自动化运维ansible入门篇

最新推荐文章于 2023-07-07 17:01:35 发布

weixin_49226813

最新推荐文章于 2023-07-07 17:01:35 发布

阅读量197

点赞数

分类专栏： ansible 文章标签： ansible

本文链接：https://blog.csdn.net/weixin_49226813/article/details/112466490

版权

ansible 专栏收录该内容

3 篇文章 0 订阅

订阅专栏

一、ansible简介

ansible是新出现的自动化运维工具，基于Python开发，集合了众多运维工具（puppet、chef、func、fabric）的优点，实现了批量系统配置、批量程序部署、批量运行命令等功能。
　　ansible是基于 paramiko 开发的,并且基于模块化工作，本身没有批量部署的能力。真正具有批量部署的是ansible所运行的模块，ansible只是提供一种框架。ansible不需要在远程主机上安装client/agents，因为它们是基于ssh来和远程主机通讯的。ansible目前已经已经被红帽官方收购，是自动化运维工具中大家认可度最高的，并且上手容易，学习简单。是每位运维工程师必须掌握的技能之一。

二、ansible特点

部署简单，只需在主控端部署Ansible环境，被控端无需做任何操作；
默认使用SSH协议对设备进行管理；
有大量常规运维操作模块，可实现日常绝大部分操作；
配置简单、功能强大、扩展性强；
支持API及自定义模块，可通过Python轻松扩展；
通过Playbooks来定制强大的配置、状态管理；
轻量级，无需在客户端安装agent，更新时，只需在操作机上进行一次更新即可；
提供一个功能强大、操作性强的Web管理界面和REST API接口——AWX平台。

三、ansible基本架构

在这里插入图片描述

核心：ansible

核心模块（Core Modules）：这些都是ansible自带的模块

扩展模块（Custom Modules）：如果核心模块不足以完成某种功能，可以添加扩展模块

插件（Plugins）：完成模块功能的补充

剧本（Playbooks）：ansible的任务配置文件，将多个任务定义在剧本中，由ansible自动执行

连接插件（Connectior Plugins）：ansible基于连接插件连接到各个主机上，虽然ansible是使用ssh连接到各个主机的，但是它还支持其他的连接方法，所以需要有连接插件

主机群（Host Inventory）：定义ansible管理的主机

四、ansible部署

名称	主机名	IP地址
ansible服务器	ansible	20.0.0.10/24
节点1	node-1	20.0.0.20/24
节点1	node-1	20.0.0.30/24

4.1基本环境

关闭防火墙

[root@ansible ~]# systemctl stop firewalld

[root@ansible ~]# setenforce 0

使用centos 7自带的yum源

[root@ansible ~]# cd /etc/yum.repos.d/
[root@ansible yum.repos.d]# ls
CentOS-Base.repo
[root@ansible yum.repos.d]# vim CentOS-Base.repo 
[base]
name=CentOS-$releasever - Base
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os&infra=$infra
#baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

#released updates 
[updates]
name=CentOS-$releasever - Updates
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates&infra=$infra
#baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras&infra=$infra
#baseurl=http://mirror.centos.org/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus&infra=$infra
#baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

[root@ansible yum.repos.d]# ls
CentOS-Base.repo

可以连接网络

[root@ansible yum.repos.d]# ping www.baidu.com
PING www.a.shifen.com (180.101.49.11) 56(84) bytes of data.
64 bytes from 180.101.49.11 (180.101.49.11): icmp_seq=1 ttl=128 time=3.64 ms
64 bytes from 180.101.49.11 (180.101.49.11): icmp_seq=2 ttl=128 time=3.38 ms

4.2安装epel-release

[root@server1 ~]# yum install -y epel-release

已安装:
  epel-release.noarch 0:7-11

4.2安装ansible

[root@server1 ~]# yum install ansible -y

已安装:
  ansible.noarch 0:2.9.16-1.el7                                                                             

作为依赖被安装:
  PyYAML.x86_64 0:3.10-11.el7                           libyaml.x86_64 0:0.1.4-11.el7_0                     
  python-babel.noarch 0:0.9.6-8.el7                     python-jinja2.noarch 0:2.7.2-4.el7                  
  python-markupsafe.x86_64 0:0.11-10.el7                python-paramiko.noarch 0:2.1.1-9.el7                
  python2-httplib2.noarch 0:0.18.1-3.el7                python2-jmespath.noarch 0:0.9.4-2.el7               
  sshpass.x86_64 0:1.06-2.el7                          

