Ansible自动化运维工具的基本使用

一、什么是Ansible？
　　Ansible是一款非常轻量和强大的运维自动化工具；运维自动化工具本来便是用来简化运维工作的，但是如果工具本身就比较复杂，甚至需要一定的程序开发能力。就会增加使用和推广的难度。Ansible有三个最吸引人的地方：无客户端（代理程序）、简单易用和日志集中管控。Ansible是近年来知名度不断上升的DevOps自动化软件，2013年创立，虽然诞生时间不长，但是由于其采用无代理程序的架构，部署灵活，程序代码简单，因而迅速成为受瞩目的DevOps工具。

二、Ansible的架构与实现方式
　　由于Ansible是客户端代理程序的一款自动化运维工具，所以它的使用是基于SSH密钥来对远程客户端进行管理的。首先会有一台服务器端，对管理的个客户端做密钥免密认证，使得服务器端可以轻松在客户端执行管理操作命令；Ansible对远程客户端做管理，需要在本地维护一个hosts客户端主机名单，Ansible的核心管理模块也非常的多，可以简单的利用模块来进行远程命令的操纵；Ansible最为强大的地方在于它可以通过Playbooks文件，通过编写此剧本文件，达到多个任务多台主机的操作，大大的减少运维时间和重复任务。
　　
三、Ansible工具的安装
ansible工具收录在epel源当中，配置epel源即可直接基于yum程序包管理工具来安装。

[root@server ~]#vim epel.repo    //配置指向epel的yum源；
[epel]
name=Extra Packages for Enterprise Linux 7 - $basearch
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7

[root@server ~]# yum repolist all 
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * epel: mirrors.tuna.tsinghua.edu.cn
repo id            repo name                                            status
!base/x86_64       CentOS-7 - Base - mirrors.aliyun.com                 enabled: 10,019
*!epel/x86_64      Extra Packages for Enterprise Linux 7 - x86_64       enabled: 13,068
!jyy               jyy                                                  enabled:  3,723
repolist: 26,810
[root@server ~]# 
[root@server ~]# yum list all  | grep ansible
ansible.noarch                             2.7.10-1.el7                    @epel
[root@server ~]# yum install  ansible
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
epel/x86_64/metalink                                            | 5.7 kB  00:00:00     
 * epel: mirrors.tuna.tsinghua.edu.cn
base                                                            | 3.6 kB  00:00:00     
epel                                                            | 4.7 kB  00:00:00     
jyy                                                             | 3.6 kB  00:00:00 
......................................安装过程省略............

[root@server ~]# rpm -ql ansible |less    //查看ansible安装所生成的文件；
/etc/ansible
/etc/ansible/ansible.cfg   //这是ansible的主配置文件
/etc/ansible/hosts    //hosts是ansible管理个节点的地址信息文件

四、Ansible的常用模块
实验环境说明：

身份	地址
管理主机	192.168.126.141
被管理主机（db服务器主机）	192.168.126.129
被管理主机（web服务器主机1）	192.168.126.128
被管理主机（web服务器主机2）	192.168.126.139

1）首先我们需要生成ssh公钥文件并发送给所有的被管理主机

[root@server ~]# ssh-keygen      //生成主机密钥信息；
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
/root/.ssh/id_rsa already exists.
Overwrite (y/n)? y  
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:OAWb9y0oFJk034C2FXH9ZuWiOyZnP5BgfbJZypThRoA root@master
The key's randomart image is:
+---[RSA 2048]----+
|     .=+++oo     |
|      =BE+  +   .|
|     .+o+ .+ + o |
|     ..+ oo.B B .|
|      + S.o=.% . |
|       o   .O    |
|             o   |
|          . * .  |
|           = o.. |
+----[SHA256]-----+
[root@server ~]# ssh-copy-id 192.168.126.129   //把公钥发送给所有被管理主机（此处代码只显示一台）
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
[email protected]'s password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh '192.168.126.129'"
and check to make sure that only the key(s) you wanted were added.

