ansible playbook简单应用
1、Role具体实现Lnmp
以LNMP为例，建议使用相同版本的主机，且需要设置基于key验证
1.1、相关准备
#创建文件夹
[root@rocky8 ~]#mkdir /opt/roles/{nginx,mysql,php-fpm,wordpress}/{tasks,handlers,templates} -pv
#准备相关文件
[root@rocky8 ~]#cd /opt
[root@rocky8 opt]#cp /etc/ansible/hosts .
[root@rocky8 opt]#cp /etc/ansible/ansible.cfg .
[root@rocky8 opt]#vim ansible.cfg
inventory = ./hosts #修改主机清单路径为当前目录
[root@rocky8 opt]#vim hosts #准备主机清单
[webservers]
10.0.0.8
10.0.0.18
[webservers:vars]
version="1.20.2"
url="http://nginx.org/download/nginx-{{ version }}.tar.gz"
install_dir="/apps/nginx"
user=www
uid=88
gid=88
group=www
[appservers]
10.0.0.101
10.0.0.102
[dbservers]
10.0.0.28
[root@rocky8 opt]#anxible all -m ping #测试连接
1.2、具体拆分
1.2.1、nginx
#task
[root@rocky8 opt]#cd roles/nginx/
[root@rocky8 nginx]#vim tasks/main.yml #起始位置，文件名固定
- name: install packages
yum:
name: "{{ item }}"
loop:
- gcc
- make
- pcre-devel
- openssl-devel
- zlib-devel
- perl-ExtUtils-Embed
- name: get nginx source
unarchive:
src: "{{ url }}"
dest: "/usr/local/src"
remote_src: yes
- name: compile and install
shell:
cmd: "./configure --prefix={{ install_dir }} --user=nginx --group=nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --with-stream_ssl_module --with-stream_realip_module && make && make install"
chdir: "/usr/local/src/nginx-{{ version }}"
creates: "{{install_dir}}/sbin/nginx"
- name: create {{ group }}
group:
name: "{{ group }}"
gid: "{{ gid }}"
- name: create {{ user }}
user:
name: "{{ user }}"
uid: "{{ uid }}"
group: "{{ group }}"
system: yes
- name: copy config
template:
src: nginx.conf.j2
dest: "{{install_dir}}/conf/nginx.conf"
notify:
- restart nginx
- name: config dir
file:
path: "{{install_dir}}/conf.d"
state: directory
- mame: config file mode
file:
path: {{install_dir}}"
owner: "{{ user }}"
group: "{{ group }}"
recurse: yes
- name: check nginx config
shell:
cmd: "{{install_dir}}/sbin/nginx -t"
register: check_nginx_config
changed_when:
- check_nginx_config.stdout.find('successful')
- false
- name: service file
template:
src: nginx.service.j2
dest: /lib/systemd/system/nginx.service
- name: start nginx
service:
name: nginx
state: started
enabled: yes
#配置文件准备
[root@rocky8 nginx]#cp /etc/ansible/templates/nginx.conf.j2 /opt/roles/nginx/templates/
[root@rocky8 nginx]#vim templates/nginx.conf.j2 #注意是仅这些内容，而不是更改
user {{ user }};
worker_processes auto;
http {
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
include {{install_dir}}/conf.d/*.conf;
default_type application/octet-stream;
}
#准备service文件
[root@rocky8 nginx]#cp /usr/lib/systemd/system/nginx.service templates/nginx.service.j2
[root@rocky8 nginx]#vim templates/nginx.service.j2 #可以yum安装后面拿来更改
[Unit]
Description=The nginx HTTP and reverse proxy server
After=network.target remote-fs.target nss-lookup.target
[Service]
Type=forking
PIDFile={{ install_dir }}/logs/nginx.pid
ExecStartPre=/usr/bin/rm -f {{ install_dir }}/logs/nginx.pid
ExecStartPre={{ install_dir }}/sbin/nginx -t
ExecStart={{ install_dir }}/sbin/nginx
ExecReload=/bin/kill -s HUP $MAINPID
KillSignal=SIGQUIT
TimeoutStopSec=5
KillMode=mixed
PrivateTmp=true
root_path=/data/wordpress #php需要用到的变量
fqdn=www.wang.org
app=wordpress-6.2.2-zh_CN #wordpress所用变量
[Install]
WantedBy=multi-user.target
#拆分handlers
[root@rocky8 opt]#vim roles/nginx/handlers/main.yml
- name: restart nginx
service:
name: nginx
state: restartd
调用nginx
[root@rocky8 opt]#vim nginx_role.yml
- hosts: webservers
remote_user: root
roles:
- nginx
[root@rocky8 opt]#tree
.
