Ansible的简单使用

最新推荐文章于 2023-06-15 09:57:18 发布
最新推荐文章于 2023-06-15 09:57:18 发布
阅读量498 收藏
点赞数
分类专栏： Ansible 文章标签： 运维
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/yanghuadong_1992/article/details/112167297
版权

Ansible命令执行过程

1.加载自己的配置文件，默认/etc/ansible/ansible.cfg 
2.加载自己对应的模板文件，如command 
3.通过ansible将模块或命令生成对应的临时py文件,并将该文件传输至远程服务器的对应执行用户 $HOME/.ansible/tmp/ansible-tmp-数字/xxx.py文件
4.给文件执行权限 
5.执行并返回结果
6.删除临时py文件，退出

执行过程参数v可验证

[root@myserver_1 tmp]# ansible "~(web|db)servers" -vvv -m ping >ansible.log

#打开另外一个窗口查看
[root@myserver_1 tmp]# grep chmod ansible.log 
<192.168.1.38> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/237d81d540 192.168.1.38 '/bin/sh -c '"'"'chmod u+x /root/.ansible/tmp/ansible-tmp-1609605284.73-63414-75711191811786/ /root/.ansible/tmp/ansible-tmp-1609605284.73-63414-75711191811786/AnsiballZ_ping.py && sleep 0'"'"''
<192.168.1.160> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/649058737a 192.168.1.160 '/bin/sh -c '"'"'chmod u+x /root/.ansible/tmp/ansible-tmp-1609605284.76-63410-40006442659494/ /root/.ansible/tmp/ansible-tmp-1609605284.76-63410-40006442659494/AnsiballZ_ping.py && sleep 0'"'"''
<192.168.1.161> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/1aa5cf8898 192.168.1.161 '/bin/sh -c '"'"'chmod u+x /root/.ansible/tmp/ansible-tmp-1609605284.89-63412-38250587576184/ /root/.ansible/tmp/ansible-tmp-1609605284.89-63412-38250587576184/AnsiballZ_ping.py && sleep 0'"'"''
<192.168.1.162> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/f35ebaf285 192.168.1.162 '/bin/sh -c '"'"'chmod u+x /root/.ansible/tmp/ansible-tmp-1609605284.88-63413-236878805733374/ /root/.ansible/tmp/ansible-tmp-1609605284.88-63413-236878805733374/AnsiballZ_ping.py && sleep 0'"'"''
[root@myserver_1 tmp]# ll
total 28
-rw-r--r-- 1 root root 25889 Jan  3 00:34 ansible.log

查看主机清单

查看主机清单
[root@myserver_1 ~]# ansible all --list-hosts
  hosts (4):
    192.168.1.160
    192.168.1.161
    192.168.1.162
    192.168.1.38
[root@myserver_1 ~]# ansible webservers --list-hosts
  hosts (3):
    192.168.1.160
    192.168.1.161
    192.168.1.162
[root@myserver_1 ~]# ansible dbservers --list-hosts
  hosts (1):
    192.168.1.38
[root@myserver_1 ~]#

ansible的逻辑非关系用单引号，其他逻辑关系可以用双引号


[root@myserver_1 ~]# ansible "webservers:!dbservers" -m ping
-bash: !dbservers": event not found
[root@myserver_1 ~]# ansible 'webservers:!dbservers' -m ping
192.168.1.161 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": false, 
    "ping": "pong"
}
192.168.1.162 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": false, 
    "ping": "pong"
}
192.168.1.160 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": false, 
    "ping": "pong"
}
[root@myserver_1 ~]#