[root@server ~]# 
[root@server ~]# ssh [email protected] "hostname" ; ssh [email protected] "hostname" ; ssh [email protected] "hostname"
db
web1
web2
//对三台主机做免密测试，显示其主机名成功；

2）配置管理主机的hosts文件

[root@server ~]# cd /etc/ansible/
[root@server ansible]# vim hosts
# This is the default ansible 'hosts' file.
#
# It should live in /etc/ansible/hosts
#
#   - Comments begin with the '#' character
#   - Blank lines are ignored
#   - Groups of hosts are delimited by [header] elements
#   - You can enter hostnames or ip addresses
#   - A hostname/ip can be a member of multiple groups

# Ex 1: Ungrouped hosts, specify before any group headers.
[webserver]    //可以给多个管理主机起一个名称；下面两台主机便是我的web服务器主机地址；
192.168.126.139
192.168.126.128

[dbserver]    //这是我定义的db数据库服务器主机名称
192.168.126.129

3）常用模块的使用帮助

ansible的使用语法:
		ansible  [-f forks] [-m module_name] [-a args]
		
[root@server ~]# ansible-doc -l   //可以列出ansible所支持的所有模块；
a10_server                                           Manage A10 Networks AX
a10_server_axapi3                                    Manage A10 Networks AX
a10_service_group                                    Manage A10 Networks AX
a10_virtual_server                                   Manage A10 Networks AX
aci_aaa_user                                         Manage AAA users (aaa:
aci_aaa_user_certificate                             Manage AAA user certif
aci_access_port_to_interface_policy_leaf_profile     Manage Fabric interfac
......................

[root@server ~]# ansible-doc -s user    //-s后面接上模块名称可以查看一个模块的使用帮助；
- name: Manage user accounts
  user:
      append:                # If `yes', add the user to the groups specifi
                               in `groups'. If
                               `no', user will
                               only be added to
                               the groups
                               specified in
                               `groups',
                               removing them
                               from all other
                               groups.
      comment:               # Optionally sets the description (aka `GECOS'
                               user account.
      create_home:           # Unless set to `no', a home directory will be
                               made for the user
                               when the account
                               is created or if
:

4）command模块的使用
　　command模块可以直接使用命令对远程被管理主机进行操作（此模块和shell模块是例外，因为其他的模块执行的命令格式都是key=value格式）

[root@server ~]# ansible webserver -m command -a "whoami"  //在所有的web服务器上执行"whoami"命令；-m指明模块名称，-a指明命令；
192.168.126.128 | CHANGED | rc=0 >>
root

192.168.126.139 | CHANGED | rc=0 >>
root               //返回成功

[root@server ~]# 

5）user模块
　　user模块主要是用来创建各用户的，其格式是key=value的形式。
　
我们在所有的web服务器上创建一个webserver10的用户，并指明其个属性信息；

[root@server ~]# ansible webserver -m user -a "name=webserver10 system=yes uid=666 group=root"  
				 //指明用户名，是否为系统用户，用户uid和附加组；
192.168.126.139 | CHANGED => {
    "changed": true, 
    "comment": "", 
    "create_home": true, 
    "group": 0,   
    "home": "/home/webserver10", 
    "name": "webserver10", 
    "shell": "/bin/bash", 
    "state": "present", 
    "system": true, 
    "uid": 666
}
192.168.126.128 | CHANGED => {
    "changed": true, 
    "comment": "", 
    "create_home": true, 
    "group": 0, 
    "home": "/home/webserver10", 
    "name": "webserver10", 
    "shell": "/bin/bash", 
    "state": "present", 
    "system": true, 
    "uid": 666
}               //返回信息现在已然成功创建此用户

我们在任意一台webserver上查看此webserver10的用户信息

[root@web1 ~]# id webserver10
uid=666(webserver10) gid=0(root) groups=0(root)   //已然成功存在；

