ System_Status.stdout_lines }}"

5.facts變量?

#1.根據主機的cpu信息,生成不同的配置.
	A: 1核心    work_process 1;
	B: 2核心    work_process 2;
	
#2.根據主機名稱設定不同配置文件
	zabbix_agent
		Server:   ===> 指向172.16.1.61
		Hostname:      web01   web02

[root@manager project1]# cat ./file/zabbix_agent.conf.j2 
Server={{ zabbix_server_ip }}
ServerActive={{ zabbix_server_ip }}
Hostname={{ ansible_hostname }}

[root@manager project1]# cat f11.yml 
- hosts: webservers
  vars:
    - zabbix_server_ip: 172.16.1.61
  tasks:
    - name: Configure zabbix-agent.conf
      template:
        src: ./file/zabbix_agent.conf.j2
        dest: /tmp/zabbix-agent.conf
        
        
#3.根據主機的內存生成不同的配置文件,memcached
[root@manager project1]# cat f12.yml 
- hosts: webservers
  tasks:
    - name: Installed Memcached Server
      yum:
        name: memcached
        state: present

    - name: Configure Memcached Server
      template:
        src: ./file/memcached.j2
        dest: /etc/sysconfig/memcached
      notify: Restart Memcached Server

    - name: System Memcached Server
      systemd:
        name: memcached
        state: started
        enabled: yes

  handlers:
    - name: Restart Memcached Server
      systemd:
        name: memcached
        state: restarted

[root@manager project1]# cat file/memcached.j2 
PORT="11211"
USER="memcached"
MAXCONN="1024"
CACHESIZE="{{ ansible_memtotal_mb //2 }}"
OPTIONS=""


1.根據cpu
2.根據內存
3.根據主機名
4.Redis配置文件     bind本地地址
5.操作系統不統一

		變量可以進行運算  + - * // 
		
		
		
		
#1.定義變量
	playbook
		vars			私有
		vars_files		共享
	inventory
		host_vars	
		group_vars
			group_vars/group_name
			group_vars/all
	外置傳參
		-e
#2.測試優先級
	在不改變playbook變量的情況下,使用新的值測試.

#3.變量注冊register
	1.將任務執行的結果存儲至特定的變量中
	2.可以使用debug模塊將變量進行打印輸出
	
	python: 字典
	json 格式化數據
	{
        k1: v1
        k2: v2
	}
#4.facts

1570807064349

[root@manager project1]# cat f13.yml 
- hosts: webservers
  tasks:
    - name: RANDOM
      shell:  echo "$RANDOM"
      register: System_SJ

    - name: Debug 
      debug:
        msg: "web_{{ System_SJ.stdout }}"

#1.提取facts變量中的IP地址   mac地址  UUID 等等  只要唯一
	ansible_default_ipv4.address
[root@manager project1]# cat f14.yml 
- hosts: webservers
  tasks:

    - name: Debug 
      debug:
        msg: "web_{{ ansible_default_ipv4.address }}"

Ansible 流程控制

8.判斷語句

1.centos和ubuntu系統都需要安裝httpd, 判斷系統.
2.安裝軟件倉庫,只有web組的安裝webtatic其他的主機全部跳過.
3.TASK任務, TASK1任務執行成功,才會執行TASK2

#根據不同的系統,安裝不同的服務
- hosts: webservers
  tasks:
    - name: CentOS Installed Httpd Server
      yum:
        name: httpd
        state: present
      when: ( ansible_distribution == "CentOS" )

    - name: Ubuntu Installed Httpd Server
      yum:
        name: httpd2
        state: present
      when: ( ansible_distribution == "Ubuntu" )
      
[root@manager project1]# cat f16.yml 
- hosts: all
  tasks:
  - name: Add Nginx Yum Repository
    yum_repository:
      name: nginx
      description: Nginx Repository
      baseurl: http://nginx.org/packages/centos/7/$basearch/
    when: ( ansible_hostname is match ("web*"))


[root@manager project1]# cat f17.yml 
- hosts: webservers
  tasks:

    - name: Check Httpd Server
      command: systemctl is-active httpd
      register: Check_Httpd
      ignore_errors: yes

	#判斷Check_Httpd.rc是否等於0,如果為0則執行任務,否則不執行
    - name: Restart Httpd Server
      systemd:
        name: httpd
        state: restarted
      when: ( Check_Httpd.rc == 0 )

9、循環語句

#一次啟動多個服務
[root@manager project1]# cat f18.yml 
- hosts: webservers
  tasks:
    - name: Systemd Nginx Status
      systemd:
        name: "{{ item }}"    #調用的變量也不變,也是固定
        state: started

	#固定的語法格式
      with_items:
        - nginx
        - php-fpm


#一次拷貝多個文件
[root@manager project1]# cat f19.yml
- hosts: webservers
  tasks:
    - name: Configure nginx.conf
      copy:
        src: '{{ item.src }}'
        dest: '{{ item.dest }}'
        mode: '{{ item.mode }}'
      with_items:
        - { src: ./file/nginx.conf.j2, dest: /etc/nginx/nginx.conf, mode: '0644' }
        - { src: ./file/kold.oldxu.com.conf.j2, dest: /etc/nginx/conf.d/kold.oldxu.com.conf, mode: '0600' }



#創建多個用戶,一次創建多個? 3個用戶  TASK
[root@manager project1]# cat f20.yml 
- hosts: webservers
  tasks:
    - name: Create User
      user:
        name: "{{ item }}"

      with_items:
        - test1
        - test2
        - test3
        - test4


#1.創建tt1 --> bin  tt2 -->root tt3 --->adm   附加組
[root@manager project1]# cat  f20.yml 
- hosts: webservers
  tasks:
    - name: Create User
      user:
        name: "{{ item.name }}"
        groups: "{{ item.groups }}"

      with_items:
        - { name: tt1, groups: bin }
        - { name: tt2, groups: root }
        - { name: tt3, groups: adm }
        
        
        
1.標准循環                   --->居多
	item
	with_items:
	   - test
2.字典循環:                   --->居多
    itme.name
    with_items:
        - { name: test }


3.變量循環
- hosts: webservers
  tasks:
    - name: ensure a list of packages installed
      yum: name={{ packages }} state=present
      vars:
        packages:
          - httpd
          - httpd-tools

10.handlers

[root@manager project1]# cat f22.yml 
- hosts: webservers
  tasks:

    - name: Installed Nginx and PHP Packages
      yum:
        name: nginx
        state: present

    - name: Configure nginx.conf 
      template:
        src: ./file/nginx.conf.j2
        dest: /etc/nginx/nginx.conf
      #監控-->changed狀態-->通知-->handlers--->name-->Restart Nginx Server
      notify: Restart Nginx Server
      #notify:
      #  - Restart Nginx Server
      #  - Restart php Server

    - name: Systemd Nginx Server
      systemd:
        name: nginx
        state: started
        enabled: yes

#當nginx或php配置文件發生變更才會觸發此操作
  handlers:
    - name: Restart Nginx Server
      systemd:
        name: nginx
        state: restarted


#3.handlers注意事項
	1.無論多少個task通知了相同的handlers，handlers僅會在所有tasks結束后運行一次。
	2.只有task發生改變了才會通知handlers，沒有改變則不會觸發handlers.
	3.不能使用handlers替代tasks、因為handlers是一個特殊的tasks。

免責聲明！

本站轉載的文章為個人學習借鑒使用，本站對版權不負任何法律責任。如果侵犯了您的隱私權益，請聯系本站郵箱yoyou2525@163.com刪除。

猜您在找 通過ansible自動化部署zabbix應用 Ansible自動化部署詳細教程 ansible自動化部署工具使用ansible自動化部署Kubernetes 比Ansible更吊的自動化運維工具，自動化統一安裝部署_自動化部署udeploy 1.0 Jenkins+Gitlab+Ansible自動化部署(一) Ceph自動化部署----Ceph-ansible ansible自動化部署MySQL5.7 生產環境：ansible自動化部署kubernetes-1.14 自動化運維Ansible之安裝部署