 支持正则表达式

[root@myserver_1 ~]# ansible "~(web|db)servers" -m ping
192.168.1.160 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": false, 
    "ping": "pong"
}
192.168.1.38 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": false, 
    "ping": "pong"
}
192.168.1.161 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": false, 
    "ping": "pong"
}
192.168.1.162 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": false, 
    "ping": "pong"
}

 ansible反馈结果显示不同的颜色可以自定义 vim /etc/ansible/ansible.cfg

[colors]
#highlight = white
#verbose = blue
#warn = bright purple
#error = red
#debug = dark gray
#deprecate = purple
#skip = cyan
#unreachable = red
#ok = green
#changed = yellow
#diff_add = green
#diff_remove = red
#diff_lines = cyan

ansible-galaxy :  下载人家写好的playbook文本，根据需求改

https://galaxy.ansible.com/

下载自动解压缩 


[root@myserver_1 mysql]# ansible-galaxy collection install community.mysql

解压缩的路径
[root@myserver_1 mysql]# pwd
/root/.ansible/collections/ansible_collections/community/mysql
[root@myserver_1 mysql]# ls
changelogs  codecov.yml  COPYING  FILES.json  MANIFEST.json  meta  plugins  README.md  tests
[root@myserver_1 mysql]# 

列出已安装的galaxy
ansible-galaxy  list
安装galaxy
ansible-galaxy install geerlingguy.redis
删除galaxy
ansible-galaxy remove geerlingguy.redis

 ansible-playbook简单测试  广播发送

[root@myserver_1 ansible]# ansible-playbook hello.yml 

PLAY [webservers] ****************************************************************************

TASK [Gathering Facts] ***********************************************************************
ok: [192.168.1.160]
ok: [192.168.1.161]
ok: [192.168.1.162]

TASK [hello world] ***************************************************************************
changed: [192.168.1.162]
changed: [192.168.1.161]
changed: [192.168.1.160]

PLAY RECAP ***********************************************************************************
192.168.1.160              : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.1.161              : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.1.162              : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

[root@myserver_1 ansible]# 
[root@myserver_1 ansible]# cat hello.yml 
---
#hello world yml file
- hosts: webservers
  remote_user: root
  tasks:
    - name: hello world
      command: /usr/bin/wall hello world
[root@myserver_1 ansible]#

ansible-vault encrypt hello.yml #加密

ansible-vault decrypt hello.yml #解密

ansible-vault view hello.yml #查看

ansible-vault edit hello.yml #编辑

ansible-vault rekey hello.yml #修改口令

ansible-vault create new.yml #创建新文件

Ansible交互命令


[root@myserver_1 ansible]# ansible-console
Welcome to the ansible console.
Type help or ? to list commands.

root@all (4)[f:5]$ list
192.168.1.160
192.168.1.161
192.168.1.162
192.168.1.38
root@all (4)[f:5]$ cd webservers
root@webservers (3)[f:5]$ list
192.168.1.160
192.168.1.161
192.168.1.162
root@webservers (3)[f:5]$ yum name=httpd state=present
192.168.1.160 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": true, 
    "msg": "", 
    "rc": 0, 
    "results": [
        "Installed: apr-util-openssl-1.6.1-6.el8.x86_64", 
        "Installed: httpd-2.4.37-30.module_el8.3.0+561+97fdbbcc.x86_64", 
        "Installed: httpd-filesystem-2.4.37-30.module_el8.3.0+561+97fdbbcc.noarch", 
        "Installed: httpd-tools-2.4.37-30.module_el8.3.0+561+97fdbbcc.x86_64", 
        "Installed: centos-logos-httpd-80.5-2.el8.noarch", 
        "Installed: apr-1.6.3-11.el8.x86_64", 
        "Installed: apr-util-1.6.1-6.el8.x86_64", 
        "Installed: mod_http2-1.15.7-2.module_el8.3.0+477+498bb568.x86_64", 
        "Installed: apr-util-bdb-1.6.1-6.el8.x86_64"
    ]
}
192.168.1.161 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": true, 
    "msg": "", 
    "rc": 0, 
    "results": [
        "Installed: mod_http2-1.15.7-2.module_el8.3.0+477+498bb568.x86_64", 
        "Installed: httpd-2.4.37-30.module_el8.3.0+561+97fdbbcc.x86_64"
    ]
}
192.168.1.162 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": true, 
    "msg": "", 
    "rc": 0, 
    "results": [
        "Installed: mod_http2-1.15.7-2.module_el8.3.0+477+498bb568.x86_64", 
        "Installed: httpd-2.4.37-30.module_el8.3.0+561+97fdbbcc.x86_64"
    ]
}