那么我们如何删除一个用户呢？
只需要改变此用户的state状态既可以删除指定用户
例如：

[root@server ~]# ansible webserver -m user -a "name=webserver10 state=absent"
		//指明用户名和状态；presend为存在（创建），absent为不存在（删除）
192.168.126.139 | CHANGED => {
    "changed": true, 
    "force": false, 
    "name": "webserver10", 
    "remove": false, 
    "state": "absent"
}
192.168.126.128 | CHANGED => {
    "changed": true, 
    "force": false, 
    "name": "webserver10", 
    "remove": false, 
    "state": "absent"
}

此时我们再到webserver服务器上查看是否有webserver10用户

[root@web1 ~]# id webserver10
id: webserver10: no such user    //用户已然被删除；

6）copy模块
copy模块是用来复制文件到各被管理主机的

[root@server ~]# ansible all -m copy -a "src=/etc/fstab dest=/tmp/fstab_ansb mode=0600"
   		//给所有的管理主机发送文件，源文件为/etc/fstab，存放在被管理者主机的/tmp/目录中并修改了文件
   		名，权限位设置为0600；
192.168.126.128 | CHANGED => {
    "changed": true, 
    "checksum": "2b7747ed20a6b679c4f5a2a9f961ad80a9af73b1", 
    "dest": "/tmp/fstab_ansb", 
    "gid": 0, 
    "group": "root", 
    "md5sum": "e65113c619188818c14e660f630f0221", 
    "mode": "0600", 
    "owner": "root", 
    "size": 465, 
    "src": "/root/.ansible/tmp/ansible-tmp-1556124639.52-267371296358607/source", 
    "state": "file", 
    "uid": 0
}
192.168.126.129 | CHANGED => {
    "changed": true, 
    "checksum": "2b7747ed20a6b679c4f5a2a9f961ad80a9af73b1", 
    "dest": "/tmp/fstab_ansb", 
    "gid": 0, 
    "group": "root", 
    "md5sum": "e65113c619188818c14e660f630f0221", 
    "mode": "0600", 
    "owner": "root", 
    "size": 465, 
    "src": "/root/.ansible/tmp/ansible-tmp-1556124639.47-116516759002806/source", 
    "state": "file", 
    "uid": 0
}
192.168.126.139 | CHANGED => {
    "changed": true, 
    "checksum": "2b7747ed20a6b679c4f5a2a9f961ad80a9af73b1", 
    "dest": "/tmp/fstab_ansb", 
    "gid": 0, 
    "group": "root", 
    "md5sum": "e65113c619188818c14e660f630f0221", 
    "mode": "0600", 
    "owner": "root", 
    "size": 465, 
    "src": "/root/.ansible/tmp/ansible-tmp-1556124639.51-112783909852641/source", 
    "state": "file", 
    "uid": 0
}

在任意一个被管理主机上查看是否由此文件

[root@web2 ~]# cd /tmp/
[root@web2 tmp]# ll
-rw------- 1 root root 465 Apr 24 12:50 fstab_ansb    //文件存在，且权限位为0600;

7)ping模块
ping模块是用来测试被管理主机是否可以ping通

[root@server ~]# ansible all -m ping    //此模块没有参数；
192.168.126.129 | SUCCESS => {
    "changed": false, 
    "ping": "pong"
}
192.168.126.128 | SUCCESS => {
    "changed": false, 
    "ping": "pong"
}
192.168.126.139 | SUCCESS => {
    "changed": false, 
    "ping": "pong"
}
[root@server ~]# 

