Ansible角色#

[TOC]

彩蛋#

Ansible 有一个非常有趣的小彩蛋：当它检测到你的系统中安装了 cowsay 时,就会自动调用它,把原本枯燥的任务名称（比如 PLAY RECAP、TASK [...]）放进小牛的对话气泡里,让输出界面变得生动有趣

1
 ____________
2
< PLAY RECAP >
3
 ------------
4
        \   ^__^
5
         \  (oo)\_______
6
            (__)\       )\/\
7
                ||----w |
8
                ||     ||
9
Client: ok=5  changed=3  failed=0  skipped=0  ignored=0
10
Server: ok=8  changed=6  failed=0  skipped=0  ignored=0

除了默认的小牛,cowsay 还有很多其他 ASCII 艺术图案

查看可用图案：你可以运行 cowsay -l 来查看所有可用的图案

1
[root@Zabbix ~]# cowsay -l
2
Cow files in /usr/share/cowsay:
3
cheese cower default dragon dragon-and-cow elephant elephant-in-snake eyes milk.....

指定图案：你可以通过修改 Ansible 的配置文件 /etc/ansible/ansible.cfg 来指定默认使用的图案

1
# 在 [defaults] 部分添加或修改
2
[defaults]
3
# 设置为 'dragon',下次运行就会看到一条龙在说话
4
cow_selection = dragon

🚫 觉得太花哨？关掉它！

个人觉得比默认的 * 好玩多了

编辑 Ansible 的主配置文件 /etc/ansible/ansible.cfg

1
# 在 [defaults] 部分
2
[defaults]
3
nocows = 1

概述#

==roles== 是对playbook的一种重新编排

1
🛠️ 如何创建角色？
2
'ansible-galaxy init 角色名'
3
# 它能一键生成标准的目录结构
4
[root@m01 ansible]# mkdir roles
5
[root@m01 ansible]# cd roles/
6
[root@m01 roles]# ansible-galaxy init backup
7
- Role backup was created successfully
8
# roles/backup--->专门用来备份
9
'当然我们还可以在roles目录下创建别的'
10
[root@m01 roles]# tree ./backup/
11
./backup/
12
├── defaults ❌️
13
│   └── main.yml
14
├── files
15
├── handlers
16
│   └── main.yml
17
├── meta ❌️
18
│   └── main.yml
19
├── README.md ❌️
20
├── tasks
21
│   └── main.yml
22
├── templates
23
├── tests ❌️
24
│   ├── inventory
25
│   └── test.yml
26
└── vars
27
    └── main.yml
28
# 我们先把没有用的删除掉!
29
[root@m01 roles]# cd backup/
30
[root@m01 backup]# rm -rf defaults/ meta/ tests/ README.md
31
[root@m01 backup]# tree
32
.
33
├── files    # 静态文件
34
├── handlers  # 触发器
35
│   └── main.yml✅️自动创建
36
├── tasks    # 核心任务
37
│   └── main.yml✅️自动创建
38
├── templates  # 模版文件(.j2)
39
└── vars    # 固定变量
40
    └── main.yml✅️自动创建
41
# 我们经常用的就这几个!
42
✅️我们直接在main.yml里面编写即可!

backup重构#

1
1)拷贝配置文件
2
# 到template目录下
3
[root@m01 backup]# cp ~/rsyncd.conf ./templates/rsyncd.conf.j2
4
# rsync的配置文件
5
[root@m01 backup]# cd templates/
6
[root@m01 templates]# echo rsync_backup:123 > rsync.passwd.j2
7
[root@m01 templates]# ls
8
rsyncd.conf.j2  rsync.passwd.j2
9
# 配置文件和密码文件
10
[root@m01 templates]# tree ../templates/
11
../templates/
12
├── rsyncd.conf.j2
13
└── rsync.passwd.j2
14

15
2)编辑核心剧本
16
[root@m01 templates]# cd ..
17
[root@m01 backup]# cd ..
18
# 要在roles目录下创建playbook
19
[root@m01 roles]# vim site.yml
20
# 从hosts开始写
21
- hosts: backup
22
# 后面要改为all,会有不同的角色!
23
  roles:
24
    - role: backup
25
      when: ansible_hostname is match "backup"
26
      # when判断和role对齐
27
      # 只有主机为backup才执行
28

29
3)恢复快照&&免密登录
30
[root@m01 roles]# ssh-copy-id -i ~/.ssh/my_key.pub 172.16.1.41
31
[root@m01 roles]# ssh backup "hostname -I"
32
10.0.0.41 172.16.1.41
33
'密码成功'
34

