部署 ansible 架构

最新推荐文章于 2023-07-28 16:44:49 发布
最新推荐文章于 2023-07-28 16:44:49 发布
阅读量273 收藏
点赞数
文章标签： ansible linux 服务器
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/m0_64735681/article/details/127426538
版权

文章目录


环境：

主机名IP
server.example.com192.168.91.128
node1.example.com192.168.91.133
node2.example.com192.168.91.134
node3.example.com192.168.91.137

四台主机都开启防火墙和 SELinux

server 主机安装 yum 源

[root@server ~]# rm -f /etc/yum.repos.d/*

[root@server ~]# curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  2495  100  2495    0     0   6725      0 --:--:-- --:--:-- --:--:--  6706

[root@server ~]# sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo

[root@server ~]# dnf -y install centos-release-ansible-29-1-2.el8.noarch

安装 ansible 并查看版本

[root@server ~]# dnf -y install ansible

[root@server ~]# ansible --version
ansible 2.9.27
  config file = /etc/ansible/ansible.cfg
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python3.6/site-packages/ansible
  executable location = /usr/bin/ansible
  python version = 3.6.8 (default, Dec  3 2020, 18:11:24) [GCC 8.4.1 20200928 (Red Hat 8.4.1-1)]

配置 /etc/hosts

[root@server ~]# vim /etc/hosts
//添加以下内容
192.168.91.128  server.example.com      server
192.168.91.133  node1.example.com       node1
192.168.91.134  node2.example.com       node2
192.168.91.137  node3.example.com       node3

配置 ssh 的基于密钥认证

[root@server ~]# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:rwBejPNZ1+HBlI+Arh6+xK2KEeZVv/CgpVSYfQbwuQg root@server.example.com
The key's randomart image is:
+---[RSA 3072]----+
|    ...  .  ..   |
|     = o. .o.    |
|  E o *.o  .+o   |
|   . * =.  o.o.  |
|  o B B.S . o    |
| o = XoB +       |
|  o +o*.+ .      |
|   o .oo .       |
|  . ..o..        |
+----[SHA256]-----+

[root@server ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@node1
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host 'node1 (192.168.91.133)' can't be established.
ECDSA key fingerprint is SHA256:UlPLQnM0HbxFL9KUXadRL9zZZWpF9R4ZzFd7UYMiSIs.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node1's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@node1'"
and check to make sure that only the key(s) you wanted were added.

[root@server ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@node2
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host 'node2 (192.168.91.134)' can't be established.
ECDSA key fingerprint is SHA256:UlPLQnM0HbxFL9KUXadRL9zZZWpF9R4ZzFd7UYMiSIs.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node2's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@node2'"
and check to make sure that only the key(s) you wanted were added.

[root@server ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@node3
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host 'node3 (192.168.91.137)' can't be established.
ECDSA key fingerprint is SHA256:Ewinkx1AsySA4UB5LOyVClSK6iLZfQ4np/15VPtqayQ.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node3's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@node3'"
and check to make sure that only the key(s) you wanted were added.

将 ansible 本地的 /etc/hosts 文件发送给受控主机

[root@server ~]# scp /etc/hosts root@node1:/etc/hosts
hosts                                                 100%  316   124.7KB/s   00:00    

[root@server ~]# scp /etc/hosts root@node2:/etc/hosts
hosts                                                 100%  316   149.4KB/s   00:00    

[root@server ~]# scp /etc/hosts root@node3:/etc/hosts
hosts                                                 100%  316    80.6KB/s   00:00

在 ansible 主机和所有受控主机中创建 student 用户，并设置密码

[root@server ~]# useradd student
[root@server ~]# echo 'redhat' | passwd --stdin student
Changing password for user student.
passwd: all authentication tokens updated successfully.

[root@node1 ~]# useradd student
[root@node1 ~]# echo 'redhat' | passwd --stdin student
Changing password for user student.
passwd: all authentication tokens updated successfully.

[root@node2 ~]# useradd student
[root@node2 ~]# echo 'redhat' | passwd --stdin student
Changing password for user student.
passwd: all authentication tokens updated successfully.

[root@node3 ~]# useradd student
[root@node3 ~]# echo 'redhat' | passwd --stdin student
Changing password for user student.
passwd: all authentication tokens updated successfully.