8）yum模块
见名知意，yum模块便是来进行软件包管理的模块

我们在所有的webserver管理主机上安装httpd软件包程序

[root@server ~]# ansible webserver -m yum -a "name=httpd state=latest"   //指明软件包名称和动作，latest表示安装最新版本；
192.168.126.128 | CHANGED => {
    "ansible_facts": {
        "pkg_mgr": "yum"
    }, 
    "changed": true, 
    "msg": "", 
    "rc": 0, 
    "results": [
        "Loaded plugins: langpacks, product-id, subscription-manager\nThis system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.\nResolving Dependencies\n--> Running transaction check\n---> Package httpd.x86_64 0:2.4.6-31.el7 will be installed\n--> Finished Dependency Resolution\n\nDependencies Resolved\n\n================================================================================\n Package         Arch             Version                   Repository     Size\n================================================================================\nInstalling:\n httpd           x86_64           2.4.6-31.el7              jyy           1.2 M\n\nTransaction Summary\n================================================================================\nInstall  1 Package\n\nTotal download size: 1.2 M\nInstalled size: 3.7 M\nDownloading packages:\nRunning transaction check\nRunning transaction test\nTransaction test succeeded\nRunning transaction\n  Installing : httpd-2.4.6-31.el7.x86_64                                    1/1 \n  Verifying  : httpd-2.4.6-31.el7.x86_64                                    1/1 \n\nInstalled:\n  httpd.x86_64 0:2.4.6-31.el7                                                   \n\nComplete!\n"
    ]
}
192.168.126.139 | CHANGED => {
    "ansible_facts": {
        "pkg_mgr": "yum"
    }, 
    "changed": true, 
    "msg": "", 
    "rc": 0, 
    "results": [
        "Loaded plugins: fastestmirror\nLoading mirror speeds from cached hostfile\nResolving Dependencies\n--> Running transaction check\n---> Package httpd.x86_64 0:2.4.6-88.el7.centos will be installed\n--> Finished Dependency Resolution\n\nDependencies Resolved\n\n================================================================================\n Package       Arch           Version                        Repository    Size\n================================================================================\nInstalling:\n httpd         x86_64         2.4.6-88.el7.centos            base         2.7 M\n\nTransaction Summary\n================================================================================\nInstall  1 Package\n\nTotal download size: 2.7 M\nInstalled size: 9.4 M\nDownloading packages:\nRunning transaction check\nRunning transaction test\nTransaction test succeeded\nRunning transaction\n  Installing : httpd-2.4.6-88.el7.centos.x86_64                             1/1 \n  Verifying  : httpd-2.4.6-88.el7.centos.x86_64                             1/1 \n\nInstalled:\n  httpd.x86_64 0:2.4.6-88.el7.centos                                            \n\nComplete!\n"
    ]
}

我们查看webserver节点中的主机上httpd软件包是否安装成功：

[root@web1 tmp]# rpm -q httpd 
httpd-2.4.6-31.el7.x86_64   //已然成功安装；

9）service模块
我们需要远程控制各主机的服务状态时，便要用到service模块

[root@server ~]# ansible webserver -m service -a "name=httpd state=started enabled=yes"  
 //指明服务器名称，状态为started|stopped|restarted，enabled=yes|no控制服务是否开机自启动；

