ansible常用模块的用法和ansible基于临时命令方式实现LNMP
ansible常用模块的用法和ansible基于临时命令方式实现LNMP
文章目录
- ansible常用模块的用法和ansible基于临时命令方式实现LNMP
-
- @[toc]
- 一、ansible常用模块使用详解
-
- 1、ping
- 2、command
- 3、raw
- 4、shell
- 5、script
- 6、template
- 7、yum
- 8、copy
- 9、group
- 10、user
- 11、service
- 12、file
- 二、使用ansible临时命令实现LNMP架构
-
- 1、准备工作
- 2、部署nginx
- 3、部署mysql
- 4、部署php
- 5、配置php测试页面
- 6、访问php测试页面
文章目录
- ansible常用模块的用法和ansible基于临时命令方式实现LNMP
-
- @[toc]
- 一、ansible常用模块使用详解
-
- 1、ping
- 2、command
- 3、raw
- 4、shell
- 5、script
- 6、template
- 7、yum
- 8、copy
- 9、group
- 10、user
- 11、service
- 12、file
- 二、使用ansible临时命令实现LNMP架构
-
- 1、准备工作
- 2、部署nginx
- 3、部署mysql
- 4、部署php
- 5、配置php测试页面
- 6、访问php测试页面
一、ansible常用模块使用详解
ansible常用模块有：
- ping
- yum
- template
- copy
- user
- group
- service
- raw
- command
- shell
- script
raw、command、shell的区别：
- shell模块调用的/bin/sh指令执行
- command模块不是调用的shell的指令，所以没有bash的环境变量
- raw很多地方和shell类似，更多的地方建议使用shell和command模块。但是如果是使用老版本python，需要用到raw，又或者是客户端是路由器，因为没有安装python模块，那就需要使用raw模块了
修改默认清单文件指定路径
[root@localhost ~]# vim /etc/ansible/ansible.cfg
inventory = /etc/ansible/inventory
[root@localhost ~]# cd /etc/ansible/
[root@localhost ansible]# touch inventory
[root@localhost ansible]# vim inventory
192.168.183.135 ansible_user=root ansible_password=runtime
192.168.183.136 ansible_user=root ansible_password=runtime
192.168.183.137 ansible_user=root ansible_password=runtime
[root@localhost ansible]# ansible all --list-hosts
hosts (3):
192.168.183.135
192.168.183.136
192.168.183.137
1、ping
ping模块用于检查指定节点机器是否连通，用法简单，不涉及参数，主机如果在线，则回复pong。
[root@localhost ~]# ansible all -m ping
192.168.183.136 | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
192.168.183.137 | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
192.168.183.135 | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
2、command
command模块用于在远程主机上执行命令，ansible默认就是使用command模块。
注意：command模块有一个缺陷就是不能使用管道符和重定向功能。
//查看受控主机的/tmp目录
[root@localhost ~]# ansible 192.168.183.135 -a 'ls /tmp'
192.168.183.135 | CHANGED | rc=0 >>
ansible_command_payload_t181ftrf
ks-script-4i88rwq9
ks-script-m7jrq744
systemd-private-63c02f80df3d43d3a37bec98b9a03e22-chronyd.service-VjFHIi
vmware-root_861-3988621786
vmware-root_894-2730693566
vmware-root_903-3979774182
//在受控主机的/tmp目录下新建一个文件test
[root@localhost ~]# ansible 192.168.183.135 -a 'touch /tmp/test'
[WARNING]: Consider using the file module with state=touch rather than running
'touch'. If you need to use command because file is insufficient you can add
'warn: false' to this command task or set 'command_warnings=False' in
ansible.cfg to get rid of this message.
192.168.183.135 | CHANGED | rc=0 >>
[root@localhost ~]# ansible 192.168.183.135 -a 'ls /tmp'
192.168.183.135 | CHANGED | rc=0 >>
ansible_command_payload_3m25p27a
systemd-private-63c02f80df3d43d3a37bec98b9a03e22-chronyd.service-VjFHIi
test
vmware-root_894-2730693566
//command模块不支持管道符、重定向
[root@localhost ~]# ansible 192.168.183.135 -a "echo 'hello world' > /tmp/test"
192.168.183.135 | CHANGED | rc=0 >>
hello world > /tmp/test
[root@localhost ~]# ansible 192.168.183.135 -a 'cat /tmp/test'
192.168.183.135 | CHANGED | rc=0 >>
[root@localhost ~]# ansible 192.168.183.135 -a 'ps -ef|grep vsftpd'
192.168.183.135 | FAILED | rc=1 >>
error: unsupported SysV option
Usage:
ps [options]
Try 'ps --help '
or 'ps --help '
for additional help text.