使用 student 用户创建基于密钥认证

[root@server ~]# su - student
[student@server ~]$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/student/.ssh/id_rsa): 
Created directory '/home/student/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /home/student/.ssh/id_rsa.
Your public key has been saved in /home/student/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:ED6Pa9P+oxIWNlNmRtYPdMfJlQuRVm2s8Uw7BhoNTvs student@server.example.com
The key's randomart image is:
+---[RSA 3072]----+
|      ..oo.o++==+|
|     . o= =o.B=.=|
|      +=   =+ oBo|
|      ==   .o .=o|
|     ..+S    E. .|
|      oo         |
|     .+..        |
|     ..o  .      |
|       .oo..     |
+----[SHA256]-----+

[student@server ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub root@node1
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/student/.ssh/id_rsa.pub"
The authenticity of host 'node1 (192.168.91.133)' can't be established.
ECDSA key fingerprint is SHA256:UlPLQnM0HbxFL9KUXadRL9zZZWpF9R4ZzFd7UYMiSIs.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node1's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@node1'"
and check to make sure that only the key(s) you wanted were added.

[student@server ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub root@node2
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/student/.ssh/id_rsa.pub"
The authenticity of host 'node2 (192.168.91.134)' can't be established.
ECDSA key fingerprint is SHA256:UlPLQnM0HbxFL9KUXadRL9zZZWpF9R4ZzFd7UYMiSIs.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node2's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@node2'"
and check to make sure that only the key(s) you wanted were added.

[student@server ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub root@node3
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/student/.ssh/id_rsa.pub"
The authenticity of host 'node3 (192.168.91.137)' can't be established.
ECDSA key fingerprint is SHA256:Ewinkx1AsySA4UB5LOyVClSK6iLZfQ4np/15VPtqayQ.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node3's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@node3'"
and check to make sure that only the key(s) you wanted were added.

[student@server ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub student@node1
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/student/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
student@node1's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'student@node1'"
and check to make sure that only the key(s) you wanted were added.

[student@server ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub student@node2
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/student/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
student@node2's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'student@node2'"
and check to make sure that only the key(s) you wanted were added.

[student@server ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub student@node3
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/student/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
student@node3's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'student@node3'"
and check to make sure that only the key(s) you wanted were added.

修改 ansible 的配置

[student@server ~]$ mkdir ansible
[student@server ~]$ cd ansible/
[student@server ansible]$ cp /etc/ansible/ansible.cfg .

[student@server ansible]$ vim ansible.cfg 
inventory      = /home/student/ansible/inventory
			//取消注释，并修改