├── ansible.cfg
├── hosts
├── index.html
├── nginx_role.yml
└── roles
├── mysql
│ ├── handlers
│ ├── tasks
│ └── templates
├── nginx
│ ├── handlers
│ │ └── main.yml
│ ├── tasks
│ │ └── main.yml
│ └── templates
│ ├── nginx.conf.j2
│ └── nginx.service.j2
├── php-fpm
│ ├── handlers
│ ├── tasks
│ └── templates
└── wordpress
├── handlers
├── tasks
└── templates
[root@rocky8 opt]#ansible-playbook -i hosts nginx_role.yml
1.2.2、php
[root@rocky18 ~]#scp /etc/php.ini /etc/php-fpm.d/www.conf 10.0.0.152:/opt/roles/php-fpm/templates/
[root@rocky8 templates]#mv php.ini php.ini.j2
[root@rocky8 templates]#grep -Ev "^;|^ *$" www.conf > www.conf.j2 #调整文件格式，不然会报错格式不符
[root@rocky8 templates]#rm -f www.conf
[root@rocky8 templates]#vim www.conf.j2 #监听调整
user = {{ user }}
group = {{ group }}
listen = 127.0.0.1:9000
[root@rocky8 templates]#vim php.ini.j2 #相关优化
date.timezone = Asia/Shanghai
max_execution_time = 360
max_input_time = 600
post_max_size = 80M
upload_max_filesize = 80M
[root@rocky8 ~]#cd /opt/roles/php-fpm
[root@rocky8 php-fpm]#vim templates/php-fpm.conf.j2
server {
listen 80;
server_name {{ fqdn }};
root {{ root_path }};
index index.php;
location ~ \.php$ { #注意是仅php文件
root {{ root_path }};
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
}
[root@rocky8 php-fpm]#vim tasks/main.yml
- name: install packages
yum:
name: "{{ item }}"
loop:
- php-fpm
- php-mysqld
- php-json
- php-xml
- php-pecl-zip
- php-gd
- name: php path
file:
path: /var/lib/php/
owner: "{{ user }}"
group: "{{ group }}"
recurse: yes
- name: config php.ini
template:
src: php.ini.j2
dest: /etc/php.ini
notify: restart php-fpm
- name: config www.conf
template:
src: www.conf.j2
dest: /etc/php-fpm.d/www.conf
notify: restart php-fpm
- name: config nginx
template:
src: php-fpm.conf.j2
dest: "{{ install_dir }}/conf.d/php-fpm.conf"
notify: restart nginx
- name: create php datadir
file:
name: "{{ root_path }}"
state: "directory
owner: "{{ user }}"
group: "{{ group }}"
- name: test page
copy:
src: test.php
dest: "{{ root_path }}/"
- name: start php-fpm
service:
name: php-fpm
state: started
enabled: yes
[root@rocky8 php-fpm]#vim handlers/main.yml
- name: restart php-fpm
service:
name: php-fpm
state: restarted
- name: restart nginx
service:
name: nginx
state: restarted
[root@rocky8 php-fpm]#mkdir files
[root@rocky8 php-fpm]#vim files/test.php #测试页面
<?php
phpinfo();
?>
调用php
[root@rocky8 opt]#vim php-fpm_role.yml
- hosts: webservers
remote_user: root
roles:
- php-fpm
[root@rocky8 opt]#tree
.