For more details see ps(1).non-zero return code
3、raw
raw模块用于在远程主机上执行命令，其支持管道符与重定向。
//支持重定向
[root@localhost ~]# ansible 192.168.183.135 -m raw -a "echo 'hello world' > /tmp/test"
192.168.183.135 | CHANGED | rc=0 >>
Shared connection to 192.168.183.135 closed.
[root@localhost ~]# ansible 192.168.183.135 -a 'cat /tmp/test'
192.168.183.135 | CHANGED | rc=0 >>
hello world
//支持管道符
[root@localhost ~]# ansible 192.168.183.135 -m raw -a 'cat /tmp/test|grep -Eo hello'
192.168.183.135 | CHANGED | rc=0 >>
hello
Shared connection to 192.168.183.135 closed.
4、shell
shell模块用于在受控主机上执行受控机上的脚本，也可直接在受控主机上执行命令，shell模块支持管道重定向。
//查看受控主机上的脚本
[root@localhost scripts]# ll
total 4
-rwxr-xr-x. 1 root root 35 Oct 22 13:32 test.sh
//使用shell模块执行受控机上的脚本
[root@localhost ~]# ansible 192.168.183.135 -m shell -a '/bin/bash /scripts/test.sh &> /tmp/test'
192.168.183.135 | CHANGED | rc=0 >>
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'cat /tmp/test'
192.168.183.135 | CHANGED | rc=0 >>
hello world!!!
5、script
script模块用于在受控机上执行主控机上的脚本
//在主控机上创建一个脚本
[root@localhost ~]# mkdir -p /etc/ansible/scripts/
[root@localhost ~]# cd /etc/ansible/scripts/
[root@localhost scripts]# vim a.sh
[root@localhost scripts]# cd
[root@localhost ~]# ll /etc/ansible/scripts/
total 4
-rw-r--r--. 1 root root 35 Oct 22 13:42 a.sh
//执行
[root@localhost ~]# ansible 192.168.183.135 -m script -a '/etc/ansible/scripts/a.sh &> /tmp/test'
192.168.183.135 | CHANGED => {
"changed": true,
"rc": 0,
"stderr": "Shared connection to 192.168.183.135 closed.\r\n",
"stderr_lines": [
"Shared connection to 192.168.183.135 closed."
],
"stdout": "",
"stdout_lines": []
}
//查看受控机上的/tmp/test文件内容
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'cat /tmp/test'
192.168.183.135 | CHANGED | rc=0 >>
hello world!!!
6、template
template模块用于生成一个模板，并可将其传输至远程主机上。
//下载一个yum源并开启此源
[root@localhost ~]# cd /etc/yum.repos.d/
[root@localhost yum.repos.d]# curl -o CentOS7-Base-163.repo http://mirrors.163.com/.help/CentOS7-Base-163.repo
[root@localhost yum.repos.d]# sed -i 's/\$releasever/7/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@localhost yum.repos.d]# sed -i 's/^enabled=.*/enabled=1/g' /etc/yum.repos.d/CentOS7-Base-163.repo
[root@localhost yum.repos.d]# ls
CentOS7-Base-163.repo CentOS-Base.repo CentOS-SIG-ansible-29.repo ls.repo
[root@localhost yum.repos.d]# cd
//将设置好的yum源传到受控主机上
[root@localhost ~]# ansible 192.168.183.135 -m template -a 'src=/etc/yum.repos.d/CentOS7-Base-163.repo dest=/etc/yum.repos.d/163.repo'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"checksum": "60b8868e0599489038710c45025fc11cbccf35f2",
"dest": "/etc/yum.repos.d/163.repo",
"gid": 0,
"group": "root",
"md5sum": "5a3e688854d9ceccf327b953dab55b21",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:system_conf_t:s0",
"size": 1462,
"src": "/root/.ansible/tmp/ansible-tmp-1666417865.7125297-2262-193472931536666/source",
"state": "file",
"uid": 0
}
//查看受控机上是否存在
[root@localhost ~]# ls /etc/yum.repos.d/
163.repo
7、yum
yum模块用于在指定节点机器上通过yum管理软件，其支持的参数主要有两个
- name：要管理的包名
- state：要进行的操作
state常用的值：
- latest：安装软件
- installed：安装软件
- present：安装软件
- removed：卸载软件
- absent：卸载软件
若想使用yum来管理软件，请确保受控机上的yum源无异常。
//在受控机上查看vsftpd软件是否安装
[root@localhost ~]# rpm -qa | grep vsftpd
[root@localhost ~]#
//在ansible主机上使用yum模块在受控机上安装vsftpd