完毕！

4.3修改ansible host配置文件

[root@ansible ~]# vim /etc/ansible/hosts
[node]
20.0.0.20
20.0.0.30

设置一个组名，成员为：20.0.0.20、20.0.0.30

4.4设置ansible免密登录两台node节点

[root@ansible ~]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): #秘钥存放的位置
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase): #设置密码：123456
Enter same passphrase again: 	#设置密码：123456
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:G+kExqK+oT2xof8zMUIj5rPNyGlJDV1SR+l4cxQsFpA root@ansible
The key's randomart image is:
+---[RSA 2048]----+
|    .o+++..      |
|   . E.+ o       |
|  . + B o        |
|.ooo + = o       |
|oo+.  . S        |
| =+.o  o o       |
|o.@= o  o        |
|.Xo=o            |
|o.+o.o           |
+----[SHA256]-----+

[root@ansible ~]# ssh-copy-id root@20.0.0.20
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host '20.0.0.20 (20.0.0.20)' can't be established.
ECDSA key fingerprint is SHA256:yELtpt+yAiWNtPQb5bPu3PyWman5X5xL5zwU607sqHE.
ECDSA key fingerprint is MD5:b1:3f:1c:fa:eb:42:fc:bf:02:40:80:ea:8e:01:0a:7a.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@20.0.0.20's password: #输入20.0.0.20服务器登录密码

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@20.0.0.20'"
and check to make sure that only the key(s) you wanted were added.

[root@ansible ~]# ssh-copy-id root@20.0.0.30
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host '20.0.0.30 (20.0.0.30)' can't be established.
ECDSA key fingerprint is SHA256:S2ANKK3sAHs5II74zKqBXVTVfAQUFrImRm7pq/hOrpg.
ECDSA key fingerprint is MD5:bc:99:68:b2:2a:25:31:37:bc:2b:01:49:35:98:de:f0.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@20.0.0.30's password: #输入20.0.0.30服务器登录密码

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@20.0.0.30'"
and check to make sure that only the key(s) you wanted were added.

[root@ansible ~]# ssh-agent bash
[root@ansible ~]# ssh-add
Enter passphrase for /root/.ssh/id_rsa: #输入创建密钥时设置的密码
Identity added: /root/.ssh/id_rsa (/root/.ssh/id_rsa)

五、ansible命令基本用法

5.1、ansible命令格式

ansible 主机表示/IP地址 -m 模块 -a '参数'

5.2、command模块

1、查看已安装的模块

[root@ansible ~]# ansible-doc -l

2、查看节点1的时间

[root@ansible ~]# ansible 20.0.0.20 -m command -a 'date'
20.0.0.20 | CHANGED | rc=0 >>
2021年 01月 11日 星期一 15:15:38 CST

3、查看指定标签下的所有节点时间时间

[root@ansible ~]# ansible node -m command -a 'date'
20.0.0.20 | CHANGED | rc=0 >>
2021年 01月 11日 星期一 15:16:35 CST
20.0.0.30 | CHANGED | rc=0 >>
2021年 01月 11日 星期一 15:16:35 CST

4、如果不知道模块默认使用的是command

[root@ansible ~]# ansible 20.0.0.20 -a 'date'
20.0.0.20 | CHANGED | rc=0 >>
2021年 01月 11日 星期一 15:18:08 CST

5、对所有标签都执行

[root@ansible ~]# ansible all -m command -a 'date'
20.0.0.20 | CHANGED | rc=0 >>
2021年 01月 11日 星期一 15:54:12 CST
20.0.0.30 | CHANGED | rc=0 >>
2021年 01月 11日 星期一 15:54:12 CST

