varialbes
1.什么是变量?
以一个固定的字符串,表示一个不固定的值 version: 1.12
2.定义变量?
1.在playbook中定义变量?
>1.vars 关键字
[root@manager project1]# cat f2.yml
- hosts: webservers
vars:
- file_name: playbook_vars
tasks:
- name: Create New File
file:
path: /tmp/{{ file_name }}
state: touch>2.vars_file 属于一种共享的方式
1.提前准备变量
[root@manager project1]# cat vars_file.yml
web_packages: httpd
ftp_packages: vsftpd
2.编写剧本
[root@manager project1]# cat f2.yml
- hosts: webservers
vars:
- file_name: playbook_vars
#调用共享vars_file文件,只不过刚好文件名叫vars_file
vars_files: ./vars_file.yml //提前创建好的
tasks:
- name: Create New File
file:
path: /tmp/{{ file_name }}
state: touch
- name: Installed Packages {{ web_packages }}
yum:
name: "{{ web_packages }}" //web_packages: httpd 等于安装httpd
state: present2.在inventory主机清单中定义变量
>1.清单文件中直接定义 hosts文件定义
[webservers]
172.16.1.7
172.16.1.8
[webservers:vars]
file_name=hostsfile_group_vars> 2.创建hosts_vars group_vars 目录
[root@manager project1]# mkdir hosts_vars #单个主机
[root@manager project1]# mkdir group_vars #主机组
>>>1.单个主机定义和使用方式 (host_vars能分别对不同的主机定义变量)
[root@manager project1]# cat host_vars/172.16.1.7
host_vars_name: 172.16.1.7
[root@manager project1]# cat host_vars/172.16.1.8
host_vars_name: 172.16.1.8
[root@manager project1]# cat f4.yml
- hosts: webservers
tasks:
- name: Create New File
file:
path: /opt/{{ host_vars_name }}
state: touch
>>>2.针对主机组定义的方式
给指定的webserver组设定变量.其他组主机无法使用该变量
[root@manager project1]# cat group_vars/webservers
group_host_vars: webservers //设定group_host_vars的值为webservers
[root@manager project1]# cat f5.yml
- hosts: webservers
tasks:
- name: Create New File {{ group_host_vars }}
file:
path: /opt/{{ group_host_vars }} //调用变量
state: touch
>>>3.针对主机组定义的方式 (给所有的主机和主机组设定变量)
[root@manager project1]# cat group_vars/all
group_host_vars: all
[root@manager project1]# cat f5.yml
- hosts: webservers
tasks:
- name: Create New File {{ group_host_vars }}
file:
path: /opt/{{ group_host_vars }}
state: touch>3.通过外置传参定义变量? -e
[root@manager project1]# ansible-playbook -i hosts test5.yml
PLAY [webservers] **************************************************************
TASK [Gathering Facts] *********************************************************
ok: [172.16.1.7]
ok: [172.16.1.8]
TASK [Create New File] *********************************************************
fatal: [172.16.1.7]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'g_vars' is undefined\n\nThe error appears to be in '/project1/test5.yml': line 3, column 7, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n tasks:\n - name: Create New File\n ^ here\n"}
fatal: [172.16.1.8]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'g_vars' is undefined\n\nThe error appears to be in '/project1/test5.yml': line 3, column 7, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n tasks:\n - name: Create New File\n ^ here\n"}
PLAY RECAP *********************************************************************
172.16.1.7 : ok=1 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
172.16.1.8 : ok=1 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
系统提示找不到定义的变量：这时候使用-e传参
[root@manager project1]# ansible-playbook -i hosts test5.yml -e "web_vars=123"3.变量冲突,优先级?
1.定义相同的变量不同的值，来测试变量的优先级。操作步骤如下 file_name:
1）在plabook中定义vars变量
2）在playbook中定义vars_files变量
3）在inventory主机定义变量
4）在inventory主机组定义变量
5）在host_vars中定义变量
6）在group_vars中定义变量 组 all组
7）通过执行命令传递变量
优先级测试结果:
外置传入参数优先级最高 ---> playbook ( vars_files(共享)--->vars(私有) )
---> host_vars --> group_vars/group_name ---> group_vars/all4.变量注册
[root@manager project1]# cat f8.yml
- hosts: webservers
tasks:
# System_Status=$(netstat -lntp) //这里是设定变量的意思
- name: Get Network Status
shell: netstat -lntp | grep "nginx"
register: System_Status //这儿定义的名字必须和下边的msg一样
# echo "$System_Status" //这里是输出结果的意思
- name: Debug output Variables
debug:
msg: "{{ System_Status.stdout_lines }}"
5.facts变量
[root@manager project1]# ansible localhost -m setup -i hosts 查看存放所采集到的信息变量
gather_facts: no 关闭facts变量
1.根据主机的cpu信息,生成不同的配置.