[root@localhost ~]# ansible 192.168.183.135 -m yum -a 'name=vsftpd state=present'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"msg": "",
"rc": 0,
"results": [
"Installed: vsftpd-3.0.3-35.el8.x86_64"
]
}
//查看受控机上是否安装了vsftpd
[root@localhost ~]# rpm -qa | grep vsftpd
vsftpd-3.0.3-35.el8.x86_64
8、copy
copy模块用于复制文件至远程受控机。
[root@localhost ~]# ls /etc/ansible/scripts/
a.sh
[root@localhost ~]# ansible 192.168.183.135 -m copy -a 'src=/etc/ansible/scripts/a.sh dest=/scripts/'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"checksum": "b1e8b2373fb842f384955fec281b3693bfcb3fa6",
"dest": "/scripts/a.sh",
"gid": 0,
"group": "root",
"md5sum": "4f9949a924fcd14ba739da53e5f9aa4c",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:default_t:s0",
"size": 35,
"src": "/root/.ansible/tmp/ansible-tmp-1666418759.211907-2370-63524689625588/source",
"state": "file",
"uid": 0
}
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'ls /scripts/'
192.168.183.135 | CHANGED | rc=0 >>
a.sh
test.sh
9、group
group模块用于在受控机上添加或删除组。
//在受控机上添加一个系统组，其gid为306，组名为mysql
[root@localhost ~]# ansible 192.168.183.135 -m group -a 'name=mysql gid=306 state=present'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"gid": 306,
"name": "mysql",
"state": "present",
"system": false
}
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'grep mysql /etc/group'
192.168.183.135 | CHANGED | rc=0 >>
mysql:x:306:
//删除受控机上的mysql组
[root@localhost ~]# ansible 192.168.183.135 -m group -a 'name=mysql state=absent'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"name": "mysql",
"state": "absent"
}
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'grep mysql /etc/group'
192.168.183.135 | FAILED | rc=1 >>
non-zero return code
10、user
user模块用于管理受控机的用户帐号。
//在受控机上添加一个系统用户，用户名为mysql，uid为306.设置其shell为/sbin/nologin。无家目录
[root@localhost ~]# ansible 192.168.183.135 -m user -a 'name=mysql uid=306 system=yes create_home=no shell=/sbin/nologin state=present'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"comment": "",
"create_home": false,
"group": 306,
"home": "/home/mysql",
"name": "mysql",
"shell": "/sbin/nologin",
"state": "present",
"system": true,
"uid": 306
}
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'grep mysql /etc/passwd'
192.168.183.135 | CHANGED | rc=0 >>
mysql:x:306:306::/home/mysql:/sbin/nologin
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'ls /home'
192.168.183.135 | CHANGED | rc=0 >>
//修改mysql用户的uid为366
[root@localhost ~]# ansible 192.168.183.135 -m user -a 'name=mysql uid=366'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"append": false,
"changed": true,
"comment": "",
"group": 306,
"home": "/home/mysql",
"move_home": false,
"name": "mysql",
"shell": "/sbin/nologin",
"state": "present",
"uid": 366
}
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'grep mysql /etc/passwd'
192.168.183.135 | CHANGED | rc=0 >>
mysql:x:366:306::/home/mysql:/sbin/nologin
//删除受控机上的mysql用户
[root@localhost ~]# ansible 192.168.183.135 -m user -a 'name=mysql state=absent'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"force": false,
"name": "mysql",
"remove": false,
"state": "absent"
}
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'grep mysql /etc/passwd'
192.168.183.135 | FAILED | rc=1 >>
non-zero return code
11、service
service模块用于管理受控机上的服务。
//查看受控机上的vsftpd服务是否启动
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'systemctl is-active vsftpd'