对都所有标签下的主机都执行date，我这里只设置一个标签

5.3、cron模块

1、查看cron可以使用的参数

[root@ansible ~]# ansible-doc -s cron

2、在节点1上面创建一个任务计划

[root@ansible ~]# ansible 20.0.0.20 -m cron -a 'minute="*/1" job="/usr/bin/echo hello,ansible >>/opt/ansible.txt" name="abc"'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, #true表示执行成功
    "envs": [], 
    "jobs": [
        "abc"
    ]
}
[root@ansible ~]# ansible 20.0.0.20 -a 'crontab -l'
20.0.0.20 | CHANGED | rc=0 >>
#Ansible: abc
*/1 * * * * /usr/bin/echo hello,ansible >>/opt/ansible.txt
#在节点1上查看什么生效
[root@node-1 ~]# cd /opt/
[root@node-1 opt]# ls
ansible.txt  rh
[root@node-1 opt]# cat ansible.txt 
hello,ansible
hello,ansible

在节点1上面创建一个周期型任务计划，每一分钟向/opt/ansible.txt目录里输入hello,ansible

3、删除任务计划

[root@ansible ~]# ansible 20.0.0.20 -m cron -a 'name="abc" state=absent'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "envs": [], 
    "jobs": []
}

[root@ansible ~]# ansible 20.0.0.20 -a 'crontab -l'
20.0.0.20 | CHANGED | rc=0 >>
#删除成功

4、如果创建任务计划没有设置名称删除

[root@ansible ~]# ansible 20.0.0.20 -m cron -a 'minute="*/1" job="/usr/bin/echo hello >>/opt/ansible.txt"'
[DEPRECATION WARNING]: The 'name' parameter will be required in future releases.. This feature will be removed in
 version 2.12. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "envs": [], 
    "jobs": [
        "None"
    ]
}
[root@ansible ~]# ansible 20.0.0.20 -a 'crontab -l'
20.0.0.20 | CHANGED | rc=0 >>
#Ansible: None
*/1 * * * * /usr/bin/echo hello >>/opt/ansible.txt

[root@ansible ~]# ansible 20.0.0.20 -m cron -a 'name="None" state=absent'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "envs": [], 
    "jobs": []
}
[root@ansible ~]# ansible 20.0.0.20 -a 'crontab -l'
20.0.0.20 | CHANGED | rc=0 >>

5.4、user模块

1、查看user可以使用的参数

[root@ansible ~]# ansible-doc -s user

2、给node标签下的所有主机都创建一个lisi用户

[root@ansible ~]# ansible node -m user  -a 'name="lisi"'
20.0.0.30 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "comment": "", 
    "create_home": true, 
    "group": 1001, 
    "home": "/home/lisi", 
    "name": "lisi", 
    "shell": "/bin/bash", 
    "state": "present", 
    "system": false, 
    "uid": 1001
}
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "comment": "", 
    "create_home": true, 
    "group": 1001, 
    "home": "/home/lisi", 
    "name": "lisi", 
    "shell": "/bin/bash", 
    "state": "present", 
    "system": false, 
    "uid": 1001
}

#在节点一二验证lisi账号是否创建成功
node-1：
[root@node-1 opt]# id lisi
uid=1001(lisi) gid=1001(lisi) 组=1001(lisi)
node-2：
[root@node-2 ~]# id lisi
uid=1001(lisi) gid=1001(lisi) 组=1001(lisi)

3、删除node标签下的所有主机lisi用户

[root@ansible ~]# ansible node -m user  -a 'name="lisi" state=absent'
20.0.0.30 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "force": false, 
    "name": "lisi", 
    "remove": false, 
    "state": "absent"
}
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "force": false, 
    "name": "lisi", 
    "remove": false, 
    "state": "absent"
}

#在节点一二验证lisi账号是否删除成功
node-1：
[root@node-1 opt]# id lisi
id: lisi: no such user
node-2：
[root@node-2 ~]# id lisi
id: lisi: no such user

5.5、group模块

1、查看group可以使用的参数

[root@ansible ~]# ansible-doc -s group

2、创建一个组

[root@ansible ~]# ansible 20.0.0.20 -m group -a 'name="abc" gid=1004 system=yes'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "gid": 1004, 
    "name": "abc", 
    "state": "present", 
    "system": true
}

#ansible上查看是否创建成功
[root@ansible ~]# ansible 20.0.0.20 -a 'tail /etc/group'
20.0.0.20 | CHANGED | rc=0 >>
nfsnobody:x:65534:
gnome-initial-setup:x:986:
avahi:x:70:
slocate:x:21:
postdrop:x:90:
postfix:x:89:
sshd:x:74:
tcpdump:x:72:
abc:x:1004:

