ansible的YAML操作

参考：https://yaml.org/

 

ansible中使用的yaml基本元素

  变量

  Inventory

  条件测试

  迭代

 

playbook的组成结构

  Inventory

  Modules

  Ad Hoc Commands

  Playbook：

     tasks：

     variable：

     template：

     handlers：

     roles：

    

   基本结构：

     - hosts: 192.168.19.139

       remote_user: root

       roles:

       - websrs

 

1、创建nginx用户组和用户，使用最简单的playbooks。

[root@linux-host1 ansibles]# vim nginx.yml

- hosts: websrs

  remote_user: root

  tasks:

  - name: create nginx group

    group: name=nginx system=yes gid=2005

  - name: create nginx user

    user: name=nginx uid=2008 group=nginx system=yes

 

- hosts: dbsrs

  remote_user: root

  tasks:

  - name: copy file to dbsrs

    copy: src=/etc/inittab dest=/tmp/inittab.ans

[root@linux-host1 ansibles]# ansible-playbook nginx.yml

 [root@master ~]# tail -1 /etc/group

nginx:x:2005:

[root@master ~]# tail -1 /etc/passwd

nginx:x:2008:2005:Nginx web server:/var/lib/nginx:/sbin/nologin

 

[root@linux-host1 ~]# cd /root/ansibles/httpds

[root@linux-host1 httpds]# mkdir templates

[root@linux-host1 httpds]# grep '{{' templates/httpd.conf.j2

Listen {{ http_port }}

ServerName {{ ansible_fqdn }}

[root@linux-host1 httpds]# cat /etc/ansible/hosts

[websrs]

192.168.19.132 http_port=81

192.168.19.139 http_port=82

[root@linux-host1 httpds]# cat apache.yml

- hosts: websrs

  remote_user: root

  vars:

  - package: httpd

  - service: httpd

  tasks:

  - name: install httpd package

    yum: name={{ package }} state=latest

  - name: install configuration file for httpd

    template: src=/root/ansibles/httpds/templates/httpd.conf.j2 dest=/etc/httpd/conf/httpd.conf

    notify:

    - restart httpd

  - name: start httpd

    service: enabled=true name={{ service }} state=started

 

  handlers:

  - name: restart httpd

    service: name=httpd state=restarted

[root@linux-host1 httpds]#

Notify跟handler匹配结合使用

 

验证：

[root@master ~]# curl -I 192.168.19.132:81

[root@master ~]# curl -I 192.168.19.139:82

 

只想运行某一个task，没必要每次都执行。

 

每个都可以打标记。

  

role避免代码多次调用

[root@linux-host1 ansibles]# mkdir -pv ansible_playbooks/roles/{websrs,dbsrs}/{templates,files,tasks,meta,handlers,vars}

[root@linux-host1 ansibles]# tree ansible_playbooks/

 

[root@linux-host1 ansibles]# cd ansible_playbooks/roles/websrs/

[root@linux-host1 websrs]# cp /etc/httpd/conf/httpd.conf files/

[root@linux-host1 websrs]# cd ../../

[root@linux-host1 ansible_playbooks]# grep "888" roles/websrs/files/httpd.conf

Listen 888

[root@linux-host1 ansible_playbooks]# cat roles/websrs/tasks/main.yml

- name: install httpd packages

  yum: name=httpd

- name: install configuration file

  copy: src=httpd.conf dest=/etc/httpd/conf/httpd.conf

  tags:

  - conf

  notify:

  - restart httpd

- name: start httpd

  service: name=httpd state=started

[root@linux-host1 ansible_playbooks]# cat roles/websrs/handlers/main.yml

- name: restart httpd

  service: name=httpd state=restarted

[root@linux-host1 ansible_playbooks]#

 

[root@linux-host1 ansible_playbooks]# cat site.yml

- hosts: websrs

  remote_user: root

  roles:

  - websrs

[root@linux-host1 ansible_playbooks]#

[root@linux-host1 ansible_playbooks]# ansible-playbook site.yml

[root@master ~]# netstat  -lnpt|grep http

tcp6       0      0 :::888             :::*           LISTEN      5239/httpd

websrs部分任务完成，验证通过。

 

每一个角色能够独立应用。

[root@linux-host1 ~]# yum install redis -y

安装mariadb-server只是为了获得/etc/my.cnf文件。

[root@linux-host1 ansible_playbooks]# cd roles/dbsrs/

 [root@linux-host1 ansible_playbooks]# vim site.yml

 - hosts: 192.168.19.139

  remote_user: root
  roles:
  - websrs

- hosts: 192.168.19.130
  remote_user: root
  roles:
  - dbsrs

- hosts: 192.168.19.132
  remote_user: root
  roles:
  - websrs
  - dbsrs 

[root@linux-host1 ansible_playbooks]# cat roles/dbsrs/tasks/main.yml

- name: install redis-server packages

  yum: name=redis state=latest

- name: install configuration file

  copy: src=redis.conf dest=/etc/redis.conf

  tags:

  - myconf

  notify:

  - restart redis

- name: start redis

  service: name=redis enabled=true state=started

[root@linux-host1 ansible_playbooks]# cat roles/dbsrs/handlers/main.yml

- name: restart redis

  service: name=redis state=restarted

 启动playbook项目，

 

[root@master ~]# lsof -i:6379

COMMAND    PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME

redis-ser 8649 redis    4u  IPv4  64980      0t0  TCP *:6379 (LISTEN)

 完成playbook应用。