192.168.183.135 | FAILED | rc=3 >>
inactivenon-zero return code
//启动受控机上的vsftpd服务
[root@localhost ~]# ansible 192.168.183.135 -m service -a 'name=vsftpd state=started'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"name": "vsftpd",
"state": "started",
"status": {
"ActiveEnterTimestampMonotonic": "0",
"ActiveExitTimestampMonotonic": "0",
······
//查看受控机上的vsftpd服务是否启动
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'systemctl is-active vsftpd'
192.168.183.135 | CHANGED | rc=0 >>
active
//查看受控机上的vsftpd服务是否开机自动启动
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'systemctl is-enabled vsftpd'
192.168.183.135 | FAILED | rc=1 >>
disablednon-zero return code
//设置受控机上的vsftpd服务开机自动启动
[root@localhost ~]# ansible 192.168.183.135 -m service -a 'name=vsftpd enabled=yes'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"enabled": true,
"name": "vsftpd",
"status": {
"ActiveEnterTimestamp": "Sat 2022-10-22 14:21:50 CST",
······
//查看受控机上的vsftpd服务是否开机自动启动
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'systemctl is-enabled vsftpd'
192.168.183.135 | CHANGED | rc=0 >>
enabled
//停止受控机上的vsftpd服务
[root@localhost ~]# ansible 192.168.183.135 -m service -a 'name=vsftpd state=stopped'
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"name": "vsftpd",
"state": "stopped",
"status": {
"ActiveEnterTimestamp": "Sat 2022-10-22 14:21:50 CST",
······
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'systemctl is-active vsftpd'
192.168.183.135 | FAILED | rc=3 >>
inactivenon-zero return code
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'ss -antl'
192.168.183.135 | CHANGED | rc=0 >>
State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 [::]:22 [::]:*
12、file
专门用来设定文件属性。
force：需要在两种情况下强制创建软链接，一种是源文件不存在，但之后会建立的情况下；另一种是目标软链接已存在，需要先取消之前的软链，然后创建新的软链，有两个选项：yes|no
group：定义文件/目录的属组
mode：定义文件/目录的权限
owner：定义文件/目录的属主
path：必选项，定义文件/目录的路径
recurse：递归的设置文件的属性，只对目录有效
src：要被链接的源文件的路径，只应用于state=link的情况
dest：被链接到的路径，只应用于state=link的情况
state：
=directory：如果目录不存在，创建目录
=file：即使文件不存在，也不会被创建
=link：创建软链接
=hard：创建硬链接
=touch：如果文件不存在，则会创建一个新的文件，如果文件或目录已存在，则更新其最后修改时间
=absent：删除目录、文件或者取消链接文件
//创建文件
[root@localhost ~]# ansible 192.168.183.135 -m file -a "path=/tmp/test state=touch owner=root group=root"
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"dest": "/tmp/test",
"gid": 0,
"group": "root",
"mode": "0644",
"owner": "root",
"secontext": "unconfined_u:object_r:user_tmp_t:s0",
"size": 15,
"state": "file",
"uid": 0
}
//创建目录
[root@localhost ~]# ansible 192.168.183.135 -m file -a "path=/tmp/www state=directory mode=0755"
192.168.183.135 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"gid": 0,
"group": "root",
"mode": "0755",
"owner": "root",
"path": "/tmp/www",
"secontext": "unconfined_u:object_r:user_tmp_t:s0",
"size": 6,
"state": "directory",
"uid": 0
}
//查看
[root@localhost ~]# ansible 192.168.183.135 -m shell -a 'ls -l /tmp'
192.168.183.135 | CHANGED | rc=0 >>
total 4
drwx------. 2 root root 41 Oct 22 14:35 ansible_command_payload_vft3r8x2
drwx------. 3 root root 17 Oct 22 13:06 systemd-private-63c02f80df3d43d3a37bec98b9a03e22-chronyd.service-VjFHIi
-rw-r--r--. 1 root root 15 Oct 22 14:30 test
drwx------. 2 root root 6 Oct 22 13:06 vmware-root_894-2730693566
drwxr-xr-x. 2 root root 6 Oct 22 14:32 www
二、使用ansible临时命令实现LNMP架构
环境说明