A: 1核心 work_process 1;
B: 2核心 work_process 2;
2.根据主机名称设定不同配置文件
zabbix_agent
Server: ===> 指向172.16.1.61
Hostname: web01 web02
[root@manager project1]# cat ./file/zabbix_agent.conf.j2
Server={{ zabbix_server_ip }}
ServerActive={{ zabbix_server_ip }}
Hostname={{ ansible_hostname }}
[root@manager project1]# cat f11.yml
- hosts: webservers
vars:
- zabbix_server_ip: 172.16.1.61
tasks:
- name: Configure zabbix-agent.conf
template:
src: ./file/zabbix_agent.conf.j2
dest: /tmp/zabbix-agent.conf
3.根据主机的内存生成不同的配置文件,memcached
[root@manager project1]# cat f12.yml
- hosts: webservers
tasks:
- name: Installed Memcached Server
yum:
name: memcached
state: present
- name: Configure Memcached Server
template:
src: ./file/memcached.j2
dest: /etc/sysconfig/memcached
notify: Restart Memcached Server //这儿定义的名称必须要和下边的handlers里的name一致
- name: System Memcached Server
systemd:
name: memcached
state: started
enabled: yes
handlers:
- name: Restart Memcached Server
systemd:
name: memcached
state: restarted
[root@manager project1]# cat file/memcached.j2
PORT="11211"
USER="memcached"
MAXCONN="1024"
CACHESIZE="{{ ansible_memtotal_mb //2 }}" //使用物理内存的2分之一
OPTIONS=""
案例需求：
1.根据cpu
2.根据内存
3.根据主机名
4.Redis配置文件 bind本地地址
5.操作系统不统一
《 变量可以进行运算 + - * // 》
>>>1.定义变量
playbook
vars 私有
vars_files 共享
inventory
host_vars
group_vars
group_vars/group_name
group_vars/all
外置传参
-e //优先级最高
>>>2.测试优先级
在不改变playbook变量的情况下,使用新的值测试.
>>>3.变量注册register
1.将任务执行的结果存储至特定的变量中
2.可以使用debug模块将变量进行打印输出
python: 字典
json 格式化数据
{
k1: v1
k2: v2
}
4.facts ---->>>重点
1.每次都会获取随机数【random】
[root@manager project1]# cat f13.yml
- hosts: webservers
tasks:
- name: RANDOM
shell: echo "$RANDOM"
register: System_SJ
- name: Debug
debug:
msg: "web_{{ System_SJ.stdout }}"
2.提取facts变量中的IP地址 mac地址 UUID 等等 只要唯一
ansible_default_ipv4.address
[root@manager project1]# cat f14.yml
- hosts: webservers
tasks:
- name: Debug
debug:
msg: "web_{{ ansible_default_ipv4.address }}"6.Ansible 流程控制
### 1.判断语句
- 1.centos和ubuntu系统都需要安装httpd, 判断系统.
- 2.安装软件仓库,只有web组的安装webtatic其他的主机全部跳过.
- 3.TASK任务, TASK1任务执行成功,才会执行TASK2
1.根据不同的系统,安装不同的服务
- hosts: webservers
tasks:
- name: CentOS Installed Httpd Server
yum:
name: httpd
state: present
when: ( ansible_distribution == "CentOS" )
- name: Ubuntu Installed Httpd Server
yum:
name: httpd2
state: present
when: ( ansible_distribution == "Ubuntu" )
2.根据主机组名安装服务
[root@manager project1]# cat f16.yml
- hosts: all
tasks:
- name: Add Nginx Yum Repository
yum_repository:
name: nginx
description: Nginx Repository
baseurl: http://nginx.org/packages/centos/7/$basearch/
when: ( ansible_hostname is match ("web*"))
3.判断http的状态来重启服务
[root@manager project1]# cat f17.yml
- hosts: webservers
tasks:
- name: Check Httpd Server
command: systemctl is-active httpd
register: Check_Httpd
ignore_errors: yes
#判断Check_Httpd.rc是否等于0,如果为0则执行任务,否则不执行
- name: Restart Httpd Server
systemd:
name: httpd
state: restarted
when: ( Check_Httpd.rc == 0 )2.循环语句
1.一次启动多个服务
[root@manager project1]# cat f18.yml
- hosts: webservers
tasks:
- name: Systemd Nginx Status
systemd:
name: "{{ item }}" #调用的变量也不变,也是固定
state: started
--->>固定的语法格式:
with_items:
- nginx
- php-fpm
2.一次拷贝多个文件
[root@manager project1]# cat f19.yml
- hosts: webservers
tasks:
- name: Configure nginx.conf
copy:
src: '{{ item.src }}'
dest: '{{ item.dest }}'
mode: '{{ item.mode }}'
with_items:
- { src: ./file/nginx.conf.j2, dest: /etc/nginx/nginx.conf, mode: '0644' }
- { src: ./file/kold.oldxu.com.conf.j2, dest: /etc/nginx/conf.d/kold.oldxu.com.conf, mode: '0600' }
3.创建多个用户,一次创建多个? 3个用户 TASK
方式一：标准循环
[root@manager project1]# cat f20.yml
- hosts: webservers
tasks:
- name: Create User
user:
name: "{{ item }}"
with_items:
- test1
- test2
- test3
- test4
1.创建tt1 --> bin tt2 -->root tt3 --->adm 附加组
[root@manager project1]# cat f20.yml
- hosts: webservers
tasks:
- name: Create User
user:
name: "{{ item.name }}"
groups: "{{ item.groups }}"
with_items:
- { name: tt1, groups: bin }
- { name: tt2, groups: root }
- { name: tt3, groups: adm }
1.标准循环 --->居多
item
with_items:
- test
2.字典循环: --->居多
itme.name
with_items:
- { name: test }
3.变量循环
- hosts: webservers
tasks:
- name: ensure a list of packages installed
yum: name={{ packages }} state=present
vars:
packages:
- httpd
- httpd-tools3.handlers
--->>handlers实践：
[root@manager project1]# cat f22.yml
- hosts: webservers
tasks:
- name: Installed Nginx and PHP Packages
yum:
name: nginx
state: present
- name: Configure nginx.conf
template:
src: ./file/nginx.conf.j2
dest: /etc/nginx/nginx.conf
#监控-->changed状态-->通知-->handlers--->name-->Restart Nginx Server
notify: Restart Nginx Server
#notify:
# - Restart Nginx Server
# - Restart php Server
- name: Systemd Nginx Server
systemd:
name: nginx
state: started
enabled: yes
当nginx或php配置文件发生变更才会触发此操作
handlers:
- name: Restart Nginx Server
systemd:
name: nginx
state: restarted
3.handlers注意事项
1.无论多少个task通知了相同的handlers，handlers仅会在所有tasks结束后运行一次。
2.只有task发生改变了才会通知handlers，没有改变则不会触发handlers.
