选项:node
chdir 在运行命令以前,先切换到指定目录:mysql
[root@web1 ~]# ansible web -m command -a "ls -l chdir=/tmp" 192.168.1.21 | SUCCESS | rc=0 >> total 168 drwx------ 2 root root 4096 Sep 20 09:33 ansible_UaZm9Y -rw-------. 1 root root 95 Jul 26 04:15 crontab.O7izOx drwxr-xr-x 3 root root 4096 Aug 12 21:09 pear -rw-------. 1 root root 0 Jul 26 03:49 yum.log -rw------- 1 root root 67800 Jul 27 21:35 yum_save_tx-2017-07-27-21-35n2gP71.yumtx -rw-rw-r-- 1 zabbix zabbix 81445 Aug 12 14:42 zabbix_agentd.log -rw-rw-r-- 1 zabbix zabbix 5 Aug 12 08:37 zabbix_agentd.pid 192.168.1.22 | SUCCESS | rc=0 >> total 64 drwx------ 2 root root 4096 Sep 20 09:33 ansible__iQSmn -rw-------. 1 root root 95 Jul 26 04:15 crontab.O7izOx srwxrwxrwx 1 mysql mysql 0 Sep 20 08:38 mysql.sock drwxr-xr-x 3 root root 4096 Aug 13 10:42 pear -rw-r--r-- 1 root root 0 Sep 20 09:30 test -rw-------. 1 root root 0 Jul 26 03:49 yum.log -rw-rw-r-- 1 zabbix zabbix 48406 Aug 12 14:41 zabbix_agentd.log
creates 指定文件(目录)名,若是文件存在,就不执行命令。ios
[root@web1 ~]# ansible web -m command -a "ls -l /tmp creates=/tmp/test" 192.168.1.21 | SUCCESS | rc=0 >> total 168 drwx------ 2 root root 4096 Sep 20 09:37 ansible_PO0TDu -rw-------. 1 root root 95 Jul 26 04:15 crontab.O7izOx drwxr-xr-x 3 root root 4096 Aug 12 21:09 pear -rw-------. 1 root root 0 Jul 26 03:49 yum.log -rw------- 1 root root 67800 Jul 27 21:35 yum_save_tx-2017-07-27-21-35n2gP71.yumtx -rw-rw-r-- 1 zabbix zabbix 81445 Aug 12 14:42 zabbix_agentd.log -rw-rw-r-- 1 zabbix zabbix 5 Aug 12 08:37 zabbix_agentd.pid 192.168.1.22 | SUCCESS | rc=0 >> skipped, since /tmp/test exists
removes 后面指定一个文件(目录)名,若是指定的文件(目录)不存在,则不运行命令。nginx
[root@web1 ~]# ansible web -m command -a "ls -l /tmp removes=/tmp/test" 192.168.1.21 | SUCCESS | rc=0 >> skipped, since /tmp/test does not exist 192.168.1.22 | SUCCESS | rc=0 >> total 64 drwx------ 2 root root 4096 Sep 20 09:38 ansible_PC7a8Y -rw-------. 1 root root 95 Jul 26 04:15 crontab.O7izOx srwxrwxrwx 1 mysql mysql 0 Sep 20 08:38 mysql.sock drwxr-xr-x 3 root root 4096 Aug 13 10:42 pear -rw-r--r-- 1 root root 0 Sep 20 09:30 test -rw-------. 1 root root 0 Jul 26 03:49 yum.log -rw-rw-r-- 1 zabbix zabbix 48406 Aug 12 14:41 zabbix_agentd.log
在远程主机上运行本地脚本web
[root@web1 shell.sh]# vim test.sh #!/bin/bash echo "hello world!" ~ [root@web1 shell.sh]# ansible web -m script -a "test.sh" 192.168.1.21 | SUCCESS => { "changed": true, "rc": 0, "stderr": "Shared connection to 192.168.1.21 closed.\r\n", "stdout": "hello world!\r\n", "stdout_lines": [ "hello world!" ] } 192.168.1.22 | SUCCESS => { "changed": true, "rc": 0, "stderr": "Shared connection to 192.168.1.22 closed.\r\n", "stdout": "hello world!\r\n", "stdout_lines": [ "hello world!" ] }
creates和removes参数和command模块的这两个参数相似正则表达式
[root@web1 shell.sh]# ansible web -m script -a "/root/shell.sh/test.sh creates=/tmp/test" 192.168.1.22 | SKIPPED 192.168.1.21 | SUCCESS => { "changed": true, "rc": 0, "stderr": "Shared connection to 192.168.1.21 closed.\r\n", "stdout": "hello world!\r\n", "stdout_lines": [ "hello world!" ] } [root@web1 shell.sh]# ansible web -m script -a "/root/shell.sh/test.sh removes=/tmp/test" 192.168.1.21 | SKIPPED 192.168.1.22 | SUCCESS => { "changed": true, "rc": 0, "stderr": "Shared connection to 192.168.1.22 closed.\r\n", "stdout": "hello world!\r\n", "stdout_lines": [ "hello world!" ] }