 

 ansible的常用模块 command 模块

command模块:在远程主机上执行，为默认模块，可忽略-m
ansible <hosts-pattern> [-m module_name]  [-a args]

查看系统版本号
[root@myserver_1 ansible]# ansible webservers -m command -a 'cat /etc/centos-release'
192.168.1.160 | CHANGED | rc=0 >>
CentOS Linux release 8.3.2011
192.168.1.162 | CHANGED | rc=0 >>
CentOS Linux release 8.3.2011
192.168.1.161 | CHANGED | rc=0 >>
CentOS Linux release 8.3.2011
[root@myserver_1 ansible]# ansible webservers -m command -a 'chdir=/etc cat centos-release'
192.168.1.161 | CHANGED | rc=0 >>
CentOS Linux release 8.3.2011
192.168.1.162 | CHANGED | rc=0 >>
CentOS Linux release 8.3.2011
192.168.1.160 | CHANGED | rc=0 >>
CentOS Linux release 8.3.2011
# -a后的命令chdir的命令其实就是下面的操作逻辑
[root@myserver_1 ansible]# cd /etc/;cat centos-release
CentOS Linux release 7.7.1908 (Core)
[root@myserver_1 etc]# ansible webservers -m command -a 'creates=/tmp/test.txt  chdir=/etc cat centos-release'
192.168.1.162 | CHANGED | rc=0 >>
CentOS Linux release 8.3.2011
192.168.1.161 | CHANGED | rc=0 >>
CentOS Linux release 8.3.2011
192.168.1.160 | SUCCESS | rc=0 >>
skipped, since /tmp/test.txt exists
#creates文件存在执行，否则不执行，removes文件不存在执行，否则执行
#/tmp/test.txt文件在160上有，在另外两台没有
[root@myserver_1 etc]# ansible webservers -m command -a 'removes=/tmp/test.txt  chdir=/etc cat centos-release'
192.168.1.161 | SUCCESS | rc=0 >>
skipped, since /tmp/test.txt does not exist
192.168.1.162 | SUCCESS | rc=0 >>
skipped, since /tmp/test.txt does not exist
192.168.1.160 | CHANGED | rc=0 >>
CentOS Linux release 8.3.2011
[root@myserver_1 etc]#

 由于在command模块中不支持通配符,重定项,管道符等

[root@myserver_1 ansible]# ansible webservers -m command -a ' rm -rf /root/test/*'
[WARNING]: Consider using the file module with state=absent rather than running 'rm'.  If you
need to use command because file is insufficient you can add 'warn: false' to this command
task or set 'command_warnings=False' in ansible.cfg to get rid of this message.
192.168.1.161 | CHANGED | rc=0 >>

192.168.1.160 | CHANGED | rc=0 >>

192.168.1.162 | CHANGED | rc=0 >>

[root@myserver_1 ansible]# ansible webservers -m command -a ' ls /root/test/'
192.168.1.161 | CHANGED | rc=0 >>
123.txt
192.168.1.160 | CHANGED | rc=0 >>
123.txt
192.168.1.162 | CHANGED | rc=0 >>
123.txt
#只显示本机主机名不是远程主机的主机名
[root@myserver_1 ansible]# ansible webservers -m command -a "echo $HOSTNAME"
192.168.1.161 | CHANGED | rc=0 >>
myserver_1
192.168.1.162 | CHANGED | rc=0 >>
myserver_1
192.168.1.160 | CHANGED | rc=0 >>
myserver_1
[root@myserver_1 ansible]#

shell模块


Shell模块
命令和command类似，功能比command强大一点
[root@myserver_1 ansible]# ansible webservers -m shell -a 'echo $HOSTNAME'
192.168.1.160 | CHANGED | rc=0 >>
myserver
192.168.1.161 | CHANGED | rc=0 >>
myserver_1
192.168.1.162 | CHANGED | rc=0 >>
myserver_2

