ansible的安装与简单使用

1.安装前

需要epel的repo文件以及2.6以上的python

可以在阿里镜像站下载到

2.开始安装

我这里只有两台虚拟机，一台作为控制端，一台作为被控端

控制端：192.168.10.144（之后称主节点）

被控端：192.168.10.100（之后称node）

只需要主节点安装即可

yum  install ansible -y

已安装:
  ansible.noarch 0:2.9.27-1.el7                                                                                 

作为依赖被安装:
  python-babel.noarch 0:0.9.6-8.el7                     python-cffi.x86_64 0:1.6.0-5.el7                        
  python-enum34.noarch 0:1.0.4-1.el7                    python-idna.noarch 0:2.4-1.el7                          
  python-jinja2.noarch 0:2.7.2-4.el7                    python-markupsafe.x86_64 0:0.11-10.el7                  
  python-paramiko.noarch 0:2.1.1-9.el7                  python-ply.noarch 0:3.4-11.el7                          
  python-pycparser.noarch 0:2.14-1.el7                  python2-cryptography.x86_64 0:1.7.2-2.el7               
  python2-httplib2.noarch 0:0.18.1-3.el7                python2-jmespath.noarch 0:0.9.4-2.el7                   
  python2-pyasn1.noarch 0:0.1.9-7.el7                   sshpass.x86_64 0:1.06-2.el7                             

完毕！

3.简单配置

 

1.首先使两台机子能够互相进行免密登录ssh

[root@gjm ~]# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:8E96siNVumn/urJKos0ltBExM9GqJ0LbfZHc/BarzJo root@gjm.example
The key's randomart image is:
+---[RSA 2048]----+
|    *o           |
|     =.          |
|    ..o +        |
| .  .. * o..     |
|. o.+   Soo o    |
|..oo.+ .o+ +     |
| . o+ +.=o=      |
|   + =. BB       |
|  . o .E+=++.    |
+----[SHA256]-----+
[root@gjm ~]# ssh-copy-id root@192.168.10.100
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host '192.168.10.100 (192.168.10.100)' can't be established.
ECDSA key fingerprint is SHA256:iZ5LwrGXD32NgULBNDLIzhNxcVy69ByUW1Pd8jI1Uyg.
ECDSA key fingerprint is MD5:f1:ae:be:b5:31:ad:e9:d7:83:f8:d6:44:95:19:3d:0a.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.10.100's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@192.168.10.100'"
and check to make sure that only the key(s) you wanted were added.

在node端进行相同操作

[root@node1 ~]# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:s7x/UpcNRgf5iPqTUvjXUjCYrprMZPUdJX5zA+sNeVY root@node1
The key's randomart image is:
+---[RSA 2048]----+
|              .o |
|              o .|
|             *.+E|
|            +.Xoo|
|        S .+ =o@o|
|       . +o.=.Bo*|
|        =  *.+.+ |
|       = o+ * o .|
|        *o.+ o . |
+----[SHA256]-----+
[root@node1 ~]# 
[root@node1 ~]# ssh-copy-id root@192.168.10.144
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host '192.168.10.144 (192.168.10.144)' can't be established.
ECDSA key fingerprint is SHA256:PIIQUgz5sGZFeblv8JY41pekowBYi8LDTUUkdm3Gc9o.
ECDSA key fingerprint is MD5:34:fc:ba:e8:19:a1:74:30:32:e7:fa:b2:e3:87:f5:ed.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.10.144's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@192.168.10.144'"
and check to make sure that only the key(s) you wanted were added.

2.添加两台机子的域名解析

主节点：

[root@gjm ~]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.10.100 node1
192.168.10.144 gjm

node：

[root@node1 ~]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.10.100 node1
192.168.10.144 gjm

3.配置ansible hosts文件

[all]
node1
gjm

这里中括号代表一个主机组

下面代表主机组所包括的主机名

这样设置之后，运行playbook就可以同时在node1和gjm两台机子上处理事务了

另外这里的hosts文件是ansible默认的路径，当然也可以自己另外新建一个，只是在运行anisble命令的时候需要加上-i参数指明hosts文件的路径才可以

4.一些简单的ansible使用（ad-hoc）

ansible -h
Usage: ansible <host-pattern> [options]
-a MODULE_ARGS   #模块参数
-C, --check  #检查语法
-f FORKS #并发
--list-hosts #列出主机列表
-m MODULE_NAME #模块名字
-o 使用精简的输出

1.ansible all  -a  ‘ls’

使用默认的command模块，查看所有主机当前文件和目录

2. ansible all -m ping

[root@gjm ~]# ansible all -m ping
node1 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": false, 
    "ping": "pong"
}
gjm | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python"
    }, 
    "changed": false, 
    "ping": "pong"
}

 

5. ansible-playbook

---
- hosts: all  #指定的主机组
  vars:　　　　#定义变量
    http_port: 80   #变量
    max_clients: 200
  remote_user: root  #远程登录用户
  tasks:       #一个任务的开始
  - name: ensure apache is at the latest version      #任务的名字
    yum:             #yum模块
      pkg: httpd         #软件包名
      state: latest      #软件版本
  - name: write the apache config file
    template:        #template模板
          src: /srv/httpd.j2    #模板文件的位置
          dest: /etc/httpd.conf   #目标位置
    notify:        #与handlers一起使用，定义了一个动作action来触发下面handlers的执行
    - restart apache   #必须要和handlers的name一致
  - name: ensure apache is running
    service:       #service模块
         name: httpd   #服务名
         state: started   #指定服务的状态
  handlers:
    - name: restart apache
      service:
        name: httpd
        state: restarted

示例2：

---
- hosts: all
  remote_user: root
  vars:
    http_port: 8080
  tasks:
    - name: create new file  #创建新文件
      file:  #file模块
        name: /tmp/playtest.txt   #需要创建的路径和文件名
        state: touch      #需要执行的操作（file代表拷贝后是文件|link代表最后是个软链接|directory代表文件夹|hard是硬链接|touch代表创建一个空文件|absent代表删除）
    - name: create new user    
      user:   #user模块
        name: test02   #用户名
        shell: /sbin/nologin  #使用的shell解释器
    - name: install package
      yum:
        name: httpd
        state: latest
    - name: config httpd
      template:
            src: /etc/httpd/conf/httpd.conf
            dest: /etc/httpd/conf/httpd.conf
      notify:
        - restart apache
    - name: copy index.html
      copy:   #copy模块
        src: /var/www/html/index.html   #已有文件的路径
        dest: /var/www/html/index.html  #目标路径
    - name: start httpd
      service: 
           name: httpd
           state: started
  handlers:
    - name: restart apache
      service: 
           name: httpd
           state: restarted