在远程节点上执行命令,也能够执行一个shell脚本,可是该脚本必须在远程节点上存在。sql
chdir 、creates、removes、command模块的参数同样。shell
[root@web1 shell.sh]# ansible web -m shell -a "echo $HOME" 192.168.1.21 | SUCCESS | rc=0 >> /root 192.168.1.22 | SUCCESS | rc=0 >> /root [root@web1 shell.sh]# ansible web -m shell -a "echo $HOME removes=/tmp/test" 192.168.1.21 | SUCCESS | rc=0 >> skipped, since /tmp/test does not exist 192.168.1.22 | SUCCESS | rc=0 >> /root [root@web1 shell.sh]# ansible web -m shell -a "/root/shell.sh/test.sh removes=/tmp/test" 192.168.1.21 | SUCCESS | rc=0 >> skipped, since /tmp/test does not exist #执行失败是由于远程主机上,并无这个脚本。 192.168.1.22 | FAILED | rc=127 >> /bin/sh: /root/shell.sh/test.sh: No such file or directory
复制本地文件到远程路径下。vim
backup 可选参数,若是源文件改变。就为目标文件建立一个备份文件,给备份文件添加一个时间戳信息,值为yes或者no,默认为no。缓存
[root@web1 shell.sh]# ansible web -m copy -a "src=test.sh dest=/root/" 192.168.1.21 | SUCCESS => { "changed": true, "checksum": "f3f7435d0a20eb859ff4b97bfb67c594fa71cf8c", "dest": "/root/test.sh", "gid": 0, "group": "root", "md5sum": "e9f6c05023d61dba208370895b7ebf87", "mode": "0644", "owner": "root", "size": 32, "src": "/root/.ansible/tmp/ansible-tmp-1505874564.52-157402683765598/source", "state": "file", "uid": 0 } 192.168.1.22 | SUCCESS => { "changed": true, "checksum": "f3f7435d0a20eb859ff4b97bfb67c594fa71cf8c", "dest": "/root/test.sh", "gid": 0, "group": "root", "md5sum": "e9f6c05023d61dba208370895b7ebf87", "mode": "0644", "owner": "root", "size": 32, "src": "/root/.ansible/tmp/ansible-tmp-1505874564.65-69782187734750/source", "state": "file", "uid": 0 } #在为目标文件建立一个备份文件。 [root@web1 shell.sh]# echo "hello" >>test.sh [root@web1 shell.sh]# ansible web -m copy -a "src=test.sh dest=/root/shell/ backup=yes" 192.168.1.22 | SUCCESS => { "backup_file": "/root/shell/test.sh.12903.2017-09-20@10:46:50~", "changed": true, "checksum": "cb613f058ae5f2a3e326da2a3343cbfbdd14e62d", "dest": "/root/shell/test.sh", "gid": 0, "group": "root", "md5sum": "e68983f2b04c89ead4afb061ad1313b0", "mode": "0644", "owner": "root", "size": 38, "src": "/root/.ansible/tmp/ansible-tmp-1505875610.03-205491280550072/source", "state": "file", "uid": 0 } 192.168.1.21 | SUCCESS => { "backup_file": "/root/shell/test.sh.2627.2017-09-20@10:46:50~", "changed": true, "checksum": "cb613f058ae5f2a3e326da2a3343cbfbdd14e62d", "dest": "/root/shell/test.sh", "gid": 0, "group": "root", "md5sum": "e68983f2b04c89ead4afb061ad1313b0", "mode": "0644", "owner": "root", "size": 38, "src": "/root/.ansible/tmp/ansible-tmp-1505875610.11-210337191627097/source", "state": "file", "uid": 0 }
directory_mode 当递归复制的时候,为所建立的目录设置权限。若是没有指定则使用系统默认的权限。该参数只影响新建立的目录,不会影响已经存在的目录。
[root@web1 ~]# ansible web -m copy -a "src=/root/shell.sh/ dest=/root/shell.sh/ directory_mode=0777" 192.168.1.21 | SUCCESS => { "changed": true, "dest": "/root/shell.sh/", "src": "/root/shell.sh" } [root@localhost ~]# ll -d shell.sh drwxrwxrwx 2 root root 4096 Sep 20 14:33 shell.sh
owner 设置文件或者目录的全部者