├── ansible.cfg
├── hosts
├── index.html
├── nginx_role.yml
└── roles
├── mysql
│ ├── handlers
│ ├── tasks
│ └── templates
├── nginx
│ ├── handlers
│ │ └── main.yml
│ ├── tasks
│ │ └── main.yml
│ └── templates
│ ├── nginx.conf.j2
│ └── nginx.service.j2
├── php-fpm
│ ├── files
│ │ └── test.php
│ ├── handlers
│ │ └── main.yml
│ ├── php-fpm_role.yml
│ ├── tasks
│ │ └── main.yml
│ └── templates
│ ├── php-fpm.conf.j2
│ ├── php.ini.j2
│ └── www.conf.j2
└── wordpress
├── handlers
├── tasks
└── templates
18 directories, 15 files
[root@rocky8 opt]#ansible-playbook php-fpm_role.yml
[root@rocky8 opt]#curl -Hhost:www.wang.org http://10.0.0.8/test.php
1.2.3、mysql
提前准备好二进制包
[root@rocky8 mysql]#pwd
/opt/roles/mysql
[root@rocky8 mysql]#mkdir files vars
#准备配置文件
[root@rocky8 mysql]#vim files/my.cnf
[mysqld]
server-id=1
log-bin
datadir=/data/mysql
socket=/data/mysql/mysql.sock
log-error=/data/mysql/mysql.log
pid-file=/data/mysql/mysql.pid
[client]
socket=/data/mysql/mysql.sock
#变量定义，也可和前面一样在主机清单中定义
[root@rocky8 mysql]#vim vars/main.yml
mysql_version: 8.0.23
mysql_file: mysql-{{mysql_version}}-linux-glibc2.12-x86_64.tar.xz
mysql_root_password: 123456
#tasks
[root@rocky8 mysql]#vim tasks/main.yml
- name: install packages
yum:
name:
- libaio
- numactl-libs
- name: create mysql group
group: name=mysql gid=306
- name: create mysql user
user: name=mysql uid=306 group=mysql shell=/sbin/nologin system=yes create_home=no home=/data/mysql
- name: copy tar to remote host and file mode
unarchive: src={{mysql_file}} dest=/usr/local/ owner=root group=root
- name: create linkfile /usr/local/mysql
file: src=/usr/local/mysql-{{ mysql_version }}-linux-glibc2.12-x86_64 dest=/usr/local/mysql state=link
- name: data dir
shell: /usr/local/mysql/bin/mysqld --initialize-insecure --user=mysql --datadir=/data/mysql
tags: data
- name: config my.cnf
copy: src=/data/ansible/files/my.cnf dest=/etc/my.cnf
- name: service script
shell: /bin/cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
- name: PATH variable
copy: content='PATH=/usr/local/mysql/bin:$PATH' dest=/etc/profile.d/mysql.sh
- name: enable service
shell: chkconfig --add mysqld;/etc/init.d/mysqld start
tags: service
- name: change password
shell: /usr/local/mysql/bin/mysqladmin -uroot password {{mysql_root_password}}
调用mysql
[root@rocky8 opt]#vim php-fpm_role.yml
- hosts: webservers
remote_user: root
roles:
- mysql
1.2.4、wordpress
提前准备好wordpress软件包，建议不要下载最新版本，以防有bug影响实验
[root@rocky8 ~]#cd /opt/roles/wordpress/
[root@rocky8 wordpress]#mkdir files #把wordpress软件包存放在此
[root@rocky8 wordpress]#vim tasks/main.yml
- name: down wordpress
unarchive:
src: "{{ app }}.tar.gz"
dest: /data/
owner: "{{ user }}"
group: "{{ group }}"
[root@rocky8 opt]#vim wordpress_role.yml
- hosts: webservers
remote_user: root
roles:
- wordpress
#- nginx #都在本机的话也可以写在一个调用文件中，建议还是分开
#- php-fpm
[root@rocky8 opt]#vim lnmp_role.yml #全部调用
- include: mhinx_role.yuml
- include: php-fpm_role.yml
- include: mysql_role.yml
- include: wordpress_role.yml
[root@rocky8 opt]#mkdir roles/wordpress/meta/
[root@rocky8 opt]#vim roles/wordpress/meta/main.yml #也可创建wordpress的依赖部署，即在部署wordpress时需先调用该文件里指定的role执行完成再执行wordpress
dependencies:
- role: nginx
- role: mysql
- role: php-fpm
完整目录
[root@rocky8 opt]#tree
.