shell模块删除文件
[root@myserver_1 ansible]# ansible webservers -m shell -a 'rm -rf  /root/test/*'
[WARNING]: Consider using the file module with state=absent rather than running 'rm'.  If you
need to use command because file is insufficient you can add 'warn: false' to this command
task or set 'command_warnings=False' in ansible.cfg to get rid of this message.
192.168.1.162 | CHANGED | rc=0 >>
192.168.1.160 | CHANGED | rc=0 >>
192.168.1.161 | CHANGED | rc=0 >>
[root@myserver_1 ansible]# ansible webservers -m command -a 'ls /root/test/'
192.168.1.161 | CHANGED | rc=0 >>
192.168.1.160 | CHANGED | rc=0 >>
192.168.1.162 | CHANGED | rc=0 >>
[root@myserver_1 ansible]#

Script模块

功能:在远程主机上运行ansible服务器上的脚本

ansible将脚本传到远程服务器执行，执行完后删掉

 Copy模块

功能:从ansible服务器主控端复制文件到远程主机

即src是ansible服务器的路径，dest是远程主机的路径

[root@myserver_1 ~]# ansible webservers -m copy -a "content='test line1\ntest line2' dest=/tmp/test.txt"
192.168.1.162 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": true, 
    "checksum": "43791ccbbcf72774b2bbbe6fe8d7ab488359b922", 
    "dest": "/tmp/test.txt", 
    "gid": 0, 
    "group": "root", 
    "md5sum": "f0e596e1a1a3ef7d278f2dda4d4e6ec8", 
    "mode": "0644", 
    "owner": "root", 
    "size": 21, 
    "src": "/root/.ansible/tmp/ansible-tmp-1609657262.1-68634-140320123278887/source", 
    "state": "file", 
    "uid": 0
}
192.168.1.160 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": true, 
    "checksum": "43791ccbbcf72774b2bbbe6fe8d7ab488359b922", 
    "dest": "/tmp/test.txt", 
    "gid": 0, 
    "group": "root", 
    "md5sum": "f0e596e1a1a3ef7d278f2dda4d4e6ec8", 
    "mode": "0644", 
    "owner": "root", 
    "size": 21, 
    "src": "/root/.ansible/tmp/ansible-tmp-1609657261.97-68625-103834993013075/source", 
    "state": "file", 
    "uid": 0
}
192.168.1.161 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": true, 
    "checksum": "43791ccbbcf72774b2bbbe6fe8d7ab488359b922", 
    "dest": "/tmp/test.txt", 
    "gid": 0, 
    "group": "root", 
    "md5sum": "f0e596e1a1a3ef7d278f2dda4d4e6ec8", 
    "mode": "0644", 
    "owner": "root", 
    "size": 21, 
    "src": "/root/.ansible/tmp/ansible-tmp-1609657262.12-68631-219826191059601/source", 
    "state": "file", 
    "uid": 0
}
[root@myserver_1 ~]# ansible webservers -m shell -a "cat /tmp/test.txt"
192.168.1.160 | CHANGED | rc=0 >>
test line1
test line2
192.168.1.161 | CHANGED | rc=0 >>
test line1
test line2
192.168.1.162 | CHANGED | rc=0 >>
test line1
test line2
[root@myserver_1 ~]#

拷贝到远程主机的文件

[root@myserver_1 ~]# ansible webservers -m copy -a "src=/etc/centos-release dest=/tmp/os.txt owner=docker mode=600"

Fetch模块
和copy模块功能相反,目前不支持拷贝目录 

[root@myserver_1 ~]# ansible webservers -m copy -a "src=/etc/centos-release dest=/tmp/os.txt owner=docker mode=600"

到拷贝的目录下查看
[root@myserver_1 etc]# pwd
/tmp/os/192.168.1.160/etc
[root@myserver_1 etc]# ls
centos-release
[root@myserver_1 etc]#

File模块：设置文件的属性 

[root@myserver_1 ~]# ansible webservers -m file -a 'path=/tmp/test.txt state=touch owner=docker group=docker mode=600'

unarchive: 解包解压缩
实现两种方式
 1.将ansible主机上的压缩包传到远程主机后解压缩到特定目录,设置copy=yes
 2.将远程主机上的某个压缩包压缩到指定路径下，设置copy=no