[root@web1 ~]# ansible web -m copy -a "src=/root/shell.sh/ dest=/root/shell.sh/ group=jiajie" 192.168.1.21 | SUCCESS => { "changed": true, "dest": "/root/shell.sh/", "src": "/root/shell.sh" } [root@localhost shell.sh]# ll total 16 -rw-r--r-- 1 root jiajie 3897 Sep 20 14:33 config_install_lampV2.sh -rw-r--r-- 1 root jiajie 139 Sep 20 14:33 ipvsadm.save -rw-r--r-- 1 root jiajie 577 Sep 20 14:33 ssh_scp.sh -rw-r--r-- 1 root jiajie 38 Sep 20 14:33 test.sh # ansible web -m copy -a "src=/root/shell.sh/ dest=/root/shell.sh/ group=jiajie mode=0755" 192.168.1.21 | SUCCESS => { "changed": true, "dest": "/root/shell.sh/", "src": "/root/shell.sh" } [root@localhost shell.sh]# ll total 16 -rwxr-xr-x 1 root jiajie 3897 Sep 20 14:33 config_install_lampV2.sh -rwxr-xr-x 1 root jiajie 139 Sep 20 14:33 ipvsadm.save -rwxr-xr-x 1 root jiajie 577 Sep 20 14:33 ssh_scp.sh -rwxr-xr-x 1 root jiajie 38 Sep 20 14:33 test.sh [root@web1 ~]# ansible web -m copy -a "src=/root/shell.sh/ dest=/root/shell.sh/ owner=jiajie group=jiajie mode=0755" [root@localhost shell.sh]# ll total 16 -rwxr-xr-x 1 jiajie jiajie 3897 Sep 20 14:33 config_install_lampV2.sh -rwxr-xr-x 1 jiajie jiajie 139 Sep 20 14:33 ipvsadm.save -rwxr-xr-x 1 jiajie jiajie 577 Sep 20 14:33 ssh_scp.sh -rwxr-xr-x 1 jiajie jiajie 38 Sep 20 14:33 test.sh
将远程主机中的文件拷贝到本机中,和copy模块刚好相反。而且在保存的时候使用在主机名下的形式来进行保存。
validate_checksum 当文件fetch以后进行md5检查
[root@web1 ~]# ansible web -m command -a 'ls -l /tmp' 192.168.1.21 | SUCCESS | rc=0 >> total 168 drwx------ 2 root root 4096 Sep 20 15:13 ansible_jDhFlL -rw-------. 1 root root 95 Jul 26 04:15 crontab.O7izOx drwxr-xr-x 3 root root 4096 Aug 12 21:09 pear -rw-------. 1 root root 0 Jul 26 03:49 yum.log -rw------- 1 root root 67800 Jul 27 21:35 yum_save_tx-2017-07-27-21-35n2gP71.yumtx -rw-rw-r-- 1 zabbix zabbix 81445 Aug 12 14:42 zabbix_agentd.log -rw-rw-r-- 1 zabbix zabbix 5 Aug 12 08:37 zabbix_agentd.pid [root@web1 ~]# ansible web -m command -a 'ls -l /tmp' 192.168.1.21 | SUCCESS | rc=0 >> total 168 drwx------ 2 root root 4096 Sep 20 15:13 ansible_jDhFlL -rw-------. 1 root root 95 Jul 26 04:15 crontab.O7izOx drwxr-xr-x 3 root root 4096 Aug 12 21:09 pear -rw-------. 1 root root 0 Jul 26 03:49 yum.log -rw------- 1 root root 67800 Jul 27 21:35 yum_save_tx-2017-07-27-21-35n2gP71.yumtx -rw-rw-r-- 1 zabbix zabbix 81445 Aug 12 14:42 zabbix_agentd.log -rw-rw-r-- 1 zabbix zabbix 5 Aug 12 08:37 zabbix_agentd.pid [root@web1 ~]# ansible web -m fetch -a "dest=/root/test src=/tmp/yum.log" 192.168.1.21 | SUCCESS => { "changed": true, "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709", "dest": "/root/test/192.168.1.21/tmp/yum.log", "md5sum": "d41d8cd98f00b204e9800998ecf8427e", "remote_checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709", "remote_md5sum": null } [root@web1 ~]# tree test test └── 192.168.1.21 └── tmp └── yum.log 2 directories, 1 file
检索文件或者文件系统的状态。
follow 无默认值。是否获取连接所指向源文件的信息。默认状况下,当path是个符号连接的时候,只获取符号连接自己的信。
[root@web1 tmp]# ansible web -m stat -a "path=/tmp/yum.log" 192.168.1.21 | SUCCESS => { "changed": false, "stat": { "atime": 1505891687.684082, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 0, "charset": "binary", "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709", "ctime": 1501012146.7690001, "dev": 64768, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 391682, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "md5": "d41d8cd98f00b204e9800998ecf8427e", "mimetype": "application/x-empty", "mode": "0600", "mtime": 1501012146.7690001, "nlink": 1, "path": "/tmp/yum.log", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 0, "uid": 0, "version": "18446744073615032431", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } }
指定文件的行,使用正则的后向引用替换某一行内容
insertbefore 默认是不启用该选项,须要state=present,在最后一次匹配到的行以前添加新行。BOF表示在文件开头新加一行, 若是正则表达式没有匹配到任何内容则在文件开头新加一行
#追加行HOST=127.0.0.1 [root@web1 tmp]# ansible web -m lineinfile -a "dest=/root/test.txt line=HOST=127.0.0.1" 192.168.1.21 | SUCCESS => { "backup": "", "changed": true, "msg": "line added" } #将HOST=127.0.0.1替换成HOST=192.168.1.1 [root@web1 tmp]# ansible web -m lineinfile -a "dest=/root/test.txt regexp=^HOST line=HOST=192.168.1.1" 192.168.1.21 | SUCCESS => { "backup": "", "changed": true, "msg": "line replaced" } #删除HOST=192.168.1.1 [root@web1 tmp]# ansible web -m lineinfile -a "dest=/root/test.txt line=HOST=192.168.1.1 state=absent" 192.168.1.21 | SUCCESS => { "backup": "", "changed": true, "found": 1, "msg": "1 line(s) removed" } #在匹配到的HOST行后面加一行。若是没有匹配到就自动追加一行在最后 [root@web1 tmp]# ansible web -m lineinfile -a "dest=/root/test.txt line=web_nginx insertafter=^HOST" 192.168.1.21 | SUCCESS => { "backup": "", "changed": true, "msg": "line added" }
将控制节点的模板文件作变量替换后,传到远程节点。
管理cron.d和crontab计划任务
special_time 默认不启用。 能够指定某个特殊时间运行的任务。reboot重启的时候执行,yearly每一年执行一次,annually每个月执行一次,monthly每月执行一次,weekly每周执行一次,daily每一年执行一次,hourly每小时执行一次
[root@web1 tmp]# ansible web -m cron -a "name='test crom' hour=3,5 job='ls -l >>/dev/null' user=jiajie" 192.168.1.21 | SUCCESS => { "changed": true, "envs": [], "jobs": [ "test crom" ] } [root@localhost ~]# cat /var/spool/cron/jiajie #Ansible: test crom * 3,5 * * * ls -l >>/dev/null #删除计划任务 [root@web1 tmp]# ansible web -m cron -a "name='test crom' user=jiajie state=absent" 192.168.1.21 | SUCCESS => { "changed": true, "envs": [], "jobs": [] } #重启执行计划任务 [root@web1 tmp]# ansible web -m cron -a "name='test crom' user=jiajie special_time=reboot job='ls -l'" 192.168.1.21 | SUCCESS => { "changed": true, "envs": [], "jobs": [ "test crom" ] } [root@localhost tmp]# cat /var/spool/cron/jiajie #Ansible: test crom @reboot ls -l
远程管理服务模块,支持这几种服务模式: BSD init, OpenRC, SysV, Solaris SMF, systemd, upstart
args 须要给命令提供的附加参数
#开启防火墙 [root@web1 tmp]# ansible web -m service -a "name=iptables state=started" 192.168.1.21 | SUCCESS => { "changed": true, "name": "iptables", "state": "started" } #设置开机自启动 [root@web1 tmp]# ansible web -m service -a "name=iptables enabled=yes" 192.168.1.21 | SUCCESS => { "changed": true, "enabled": true, "name": "iptables" }
获取远程主机的facts信息。该模块会自动调用playbooks获取远程节点的信息
filter 过滤返回的facts信息
[root@web1 tmp]# ansible web -m setup 192.168.1.21 | SUCCESS => { "ansible_facts": { "ansible_all_ipv4_addresses": [ "192.168.1.21" ], "ansible_all_ipv6_addresses": [ "fe80::20c:29ff:fe39:730e" ], "ansible_apparmor": { "status": "disabled" }, "ansible_architecture": "x86_64", "ansible_bios_date": "07/02/2015", "ansible_bios_version": "6.00", "ansible_cmdline": { "KEYBOARDTYPE": "pc", .....
使用yum包管理器管理软件包
state 指定对软件包的操做行为,删除或者安装。默认为present表示安装包。其余能够指定的值,present,latest都是安装包, absent表示卸载包。update_cache 在state=present或state=latest是否强制更新缓存。
[root@web1 tmp]# ansible web -m yum -a "name=tree" 192.168.1.21 | SUCCESS => { "changed": false, "msg": "", "rc": 0, "results": [ "tree-1.5.3-3.el6.x86_64 providing tree is already installed" ] } [root@web1 tmp]# ansible web -m yum -a "name=tree state=absent" 192.168.1.21 | SUCCESS => { "changed": true, "msg": "", "rc": 0, "results": [