192.168.126.139 | CHANGED => {
    "changed": true, 
    "enabled": true, 
    "name": "httpd", 
    "state": "started", 
    "status": {
        "ActiveEnterTimestampMonotonic": "0", 
        "ActiveExitTimestampMonotonic": "0", 
        "ActiveState": "inactive", 
        "After": "systemd-journald.socket basic.target -.mount network.target remote-fs.target tmp.mount nss-lookup.target system.slice", 
        "AllowIsolate": "no", 
        "AmbientCapabilities": "0", 
        "AssertResult": "no", 
        "AssertTimestampMonotonic": "0", 
        "Before": "shutdown.target", 
        "BlockIOAccounting": "no", 
        "BlockIOWeight": "18446744073709551615", 
        "CPUAccounting": "no", 
        "CPUQuotaPerSecUSec": "infinity", 
        "CPUSchedulingPolicy": "0", 
        "CPUSchedulingPriority": "0", 
        "CPUSchedulingResetOnFork": "no", 
        "CPUShares": "18446744073709551615", 
        "CanIsolate": "no", 
        "CanReload": "yes", 
        "CanStart": "yes", 
        "CanStop": "yes", 
        "CapabilityBoundingSet": "18446744073709551615", 
        "ConditionResult": "no", 
        "ConditionTimestampMonotonic": "0", 
        "Conflicts": "shutdown.target", 
        "ControlPID": "0", 
        "DefaultDependencies": "yes", 
        "Delegate": "no", 
        "Description": "The Apache HTTP Server", 
        "DevicePolicy": "auto", 
        "Documentation": "man:httpd(8) man:apachectl(8)", 
        "EnvironmentFile": "/etc/sysconfig/httpd (ignore_errors=no)", 
        "ExecMainCode": "0", 
        "ExecMainExitTimestampMonotonic": "0", 
        "ExecMainPID": "0", 
        "ExecMainStartTimestampMonotonic": "0", 
        "ExecMainStatus": "0", 
        "ExecReload": "{ path=/usr/sbin/httpd ; argv[]=/usr/sbin/httpd $OPTIONS -k graceful ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", 
        "ExecStart": "{ path=/usr/sbin/httpd ; argv[]=/usr/sbin/httpd $OPTIONS -DFOREGROUND ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", 
        "ExecStop": "{ path=/bin/kill ; argv[]=/bin/kill -WINCH ${MAINPID} ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", 
        "FailureAction": "none", 
        "FileDescriptorStoreMax": "0", 
        "FragmentPath": "/usr/lib/systemd/system/httpd.service", 
        "GuessMainPID": "yes", 
        "IOScheduling": "0", 
        "Id": "httpd.service", 
        "IgnoreOnIsolate": "no", 
        "IgnoreOnSnapshot": "no", 
        "IgnoreSIGPIPE": "yes", 
        "InactiveEnterTimestampMonotonic": "0", 
        "InactiveExitTimestampMonotonic": "0", 
        "JobTimeoutAction": "none", 
        "JobTimeoutUSec": "0", 
        "KillMode": "control-group", 
        "KillSignal": "18", 
        "LimitAS": "18446744073709551615", 
        "LimitCORE": "18446744073709551615", 
        "LimitCPU": "18446744073709551615", 
        "LimitDATA": "18446744073709551615", 
        "LimitFSIZE": "18446744073709551615", 
        "LimitLOCKS": "18446744073709551615", 
        "LimitMEMLOCK": "65536", 
        "LimitMSGQUEUE": "819200", 
        "LimitNICE": "0", 
        "LimitNOFILE": "4096", 
        "LimitNPROC": "7824", 
        "LimitRSS": "18446744073709551615", 
        "LimitRTPRIO": "0", 
        "LimitRTTIME": "18446744073709551615", 
        "LimitSIGPENDING": "7824", 
        "LimitSTACK": "18446744073709551615", 
        "LoadState": "loaded", 
        "MainPID": "0", 
        "MemoryAccounting": "no", 
        "MemoryCurrent": "18446744073709551615", 
        "MemoryLimit": "18446744073709551615", 
        "MountFlags": "0", 
        "Names": "httpd.service", 
        "NeedDaemonReload": "no", 
        "Nice": "0", 
        "NoNewPrivileges": "no", 
        "NonBlocking": "no", 
        "NotifyAccess": "main", 
        "OOMScoreAdjust": "0", 
        "OnFailureJobMode": "replace", 
        "PermissionsStartOnly": "no", 
        "PrivateDevices": "no", 
        "PrivateNetwork": "no", 
        "PrivateTmp": "yes", 
        "ProtectHome": "no", 
        "ProtectSystem": "no", 
        "RefuseManualStart": "no", 
        "RefuseManualStop": "no", 
        "RemainAfterExit": "no", 
        "Requires": "-.mount basic.target", 
        "RequiresMountsFor": "/var/tmp", 
        "Restart": "no", 
        "RestartUSec": "100ms", 
        "Result": "success", 
        "RootDirectoryStartOnly": "no", 
        "RuntimeDirectoryMode": "0755", 
        "SameProcessGroup": "no", 
        "SecureBits": "0", 
        "SendSIGHUP": "no", 
        "SendSIGKILL": "yes", 
        "Slice": "system.slice", 
        "StandardError": "inherit", 
        "StandardInput": "null", 
        "StandardOutput": "journal", 
        "StartLimitAction": "none", 
        "StartLimitBurst": "5", 
        "StartLimitInterval": "10000000", 
        "StartupBlockIOWeight": "18446744073709551615", 
        "StartupCPUShares": "18446744073709551615", 
        "StatusErrno": "0", 
        "StopWhenUnneeded": "no", 
        "SubState": "dead", 
        "SyslogLevelPrefix": "yes", 
        "SyslogPriority": "30", 
        "SystemCallErrorNumber": "0", 
        "TTYReset": "no", 
        "TTYVHangup": "no", 
        "TTYVTDisallocate": "no", 
        "TasksAccounting": "no", 
        "TasksCurrent": "18446744073709551615", 
        "TasksMax": "18446744073709551615", 
        "TimeoutStartUSec": "1min 30s", 
        "TimeoutStopUSec": "1min 30s", 
        "TimerSlackNSec": "50000", 
        "Transient": "no", 
        "Type": "notify", 
        "UMask": "0022", 
        "UnitFilePreset": "disabled", 
        "UnitFileState": "disabled", 
        "Wants": "system.slice", 
        "WatchdogTimestampMonotonic": "0", 
        "WatchdogUSec": "0"
    }
}
..................................................

