第十六周作业（ansible安装httpd）

1、使用ansible的playbook实现自动化安装httpd

主机：两台，一台ansible主控端 192.168.27.7/24，一台被控端 192.168.27.17/24
(1) 主控端安装ansible服务，使用阿里云的EPEL源，结合光盘yum源

[root@ansible ~]# cat /etc/yum.repos.d/base.repo 
[development]
name=dvdbase repo
baseurl=file:///mnt/cdrom/
enabled=1
gpgcheck=1
gpgkey=file:///mnt/cdrom/RPM-GPG-KEY-CentOS-7

[aliyunEpel]
name=aliyun epel
baseurl=https://mirrors.aliyun.com/epel/$releasever/$basearch
enabled=1
gpgcheck=1
gpgkey=https://mirrors.aliyun.com/epel/RPM-GPG-KEY-EPEL-$releasever

#安装Ansible
[root@ansible ~]# yum install -y ansible

(2) 配置主机清单，并配置基于key验证的ssh连接

[root@ansible ~]# vim /etc/ansible/hosts
#添加以下内容
[websrvs]
192.168.27.17

#基于Key验证
[root@ansible ~]# ssh-keygen 
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:qehCr9s+C0MGZ4U17a+9FyqIsKJMAoGuRYFJRFxSK4s root@ansible
The key's randomart image is:
+---[RSA 2048]----+
|=B+=+.           |
|+.oo...          |
|+.+. .           |
|o*o   .  .       |
|Eo+    .S        |
|++.  . .. .      |
|o=oo...o . .     |
|* o=+ o o .      |
|+.o==o ..o       |
+----[SHA256]-----+
[root@ansible ~]# ssh-copy-id -i /root/.ssh/id_rsa.pub [email protected]
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host '192.168.27.17 (192.168.27.17)' can't be established.
ECDSA key fingerprint is SHA256:TX1biesR1B8Gsz8MuCTPDZKPX3i4E051OkhQK/C9kBI.
ECDSA key fingerprint is MD5:83:8c:bb:e5:b9:a7:45:99:38:fc:5d:c8:89:cf:fb:5f.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
[email protected]'s password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh '[email protected]'"
and check to make sure that only the key(s) you wanted were added.

(3) 建立playbook文件

[root@ansible ~]# ll files/httpd.conf     #准备httpd的配置文件
-rw-r--r-- 1 root root 11753 Feb 25 19:43 files/httpd.conf

[root@ansible ~]# vim httpd.yml 
---

- hosts: websrvs
  remote_user: root

  tasks:
    - name: Install httpd
      yum: name=httpd state=present
    - name: Install configure file
      copy: src=files/httpd.conf dest=/etc/httpd/conf/
    - name: start service
      service: name=httpd state=started enabled=yes

(4) 使用playbook文件进行httpd服务的安装，并测试

[root@ansible ~]# ansible-playbook httpd.yml 

PLAY [websrvs] **********************************************************************************************************************************

TASK [Gathering Facts] **************************************************************************************************************************
ok: [192.168.27.17]

TASK [Install httpd] ****************************************************************************************************************************
changed: [192.168.27.17]

TASK [Install configure file] *******************************************************************************************************************
ok: [192.168.27.17]

TASK [start service] ****************************************************************************************************************************
changed: [192.168.27.17]

PLAY RECAP **************************************************************************************************************************************
192.168.27.17              : ok=4    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0 

[root@centos7 ~]# ss -ntl|grep 80    #被控端查看80端口已经打开
LISTEN     0      128         :::80                      :::*    
[root@centos7 ~]# ps -aux |grep httpd    #服务也已启动
root      7900  0.0  0.2 230408  5148 ?        Ss   19:48   0:00 /usr/sbin/httpd -DFOREGROUND
apache    7902  0.0  0.1 232492  3152 ?        S    19:48   0:00 /usr/sbin/httpd -DFOREGROUND
apache    7903  0.0  0.1 232492  3152 ?        S    19:48   0:00 /usr/sbin/httpd -DFOREGROUND
apache    7904  0.0  0.1 232492  3152 ?        S    19:48   0:00 /usr/sbin/httpd -DFOREGROUND
apache    7905  0.0  0.1 232492  3152 ?        S    19:48   0:00 /usr/sbin/httpd -DFOREGROUND
apache    7906  0.0  0.1 232492  3152 ?        S    19:48   0:00 /usr/sbin/httpd -DFOREGROUND
root      7972  0.0  0.0 112708   976 pts/0    S+   19:51   0:00 grep --color=auto httpd

2、建立httpd服务器，要求提供两个基于名称的虚拟主机

(1)www.X.com，页面文件目录为/web/vhosts/x;错误日志为
/var/log/httpd/x.err，访问日志为/var/log/httpd/x.access
(2)www.Y.com，页面文件目录为/web/vhosts/y;错误日志为 /var/log/httpd/www2.err，访问日志为/var/log/httpd/y.access
(3)为两个虚拟主机建立各自的主页文件index.html，内容分别为其对应的主机名

#建立主机网页目录
[root@centos7 ~]# mkdir -p /web/vhosts/{x,y}
#授权apache用户访问
[root@centos7 ~]# chown -R root:apache /web

#建立各虚拟主机的主页文件index.html
[root@centos7 ~]# echo www.x.com > /web/vhosts/x/index.html
[root@centos7 ~]# echo www.y.com > /web/vhosts/y/index.html

#建立虚拟主机配置
[root@centos7 ~]# vim /etc/httpd/conf.d/vhosts.conf 

        ServerName www.x.com
        DocumentRoot "/web/vhosts/x"
        ErrorLog "/var/log/httpd/x.err"    #错误日志
        CustomLog "/var/log/httpd/x.access" combined    #访问日志
        
                Options None
                AllowOverride None
                Require all granted
        



        ServerName www.y.com
        DocumentRoot "/web/vhosts/y"
        ErrorLog "/var/log/httpd/www2.err"    #错误日志
        CustomLog "/var/log/httpd/y.access" combined    #访问日志
        
                Options None
                AllowOverride None
                Require all granted
        


#重启httpd服务
[root@centos7 ~]# systemctl restart httpd

#创建本地解析
[root@centos7 ~]# vim /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.27.17   www.x.com    #添加此行
192.168.27.17   www.y.com    #添加此行

#本地访问测试
[root@centos7 ~]# curl www.x.com
www.x.com
[root@centos7 ~]# curl www.y.com
www.y.com