| 主机名 | IP地址 | 应用 | 系统 |
|---|---|---|---|
| ansible | 192.168.183.138 | ansible主控机 | centos8 |
| nginx | 192.168.183.135 | nginx受控机 | centos8 |
| mysql | 192.168.183.136 | mysql受控机 | centos8 |
| php | 192.168.183.137 | php受控机 | centos8 |
安装ansible参考文档：常见的自动化运维工具介绍及特点、安装ansible
1、准备工作
修改默认清单文件位置，构建清单
[root@ansible ~]# vim /etc/ansible/ansible.cfg
inventory = /etc/ansible/inventory
[root@ansible ~]# cd /etc/ansible/
[root@ansible ansible]# touch inventory
[root@ansible ansible]# vim inventory
[lnmp]
nginx ansible_user=root ansible_password=runtime
mysql ansible_user=root ansible_password=runtime
php ansible_user=root ansible_password=runtime
[root@ansible ~]# vim /etc/hosts
192.168.183.135 nginx
192.168.183.136 mysql
192.168.183.137 php
//列出lnmp主机组
[root@ansible ~]# ansible lnmp --list-hosts
hosts (3):
nginx
mysql
php
//设置密钥连接
[root@ansible ~]# ssh nginx
[root@ansible ~]# ssh mysql
[root@ansible ~]# ssh php
//测试受控机连通性
[root@ansible ~]# ansible lnmp -m ping
mysql | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
php | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
nginx | SUCCESS => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": false,
"ping": "pong"
}
2、部署nginx
//关闭防火墙和selinux
[root@ansible ~]# ansible nginx -m service -a 'name=firewalld state=stopped enabled=no'
[root@ansible ~]# ansible nginx -a 'setenforce 0'
[root@ansible ~]# ansible nginx -a "sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config"
//创建用户
[root@ansible ~]# ansible nginx -m user -a 'name=nginx system=yes create_home=no shell=/sbin/nologin state=present'
//安装依赖包
[root@ansible ~]# ansible nginx -m yum -a 'name=pcre-devel,openssl,openssl-devel,gd-devel,gcc,gcc-c++,make,wget,vim state=present'
//下载软件包并解压
[root@ansible ~]# ansible nginx -a 'wget http://nginx.org/download/nginx-1.20.2.tar.gz'
[root@ansible ~]# ansible nginx -a 'tar -xf nginx-1.20.2.tar.gz'
//进入目录编译安装
[root@ansible ~]# mkdir -p /etc/ansible/scripts/
[root@ansible ~]# cd /etc/ansible/scripts/
[root@ansible scripts]# vim configure.sh
[root@ansible ~]# cat /etc/ansible/scripts/configure.sh
#!/bin/bash
cd nginx-1.20.2
./configure \
--prefix=/usr/local/nginx \
--user=nginx \
--group=nginx \
--with-debug \
--with-http_ssl_module \
--with-http_realip_module \
--with-http_image_filter_module \
--with-http_gunzip_module \
--with-http_gzip_static_module \
--with-http_stub_status_module \
--http-log-path=/var/log/nginx/access.log \
--error-log-path=/var/log/nginx/error.log && \
make -j $(grep 'processor' /proc/cpuinfo | wc -l) && make install
[root@ansible scripts]# ll
total 4
-rw-r--r--. 1 root root 457 Oct 22 16:21 configure.sh
[root@ansible ~]# ansible nginx -m script -a '/etc/ansible/scripts/configure.sh'
//安装完成
[root@ansible ~]# ansible nginx -a 'ls /usr/local/nginx'
nginx | CHANGED | rc=0 >>
conf
html
logs
sbin
//配置环境变量
[root@ansible ~]# ansible nginx -m shell -a 'echo "export PATH=$PATH:/usr/local/nginx/sbin" > /etc/profile.d/nginx.sh'
[root@ansible ~]# ansible nginx -a 'which nginx'
nginx | CHANGED | rc=0 >>
/usr/local/nginx/sbin/nginx
//启动服务
[root@ansible ~]# cd /etc/ansible/scripts/
[root@ansible ~]# cat /etc/ansible/scripts/nginx_service.sh
#!/bin/bash
cat > /usr/lib/systemd/system/nginx.service << EOF
[Unit]
Description=nginx server daemon
After=network.target
[Service]
Type=forking
ExecStart=/usr/local/nginx/sbin/nginx
