ansible第一次作业
1.安装并配置Ansible
在控制节点上安装并配置 Ansible, 要求如下：
安装所需的钦件包
- 创建静态 inventory 文件 /home/devops/ansible/inventory, 要求如下:
- servera 属于dev 主机组
- serverb 属于 test 和 balancers 主机组
- serverc 和 serverd 满于 prod 主机组
- prod 主机组属于 Webserver 主机组
- 创建 ansible配置文件/home/devops/ansible/ansible.cfg , 要求如下 ：
- 使用 /home/devaps/ansible/inventory 清单文件
- 角色 role目录存放在 /home/devops/ansible/roles
1.通过SSH连接到devops用户中
ssh devops@workstation
2.安装ansible
[devops@workstation ~]$ sudo yum install ansible -y
Last metadata expiration check: 0:41:52 ago on Sat 02 Apr 2022 03:35:12 PM GMT.
Package ansible-2.8.0-1.el8ae.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!
3.创建ansible，roles目录，并在此目录创建inventory文件；
[devops@workstation ~]$ mkdir ansible
[devops@workstation ~]$ cd ansible
[devops@workstation ~]$ mkdir -p ansible/roles
[devops@workstation ansible]$ vim /home/devops/ansible/inventory
4.在inventory文件中创建相应的主机组
[devops@workstation ansible]$ vim /home/devops/ansible/inventory
[dev]
servera
[blancers]
serverb
[test]
serverb
[prod]
server[c:d]
[Webserver:children]
prod
5.创建清单文件
vim /home/devops/ansible/ansible.cfg
不会写，可以在连一个终端
ssh devops@workstation
vim /etc/ansible/ansible.cfg
[defaults]
inventory = /home/devops/ansible/inventory
roles_path = /home/devops/ansible/roles
host_key_checking = False
6.在配置主机中的文件中添加变量
[devops@workstation ansible]$ vim inventory
[dev]
servera
[blancers]
serverb
[test]
serverb
[prod]
server[c:d]
[Webserver:children]
prod
[all:vars]
ansible_user = root
ansible_password = redhat
7.验证
ansible all -m ping
方法2：
vim inventory
[dev]
servera
[blancers]
serverb
[test]
serverb
[prod]
server[c:d]
[Webserver:children]
prod
vim ansible.cfg
[defaults]
inventory = /home/devops/ansible/inventory
roles_path = /home/devops/ansible/roles
remote_user = devops
ask_pass = False
[privilege_escalation]
become=True
become_method=sudo
become_user=root
become_ask_pass=False
cd
cd .ssh
ssh-keygen -f ~/.ssh/id_rsa -P '' -q
ls
id_rsa id_rsa.pub known_hosts
for i in {a..d};do echo server$i;done
for i in {a..d};do ssh-copy-id server$i;done
密码：redhat
for i in {a..d};do ssh server$i hostname;done
cd /home/devops/ansible/
ansible all -m ping
补充：
logout
ssh root@serverc
visudo
cd /etc/sudoers.d/
ls devops
vim devops
devops ALL=(ALL) NOPASSWD:ALL
2.创建并运行 Ansibie ad-hoc 命令
创建一个 shell 脚本名为 adhoc.sh 用以运行 ad-hoc 命令 . 为每个受控节点配罝 yum仓库. 要求如下：
仓库1 ：
- Name: RH294_Base
- Description： RH294 base software
- Base urt: http://content.example.com/rhel8.0/x86_64/dvd/BaseOS
- 需要验证钦件包 GPG 签名
- GPG key 在： /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
- 启用此软件仓库
仓库 2:
- Name: RH294_Stream
- Description ： RH294 stream software
- Base url： http://content.example.com/rhel8.0/x86_64/dvd/AppStream
- 需要验证软件包 GPG 签名
- GPG key 在： /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
- 启用此软件仓库
如果不会
ansible-doc -l | grep yum
yum Manages packages with the 'yum' package manager
yum_repository Add or remove YUM repositories
查看帮助：
ansible-doc yum_repository
:EXAM
ansible dev -m yum_repository \
> -a 'name="RH294_Base" description="RH294 base software" \
> baseurl=http://content.example.com/rhel8.0/x86_64/dvd/BaseOS \
> gpgcheck=yes \
> gpgkey=/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release \
> enabled=yes'
验证：ansible dev -a ‘ls /etc/yum.repods.d’
开始：
vim adhoc.sh
#！ /bin/bash
ansible all -m yum_repository \
-a 'name="RH294_Base" description="RH294 base software" \
baseurl=http://content.example.com/rhel8.0/x86_64/dvd/BaseOS \
gpgcheck=yes \
gpgkey=/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release \
enabled=yes'
ansible all -m yum_repository \
-a 'name="RH294_Stream" description="RH294 stream software" \
baseurl=http://content.example.com/rhel8.0/x86_64/dvd/AppStream \
gpgcheck=yes \
gpgkey=/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release \
enabled=yes'
:x保存
增加执行权限：
chmod +x adhoc.sh
运行：
./adhoc.sh
验证：
ansible all -a 'yum repolist'