我们查看webserver中的主机httpd服务是否处于运行状态并为开机自启动模式：

[root@web1 tmp]# systemctl is-enabled httpd
enabled        //已然为开机自启动状态；
[root@web1 tmp]# systemctl status httpd
httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled)
   Active: active (running) since Wed 2019-04-24 17:13:48 CST; 3min 47s ago    //running状态；
 Main PID: 15846 (httpd)
   Status: "Total requests: 0; Current requests/sec: 0; Current traffic:   0 B/sec"
   CGroup: /system.slice/httpd.service
           ├─15846 /usr/sbin/httpd -DFOREGROUND
           ├─15847 /usr/sbin/httpd -DFOREGROUND
           ├─15848 /usr/sbin/httpd -DFOREGROUND
           ├─15849 /usr/sbin/httpd -DFOREGROUND
           ├─15850 /usr/sbin/httpd -DFOREGROUND
           └─15852 /usr/sbin/httpd -DFOREGROUND

Apr 24 17:13:23 web1 systemd[1]: Starting The Apache HTTP Server...
Apr 24 17:13:38 web1 httpd[15846]: AH00557: httpd: apr_sockaddr_info_get() failed for web1
Apr 24 17:13:38 web1 httpd[15846]: AH00558: httpd: Could not reliably determine the server's fully qualified ...essage
Apr 24 17:13:48 web1 systemd[1]: Started The Apache HTTP Server.
Hint: Some lines were ellipsized, use -l to show in full.
[root@web1 tmp]# 

10）shell模块
shell模块的作用是启动一个新shell程序执行命令，它和command命令一样直接输入命令即可；

给webserver10用户非交互式的修改密码

[root@server ~]# ansible webserver -m shell -a 'echo "webserver10" | passwd --stdin webserver10' 
192.168.126.128 | CHANGED | rc=0 >>
Changing password for user webserver10.
passwd: all authentication tokens updated successfully.

192.168.126.139 | CHANGED | rc=0 >>
Changing password for user webserver10.
passwd: all authentication tokens updated successfully.   //seccessfully，密码设置成功；

[root@server ~]# 

11）script模块
此模块的作用在于可以在远端执行本地服务器上的脚本
例如：

[root@server ~]#vim ansib.sh
#!bin/bash
echo "$(hostname) love ansible"    //编写一个简单脚本