3.不能使用handlers替代tasks、因为handlers是一个特殊的tasks。4.varialbes实战
变量->facts-->判断-->循环
1.安装Rsyncd服务 (循环)
[root@manager project1]# cat rsync.yml
- hosts: backupservers
tasks:
- name: Installed Rsync Server
yum:
name: rsync
state: present
- name: Configure Rsync Server
copy:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
mode: "{{ item.mode }}"
with_items:
- { src: ./file/rsyncd.conf.j2, dest: /etc/rsyncd.conf, mode: '0644' }
- { src: ./file/rsync.passwd.j2, dest: /etc/rsync.passwd, mode: '0600' }
notify:
- Restart Rsync Server
- name: Create Group
group:
name: www
gid: 666
- name: Create User
user:
name: www
uid: 666
group: www
create_home: no
- name: Create Directory
file:
path: "/{{ item }}"
state: directory
owner: www
group: www
recurse: yes
with_items:
- backup
- name: Systemd Rsync Server
systemd:
name: rsyncd
state: started
enabled: yes
- name: check_rsync_status
shell: netstat -lntp |grep 873
register: rsync_status
ignore_errors: yes
- name: rsync_status server
debug:
msg: "{{ rsync_status.stdout_lines }}"
handlers:
- name: Restart Rsync Server
systemd:
name: rsyncd
state: restarted
2.安装Redis (bind 本地IP地址) facts
[root@manager project1]# cat redis.yml
- hosts: redis
tasks:
- name: Installed Redis Server
yum:
name: redis
state: present
- name: Configure redis.conf
template:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
mode: "{{ item.mode }}"
with_items:
- { src: ./file/redis.conf, dest: /etc/redis.conf, mode: '0640' }
notify:
- Restart redis server
- name: Systemd start redis
systemd:
name: redis
state: started
enabled: yes
- name: check_redis_status
shell: netstat -lntp |grep redis
register: systemctl_status_redis
- name: redis_status server
debug:
msg: "{{ systemctl_status_redis.stdout_lines }}"
handlers:
- name: Restart redis server
systemd:
name: redis
state: restarted
3.安装NFS (配置文件,创建目录,客户端挂载) 变量
服务端剧本：
[root@manager project1]# cat nfs_server.yml
- hosts: nfs
vars_files: ./vars_file.yml
tasks:
- name: Installed NFS Server
yum:
name: nfs-utils
state: present
- name: Configure NFS Server
template:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
mode: "{{ item.mode }}"
with_items:
- { src: ./file/exports.j2, dest: /etc/exports, mode: '0644' }
notify:
- Restart NFS Server
- name: Configure Group
group:
name: www
gid: 666
- name: Configure User
user:
name: www
uid: 666
group: www
create_home: no
shell: /sbin/nologin
- name: Create NFS shard directory
file:
path: "{{ mount }}"
state: directory
owner: www
group: www
recurse: yes
- name: Systemd NFS Server
systemd:
name: nfs
state: started
enabled: yes
handlers:
- name: Restart NFS Server
systemd:
name: nfs
state: restarted
enabled: yes
客户端剧本：
[root@manager project1]# cat nfs_client.yml
- hosts: backup
vars_files: ./vars_file.yml
tasks:
- name: Installed nfs server
yum:
name: nfs-utils
state: present
- name: Mount nfs zh
mount:
src: "{{ nfs_server_ip }}:{{ mount }}"
path: /mnt
fstype: nfs
opts: defaults
state: mounted==总结：==
- 1.变量
- 2.facts
- 3.register
- 4.when 判断语句 ( facts )
- 5.with_items 循环
- 1.标准循环
- 2.字典循环
- 3.变量循环(忽略)