PHP

使用roles部署PHP

环境

外网IP 内网IP 主机名
10.0.0.5 172.16.1.5 lb01 (负载均衡)
10.0.0.6 172.16.1.6 lb02
10.0.0.7 172.16.1.7 web01(服务器)
10.0.0.8 172.16.1.8 web02
10.0.0.9 172.16.1.9 web03
10.0.0.31 172.16.1.31 nfs (共享存储)
10.0.0.41 172.16.1.41 backup
10.0.0.51 172.16.1.51 db01 (数据库)
10.0.0.52 172.16.1.52 db02
10.0.0.53 172.16.1.53 db03(代理机)
10.0.0.54 172.16.1.54 db04(代理机)
10.0.0.61 172.16.1.61 m01 (跳板机)
10.0.0.71 172.16.1.71 zabbix

流程分析

1.安装ansible
2.优化ansible
3.推送公钥
4.开启防火墙
5.开启80 443 873 nfs等端口和服务白名单
6.关闭selinux
7.创建同一的用户
	1.安装PHP
	2.拷贝PHP配置文件
	3.启动PHP

推送公钥

1.创建密钥对
[root@m01 ~]# ssh-keygen
2.推送公钥
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]
[root@m01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]

ansible优化

1.下载
[root@m01 ~]#  yum install -y ansible
2.优化
[root@m01 ~]#  vim /etc/ansible/ansible.cfg		#改为
host_key_checking = False

配置主机清单

[root@m01 ~]# vim /root/ansible/hosts 
#[]标签名任意,但是最好不要用特殊符号(- | &)和大写字母,中文(不能是nginx)
#端口是22的时候可以省略
[web_group]
172.16.1.7 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'
172.16.1.8 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'
172.16.1.9 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'

[db_group]
172.16.1.51 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'
172.16.1.52 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'
172.16.1.53 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'
172.16.1.54 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'

[nfs_group]
172.16.1.31 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'

[redis_group]
172.16.1.81 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'

[lb_group]
172.16.1.5 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'
172.16.1.6 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'

[backup_group]
172.16.1.41 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'

[zabbix_group]
172.16.1.71 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'

[m01_group]
172.16.1.61 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'

[mtj_group]
172.16.1.202 ansible_ssh_port=22 asible_ssh_user=root ansible_ssh_pass='1'

前戏

1.上传PHP安装包
2.把PHP配置文件放到files目录

PHP配置文件

[root@m01 roles]# cat php/templates/www.conf.j2 
[www]
user = {{ user_group }}
group = {{ user_group }}
listen = 127.0.0.1:9000
listen.allowed_clients = 127.0.0.1
pm = dynamic
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35
slowlog = /var/log/php-fpm/www-slow.log
php_admin_value[error_log] = /var/log/php-fpm/www-error.log
php_admin_flag[log_errors] = on
php_value[session.save_handler] = files
php_value[session.save_path]    = /var/lib/php/session
php_value[soap.wsdl_cache_dir]  = /var/lib/php/wsdlcache

创建角色

[root@m01 roles]# ansible-galaxy init php

编辑tasks目录

1.解压
[root@m01 php]# vim tasks/jieya.yml 
- name: unarchive php-packages
  unarchive:
    src: php-71.tar.gz
    dest: "{{ php_packages_pos }}"

