17、Ansible自动化安装httpd与Apache

1、使用ansible的playbook实现自动化安装httpd

主控机：192.168.45.202
被控机：192.168.45.203
1）建立key验证，在主控机上生成秘钥

[root@s202 ansible]# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:L7aOX7p8JfgddAQ38KuAREQPAG3ilIzIpOSQOZHg4Kg root@s202
The key's randomart image is:
+---[RSA 2048]----+
|OO o.+.+=   ooo  |
|/.. = o. o   o.. |
|o= o o  . .  ..  |
|.   .  . .  . .. |
|E       S... ..  |
|        ....o.   |
|        o.o+..   |
|       + =o .    |
|      .oBo       |
+----[SHA256]-----+

2）完成自身验证

[root@s202 ansible]# ssh-copy-id 192.168.45.202
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host '192.168.45.202 (192.168.45.202)' can't be established.
ECDSA key fingerprint is SHA256:IJSDPnogSYHD4HFYJdnm3q4DwUrEiMYNa71KRXUt69Q.
ECDSA key fingerprint is MD5:5d:c0:86:72:92:64:2d:09:b2:7e:33:ea:2b:35:71:75.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
[email protected]'s password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh '192.168.45.202'"
and check to make sure that only the key(s) you wanted were added.

3）在主控机测试免密登录

[root@s202 ansible]# ssh localhost
The authenticity of host 'localhost (::1)' can't be established.
ECDSA key fingerprint is SHA256:IJSDPnogSYHD4HFYJdnm3q4DwUrEiMYNa71KRXUt69Q.
ECDSA key fingerprint is MD5:5d:c0:86:72:92:64:2d:09:b2:7e:33:ea:2b:35:71:75.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'localhost' (ECDSA) to the list of known hosts.
Last login: Thu Aug 20 21:54:09 2020 from 192.168.45.200

4）将key拷贝到被控机上，并测试免费登录效果

[root@s202 ~]# scp -r .ssh/ 192.168.45.203:
[email protected]'s password: 
known_hosts                                                                 100%  523   400.7KB/s   00:00    
id_rsa                                                                      100% 1679     1.3MB/s   00:00    
id_rsa.pub                                                                  100%  391   352.3KB/s   00:00    
authorized_keys                                                             100%  391   251.6KB/s   00:00    
[root@s202 ~]# ssh 192.168.45.203
Last login: Sat Jul  4 17:15:05 2020 from 192.168.45.200
[root@s203 ~]# exit
logout
Connection to 192.168.45.203 closed.

5）在主控机安装ansible（需要repl源）

[root@s202 ~]# yum install ansible

6）在主控机ansible中的hosts文件中加入被控机

[root@s202 ansible]# cat /etc/ansible/hosts 
[httpd]
192.168.45.203

7）创建httpd.yml文件

[root@s202 ansible]# cat /etc/ansible/httpd.yml 
- hosts: httpd

  tasks:
    - name: Install httpd
      yum: name=httpd state=present

    - name: start service
      service: name=httpd state=started enabled=yes

8）验证yml文件

[root@s202 ansible]# ansible-playbook -C httpd.yml 

PLAY [httpd] *************************************************************************************************

TASK [Gathering Facts] ***************************************************************************************
ok: [192.168.45.203]

TASK [Install httpd] *****************************************************************************************
changed: [192.168.45.203]

TASK [start service] *****************************************************************************************
changed: [192.168.45.203]

PLAY RECAP ***************************************************************************************************
192.168.45.203             : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

9）验证通过后，执行安装操作

[root@s202 ansible]# ansible-playbook httpd.yml 

PLAY [httpd] *************************************************************************************************

TASK [Gathering Facts] ***************************************************************************************
ok: [192.168.45.203]

TASK [Install httpd] *****************************************************************************************
changed: [192.168.45.203]

TASK [start service] *****************************************************************************************
changed: [192.168.45.203]

PLAY RECAP ***************************************************************************************************
192.168.45.203             : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

10）在被控机上进行httpd的验证

使用ansible安装httpd成功

2、建立httpd服务器，要求提供两个基于名称的虚拟主机:

(1)www.X.com，页面文件目录为/web/vhosts/x;错误日志为
/var/log/httpd/x.err，访问日志为/var/log/httpd/x.access
(2)www.Y.com，页面文件目录为/web/vhosts/y;错误日志为 /var/log/httpd/www2.err，访问日志为/var/log/httpd/y.access
(3)为两个虚拟主机建立各自的主页文件index.html，内容分别为其对应的主机名

1. 安装httpd

[root@s203 ~]# yum install httpd -y

2. 建立页面文件目录

[root@s203 ~]# mkdir -p /web/vhosts/{x,y}

3. 创建虚拟主机

[root@s203 conf.d]# cat /etc/httpd/conf.d/web.conf 

    ServerName www.X.com
    DocumentRoot "/web/vhosts/x"
    ErrorLog "/var/log/httpd/x.err"
    CustomLog "/var/log/httpd/x.access" combined
    
    Options None
    AllowOverride None
    Require all granted
    



    ServerName www.Y.com
    DocumentRoot "/web/vhosts/y"
    ErrorLog "/var/log/httpd/www2.err"
    CustomLog "/var/log/httpd/y.access" combined
    
        Options None
        AllowOverride None
        Require all granted
    

4. 创建各自的主页面index.html文件

[root@s203 conf.d]# echo www.X.com > /web/vhosts/x/index.html
[root@s203 conf.d]# echo www.Y.com > /web/vhosts/y/index.html

5. 在hosts文件中添加自定义域名解析

[root@s203 etc]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.45.203 www.X.com www.Y.com

6. 启动服务进行验证

[root@s203 etc]# systemctl start httpd
[root@s203 etc]# curl www.x.com
www.X.com
[root@s203 etc]# curl www.y.com
www.Y.com