#节点1验证
[root@node-1 opt]# tail /etc/group
nfsnobody:x:65534:
gnome-initial-setup:x:986:
avahi:x:70:
slocate:x:21:
postdrop:x:90:
postfix:x:89:
sshd:x:74:
tcpdump:x:72:
abc:x:1004:

3、创建一个用户加入组里

[root@ansible ~]# ansible 20.0.0.20 -m user  -a 'name="wangwu"'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "comment": "", 
    "create_home": true, 
    "group": 1002, 
    "home": "/home/wangwu", 
    "name": "wangwu", 
    "shell": "/bin/bash", 
    "state": "present", 
    "system": false, 
    "uid": 1002
}
[root@ansible ~]# ansible 20.0.0.20 -m user -a 'name=zhaoyun uid=10006 system=yes group=abc'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "comment": "", 
    "create_home": true, 
    "group": 1004, 
    "home": "/home/zhaoyun", 
    "name": "zhaoyun", 
    "shell": "/bin/bash", 
    "state": "present", 
    "system": true, 
    "uid": 10006
}

#节点一验证
[root@node-1 opt]# id zhaoyun
uid=10006(zhaoyun) gid=1004(abc) 组=1004(abc)

创建一个abc组，创建用户zhaoyun并加入abc组

5.6、copy模块

1、查看copy可以使用的参数

[root@ansible ~]# ansible-doc -s copy

2、拷贝一个文件到节点1里

[root@ansible ~]# ansible 20.0.0.20 -m copy -a 'src=/root/abc dest=/opt owner=lisi mode=755'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "checksum": "512ba0e938d862261a9914c7f5370dab3d7c1695", 
    "dest": "/opt/abc", 
    "gid": 0, 
    "group": "root", 
    "md5sum": "1bfd09afae8b4b7fde31ac5e6005342e", 
    "mode": "0755", 
    "owner": "lisi", 
    "size": 5, 
    "src": "/root/.ansible/tmp/ansible-tmp-1610353993.21-15430-36258874554335/source", 
    "state": "file", 
    "uid": 1001
}

#在节点1里验证
[root@node-1 opt]# ls -l
总用量 8
-rwxr-xr-x  1 lisi root   5 1月  11 16:33 abc
-rw-r--r--  1 root root 180 1月  11 15:51 ansible.txt
drwxr-xr-x. 2 root root   6 3月  26 2015 rh
[root@node-1 opt]# cat abc 
hell

3、将指定内容写节点1制定文件里

[root@ansible ~]# ansible 20.0.0.20 -m copy -a 'content="abc123" dest=/opt/abc'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "checksum": "6367c48dd193d56ea7b0baad25b19455e529f5ee", 
    "dest": "/opt/abc", 
    "gid": 0, 
    "group": "root", 
    "md5sum": "e99a18c428cb38d5f260853678922e03", 
    "mode": "0755", 
    "owner": "lisi", 
    "size": 6, 
    "src": "/root/.ansible/tmp/ansible-tmp-1610354219.77-15497-100936071941447/source", 
    "state": "file", 
    "uid": 1001
}

#节点1验证
[root@node-1 opt]# cat abc 
abc123

如果写入的内容直接覆盖文件里面的所有内容

5.7、file模块

1、查看file可以使用的参数

[root@ansible ~]# ansible-doc -s file

2、修改节点1上文件abc的属主和属组

[root@ansible ~]# ansible 20.0.0.20 -m user -a 'name=nginx system=yes'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "comment": "", 
    "create_home": true, 
    "group": 984, 
    "home": "/home/nginx", 
    "name": "nginx", 
    "shell": "/bin/bash", 
    "state": "present", 
    "system": true, 
    "uid": 989
}
[root@ansible ~]# ansible 20.0.0.20 -m group -a 'name=node system=yes'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "gid": 983, 
    "name": "node", 
    "state": "present", 
    "system": true
}
[root@ansible ~]# ansible 20.0.0.20 -m file -a 'owner=nginx group=node mode=755 path=/opt/abc'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "gid": 983, 
    "group": "node", 
    "mode": "0755", 
    "owner": "nginx", 
    "path": "/opt/abc", 
    "size": 6, 
    "state": "file", 
    "uid": 989
}

