Linux 第五本书第四单元--------Ansible中的变量及加密

最新推荐文章于 2024-03-10 13:54:36 发布

凯哥我点了！

最新推荐文章于 2024-03-10 13:54:36 发布

阅读量243

点赞数

文章标签： linux 运维

本文链接：https://blog.csdn.net/qq_47783923/article/details/121758363

版权

本文详细介绍了Ansible在配置管理、变量使用、模板渲染、文件操作、加密及自动化运维等方面的应用。通过实例展示了如何定义和使用变量、创建用户、配置虚拟主机、加密文件，并实现自动化任务。此外，还涵盖了Ansible的事实变量、注册变量以及如何与其他工具如firewalld和httpd配合使用。

摘要由CSDN通过智能技术生成

变量

vim file.yml

[
- name: test
hosts: westos
vars:     ----定义变量
    NAME: westos                 定义变量NAME为westos
tasks:
   - name: debug
     debug:
       msg: "{{ NAME }}"
   - name: create file
     file:
       path: "/mnt/{{NAME}}"
       state: touch

   - name: create file
     file:
       path: "/mnt/{{item}}"      使用loop循环必须要用item
       state: touch
     loop:
      - file1
      - file2
      - file3

   - name: copy
     copy:
       dest: /mnt/testfile
       content: "{{ansible_facts['fqdn']}}"    把用户名称打入testfile
]

===========================================================

vim userlist.yml
[
- name: create user
hosts: westos
vars:
    USER1:       ----定义变量USER1
      NAME: user1 ---赋予变量详细附属信息
      UID: 678
tasks:
   - name: create user1
     user:
       name: "{{USER1.NAME}}" ----变量的使用
       uid: "{{USER1.UID}}"
]

使用文件形式
vim user_list.yml ---- 在文件中定义变量
[
---
USER1:
NAME: user1
UID: 666

]

vim userlist.yml
[
- name: create user
hosts: westos
vars_files:
    - ./user_list.yml     ----当前目录的user_list.yml，使用此文件
tasks:
   - name: create user1
     user:
       name: "{{USER1.NAME}}"
       uid: "{{USER1.UID}}"

]

====================================================

设定清单变量

vim inventory
[
[westos:vars] ------编辑清单里的变量
WESTOS=who are you
]

vim list.yml
[
- name: test
hosts: westos
tasks:
- debug:
msg: "{{WESTOS}}" ----引用清单里的变量
]

================================================

注册变量
vim www.yml
- name: www
hosts: westos
tasks:
      - shell: test -e /mnt/file1
        register: out
      - debug:
          msg: "{{out.rc}}"

事实变量
- name: www
hosts: westos
tasks:
- debug:
msg: "{{ansible_facts['fqdn']}}"

========================================================================
j2

能抓取所有主控机和受控机的ip
先在受控机建立westos

主控机：
vim westos.yml
[
- name: test
hosts: all
tasks:
     - name: host j2
       template:
         src: ./hosts.j2
         dest: /mnt/westos

]

vim hosts.j2
[
{%for HOST in groups['all']%}
{{HOST}} {{hostvars[HOST]['ansible_facts']['fqdn']}}
{%endfor%}

]

练习，分别在网页输入www.westos.com, linux.westos.com, news.westos.com，最终显示其名

vim http.yml
WEBS:
    - DOC: /var/www/html
      INDEX: /var/www/html/index.html
      INDEX_TEST: www.westos.org
    - NAME: linux.westos.org
      DOC: /var/www/virtual/westos.com/linux
      INDEX: /var/www/virtual/westos.com/linux/index.html
      INDEX_TEST: linux.westos.org
    - NAME: news.westos.org
      DOC: /var/www/virtual/westos.com/news
      INDEX: /var/www/virtual/westos.com/news/index.html
      INDEX_TEST: news.westos.org

vim http.j2

{% for WEB in WEBS%}
{% if WEB['NAME'] is not defined %}
<VirtualHost _default_:80>
{% endif %}
{% if WEB['NAME'] is defined%}
<VirtualHost *:80>
ServerName {{ WEB['NAME']}}
{% endif %}
DocumentRoot "{{ WEB['DOC'] }}"
</VirtualHost>
{% endfor %}

vim web.yml

- name: web
hosts: westos
vars_files: ./http.yml
tasks:
      - name: install apache
        dnf:
          name: httpd
          state: present

      - name: check_file
        file:
          path: /etc/httpd/conf.d/vhosts.conf
          state: absent
      - name: firewalld
        firewalld:
          service: http
          permanent: yes
          state: enabled
          immediate: yes
      - name: start apache
        service:
          name: httpd
          state: restarted
          enabled: yes
      - name: create
        file:
           path: "{{item.DOC}}"
           state: directory
        loop:
            "{{WEBS}}"
      - name: configure
        template:
              src: ./http.j2
              dest: /mnt/http
      - name: index
        copy:
          content: "{{item.INDEX_TEST}}"
          dest: "{{item.INDEX}}"
        loop:
             "{{WEBS}}"

=================================================