35
4)检测与测试
36
[root@m01 roles]# ansible-playbook --syntax-check site.yml
37
playbook: site.yml
38
[root@m01 roles]# ansible-playbook site.yml
39
PLAY [backup]
40
**********************
41
TASK [Gathering Facts]
42
ok: [backup]
43
'收集信息'
44
**********************
45
TASK [backup : Install rsync server]
46
ok: [backup]
47
'安装rsync'
48
**********************
49
TASK [backup : Configure rsync file]
50
changed: [backup] => (item={'src': 'rsyncd.conf.j2', 'dest': '/etc/rsyncd.conf', 'mode': '0644'})
51
changed: [backup] => (item={'src': 'rsync.passwd.j2', 'dest': '/etc/rsync.passwd', 'mode': '0600'})
52
# 拷贝文件--->配置文&&密码文件
53
**********************
54
TASK [backup : Create group "www"]
55
changed: [backup]
56
"创建组"
57
**********************
58
TASK [backup : Create user "www"]
59
changed: [backup]
60
'创建用户'
61
**********************
62
TASK [backup : Create dir]
63
changed: [backup] => (item=/backup)
64
changed: [backup] => (item=/data)
65
'创建目录'
66
**********************
67
TASK [backup : Start rsync server]
68
changed: [backup]
69
'启动&&开机自启'
70

71
'测试验证'
72
[root@m01 roles]# rsync -avz /etc/passwd rsync_backup@172.16.1.41::backup
73
Password: ---'密码123'
74
sent 841 bytes  received 43 bytes  353.60 bytes/sec
75
[root@backup ~]#ls /backup/passwd
76
/backup/passwd

roles/backup/vars/main.yml
- 存放着固定变量

1
user: www
2
uid: 888
3
rc_port: 873
4
dir_1: /backup
5
dir_2: /data

roles/backup/template/rsyncd.conf.j2
- 模版配置文件

1
uid = {{user}}
2
gid = {{user}}
3
port = {{rc_port}}
4
fake super = yes
5
use chroot = no
6
max connections = 200
7
timeout = 600
8
ignore errors
9
read only = false
10
list = false
11
auth users = rsync_backup
12
secrets file = /etc/rsync.passwd
13
pid file = /var/run/rsyncd.pid
14
lock file = /var/run/rsync.lock
15
log file =/var/log/rsyncd.log
16
############################
17
[backup]
18
path = {{dir_1}}
19
[data]
20
path = {{dir_2}}

roles/backup/tasks/main.yml
- 任务核心

1
- name: Install rsync server
2
  yum:
3
    name: rsync
4
    state: present
5

6
- name: Configure rsync file
7
  template:
8
    src: "{{item.src}}"
9
    dest: "{{item.dest}}"
10
    mode: "{{item.mode}}"
11
  notify: Restart rsync
12
  # 只要修改了,就触发handler重启
13
  loop:
14
    # src能够自动识别template里面的模版文件
15
    - src: rsyncd.conf.j2
16
      dest: /etc/rsyncd.conf
17
      mode: "0644"
18
    - src: rsync.passwd.j2
19
      dest: /etc/rsync.passwd
20
      mode: "0600"
21

22
- name: Create group "{{user}}"
23
  group:
24
    name: "{{user}}"
25
    gid: "{{uid}}"
26

27
- name: Create user "{{user}}"
28
  user:
29
    name: "{{user}}"
30
    uid: "{{uid}}"
31
    group: "{{user}}"
32
    shell: /sbin/nologin
33
    create_home: false
34

35
- name: Create dir
36
  file:
37
    path: "{{item}}"
38
    state: directory
39
    owner: "{{user}}"
40
    group: "{{user}}"
41
  loop:
42
  # 因为变量没有在路径中所以要加引号
43
  # /tmp/{{dir}}-->这种不需要加引号
44
    - "{{dir_1}}"
45
    - "{{dir_2}}"
46

47
- name: Start rsync server
48
  systemd:
49
    name: rsyncd
50
    state: started
51
    enabled: yes

roles/backup/handlers/main.yml
- 触发器,修改配置文件--->给handler发信号

1
- name: Restart rsync
2
# 和notify的名字相同
3
  systemd:
4
    name: rsyncd
5
    state: restarted

nfs重构#

1
1)恢复快照&&免密
2
[root@m01 roles]# ssh-copy-id -i ~/.ssh/my_key.pub 172.16.1.31
3
[root@m01 roles]# ssh nfs01 "hostname -I"
4
10.0.0.31 172.16.1.31
5

6
2)创建角色
7
[root@m01 roles]# ansible-galaxy init nfs
8
- Role nfs was created successfully
9
[root@m01 roles]# cd nfs/
10
[root@m01 nfs]# ls
11
defaults  files  handlers  meta  README.md  tasks  templates  tests  vars
12
[root@m01 nfs]# rm -rf defaults/ meta/ README.md tests/
13
[root@m01 nfs]# ls
14
files  handlers  tasks  templates  vars
15