├── ansible.cfg
├── hosts
├── index.html #忘删了。。。。。。当它不存在，谢谢
├── lnmp_role.yml
├── nginx_role.yml
├── php-fpm_role.yml
├── roles
│ ├── mysql
│ │ ├── files
│ │ │ └── my.cnf
│ │ ├── handlers
│ │ ├── tasks
│ │ │ └── main.yml
│ │ ├── templates
│ │ └── vars
│ │ └── main.yml
│ ├── nginx
│ │ ├── handlers
│ │ │ └── main.yml
│ │ ├── tasks
│ │ │ └── main.yml
│ │ └── templates
│ │ ├── nginx.conf.j2
│ │ └── nginx.service.j2
│ ├── php-fpm
│ │ ├── files
│ │ │ └── test.php
│ │ ├── handlers
│ │ │ └── main.yml
│ │ ├── php-fpm_role.yml
│ │ ├── tasks
│ │ │ └── main.yml
│ │ └── templates
│ │ ├── php-fpm.conf.j2
│ │ ├── php.ini.j2
│ │ └── www.conf.j2
│ └── wordpress
│ ├── files
│ │ └── wordpress-6.2.2-zh_CN.tar.gz
│ ├── handlers
│ ├── meta
│ │ └── main.yml
│ ├── tasks
│ │ └── main.yml
│ └── templates
└── wordpress_role.yml
22 directories, 24 files
[root@rocky8 opt]#ansible-playbook lnmp_role.yml
2、基于zabbix角色批量部署zabbix
- name: add repository
yum_repository: {name: zabbix, description: zabbix yum repo, baseurl: "https://mirrors.aliyun.com/zabbix/zabbix/5.0/rhel/8/$basearch/", gpgcheck: 0}
- name: clean yum cache
shell: dnf clean all
- name: install packages
yum:
name: "{{ item }}"
loop: [zabbix-server-mysql, zabbix-web-mysql, zabbix-nginx-conf, zabbix-agent]
- name: invoke script
script: files/mysql_prepare.sh
- name: import init archit and data
shell: zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | mysql -uzabbix -p123456 zabbix
- name: import database schema
shell: mysql -e "set global log_bin_trust_function_creators = 0;"
- name: config zabbix server
lineinfile: {path: /etc/zabbix/zabbix_server.conf, regexp: '# DBPassword=', line: DBPassword=123456}
- name: config php_nginx block: [lineinfile: {path: /etc/nginx/conf.d/zabbix.conf, regexp: '# listen', line: listen 80;}, lineinfile: {path: /etc/nginx/conf.d/zabbix.conf, regexp: '# server_name', line: server_name www.zyb.com;}]
- name: config php-fpm
lineinfile: {path: /etc/php-fpm.d/zabbix.conf, regexp: '; php_value[date.timezone]', line: 'php_value[date.timezone] = Asia/Shanghai'}
- name: start service
block: [service: {name: zabbix-server, state: started, enabled: yes}, service: {name: zabbix-agent, state: started, enabled: yes}, service: {name: php-fpm, state: started, enabled: yes}, service: {name: nginx, state: started, enabled: yes}]
114
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
