ansible的安装及使用

ansible的安装
所需安装包如下图所示：

验证安装结果

[root@server1 ansible]# useradd devops##
[root@server1 ansible]# su - devops

[devops@server1 ~]$ mkdir ansible
[devops@server1 ~]$ cd ansible/
[devops@server1 ansible]$ ls
[devops@server1 ansible]$ vim ansible.cfg
[devops@server1 ansible]$ cat ansible.cfg
[defaulets]
inventory = ./inventory
[devops@server1 ansible]$ vi inventory
[devops@server1 ansible]$ cat inventory
[test]
172.25.32.2

[prod]
172.25.32.3

[devops@server1 ansible]$ ssh-keygen
server2与server3创建用户devops并设置密码
[root@server2 ~]# useradd devops
[root@server2 ~]# passwd devops
[root@server3 ~]# useradd devops
[root@server3 ~]# passwd devops
[devops@server1 ansible]$ ssh-copy-id [email protected]
[devops@server1 ansible]$ ssh-copy-id [email protected]

[devops@server1 ansible]$ ansible “test:&prod” -m ping##匹配在test中又在prod中的主机

[devops@server1 ansible]$ ansible webservers -m ping##对组内成员进行匹配

[devops@server1 ansible]$ ansible all -m ping##对所有主机进行匹配

[devops@server1 ansible]$ ansible all -m ping -u devops -b##以该方式测试连接，无法连接到超户，需要密码

解决方法：
在server2与server3上提高用户权限
[root@server2 ~]# vi /etc/sudoers
[root@server3 ~]# vi /etc/sudoers

解决后：

ansible的copy：
-m为指定module，copy为module名，-a制定module的参数

修改全局变量（若不加改变量，则需要用-b指定用户，不然无法复制）

[devops@server1 ansible]$ ansible test -m copy -a “src=/etc/passwd dest=/tmp/passwd”

在客户端查看（以server2为例）

ansible的命令集
ansible-doc的用法

• yum模块
  
  安装
  [devops@server1 ansible]$ ansible test -m yum -a “name=httpd state=present”##对test安装httpd服务

server2进行查看

卸载
[devops@server1 ansible]$ ansible test -m yum -a “name=httpd state=absent”

server2查看

• copy模块
  
• file模块
  
  [devops@server1 ansible]$ ansible webservers -m file -a “dest=/tmp/dir1/dir2 mode=755 owner=root group=root state=directory”

• service模块
  
  [devops@server1 ansible]$ ansible test -m yum -a “name=httpd state=present”
  [devops@server1 ansible]$ ansible test -m service -a “name=httpd state=started”

[devops@server1 ansible]$ ansible test -m service -a “name=httpd state=stopped”

• user模块
  
  [devops@server1 ansible]$ ansible all -m user -a “name=cn password={{‘westos’|password_hash(‘sha512’)}}”##hash加密设置密码

[root@server2 ~]# cat /etc/passwd | grep cn
cn❌1001:1001::/home/cn:/bin/bash

• mysql模块

[devops@server1 ansible]$ ansible test -m yum -a “name=MYSQL-python state=present”
[devops@server1 ansible]$ ansible test -m yum -a “name=mariadb-server state=present”
[devops@server1 ansible]$ ansible test -m mysql_user -a “name=cn password=redhat priv=.:select host=’%’ state=present”
[devops@server1 ansible]$ ansible test -m service -a “name=mariadb state=started”