[root@server ~]# ansible all -m script -a "/root/ansib.sh"    //指明模块名称和脚本路径即可；
192.168.126.128 | CHANGED => {
    "changed": true, 
    "rc": 0, 
    "stderr": "Shared connection to 192.168.126.128 closed.\r\n", 
    "stderr_lines": [
        "Shared connection to 192.168.126.128 closed."
    ], 
    "stdout": "web1 love ansible\r\n", 
    "stdout_lines": [
        "web1 love ansible"
    ]
}
192.168.126.139 | CHANGED => {
    "changed": true, 
    "rc": 0, 
    "stderr": "Shared connection to 192.168.126.139 closed.\r\n", 
    "stderr_lines": [
        "Shared connection to 192.168.126.139 closed."
    ], 
    "stdout": "web2 love ansible\r\n", 
    "stdout_lines": [
        "web2 love ansible"
    ]
}
192.168.126.129 | CHANGED => {
    "changed": true, 
    "rc": 0, 
    "stderr": "Shared connection to 192.168.126.129 closed.\r\n", 
    "stderr_lines": [
        "Shared connection to 192.168.126.129 closed."
    ], 
    "stdout": "db love ansible\r\n", 
    "stdout_lines": [
        "db love ansible"
    ]
}

12）setup模块
此模块是用来收集各被管理主机的信息，信息是以键值对的方式呈现，所有的信息都ansible都可以当做变量来使用，通过键名来取其值。

[root@server ~]# ansible all -m setup   //指明模块即可
192.168.126.128 | SUCCESS => {
    "ansible_facts": {
        "ansible_all_ipv4_addresses": [
            "192.168.126.128"
        ],
        "ansible_all_ipv6_addresses": [
            "fe80::20c:29ff:feaf:8c47"
        ],
        "ansible_apparmor": {
            "status": "disabled"
        },
        "ansible_architecture": "x86_64",
        "ansible_bios_date": "04/13/2018",
        "ansible_bios_version": "6.00",
        "ansible_cmdline": {
            "BOOT_IMAGE": "/vmlinuz-3.10.0-229.el7.x86_64",
            "LANG": "en_US.UTF-8",
            "quiet": true,
            "rhgb": true,
            "ro": true,
...................................其余信息省略................

五、playbook的使用
　　playbook可以使多个任务集成到一个yml文件中，多次调用执行，可以理解为剧本；将多出戏集合到一个剧本中，不同的角色唱不同的戏；比如使webserver安装httpd软件包，拷贝配置文件，启动服务；而dbserver安装mariadb软件包，拷贝配置文件，启动服务。这些操作都可以写成一个剧本，不同任务的主机完成不同的任务。playbook的核心元素：tasks（任务）、variables（变量）、templates（模板）、handlers（处理器）、roles（角色）

剧本示例：

[root@server ansible]# cp /etc/httpd/conf/httpd.conf .
[root@server ansible]# vim   service.yml
[root@server ansible]# vim service.yml
- hosts: webserver                 //应用到哪些主机上
  remote_user: root               //以哪个远程用户执行
  tasks:                                 //任务（也就是戏）
  - name: insterll  httpd package   //说明，第一个任务的解释；
    yum: name=httpd state=latest    //使用的模块，需要做什么事情
  - name: copy httpd config
    copy: src=httpd.conf dest=/etc/httpd/conf/httpd.conf
  - name: starting httpd  serviced
    service: name=httpd  state=started enabled=yes

- hosts: dbserver
  remote_user: root
  tasks:
  - name: install mariadb package
    yum: name=mariadb-server.x86_64 state=latest
  - name: start mysql and enabled mysql
    service: name=mariadb state=started enabled=yes


[root@server ansible]# ansible-playbook service.yml 

PLAY [webserver] *****************************************************************************************************

TASK [Gathering Facts] ***********************************************************************************************
ok: [192.168.126.128]
ok: [192.168.126.139]

TASK [insterll  httpd package] ***************************************************************************************
ok: [192.168.126.139]
ok: [192.168.126.128]

TASK [copy httpd config] *********************************************************************************************
changed: [192.168.126.128]
changed: [192.168.126.139]

TASK [starting httpd  serviced] **************************************************************************************
ok: [192.168.126.128]
ok: [192.168.126.139]

PLAY [dbserver] ******************************************************************************************************

TASK [Gathering Facts] ***********************************************************************************************
ok: [192.168.126.129]