[root@myserver_1 tmp]# ansible webservers -m unarchive -a 'src=/tmp/test.tar.gz dest=/root/test/ owner=docker copy=yes'

[root@myserver_1 tmp]# ansible webservers -m unarchive -a 'src=/root/test.tar.gz

 crontab模块的添加，注释与删除

#1.添加定时任务
[root@myserver_1 ~]# ansible dbservers -m cron -a 'hour=2 minute=30 weekday=5 name="backup.mysql" job=/root/mysql_backup.sh'
192.168.1.38 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "envs": [], 
    "jobs": [
        "backup.mysql"
    ]
}
[root@myserver_1 ~]# crontab -l
#Ansible: backup.mysql
30 2 * * 5 /root/mysql_backup.sh
#取消定时任务
[root@myserver_1 ~]# ansible dbservers -m cron -a 'hour=2 minute=30 weekday=5 name="backup.mysql" job=/root/mysql_backup.sh disabled=yes'
192.168.1.38 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "envs": [], 
    "jobs": [
        "backup.mysql"
    ]
}
[root@myserver_1 ~]# crontab -l
#Ansible: backup.mysql
#30 2 * * 5 /root/mysql_backup.sh
#开启定时任务
[root@myserver_1 ~]# ansible dbservers -m cron -a 'hour=2 minute=30 weekday=5 name="backup.mysql" job=/root/mysql_backup.sh disabled=no'
192.168.1.38 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "envs": [], 
    "jobs": [
        "backup.mysql"
    ]
}
[root@myserver_1 ~]# crontab -l
#Ansible: backup.mysql
30 2 * * 5 /root/mysql_backup.sh
#删除定时任务
[root@myserver_1 ~]# ansible dbservers -m cron -a 'hour=2 minute=30 weekday=5 name="backup.mysql" state=absent'
192.168.1.38 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "envs": [], 
    "jobs": []
}
[root@myserver_1 ~]# crontab -l
[root@myserver_1 ~]#

 YUM模块  
Service模块 
User模块

YUM模块的使用
[root@myserver_1 ~]# ansible all -m yum -a 'name=httpd state=present'

[root@myserver_1 ~]# ansible all -m yum -a 'name=httpd state=absent'

Service模块
#安装http服务
[root@myserver_1 ~]# ansible all -m yum -a 'name=httpd state=present'
#启动http服务
[root@myserver_1 ~]# ansible all -m service -a 'name=httpd state=started'
#查看运行状态
[root@myserver_1 ~]# ansible all -m shell -a 'systemctl status httpd'
#关闭http服务
[root@myserver_1 ~]# ansible all -m service -a 'name=httpd state=stopped'

User模块：管理用户
[root@myserver_1 ~]# ansible dbservers -m user -a 'name=user1 comment="test user" uid=2048 home=/app/user1 group=root'
192.168.1.38 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": true, 
    "comment": "test user", 
    "create_home": true, 
    "group": 0, 
    "home": "/app/user1", 
    "name": "user1", 
    "shell": "/bin/bash", 
    "state": "present", 
    "stderr": "useradd: warning: the home directory already exists.\nNot copying any file from skel directory into it.\n", 
    "stderr_lines": [
        "useradd: warning: the home directory already exists.", 
        "Not copying any file from skel directory into it."
    ], 
    "system": false, 
    "uid": 2048
}
[root@myserver_1 ~]# cd /app/user1/
[root@myserver_1 user1]# ls

删除用户
[root@myserver_1 app]# ansible dbservers -m user -a 'name=user1 state=absent remove=yes'
192.168.1.38 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": false, 
    "name": "user1", 
    "state": "absent"
}
[root@myserver_1 app]# ls

Linefile模块和replace模块功能类似sed
[root@myserver_1 selinux]# ansible all -m lineinfile -a "path=/etc/selinux/config regexp='^SELINUX=' line='SELINUX=enforcing'"

