ansible 部署 lamp 架构

准备

[root@server ~]# cd /etc/ansible/

[root@server ansible]# ls
ansible.cfg  hosts  roles

[root@server ansible]# vim hosts 
//在末尾添加以下内容
node1

[root@server ansible]# cd roles/

[root@server roles]# ansible-galaxy init apache
- Role apache was created successfully

[root@server roles]# ansible-galaxy init mysql
- Role mysql was created successfully

[root@server roles]# ansible-galaxy init php
- Role php was created successfully

[root@server roles]# ls
apache  mysql  php

部署 apache

[root@server roles]# cd apache/

[root@server apache]# ls
defaults  handlers  README.md  templates  vars
files     meta      tasks      tests

playbook

[root@server apache]# vim tasks/main.yml 
---
# tasks file for apache
- name: stop firewalld
  service:
    name: firewalld
    state: stopped
    enabled: no

- name: stop selinux
  lineinfile:
    path: /etc/selinux/config
    regexp: '^SELINUX='
    line: SELINUX=disabled

- name: stop selinux1
  shell:
    cmd: setenforce 0

- name: set yum
  script: yum.sh

- name: install pkgs
  yum:
    name: "{{ pkgs }}"
    state: present

- name: unzip1
  unarchive:
    src: apr-1.7.0.tar.gz
    dest: /opt/

- name: unzip2
  unarchive:
    src: apr-util-1.6.1.tar.gz
    dest: /opt/

- name: unzip3
  unarchive: 
    src: httpd-2.4.54.tar.gz
    dest: /opt/ 

- name: create apache
  user:
    name: apache
    system: yes
    shell: /sbin/nologin
    create_home: no
    state: present

- name: apache.sh
  script: apache.sh

- name: httpd.sh
  script: httpd.sh

- name: cp config
  template:
    src: httpd.service.j2
    dest: /usr/lib/systemd/system/httpd.service

- name: apply config
  shell:
    cmd: systemctl daemon-reload

- name: restart httpd
  service:
    name: httpd
    state: started
    enabled: yes



[root@server apache]# cd /etc/ansible/

[root@server ansible]# vim apache.yml
---
- name: use apache role
  hosts: node1
  roles:
    - apache

Xftp 上传文件

[root@server ~]# cd /etc/ansible/roles/apache/files/

[root@server files]# ls
apr-util-1.6.1.tar.gz  apr-1.7.0.tar.gz  httpd-2.4.54.tar.gz

脚本

[root@server ~]# cd /etc/ansible/roles/apache/files/

[root@server files]# vim yum.sh
#!/bin/bash 
rm -f /etc/yum.repos.d/*
/usr/bin/curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo
yum install -y https://mirrors.aliyun.com/epel/epel-release-latest-8.noarch.rpm
/usr/bin/sed -i 's|^#baseurl=https://download.example/pub|baseurl=https://mirrors.aliyun.com|' /etc/yum.repos.d/epel*
/usr/bin/sed -i 's|^metalink|#metalink|' /etc/yum.repos.d/epel*

[root@server files]# vim apache.sh
#!/bin/bash
cd /opt/apr-1.7.0
sed -i '/$RM "$cfgfile"/d' configure
./configure --prefix=/usr/local/apr
make
make install

cd /opt/apr-util-1.6.1
./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr
make
make install 

cd /opt/httpd-2.4.54
./configure --prefix=/usr/local/apache \
        --sysconfdir=/etc/httpd24 \
        --enable-so \
        --enable-ssl \
        --enable-cgi \
        --enable-rewrite \
        --with-zlib \
        --with-pcre \
        --with-apr=/usr/local/apr \
        --with-apr-util=/usr/local/apr-util/ \
        --enable-modules=most \
        --enable-mpms-shared=all \
        --with-mpm=prefork
make
make install

[root@server files]# vim httpd.sh
export PATH=/usr/local/apache/bin/:$PATH

变量

[root@server ~]# cd /etc/ansible/roles/apache/vars/

[root@server vars]# vim main.yml 
---
# vars file for apache
pkgs: 
  - bzip2 
  - make 
  - wget 
  - openssl-devel 
  - pcre-devel 
  - expat-devel 
  - libtool 
  - gcc 
  - gcc-c++ 
  - libxml2-devel 

单元文件

[root@server ~]# cd /etc/ansible/roles/apache/templates/

[root@server templates]# vim httpd.service.j2
[Unit]
Description=httpd server daemon
After=network.target 
[Service]
Type=forking
ExecStart=/usr/local/apache/bin/apachectl start
ExecStop=/usr/local/apache/bin/apachectl stop
ExecReload=/bin/kill -HUP $MAINPID
[Install]
WantedBy=multi-user.target

执行 playbook

[root@server ansible]# ansible-playbook apache.yml 

PLAY [use apache role] *********************************************************

TASK [Gathering Facts] *********************************************************
ok: [node1]

TASK [apache : stop firewalld] *************************************************
changed: [node1]

TASK [apache : stop selinux] ***************************************************
changed: [node1]