TASK [install mariadb package] ***************************************************************************************
ok: [192.168.126.129]

TASK [start mysql and enabled mysql] *********************************************************************************
ok: [192.168.126.129]

PLAY RECAP ***********************************************************************************************************
192.168.126.128            : ok=4    changed=1    unreachable=0    failed=0   
192.168.126.129            : ok=3    changed=0    unreachable=0    failed=0   
192.168.126.139            : ok=4    changed=1    unreachable=0    failed=0   

在远程主机上查看各软件包是否安装，服务器是否启动，是否开机自动启动：
dbserver：

[root@db tmp]# rpm -q mariadb
mariadb-5.5.60-1.el7_5.x86_64
You have new mail in /var/spool/mail/root
[root@db tmp]# systemctl is-enabled mariadb 
enabled
[root@db tmp]# systemctl status mariadb 
mariadb.service - MariaDB database server
   Loaded: loaded (/usr/lib/systemd/system/mariadb.service; enabled)
   Active: active (running) since Wed 2019-04-24 18:29:15 CST; 9min ago
  Process: 15041 ExecStartPost=/usr/libexec/mariadb-wait-ready $MAINPID (code=exited, status=0/SUCCESS)
  Process: 15010 ExecStartPre=/usr/libexec/mariadb-prepare-db-dir %n (code=exited, status=0/SUCCESS)
 Main PID: 15040 (mysqld_safe)
   CGroup: /system.slice/mariadb.service
           ├─15040 /bin/sh /usr/bin/mysqld_safe --basedir=/usr
           └─15239 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin...

Apr 24 18:29:08 db systemd[1]: Starting MariaDB database server...
Apr 24 18:29:09 db mariadb-prepare-db-dir[15010]: Database MariaDB is probably initialized in /var/lib/mysql al...one.
Apr 24 18:29:09 db mariadb-prepare-db-dir[15010]: If this is not the case, make sure the /var/lib/mysql is empt...dir.
Apr 24 18:29:09 db mysqld_safe[15040]: 190424 18:29:09 mysqld_safe Logging to '/var/log/mariadb/mariadb.log'.
Apr 24 18:29:09 db mysqld_safe[15040]: 190424 18:29:09 mysqld_safe Starting mysqld daemon with databases from ...mysql
Apr 24 18:29:15 db systemd[1]: Started MariaDB database server.
Hint: Some lines were ellipsized, use -l to show in full.

webserver：

[root@web1 tmp]# rpm -q httpd 
httpd-2.4.6-31.el7.x86_64
You have new mail in /var/spool/mail/root
[root@web1 tmp]# systemctl is-enabled httpd
enabled
[root@web1 tmp]# systemctl status httpd 
httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled)
   Active: active (running) since Wed 2019-04-24 18:14:16 CST; 25min ago
 Main PID: 18697 (httpd)
   Status: "Total requests: 0; Current requests/sec: 0; Current traffic:   0 B/sec"
   CGroup: /system.slice/httpd.service
           ├─18697 /usr/sbin/httpd -DFOREGROUND
           ├─18706 /usr/sbin/httpd -DFOREGROUND
           ├─18707 /usr/sbin/httpd -DFOREGROUND
           ├─18708 /usr/sbin/httpd -DFOREGROUND
           ├─18709 /usr/sbin/httpd -DFOREGROUND
           └─18710 /usr/sbin/httpd -DFOREGROUND

Apr 24 18:13:51 web1 systemd[1]: Starting The Apache HTTP Server...
Apr 24 18:14:06 web1 httpd[18697]: AH00557: httpd: apr_sockaddr_info_get() failed for web1
Apr 24 18:14:06 web1 httpd[18697]: AH00558: httpd: Could not reliably determine the server's fully qualified ...essage
Apr 24 18:14:16 web1 systemd[1]: Started The Apache HTTP Server.
Hint: Some lines were ellipsized, use -l to show in full.

以此，一个剧本完成在不同的管理机上完成多个不同的任务已经完成；当然ansible还有很多其他的高级使用方法。