ansible 文件管理模块
ansible 文件管理模块
一 stat模块
检查文件状态使用，模块获取文件的状态等信息，类似与linux中的STAT命令可以用来获取文件的属主、可读/写、文件状态等信息
[root@node1 ansible]# stat lookup_files_ex.yml
File: ‘lookup_files_ex.yml’
Size: 125 Blocks: 8 IO Block: 4096 regular file
Device: fd00h/64768d Inode: 69018922 Links: 1
Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2020-04-30 18:01:52.947596173 +0800
Modify: 2020-04-30 18:01:51.624591268 +0800
Change: 2020-04-30 18:01:51.626591276 +0800
Birth: -
[root@node1 ansible]# vim files_stat_ex.yml
- hosts: demo2.example.com
gather_facts: no
tasks:
- name: stat /rtc/fstab
stat:
path: /etc/fstab
register: fstab_stat
- name: print fstab_stat
debug:
msg: "{{ fstab_stat }}"
[root@node1 ansible]# ansible-playbook files_stat_ex.yml
TASK [print fstab_stat] ***********************************************************************************************************************
ok: [demo2.example.com] => {
"msg": {
"changed": false,
"failed": false,
"stat": {
"atime": 1588162552.5214317,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "8e1580bbd25809a2232e28adba26735dad99cc06",
"ctime": 1565620911.8073654,
"dev": 64768,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 33554498,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0644",
"mtime": 1565620660.3251472,
"nlink": 1,
"path": "/etc/fstab",
"pw_name": "root",
"readable": true,
"rgrp": true,
"roth": true,
"rusr": true,
"size": 465,
"uid": 0,
"version": "598828928",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
}
blockinfile模块
blockinfile 是 Ansible 的一个非常实用的模块，和单行替换模块 lineinfile 类似，但是可以帮助我们在文件中插入一段文本。
[root@node1 ansible]# vim files/test.html
<html>
<head>
</head>
<body>
</body>
</html>
[root@node1 ansible]# vim blockfile_ex.yml
- name: blockinfile module test
hosts: demo3.example.com
tasks:
- name: install httpd
yum:
name: httpd
state: installed
- name: copy test.html to dest
copy:
src: files/test.html
dest: /var/www/html/test.html
- name: add block
blockinfile:
marker: "<!--{mark} ANSIBLE MANAGED BLOCK -->"
insertafter: "<body>"
path: /var/www/html/test.html
block:
<h1>Welcome to {{ ansible_hostname}}</h1>
<p>Last update on {{ ansible_date_time.iso8601}} </p>
- name: start service
service:
name: httpd
state: started
执行
[root@node1 ansible]# ansible-playbook blockfile_ex.yml
访问
lineinfile模块
在大多数时候，我们在linux上的操作，就是针对文件的操作，通过配置管理工具对配置文件作统一的配置修改是一个非常酷的功能。
下面是官方针对该模块的说明：
lineinfile - Ensure a particular line is in a file, or replace an existing line using a back-referenced regular expression
简单讲，这个模块就是针对一个文件中行内容的操作。
下面我们详细说一说其具体可以做的事情。
修改匹配行
修改selinux示例
[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /etc/selinux/config |grep ^SELINUX="
[root@node1 ansible]# vim edit_selinux.yml
- hosts: demo3.example.com
gather_facts: no
tasks:
- name: disable selinux
lineinfile:
path: /etc/selinux/config
regex: ^SELINUX=
line: SELINUX=disabled
[root@node1 ansible]# ansible-playbook edit_selinux.yml
[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /etc/selinux/config |grep ^SELINUX="
demo3.example.com | CHANGED | rc=0 >>
SELINUX=disabled
在node3节点写入一个文件
[root@node3 ~]# vim /tmp/test.conf
Listen 127.0.0.1:80
Listen 80
Port
插入匹配行
[root@node1 ansible]# vim lineinfile.yml
- hosts: demo3.example.com
gather_facts: no
tasks:
- name: inser after
lineinfile:
path: /tmp/test.conf
insertafter: "^Listen 80" #在之后插入
line: "aaaaa"
- name: inser befor
lineinfile:
path: /tmp/test.conf
insertbefore: "^Listen 80" #之前插入
line: "befor bbbb"
执行
[root@node1 ansible]# ansible-playbook lineinfile.yml
[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /tmp/test.conf"
demo3.example.com | CHANGED | rc=0 >>
Listen 127.0.0.1:80
befor bbbb
Listen 80
aaaaa
Port
删除匹配行
[root@node1 ansible]# vim lineinfile.yml
- hosts: demo3.example.com
gather_facts: no
vars:
testfile: "/tmp/test.conf"
tasks:
- name: inser after
lineinfile:
path: "{{testfile}}"
insertafter: "^Listen 80"
line: "aaaaa"
- name: inser befor
lineinfile:
path: "{{ testfile }}"
insertbefore: "^Listen 80"
line: "befor bbbb"
- name: delete line
lineinfile:
path: "{{ testfile }}"
regex: "^Port"
state: absent
[root@node1 ansible]# ansible-playbook lineinfile.yml
[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /tmp/test.conf"
demo3.example.com | CHANGED | rc=0 >>
Listen 127.0.0.1:80
befor bbbb
Listen 80
aaaaa
文件存在则添加一行内容
往/etc/hosts里添加一行10.1.61.131 test.dz11.com（多次执行，不会重复添加），示例如下：
- name: add a line
lineinfile:
path: /etc/hosts
line: '10.1.61.131 test.dz11.com'
如果有匹配的行则修改该行，如果不匹配则添加
[root@node1 ansible]# vim lineinfile.yml
- hosts: demo3.example.com
gather_facts: no
vars:
testfile: "/tmp/test.conf"
tasks:
- name: inser after
lineinfile:
path: "{{testfile}}"
insertafter: "^Listen 80"
line: "aaaaa"
- name: inser befor
lineinfile:
path: "{{ testfile }}"
insertbefore: "^Listen 80"
line: "befor bbbb"
- name: delete line
lineinfile:
path: "{{ testfile }}"
regex: "^Port"
state: absent
- name: regex
lineinfile:
path: "{{testfile}}"
regex: "^Listen 8080 "
line: "Listen 809090 "
[root@node1 ansible]# ansible-playbook lineinfile.yml
[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /tmp/test.conf"
demo3.example.com | CHANGED | rc=0 >>
Listen 127.0.0.1:80
befor bbbb
Listen 80
aaaaa
Listen 809090
参数backrefs，backup说明
- backup： 是否备份原文件，默认为no
- backrefs：
- 当backrefs为no时，如果regex没有匹配到行，则添加一行，如果Regx匹配到行，则修改该行
- 当backrefs为yes时，如果regex没有匹配到行，则保持原文件不变，如果regex匹配到行，则修改该行
- backrefs默认为no，所以上面那个示例中，我们没有配置backrefs，而默认没有匹配，则修改。
使用validate验证文件是否正确修改
在一些场景下，我们修改完文件后，需要对文件做一下测试，用以检查文件修改之后，是否能正常运行。如http.conf、nginx.conf等，一旦改错，而不加以测试，可能会直接导致http服务挂掉。
可以使用validate关键字，在修改完成以后，对文件执行检测：
- name: test validate
lineinfile:
dest: /etc/sudoers
state: present
regexp: '^%ADMIN ALL='
line: '%ADMIN ALL=(ALL)'
validate: 'visudo -cf %s' #这里就是执行检测，比如nginx就可以写入nginx -t检测配置文件
tags:
- testsudo