2.安装
[root@m01 php]# vim tasks/install.yml 
- name: install php
  shell: "{{ item }}"
  with_items:
    - "yum remove -y php-common"
    - "yum install -y {{ php_packages_pos }}/{{ php_packages_name }}/*rpm"
  ignore_errors: yes
3.拷贝
[root@m01 php]# vim tasks/copy.yml 
- name: copy php packages
  template:
    src: www.conf.j2
    dest: "/etc/php-fpm.d/www.conf"
  notify:
    - "reload php"
4.启动
[root@m01 php]# vim tasks/start.yml 
- name: start php
  service:
    name: php-fpm
    state: started
    enabled: yes
5.include
[root@m01 php]# vim tasks/main.yml 
- include: jieya.yml
- include: install.yml
- include: copy.yml
- include: start.yml
6.触发器
[root@m01 php]# vim handlers/main.yml 
- name: reload php
  service:
    name: php-fpm
    state: reloaded
7.依赖
[root@m01 php]# vim meta/main.yml 
dependencies:
  - { role: base }
8.变量
[root@m01 php]# vim vars/main.yml 
#php安装包的解压位置
php_packages_pos: "/tmp"
#php解压后的包名
php_packages_name: "php-71"
#php安装包
php_packages:
  - "autoconf-2.69-11.el7.noarch.rpm"
  - "automake-1.13.4-3.el7.noarch.rpm"
  - "libjpeg-turbo-1.2.90-8.el7.x86_64.rpm"
  - "libmcrypt-2.5.8-13.el7.x86_64.rpm"
  - "libmemcached-1.0.16-5.el7.x86_64.rpm"
  - "libX11-1.6.7-2.el7.x86_64.rpm"
  - "libX11-common-1.6.7-2.el7.noarch.rpm"
  - "libXau-1.0.8-2.1.el7.x86_64.rpm"
  - "libxcb-1.13-1.el7.x86_64.rpm"
  - "libXpm-3.5.12-1.el7.x86_64.rpm"
  - "m4-1.4.16-10.el7.x86_64.rpm"
  - "mod_php71w-7.1.33-1.w7.x86_64.rpm"
  - "pcre-devel-8.32-17.el7.x86_64.rpm"
  - "perl-Data-Dumper-2.145-3.el7.x86_64.rpm"
  - "perl-Test-Harness-3.28-3.el7.noarch.rpm"
  - "perl-Thread-Queue-3.02-2.el7.noarch.rpm"
  - "php71w-cli-7.1.33-1.w7.x86_64.rpm"
  - "php71w-common-7.1.33-1.w7.x86_64.rpm"
  - "php71w-devel-7.1.33-1.w7.x86_64.rpm"
  - "php71w-embedded-7.1.33-1.w7.x86_64.rpm"
  - "php71w-fpm-7.1.33-1.w7.x86_64.rpm"
  - "php71w-gd-7.1.33-1.w7.x86_64.rpm"
  - "php71w-mbstring-7.1.33-1.w7.x86_64.rpm"
  - "php71w-mcrypt-7.1.33-1.w7.x86_64.rpm"
  - "php71w-mysqlnd-7.1.33-1.w7.x86_64.rpm"
  - "php71w-opcache-7.1.33-1.w7.x86_64.rpm"
  - "php71w-pdo-7.1.33-1.w7.x86_64.rpm"
  - "php71w-pear-1.10.4-1.w7.noarch.rpm"
  - "php71w-pecl-igbinary-2.0.5-1.w7.x86_64.rpm"
  - "php71w-pecl-memcached-3.0.4-1.w7.x86_64.rpm"
  - "php71w-pecl-mongodb-1.5.3-1.w7.x86_64.rpm"
  - "php71w-pecl-redis-3.1.6-1.w7.x86_64.rpm"
  - "php71w-process-7.1.33-1.w7.x86_64.rpm"
  - "php71w-xml-7.1.33-1.w7.x86_64.rpm"

编辑入口文件

[root@m01 roles]# vim site.yml 
- hosts: web01
  roles:
    - { role: base }
    #- { role: rsync_client,when: ansible_fqdn is match 'web*' }
    #- { role: rsync_client,when: ansible_fqdn is match 'nfs*' }
    #- { role: rsync_server,when: ansible_fqdn is match 'backup*' }
    #- { role: nfs_server,when: ansible_fqdn is match 'nfs*' }
    #- { role: nfs_client,when: ansible_fqdn is match 'web*' }
    #- { role: mount_server,when: ansible_fqdn is match 'nfs*' }
    #- { role: mount_client,when: ansible_fqdn is match 'web*' }
    #- { role: sersync,when: ansible_fqdn is match 'web*' }
    #- { role: nginx_web,when: ansible_fqdn is match 'web*' }
    #- { role: nginx_lb,when: ansible_fqdn is match 'lb*' }
    #- { role: keepalived_lb,when: ansible_fqdn is match 'nfs*' }
    - { role: php,when: ansible_fqdn is match 'web*' }

执行

[root@m01 roles]# ansible-playbook site.yml 

你可能感兴趣的:(PHP)