ExecStop=/usr/local/nginx/sbin/nginx -s stop
ExecReload=/bin/kill -HUP \$MAINPID
[Install]
WantedBy=multi-user.target
EOF
systemctl daemon-reload
systemctl enable --now nginx
[root@ansible scripts]# ll
total 8
-rw-r--r--. 1 root root 457 Oct 22 16:21 configure.sh
-rw-r--r--. 1 root root 364 Oct 22 16:32 nginx_service.sh
[root@ansible ~]# ansible nginx -m script -a '/etc/ansible/scripts/nginx_service.sh'
[root@ansible ~]# ansible nginx -a 'ss -antl'
nginx | CHANGED | rc=0 >>
State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
LISTEN 0 128 0.0.0.0:80 0.0.0.0:*
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 [::]:22 [::]:*
3、部署mysql
//关闭防火墙和selinux
[root@ansible ~]# ansible mysql -m service -a 'name=firewalld state=stopped enabled=no‘
[root@ansible ~]# ansible mysql -a 'setenforce 0'
[root@ansible ~]# ansible mysql -a "sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config"
//创建用户
[root@ansible ~]# ansible mysql -m user -a 'name=mysql system=yes create_home=no shell=/sbin/nologin state=present'
//安装依赖包
[root@ansible ~]# ansible mysql -m yum -a 'name=ncurses-devel,openssl-devel,openssl,cmake,mariadb-devel,ncurses-compat-libs state=present'
//下载软件包解压重命名
[root@ansible ~]# ansible mysql -a 'wget https://downloads.mysql.com/archives/get/p/23/file/mysql-5.7.38-linux-glibc2.12-x86_64.tar.gz'
[root@ansible ~]# ansible mysql -a 'tar xf mysql-5.7.38-linux-glibc2.12-x86_64.tar.gz -C /usr/local/'
[root@ansible ~]# ansible mysql -a 'mv /usr/local/mysql-5.7.38-linux-glibc2.12-x86_64 /usr/local/mysql'
//修改属主属组
[root@ansible ~]# ansible mysql -a 'chown -R mysql.mysql /usr/local/mysql'
//配置include、man及环境变量
[root@ansible ~]# ansible mysql -a 'ln -s /usr/local/mysql/include /usr/include/mysql'
[root@ansible ~]# ansible mysql -m shell -a 'echo '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.conf'
[root@ansible ~]# ansible mysql -a "sed -i '22a MANDATORY_MANPATH /usr/local/mysql/man' /etc/man_db.conf"
[root@ansible ~]# ansible mysql -m shell -a "echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysql.sh"
[root@ansible ~]# ansible mysql -a 'which mysql'
mysql | CHANGED | rc=0 >>
/usr/local/mysql/bin/mysql
//建立数据存放目录
[root@ansible ~]# ansible mysql -a 'mkdir /opt/data'
[root@ansible ~]# ansible mysql -a 'chown -R mysql.mysql /opt/data'
//初始化数据库
[root@ansible ~]# ansible mysql -a 'mysqld --initialize --user mysql --datadir /opt/data'
mysql | CHANGED | rc=0 >>
2022-10-22T09:07:08.955645Z 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
2022-10-22T09:07:09.140746Z 0 [Warning] InnoDB: New log files created, LSN=45790
2022-10-22T09:07:09.180210Z 0 [Warning] InnoDB: Creating foreign key constraint system tables.
2022-10-22T09:07:09.194516Z 0 [Warning] No existing UUID has been found, so we assume that this is the first time that this server has been started. Generating a new UUID: e86b0a6f-51e8-11ed-8887-000c2907de9b.
2022-10-22T09:07:09.195011Z 0 [Warning] Gtid table is not ready to be used. Table 'mysql.gtid_executed' cannot be opened.
2022-10-22T09:07:09.348005Z 0 [Warning] A deprecated TLS version TLSv1 is enabled. Please use TLSv1.2 or higher.
2022-10-22T09:07:09.348030Z 0 [Warning] A deprecated TLS version TLSv1.1 is enabled. Please use TLSv1.2 or higher.
2022-10-22T09:07:09.348374Z 0 [Warning] CA certificate ca.pem is self signed.