#在节点1上验证
[root@node-1 opt]# ls -l
总用量 8
-rwxr-xr-x  1 nginx node   6 1月  11 16:37 abc
-rw-r--r--  1 root  root 180 1月  11 15:51 ansible.txt
drwxr-xr-x. 2 root  root   6 3月  26 2015 rh

3、将节点上面的文件做链接

[root@node-1 ~]# touch a2

[root@ansible ~]# ansible 20.0.0.20 -m file -a 'src=/root/a2 path=/opt/aa1 state=link'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "dest": "/opt/aa1", 
    "gid": 0, 
    "group": "root", 
    "mode": "0777", 
    "owner": "root", 
    "size": 8, 
    "src": "/root/a2", 
    "state": "link", 
    "uid": 0
}

#节点1上面验证
[root@node-1 opt]# ls -l
总用量 8
lrwxrwxrwx  1 root  root   8 1月  11 17:10 aa1 -> /root/a2
-rwxr-xr-x  1 nginx node   6 1月  11 16:37 abc
-rw-r--r--  1 root  root 180 1月  11 15:51 ansible.txt
drwxr-xr-x. 2 root  root   6 3月  26 2015 rh

4、在节点1上面创建一个文件

[root@ansible ~]# ansible 20.0.0.20 -m file -a 'path=/opt/ax state=touch'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "dest": "/opt/ax", 
    "gid": 0, 
    "group": "root", 
    "mode": "0644", 
    "owner": "root", 
    "size": 0, 
    "state": "file", 
    "uid": 0
}

#节点1上面验证
[root@node-1 opt]# ls -l
总用量 8
lrwxrwxrwx  1 root  root   8 1月  11 17:10 aa1 -> /root/a2
-rwxr-xr-x  1 nginx node   6 1月  11 16:37 abc
-rw-r--r--  1 root  root 180 1月  11 15:51 ansible.txt
-rw-r--r--  1 root  root   0 1月  11 17:17 ax
drwxr-xr-x. 2 root  root   6 3月  26 2015 rh

5、在节点1上面删除一个文件

[root@ansible ~]# ansible 20.0.0.20 -m file -a 'path=/opt/ax state=absent'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "path": "/opt/ax", 
    "state": "absent"
}

#节点1上面验证
[root@node-1 opt]# ls -l
总用量 8
lrwxrwxrwx  1 root  root   8 1月  11 17:10 aa1 -> /root/a2
-rwxr-xr-x  1 nginx node   6 1月  11 16:37 abc
-rw-r--r--  1 root  root 180 1月  11 15:51 ansible.txt
drwxr-xr-x. 2 root  root   6 3月  26 2015 rh

6、在节点1上面创建一个目录

[root@ansible ~]# ansible 20.0.0.20 -m file -a 'path=/opt/ansible-1 state=directory mode=755'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "gid": 0, 
    "group": "root", 
    "mode": "0755", 
    "owner": "root", 
    "path": "/opt/ansible-1", 
    "size": 6, 
    "state": "directory", 
    "uid": 0
}

#节点1上面验证
[root@node-1 opt]# ls -l
总用量 8
lrwxrwxrwx  1 root  root   8 1月  11 17:10 aa1 -> /root/a2
-rwxr-xr-x  1 nginx node   6 1月  11 16:37 abc
drwxr-xr-x  2 root  root   6 1月  11 17:23 ansible-1
-rw-r--r--  1 root  root 180 1月  11 15:51 ansible.txt
drwxr-xr-x. 2 root  root   6 3月  26 2015 rh

7、删除节点1上面的目录

[root@ansible ~]# ansible 20.0.0.20 -m file -a 'path=/opt/ansible-1 state=absent'
20.0.0.20 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "path": "/opt/ansible-1", 
    "state": "absent"
}

#节点1上面验证
[root@node-1 opt]# ls -l
总用量 8
lrwxrwxrwx  1 root  root   8 1月  11 17:10 aa1 -> /root/a2
-rwxr-xr-x  1 nginx node   6 1月  11 16:37 abc
-rw-r--r--  1 root  root 180 1月  11 15:51 ansible.txt
drwxr-xr-x. 2 root  root   6 3月  26 2015 rh