[root@myserver_1 selinux]# ansible all -m lineinfile -a "path=/etc/selinux/config regexp='^SELINUX=' line='SELINUX=disabled'"

 Setup模块:收集远程主机的配置信息

[root@myserver_1 selinux]# ansible dbservers -m setup

查看系统版本信息
[root@myserver_1 selinux]# ansible all -m setup -a 'filter=ansible_distribution_major_version'
192.168.1.38 | SUCCESS => {
    "ansible_facts": {
        "ansible_distribution_major_version": "7", 
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": false
}
192.168.1.160 | SUCCESS => {
    "ansible_facts": {
        "ansible_distribution_major_version": "8", 
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": false
}
192.168.1.162 | SUCCESS => {
    "ansible_facts": {
        "ansible_distribution_major_version": "8", 
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": false
}
192.168.1.161 | SUCCESS => {
    "ansible_facts": {
        "ansible_distribution_major_version": "8", 
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    }, 
    "changed": false
}

 ansible-playbook 

mysql_user.yml文件,用来创建mysql的用户和组

[root@myserver_1 ansible]# vim mysql_user.yml 
---
 - hosts: dbservers
   remote_user: root
   gather_facts: no
   tasks:
     - name: create group
       group: name=mysql system=yes gid=306
     - name: create user
       user: name=mysql shell=/sbin/nologin system=yes group=mysql uid=306 home=/data/mysql create_home=no

检查yml语法正确与否
[root@myserver_1 ansible]# ansible-playbook -C mysql_user.yml 

PLAY [dbservers] ********************************************************************************

TASK [create group] *****************************************************************************
changed: [192.168.1.38]
changed: [192.168.1.161]

TASK [create user] ******************************************************************************
changed: [192.168.1.38]
changed: [192.168.1.161]

PLAY RECAP **************************************************************************************
192.168.1.161              : ok=2    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.1.38               : ok=2    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
[root@myserver_1 ansible]# 

执行查看结果
[root@myserver_1 ansible]# ansible-playbook mysql_user.yml 

PLAY [dbservers] ********************************************************************************

TASK [create group] *****************************************************************************
changed: [192.168.1.38]
changed: [192.168.1.161]

TASK [create user] ******************************************************************************
fatal: [192.168.1.38]: FAILED! => {"changed": false, "msg": "usermod: user mysql is currently used by process 1238\n", "name": "mysql", "rc": 8}
changed: [192.168.1.161]

PLAY RECAP **************************************************************************************
192.168.1.161              : ok=2    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.1.38               : ok=1    changed=1    unreachable=0    failed=1    skipped=0    rescued=0    ignored=0   
[root@myserver_1 ansible]# ansible dbservers -m shell -a 'getent passwd mysql'
192.168.1.38 | CHANGED | rc=0 >>
mysql:x:27:306:MariaDB Server:/var/lib/mysql:/sbin/nologin
192.168.1.161 | CHANGED | rc=0 >>
mysql:x:306:306::/data/mysql:/sbin/nologin
[root@myserver_1 ansible]# ansible dbservers -m shell -a 'id mysql'
192.168.1.161 | CHANGED | rc=0 >>
uid=306(mysql) gid=306(mysql) groups=306(mysql)
192.168.1.38 | CHANGED | rc=0 >>
uid=27(mysql) gid=306(mysql) groups=306(mysql)

 