[student@server ansible]$ vim inventory
//添加以下内容
node1
node2
node3

测试

[student@server ansible]$ ansible all -m ping
node3 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}
node2 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}
node1 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}
Cristal.木
关注
Ansible的安装部署
说客不言
01-02 1499
1.7Ansible的安装部署 了解完Ansible是什么、通信原理及发展史、Ansible发展历程及其应用场景后，接下来为大家介绍Ansible的安装部署 Ansible的安装部署非常简单，其仅依赖于Python和SSH，而系统默认均已安装 除Windows外，RedHat、Debian、CentOS、OSX均可作为管理节点部署Ansible Ansible[安塞波]被RedHat红帽官方收购后，其安装源被收录在EPEL中 如已安装EPEL可直接Y
部署Ansible
朝闻微风的博客
05-25 131
快速搭建好一个Ansible平台，并测试环境 创建实验主机（控制端和被控制端） 配置SSH实验环境 安装Ansible自动化软件 修改Ansible配置 ansible原理： 控制端主机自带很多模块（模块就是脚本）； ansible通过ssh远程被管理主机，将控制端的模块（脚本）或命令传输到被管理主机； 在被管理端主机执行模块（脚本）或命令，执行不同的模块或命令可以实现不同的功能； 最后ansible退出ssh远程。 绝大多数模块（脚本）都需要参数才能执行成功！！！类似于shell脚本
Ansible安装部署
oldboy1999的博客
08-12 594
Ansible安装部署
Ansible介绍与安装
weixin_53388991的博客
10-20 498
​ 大多系统管理和基础架构管理都依赖于通过图形或者命令行用户界面执行的手动任务，系统管理员通常使用检查清单、其他文档或者记忆的例程来执行标准任务，这样的做法容易出错，系统管理员很容易跳过某个步骤或者错误的执行某个步骤，对步骤执行是否正确或者产生的预期的结果的验证通常有限。​ 自动化可以帮助我们避免手动管理系统和基础架构造成的问题。作为系统管理员，我们可以使用它来确保快速、正确地部署和配置所有系统。这样，我们可以自动执行日常计划中的重复性任务，从而空出时间并专注于更重要的事情。
实训报告-1-安装、部署ansible环境.docx
10-30
本实训旨在通过模拟实际场景，使学生掌握如何在Linux环境下安装和部署Ansible，实现一台控制端管理多台被控端的自动化运维架构。 二、实训目标 1. 学习和理解Ansible的基本概念和工作原理。 2. 掌握Linux虚拟机的...
了解ansible架构与工作原理.docx
12-21
Ansible 是一款强大的自动化工具，主要用于配置管理和应用部署。它采用了模型驱动的方式，允许管理员对多台设备进行无代理的管理。在这个文档中，我们将深入探讨Ansible的架构和工作原理，以及它提供的主要命令。 *...
Ansible的安装及部署
Gong_yz的博客
02-15 7894
常用配置参数 #[default] ##基本信息设定 inventory= ##指定清单路径 remote_user= ##在受管主机上登陆的用户名称，未指定使用当前用户 ask_pass= ##是否提示输入SSH密码，如果公钥登陆设定为false library= ##库文件存放目录 local_tmp= ##本机临时命令执行目录 remote_tmp= ##远程主机临时py命令文件存放目录 forks= ##默认并发数量 host_key_checking= ##第一次连接受管主机时是否要输入yes建立
部署ansible管理工具
01-03
### 部署Ansible管理工具 #### 一、Ansible简介及特点 Ansible是一款开源产品，用于自动部署、配置管理和应用环境编排。它无需在客户端安装代理软件即可进行工作，通过SSH协议实现对远程主机的管理，极大地简化了...
【Ansible】部署
2302_76824193的博客
07-28 3021
ansible详解、模块及其作用、inventory主机清单、示例
ansible安装部署
L博涯的博客
03-20 395
说明： (1)、以上内容大多是基于他人分享的基础上总结而来，学习借鉴之用； (2)、本次安装基于CentOS6.x系统环境。 1、ansible安装 （1）ansible各种模块下载 https://www.python.org/ftp/python/2.7.8/Python-2.7.8.tgz https://pypi.python.org/packages/sourc...
ansible中的roles角色的使用
qq_45467372的博客
12-07 904
ansible中的roles角色的使用 roles角色 角色是ansible自1.2版本引入的新特性，用于层次性、结构化地组织playbook。roles能够根据层次型结构自动装载变量文件、tasks以及handlers等。要使用roles只需要在playbook中使用include指令即可。简单来讲，roles就是通过分别将变量、文件、任务、模板及处理器放置于单独的目录中，并可以便捷地incl...
ansible 的安装部署
qq_42499737的博客
06-27 1062
ansible 的安装部署 2017年11月24日 15:06:42 阅读数：1122 Ansible是一个简单高效的自动化运维管理工具，用Python开发（安装时依赖Python版本，控制主机master器要求Python2.6以上，被控制的主机server需要Python2.6以上。centos6.8自带Python2.6），能大批量管理N多台机器，可以并发的在多台机器上部署应用、安装软件、执行命令、配置和编排任务。 安装ansible之前要检查控制机的Python版本： Python -V 即可显示版
ansible的安装部署
daibaohui的博客
04-14 110
      ansible 介绍： ansible是新出现的自动化运维工具，基于Python开发，集合了众多的运维工具（puppet、cfenginc、chef、func、fabric）的优点，实现了批量系统配置、批量程序部署、批量运行命令等功能。 install-部署： 1、环境 服务器：192.168.1.103 、hostname：ansible 客户机：192.168.1.105 、...
ansible 架构图
最新发布
09-20
下面是一个简单的ansible架构图： ``` +--------------------------+ | Ansible控制节点 | | | | +----------------------+ | | | Ansible核心组件 | | | | | | | | Ansible Playbooks | | | | | | | +---...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值