2022-10-22T09:07:09.422073Z 1 [Note] A temporary password is generated for root@localhost: ,C-a.dCcp7-r
[root@ansible ~]# ansible mysql -m shell -a "echo ',C-a.dCcp7-r' > pass"
//生成配置文件启动服务
[root@ansible ~]# cd /etc/ansible/scripts/
[root@ansible ~]# cat /etc/ansible/scripts/mysql_service.sh
#!/bin/bash
cat >> /etc/my.cnf <<EOF
[mysqld]
basedir = /usr/local/mysql
datadir = /opt/data
socket = /tmp/mysql.sock
port = 3306
pid-file = /opt/data/mysql.pid
user = mysql
skip-name-resolve
EOF
cp -a /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
sed -ri 's#^(basedir=).*#\1/usr/local/mysql#g' /etc/init.d/mysqld
sed -ri 's#^(datadir=).*#\1/opt/data#g' /etc/init.d/mysqld
chmod +x /etc/init.d/mysqld
cat > /usr/lib/systemd/system/mysqld.service <<EOF
[Unit]
Description=mysqld server daemon
After=network.target
[Service]
Type=forking
ExecStart=/etc/init.d/mysqld start
ExecStop=/etc/init.d/mysqld stop
ExecReload=/bin/kill -HUP \$MAINPID
[Install]
WantedBy=multi-user.target
EOF
systemctl daemon-reload
systemctl enable --now mysqld
[root@ansible scripts]# ll
total 12
-rw-r--r--. 1 root root 457 Oct 22 16:21 configure.sh
-rw-r--r--. 1 root root 759 Oct 22 17:12 mysql_service.sh
-rw-r--r--. 1 root root 364 Oct 22 16:32 nginx_service.sh
[root@ansible ~]# ansible mysql -m script -a '/etc/ansible/scripts/mysql_service.sh'
[root@ansible ~]# ansible mysql -a 'ss -antl'
mysql | CHANGED | rc=0 >>
State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 80 *:3306 *:*
LISTEN 0 128 [::]:22 [::]:*
4、部署php
//关闭防火墙和selinux
[root@ansible ~]# ansible php -m service -a 'name=firewalld state=stopped enabled=no'
[root@ansible ~]# ansible php -a 'setenforce 0'
[root@ansible ~]# ansible php -a "sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config"
//配置脚本启动php
[root@ansible ~]# cd /etc/ansible/scripts/
[root@ansible ~]# cat /etc/ansible/scripts/php.sh
#!/bin/bash
#配置yum源
curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo && \
sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
#安装依赖包
yum -y install epel-release && \
yum -y install openssl-devel pcre-devel expat-devel libtool gcc gcc-c++ wget make ncurses-devel openssl cmake libxm12 libxm12-devel bzip2 bzip2-devel libcurl libcurl-devel libicu-devel libjpeg libjpeg-devel libpng libpng-devel openldap-devel freetype freetype-devel gmp gmp-devel readline readline-devel libxslt libxslt-devel php-mysqlnd libsqlite3x-devel libzip-devel https://dl.rockylinux.org/pub/rocky/9/CRB/x86_64/os/Packages/o/oniguruma-devel-6.9.6-1.el9.5.x86_64.rpm http://mirror.stream.centos.org/9-stream/CRB/x86_64/os/Packages/libzip-devel-1.7.3-7.el9.x86_64.rpm http://mirror.centos.org/centos/8-stream/PowerTools/x86_64/os/Packages/oniguruma-devel-6.8.2-2.el8.x86_64.rpm --allowerasing --skip-broken --nobest
#下载软件包解压编译安装
wget https://www.php.net/distributions/php-8.1.11.tar.gz && \
tar xf php-8.1.11.tar.gz && \
cd php-8.1.11
./configure --prefix=/usr/local/php8 --with-config-file-path=/etc --enable-fpm --enable-inline-optimization --disable-debug --disable-rpath --enable-shared --enable-soap --with-openssl --enable-bcmath --with-iconv --with-bz2 --enable-calendar --with-curl --enable-exif --enable-ftp --enable-gd --with-jpeg --with-zlib-dir --with-freetype --with-gettext --enable-json --enable-mbstring --enable-pdo --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd --with-readline --enable-shmop --enable-simplexml --enable-sockets --with-zip --enable-mysqlnd-compression-support --with-pear --enable-pcntl --enable-posix && \