16
3)拷贝配置文件
17
[root@m01 nfs]# cp /home/ansible/exports ./templates/exports.j2
18
[root@m01 nfs]# cat ./templates/exports.j2
19
{{dir}} 172.16.1.0/24(rw,sync,all_squash,anonuid={{ id }},anongid={{ id }})
20

21
4)编辑核心剧本
22
[root@m01 nfs]# cd ..
23
# 继续上一个的写!
24
[root@m01 roles]# vim site.yml
25
- hosts: all
26
# 注意看自己的主机清单!
27
  roles:
28
    - role: backup
29
      when: ansible_hostname is match "backup"
30
      # when判断和role对齐
31
      # 只有主机为backup才执行
32
    - role: nfs
33
      when: ansible_hostname is match "nfs"
34
[root@m01 roles]# tree nfs/
35
nfs/
36
├── files
37
├── handlers
38
│   └── main.yml
39
├── tasks
40
│   └── main.yml
41
├── templates
42
│   └── exports.j2
43
└── vars
44
    └── main.yml
45

46
5)测试&验证
47
[root@m01 roles]# ansible-playbook --syntax-check site.yml
48
playbook: site.yml
49
[root@m01 roles]# showmount -e 172.16.1.31
50
clnt_create: RPC: ❌️Unable to receive
51
[root@m01 roles]# ansible-playbook site.yml
52
TASK [backup : Install rsync server]
53
skipping: [db02]
54
skipping: [nfs01]
55
skipping: [web01]
56
skipping: [web02]
57
ok: [backup]
58
'只有backup执行,其他都跳过'
59
**********************
60
.................
61
'先跑第一个角色backup,再跑nfs'
62
**********************
63
TASK [nfs : Install nfs server]
64
skipping: [db02]
65
skipping: [backup]
66
skipping: [web02]
67
skipping: [web01]
68
ok: [nfs01]
69
'只有nfs执行!!'
70
**********************
71
nfs01  : ok=7    changed=6
72
[root@m01 roles]# showmount -e 172.16.1.31
73
Export list for 172.16.1.31:
74
/data/wp 172.16.1.0/24✅️
75
'没问题👌'

1
user: www
2
dir: /data/wp
3
id : 888

1
- name: Install nfs server
2
  yum:
3
    name: nfs-utils
4
    state: present
5

6
- name: Configure nfs file
7
  template:
8
    src: exports.j2
9
    dest: /etc/exports
10
  notify: Restart nfs
11

12
- name: Create group "{{user}}"
13
  group:
14
    name: "{{user}}"
15
    gid: "{{id}}"
16

17
- name: Create user "{{user}}"
18
  user:
19
    name: "{{user}}"
20
    uid: "{{id}}"
21
    group: "{{user}}"
22
    shell: /sbin/nologin
23
    create_home: false
24

25
- name: Create dir "{{dir}}"
26
# 递归创建了目录/data/wp
27
# 这两个目录的属主都是www
28
  file:
29
    path: "{{dir}}"
30
    state: directory
31
    owner: "{{user}}"
32
    group: "{{user}}"
33

34
- name: Start NFS Server
35
  systemd:
36
    name: nfs
37
    state: started
38
    enabled: yes

1
- name: Restart nfs
2
  systemd:
3
    name: nfs
4
    state: restarted

主配置文件#

1
[root@Zabbix ~]# tree /ansible/
2
/ansible/
3
└── roles
4
    ├── Client
5
    │ ......
6
    ├── Server
7
    │ ......
8
    └── site.yml
9

10
'hosts可以写在 - name '
11

12
- name: 配置 Server 主机
13
  hosts: Server
14
  roles:
15
    - Server
16

17
- name: 配置 Client 主机
18
  hosts: Client
19
  roles:
20
    - Client
21

22
- name: Server 测试验证
23
  hosts: Server
24
  tasks:
25
    - name: Result test
26
      shell: 'unbound-control dump_cache | grep jd.com'
27
      register: result_end
28

29
    - name: Print result_end
30
      debug:
31
        msg: "{{result_end.stdout_lines}}"

nginx重构#

mysql重构#

wordpress重构#

面试题#

1
请问用过ansible吗？
2
你都用来干啥？
3
用过、--->配置变更、数据收集facts模块(资产管理)、批量安装部署服务
4
那你用过哪些模块？
5
file copy template yum systemd cron handles vars when loop
6
我执行一条命令、但是看不到结果怎么办？
7
使用变量注册 register

音乐

音乐