TASK [apache : stop selinux1] **************************************************
changed: [node1]

TASK [apache : set yum] ********************************************************
changed: [node1]

TASK [apache : install pkgs] ***************************************************
changed: [node1]

TASK [apache : unzip1] *********************************************************
changed: [node1]

TASK [apache : unzip2] *********************************************************
changed: [node1]

TASK [apache : unzip3] *********************************************************
changed: [node1]

TASK [create apache] ***********************************************************
changed: [node1]

TASK [apache.sh] ***************************************************************
changed: [node1]

TASK [apache : httpd.sh] *******************************************************
changed: [node1]

TASK [apache : cp config] ******************************************************
changed: [node1]

TASK [apache : apply config] ***************************************************
changed: [node1]

TASK [apache : restart httpd] **************************************************
changed: [node1]

PLAY RECAP *********************************************************************
node1                      : ok=15   changed=14   unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

验证

部署 mysql

[root@server ansible]# cd roles/mysql/

[root@server mysql]# ls
defaults  handlers  README.md  templates  vars
files     meta      tasks      tests

playbook

[root@server mysql]# vim tasks/main.yml 
---
# tasks file for mysql
- name: create user mysql
  user:
    name: mysql
    system: yes
    shell: /sbin/nologin
    create_home: no
    state: present

- name: install pkgs
  yum:
    name: "libncurses*"
    state: present

- name: unzip
  unarchive:
    src: mysql-5.7.37-linux-glibc2.12-x86_64.tar.gz
    dest: /usr/local/

- name: creat link
  file:
    src: /usr/local/mysql-5.7.37-linux-glibc2.12-x86_64
    dest: /usr/local/mysql
    owner: mysql
    group: mysql
    state: link

- name: create data directory
  file:
    path: /opt/data
    owner: mysql
    group: mysql
    state: directory

- name: mysql-chushi.sh
  script: mysql-chushi.sh

- name: cp config
  template:
    src: my.cnf.j2
    dest: /etc/my.cnf

- name: replace file1
  replace:
    path: /usr/local/mysql/support-files/mysql.server
    regexp: "#^(basedir=).*"
    replace: "basedir=/usr/local/mysql"

- name: replace file2
  replace:
    path: /usr/local/mysql/support-files/mysql.server
    regexp: "#^(datadir=).*"
    replace: "datadir=/opt/data"

- name: cp mysqld.service
  template:
    src: mysqld.service.j2
    dest: /usr/lib/systemd/system/mysqld.service

- name: apply config
  shell:
    cmd: systemctl daemon-reload

- name: restart mysqld
  service:
    name: mysqld
    state: started
    enabled: yes

- name: set mysql passwd
  shell:
    cmd: /usr/local/mysql/bin/mysql -uroot -e "set password=password('redhat')"

- name: set mysql env
  script: mysql.sh



[root@server mysql]# cd /etc/ansible/

[root@server ansible]# vim mysql.yml
---
- name: use mysql role
  hosts: node1
  roles:
    - mysql

Xftp 上传文件

[root@server files]# cd /etc/ansible/roles/mysql/files/

[root@server files]# ls
mysql-5.7.37-linux-glibc2.12-x86_64.tar.gz

脚本

[root@server files]# cd /etc/ansible/roles/mysql/files/

[root@server files]# vim mysql-chushi.sh
#!/bin/bash
/usr/local/mysql/bin/mysqld --initialize-insecure --user=mysql --datadir=/opt/data/
ln -sv /usr/local/mysql/include/ /usr/local/include/mysql
echo '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.conf
ldconfig

[root@server files]# vim mysql.sh
#!/bin/bash
echo 'export PATH=/usr/local/mysql/bin:/usr/local/mysql/lib:$PATH' >> /etc/profile.d/mysql.sh

配置文件

[root@server templates]# cd /etc/ansible/roles/mysql/templates/

[root@server templates]# vim my.cnf.j2
[mysqld]
basedir = /usr/local/mysql
datadir = /opt/data
socket = /tmp/mysql.sock
port = 3306
pid-file = /opt/data/mysql.pid
user = mysql
skip-name-resolve

单元文件

[root@server templates]# cd /etc/ansible/roles/mysql/templates/

[root@server templates]# vim mysqld.service.j2
[Unit]
Description=mysql server daemon
After=network.targe

[Service]
Type=forking
ExecStart=/usr/local/mysql/support-files/mysql.server start
ExecStop=/usr/local/mysql/support-files/mysql.server stop
ExecReload=/bin/kill -HUP \$MAINPID

[Install]
WantedBy=multi-user.target

执行 playbook

[root@server ansible]# ansible-playbook mysql.yml 

PLAY [use mysql role] **********************************************************

TASK [Gathering Facts] *********************************************************
ok: [node1]

TASK [create user mysql] *******************************************************
changed: [node1]

TASK [mysql : install pkgs] ****************************************************
changed: [node1]

TASK [mysql : unzip] ***********************************************************
changed: [node1]