make && make install
#配置环境变量
echo 'export PATH=/usr/local/php8/bin:$PATH' > /etc/profile.d/php8.sh
#配置启动
cp php.ini-production /etc/php.ini
y
cp sapi/fpm/init.d.php-fpm /etc/init.d/php-fpm
chmod +x /etc/init.d/php-fpm
cp /usr/local/php8/etc/php-fpm.conf.default /usr/local/php8/etc/php-fpm.conf
cp /usr/local/php8/etc/php-fpm.d/www.conf.default /usr/local/php8/etc/php-fpm.d/www.conf
cat > /usr/lib/systemd/system/php.service <<EOF
[Unit]
Description=php server daemon
After=network.target
[Service]
Type=forking
ExecStart=/etc/init.d/php-fpm start
ExecStop=/etc/init.d/php-fpm stop
ExecReload=/bin/kill -HUP $MAINPID
[Install]
WantedBy=multi-user.target
EOF
systemctl daemon-reload
systemctl enable --now php
[root@ansible scripts]# ll
total 16
-rw-r--r--. 1 root root 457 Oct 22 16:21 configure.sh
-rw-r--r--. 1 root root 759 Oct 22 17:12 mysql_service.sh
-rw-r--r--. 1 root root 364 Oct 22 16:32 nginx_service.sh
-rw-r--r--. 1 root root 2498 Oct 22 17:31 php.sh
[root@ansible ~]# ansible php -m script -a '/etc/ansible/scripts/php.sh' //编译时间稍长，等待即可
[root@ansible ~]# ansible php -a 'ss -antl'
php | CHANGED | rc=0 >>
State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
LISTEN 0 128 127.0.0.1:9000 0.0.0.0:*
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 [::]:22 [::]:*
5、配置php测试页面
nginx受控机配置
//修改nginx配置文件
[root@ansible ~]# ansible nginx -a "sed -i '45 s/index index.html index.htm;/index index.php index.html index.htm;/g' /usr/local/nginx/conf/nginx.conf"
[root@ansible ~]# ansible nginx -a "sed -i '65,71 s/#/ /' /usr/local/nginx/conf/nginx.conf"
[root@ansible ~]# ansible nginx -a "sed -i '67 s/fastcgi_pass 127.0.0.1:9000;/fastcgi_pass 192.168.183.137:9000;/g' /usr/local/nginx/conf/nginx.conf"
[root@ansible ~]# ansible nginx -a "sed -i '69 s/\/scripts/\/var\/www/' /usr/local/nginx/conf/nginx.conf"
//检查语法
[root@ansible ~]# ansible nginx -a 'nginx -t'
nginx | CHANGED | rc=0 >>
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
//重启服务
[root@ansible ~]# ansible nginx -m service -a 'name=nginx state=restarted'
//创建index.php文件
[root@ansible ~]# ansible nginx -m shell -a "echo ' /usr/local/nginx/html/index.php"
nginx | CHANGED | rc=0 >>
[root@ansible ~]# ansible nginx -m shell -a "echo ' phpinfo();' >> /usr/local/nginx/html/index.php"
nginx | CHANGED | rc=0 >>
[root@ansible ~]# ansible nginx -m shell -a "echo '?>' >> /usr/local/nginx/html/index.php"
nginx | CHANGED | rc=0 >>
php受控机配置
//监听php，运行nginx访问
[root@ansible ~]# ansible php -m shell -a "echo 'listen = 192.168.183.137:9000' >> /usr/local/php8/etc/php-fpm.d/www.conf"
php | CHANGED | rc=0 >>
[root@ansible ~]# ansible php -m shell -a "echo ';listen.allowed_clients = 192.168.183.135' >> /usr/local/php8/etc/php-fpm.d/www.conf"
php | CHANGED | rc=0 >>
//创建index.php文件
[root@ansible ~]# ansible php -a 'mkdir /var/www'
[root@ansible ~]# ansible php -m shell -a "echo ' /var/www/index.php"
php | CHANGED | rc=0 >>
[root@ansible ~]# ansible php -m shell -a "echo ' phpinfo();' >> /var/www/index.php"
php | CHANGED | rc=0 >>
[root@ansible ~]# ansible php -m shell -a "echo '?>' >> /var/www/index.php"
php | CHANGED | rc=0 >>
//重启服务
[root@ansible ~]# ansible php -m service -a 'name=php state=restarted'
[root@ansible ~]# ansible php -a 'ss -antl'
php | CHANGED | rc=0 >>
State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
LISTEN 0 128 192.168.183.137:9000 0.0.0.0:*
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 [::]:22 [::]:*
6、访问php测试页面