5.8、ping模块

1、查看ping可以使用的参数

[root@ansible ~]# ansible-doc -s ping

2、测试所有节点主机和ansible服务器网络是否互通

[root@ansible ~]# ansible all -m ping

3、测试某一个标签下的主机和ansible服务器网络是否互通

[root@ansible ~]# ansible node -m ping

4、测试某一个主机和ansible服务器网络是否互通

[root@ansible ~]# ansible 20.0.0.20 -m ping

5.9、yum模块

1、查看yum可以使用的参数

[root@ansible ~]# ansible-doc -s yum

2、给node标签下面的主机安装httpd服务

[root@ansible ~]# ansible node -m yum -a 'name=httpd'

节点验证1验证：
[root@node-1 ~]# rpm -q httpd
httpd-2.4.6-67.el7.centos.x86_64
节点验证2验证：
[root@node-2 ~]# rpm -q httpd
httpd-2.4.6-67.el7.centos.x86_64

3、卸载node标签下面的主机安装httpd服务

[root@ansible ~]# ansible node -m yum -a 'name=httpd state=absent'

节点验证1验证：
[root@node-1 ~]# rpm -q httpd
未安装软件包 httpd
节点验证2验证：
[root@node-2 ~]# rpm -q httpd
未安装软件包 httpd

5.9、service模块

1、查看service可以使用的参数

[root@ansible ~]# ansible-doc -s service

2、开启node标签下的所有主机httpd服务状态

[root@ansible ~]# ansible node -m yum -a 'name=httpd'
[root@ansible ~]# ansible node -m service -a 'enabled=true name=httpd state=started'

节点1验证：
[root@node-1 ~]# netstat -anpt|grep 80
tcp6       0      0 :::80                   :::*                    LISTEN      3005/httpd          
节点2验证：
[root@node-2 ~]# netstat -anpt|grep 80
tcp6       0      0 :::80                   :::*                    LISTEN      3005/httpd

3、关闭node标签下的所有节点的防火墙

[root@ansible ~]# ansible node -m service -a 'name=firewalld state=stopped'

5.10、shell模块

1、查看service可以使用的参数

[root@ansible ~]# ansible-doc -s shell

2、将指定内容输入到node标签下的所有节点

[root@ansible ~]# ansible node -m shell -a 'chdir=/opt/ echo ansible123 > aba.txt'	#command模块是不识别从定向符号
20.0.0.30 | CHANGED | rc=0 >>

20.0.0.20 | CHANGED | rc=0 >>

节点1验证
[root@node-1 ~]# cd /opt/
[root@node-1 opt]# ls
aa1  aba.txt  abc  ansible.txt  rh
[root@node-1 opt]# cat aba.txt 
ansible123

节点2验证
[root@node-2 ~]#  cd /opt/
[root@node-2 opt]# ls
aba.txt  rh
[root@node-2 opt]# cat aba.txt 
ansible123

5.11、script模块

1、查看script可以使用的参数

[root@ansible ~]# ansible-doc -s script

2、创建一个脚本让node标签下的主机都执行该脚本

[root@ansible ~]# vim an.sh       
[root@ansible ~]# chmod +x an.sh 
[root@ansible ~]# ansible node -m script -a 'an.sh'

节点1验证：
[root@node-1 opt]# ls
aa1  aba.txt  abc  abcd.txt  ansible.txt  rh
[root@node-1 opt]# cat abcd.txt 
123456abc
节点2验证：
[root@node-2 opt]# ls
aa1  aba.txt  abc  abcd.txt  ansible.txt  rh
[root@node-2 opt]# cat abcd.txt 
123456abc

5.12、setup模块

1、查看setup可以使用的参数

[root@ansible ~]# ansible-doc -s setup

2、查看node标签下的服务器facts信息

[root@ansible ~]# ansible node -m setup

weixin_49226813

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
1
评论
自动化运维ansible入门篇

目录一、ansible简介二、ansible特点三、ansible基本架构四、ansible部署4.1基本环境4.2安装epel-release4.2安装ansible4.3修改ansible host配置文件4.4设置ansible免密登录两台node节点五、ansible命令基本用法5.1、ansible命令格式5.2、command模块5.3、cron模块5.4、user模块5.5、group模块5.6、copy模块5.7、file模块一、ansible简介ansible是新出现的自动化运维工具，
复制链接

扫一扫

专栏目录