TASK [mysql : creat link] ******************************************************
changed: [node1]

TASK [mysql : create data directory] *******************************************
changed: [node1]

TASK [mysql-chushi.sh] *********************************************************
changed: [node1]

TASK [mysql : cp config] *******************************************************
changed: [node1]

TASK [mysql : replace file1] ***************************************************
ok: [node1]

TASK [mysql : replace file2] ***************************************************
ok: [node1]

TASK [cp mysqld.service] *******************************************************
changed: [node1]

TASK [mysql : apply config] ****************************************************
changed: [node1]

TASK [restart mysqld] **********************************************************
changed: [node1]

TASK [set mysql passwd] ********************************************************
changed: [node1]

TASK [set mysql env] ***********************************************************
changed: [node1]

PLAY RECAP *********************************************************************
node1                      : ok=15   changed=12   unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

部署 php

[root@server ansible]# cd roles/php/

[root@server php]# ls
defaults  handlers  README.md  templates  vars
files     meta      tasks      tests

playbook

[root@server php]# vim tasks/main.yml 
---
# tasks file for php
- name: install pkgs
  yum:
    name: "{{ phppkgs }}"
    state: present

- name: unzip
  unarchive:
    src: php-7.1.10.tar.gz
    dest: /opt/

- name: php.sh
  script: php.sh
  
- name: modify apache config
  replace:
    path: /etc/httpd24/httpd.conf
    regexp: "index.html"
    replace: "index.php index.html"
    
- name: rm index.html
  shell:
    cmd: rm -rf /usr/local/apache/htdocs/index.html

- name: edit index.php
  template:
    src: index.php.j2
    dest: /usr/local/apache/htdocs/index.php

- name: restart httpd
  service:
    name: httpd
    state: restarted
    enabled: yes



[root@server php]# cd /etc/ansible/

[root@server ansible]# vim php.yml
---
- name: use php role
  hosts: node1
  roles:
    - php

Xftp 上传文件

[root@server files]# cd /etc/ansible/roles/php/files/

[root@server files]# ls
php-7.1.10.tar.gz

脚本

[root@server files]# cd /etc/ansible/roles/php/files/

[root@server files]# vim php.sh
#!/bin/bash
cd /opt/php-7.1.10
./configure --prefix=/usr/local/php \
        --with-apxs2=/usr/local/apache/bin/apxs \
        --with-mysql-sock=/tmp/mysql.sock \
        --with-mysqli \
        --with-zlib \
        --with-curl \
        --with-gd \
        --with-jpeg-dir \
        --with-png-dir \
        --with-freetype-dir \
        --with-openssl \
        --enable-mbstring \
        --enable-xml \
        --enable-session \
        --enable-ftp \
        --enable-pdo \
        --enable-tokenizer \
        --enable-zip
make
make install

cp php.ini-development /usr/local/php/lib/php.ini

sed -i 's/;date.timezone =/date\.timezone = \Asia\/Shanghai/' /usr/local/php/lib/php.ini

echo "AddType application/x-httpd-php .php" >> /etc/httpd24/httpd.conf
echo "AddType application/x-httpd-php-source .phps" >> /etc/httpd24/httpd.conf

变量

[root@server vars]# cd /etc/ansible/roles/php/vars/

[root@server vars]# vim main.yml 
---
# vars file for php
phppkgs:
  - libxml2
  - libxml2-devel
  - openssl
  - openssl-devel
  - bzip2
  - bzip2-devel
  - curl
  - curl-devel
  - libcurl
  - libcurl-devel
  - libicu-devel
  - libjpeg
  - libjpeg-devel
  - libpng
  - libpng-devel
  - libzip-devel
  - openldap-devel
  - pcre-devel
  - freetype
  - freetype-devel
  - gmp
  - gmp-devel
  - readline
  - readline-devel
  - libxslt
  - libxslt-devel
  - sqlite-devel
  - php-mysqlnd
  - zlib
  - zlib-devel

php 测试页

[root@server templates]# cd /etc/ansible/roles/php/templates/

[root@server templates]# vim index.php.j2
<?php
phpinfo();
?>

执行 playbook

[root@server ansible]# ansible-playbook php.yml 

PLAY [use php role] ************************************************************

TASK [Gathering Facts] *********************************************************
ok: [node1]

TASK [php : install pkgs] ******************************************************
changed: [node1]

TASK [php : unzip] *************************************************************
changed: [node1]

TASK [php.sh] ******************************************************************
changed: [node1]

TASK [php : modify apache config] **********************************************
changed: [node1]

TASK [php : rm index.html] *****************************************************
[WARNING]: Consider using the file module with state=absent rather than running
'rm'.  If you need to use command because file is insufficient you can add
'warn: false' to this command task or set 'command_warnings=False' in
ansible.cfg to get rid of this message.
changed: [node1]

TASK [edit index.php] **********************************************************
changed: [node1]

TASK [php : restart httpd] *****************************************************
changed: [node1]

PLAY RECAP *********************************************************************
node1                      : ok=8    changed=7    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

验证