modi_2020
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
Ansible-DocGen:用于为角色生成Ansible README.md文件的python实用程序
04-29
Ansible-DocGen 用于为角色生成Ansible README.md文件的python实用程序 Ansible-DocGen已在python3测试 安装 画中画 pip install ansible-docgeneration 请注意，如果您是通过pip安装的，则需要从命令行像下面一样使用它： python -m docgen 从来源 git clone [email protected]:toast38coza/Ansible-DocGen.git cd Ansible-DocGen virtualenv-3.4 env -p python3 source env/bin/activate pip install -r requirements.txt 用法 Usage: docgen.py [OPTIONS] # Basic usage: python docgen.py
ansible生产常用十大模块
rentian1的博客
12-25 309
来源：http://blog.51cto.com/liuzhengwei521/1895480 注：-a参数后的命令用单引号，单引号，单引号；双引号有可能会出问题，特别是在user模块； 模块一：测试目标主机是否在线：ping模块 主机如果在线，则回复pong 测试主机是否在线 [root@localhost ~]# ansible erp -m ping 192.168.10.6 | ...
ansible常用模块
QWQ45597316的博客
05-25 325
文章目录1.ansible常用模块使用详解2.ansible常用模块之ping3.ansible常用模块之command4. ansible常用模块之raw5. ansible常用模块之shell6. ansible常用模块之script7. ansible常用模块之template8. ansible常用模块之yum9.ansible常用模块之copy10. ansible常用模块之group1. ansible常用模块之user12. ansible常用模块之service 1.ansible常用模块使
ansible
diebaoyan1530的博客
04-30 650
ansible 真机配好ftp下的ansible的yum源，然后同步yum配置文件夹给虚拟机ansible 注意，传目录一定要加-rrsync -r /etc/yum.repos.d/ 192.168.3.60:/etc/yum.repos.d/######################################################################...
ansible加快执行效率的方法
m0_71188683的博客
06-02 1274
最初，ansible的执行效率和saltstack(基于zeromq消息队列的方式)相比要慢的多的多，特别是被控节点量很大的时候。即使被控节点数量巨大的时候，也可以通过一些优化去极大的提高ansible的执行效率。如果使用-t选项，将第一次执行得到的结果按inventory中定义的主机名保存在文件中，下次执行到同一台主机时速度将会变快很多，即使之后不再加上-t选项，上面做了对比，发现使用-t或重定向方式，将ansible的执行结果按主机名保存在指定目录下的文件中，ansible执行效率会有所提升。
ansible超详细使用指南
01-27
配置管理、应用部署等。配置管理工具有Chef,Puppet,Salt...ansible使用了一个DSL（domain-specificlanguage）描述服务器状态。执行的文件称为playbook，文件格式为yaml。ansible简约而不简单。比起puppet的繁琐的配置和
使用Ansible高效交付Docker容器
02-26
Ansible是一个与Docker高度兼容的自动化工具，它使用一个强大的接口来管理远程服务器上的容器。在本文中，我将探索为何和如何使用Ansible的可扩展设计来将Docker和Ansible的最佳功能合并在一起。Docker之所以如此...
ansible的简单应用
02-24
ansible是一个配置管理和应用部署工具,基于Python开发，集合了众多运维工具（puppet、cfengine、chef、func、fabric、SaltStack）的优点，实现了批量系统配置、批量程序部署、批量运行命令等功能。ansible是基于模块...
ansible 配置文件管理
liwench的博客
02-16 256
目录ansible 配置文件管理配置文件的优先级配置文件分段说明配置参数说明关于ssh连接一些常见的错误说明文章转自ansible 配置文件管理 配置文件的优先级 ansible的配置文件名为ansible.cfg，它一般会存在于四个地方： ANSIBLE_CONFIG：首先，Ansible命令会检查该环境变量，及这个环境变量将指向的配置文件 ~/.ansible.cfg：当前用户家目录下的一个...
ansible的部署
m0_46289146的博客
07-16 272
ansible的部署一、构建ansible清单1、定义清单2、使用静态清单指定受管主机2.1 清单文件的写法：3、验证清单4、构建Ansible清单二、管理ansible配置文件1、配置文件位置2、配置文件优先级3、配置文件中的指令4、查看帮助文档5、模块的使用 一、构建ansible清单 1、定义清单 清单定义Ansible将要管理的一批主机。这些主机也可以分配到组中，以进行集中管理。组可以包含子组，主机也可以是多个组的成员。清单还可以设置应用到它所定义的主机和组的变量。 可以通过两种方式定义主机清单。静
ansible-collection-linux
03-31
Ansible集合-bonddim.linux 经过Ansible测试 经过Ansible 2.9和2.10的稳定发行版以及Ansible的开发版本测试 依存关系 collections : - name : community.general - name : community.docker 包含的内容 的角色 FQDN名称 文献资料 建置状态 bonddim.linux.lxd bonddim.linux.snapd bonddim.linux.docker bonddim.linux.traefik 使用这个集合 在使用常规社区集合之前，您需要使用ansible-galaxy CLI安装该集合： ansible-galaxy collection install bonddim.linux 您也可以将其包含在requirements.yml文件中，并通过以下格式通
ansible填坑记一,UNREACHABLE
热门推荐
05-11 1万+
今天遇到个坑,记录记录.由于ansible执行copy太慢,想加速下,看文章说使用长连接可以加速,修改配置/etc/ansible/ansible.cfg取消此行注释,修改对应长连接时间ssh_args = -o ControlMaster=auto -o ControlPersist=4h测试环境用用,no problem但是放到生产上就报错,并且还原配置都无法解决这个错误...我哪个郁闷,老办...
Ansible部署zabbix-server端
qq_30836919的博客
06-15 155
文档作者：MINE_菜鸟写作时间：2023/6/10操作环境：Centos yml 食用方法看最后文章1.因为剧本写的可能会受到系统环境影响，可能会出现问题，具体问题再看看吧，目前只遇到1个问题，文章最后写的处理办法。其他的还没发现。2.写剧本首先要将你要执行的任务列出来，然后根据python模块一点一点去垒代码，最后测试达到效果，yml格式就不用说了，写多了，就会格式了。3.只在server执行该剧本，别整错了 ，主机清单添加server机器。
python自动化运维九：Playbook
dianjie9145的博客
11-17 170
playbook:playbook 由一个或多个 ‘plays’ 组成.它的内容是一个以 ‘plays’ 为元素的列表.在 play 之中,一组机器被映射为定义好的角色.在 ansible 中,play 的内容,被称为 tasks,即任务.在基本层次的应用中,一个任务是一个对 ansible 模块的调用Playbooks 的格式是YAML,语法做到最小化. 首先来介绍下YAML语法YAM...
ansible安装配置及入门操作
国产-达芬奇
10-01 865
目录 1、系统说明： 2、安装 3、配置 4、小试牛刀 时间：【戊戌年 辛酉月 丙寅日】 近期开发用到ansible，但之前只是听说，从未跟ansible发生过实质关系~~，今天准备把第一次给ansible~ 1、系统说明： 我是在vmvare上建的虚拟机。 ubuntu14 分别创建三台 192.168.160.130（主） 192.168.1...
ansible使用，普通用户root权限操作
qq_39301921的博客
03-05 1994
#服务端安装 apt install python ansible sshpass #客户端安装 apt install python ##服务端配置文件修改 vi /etc/ansible/ansible.cfg 有些机器登录会超时配置 禁用主机秘钥检查 ##配置主机（客户端机器） vi /etc/ansible/hosts ansible all -b --become-user root --become-method sudo -m shell -a "docke..
ansible自动化管理
weixin_71429844的博客
09-25 1900
ansible自动化管理
ansible普通用户执行root权限进行操作
sinat_33420091的博客
11-26 2854
应用中，安全加固后的主机是不允许直接以root用户登陆的，而很多命令又需要root用户来执行。 公司里是通过jumpserver，通过一个普通用户先登陆,再su切到root执行。而且每台主机的普通用户和root用户的密码又不同。 下面使用ansible命令通过普通用户登录执行root权限操作，无需交互输入密码，直接执行后输出结果。 [root@11111111 ~]# ansible -h # 可以找到相关的命令 Privilege Escalation Options: control how and
ansible普通用户登录远程主机获取root权限执行操作
weixin_46755536的博客
12-24 1090
[node2:vars] ansible_user=ecip ansible_password=普通用户密码 ansible_become=true ansible_become_method=sudo ansible_become_user=root ansible_become_pass=‘普通用户密码’
ansible怎么使用
最新发布
07-08
它使用简单的语法和模块化的方式来定义和执行任务。以下是使用Ansible的基本步骤： 1. 安装Ansible：在控制机（运行Ansible的主机）上安装Ansible。可以通过包管理工具如apt、yum或pip进行安装。 2. 配置Ansible：...

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值