ansible
ansible简介
推荐文章http://www.javashuo.com/article/p-duvmowlc-n.htmlhtml
ansible 是一款强大的开源的自动化运维管理工具，底层代码主要用python编写，结合了paramiko jinjia2 yaml 三个模块python
官网图片讲解
ansible:ansible的核心程序web
host lnventory：记录了每个由ansible管理的主机信息，包括：ssh端口，用户及密码，等shell
playbooks：任务剧本，yaml格式的文件，用来储存多任务，方便统一调用apache
core modules：ansible执行任何管理任务，都不是ansible自身完成的，而是由ansible的核心模块完成的；ansible在管理主机以前，先调用core modules中的模块，而后指明host lnventory中的主机中的主机，就能够完成管理主机，vim
custom modules：自定义模块，完成ansible核心模块没法完成的任务，此模块支持任何语言编写；安全
connection plugins：链接插件，ansible和host之间通讯并发
ansible优势
- No client 不须要在被管控主机上安装任何软件
- No server 不用单独启用服务，能使用直接运行，使用时直接运行命令
- 支持sudo
- 基于ssh工做,安全
- 幂等性:无改变重复操做自动跳过机制
- 提供一个功能强大、操做性强的Web管理界面和REST API接口——AWX平台
- 配置简单、功能强大、扩展性强
- 支持API及自定义模块，可经过Python轻松扩展
ansible主要生成文件
/etc/ansible/ansible.cfg #主配置文件 /etc/ansible/hosts #管理的主机库 /usr/bin/ansible #主程序 /usr/bin/ansible-doc #文档 /usr/bin/ansible-playbook #剧本
设置管理主机库
控制客户端主机的两种方式：
- 免密钥：ssh-keygen 可参考:http://www.javashuo.com/article/p-ehyhzvbh-cg.html
- 参数形式：ansble_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22
编写host inventory
╭─root@localhost.localdomain ~ ╰─➤ vim /etc/ansible/hosts #参数形式 [testhosts] 192.168.137.4 ansible_ssh_user=root ansible_ssh_port=22 ansible_ssh_pass=123456 192.168.137.5 ansible_ssh_user=root ansible_ssh_poet=22 ansible_ssh_pass=123456 ............................................................................. #免密钥模式 [testhosts] 192.168.137.4 192.168.137.5
ansible经常使用命令及模块
ansible-doc命令：
ansible-doc -l #查看ansible支持的模块 ansible-doc -s model_name #查看model_name模块的用法
ansible 经常使用模块
- ping 模块 ：ping查看客户端可否管理通讯
- command 模块 :命令
- shell 模块 : shell命令（支持正则等）
- copy 模块 : 远程复制至关于scp
- cron 模块 ： 计划任务模块
- mail 模块 ：邮件模块
ansible命令行模式
ansible <host-pattern> [options] -f forks :启动并发线程数 -m model_name :要使用模块 -a args：特有的参数
ansible all -m ping #查看client端是否正常连通，便可管理 ansible testhosts -m setup #查看客户端信息 ansible testhosts -m copy -a 'src=/root/test.txt dest=/root/test1.txt' #copy文件到client端 ansible testhosts -m user -a "name=user1 state=present" #建立user1用户 ansible testhosts -m user -a "name=user1 state=absent" #删除user1用户 ansible testhosts -m yum -a "name=hpptd state=installed" #yum 安装apache ansible testhosts -m service -a "name=httpd state=stoped encable=no" #中止httpd服务，开机不自起 ansible -m command -a "date" #查看时间
playbook
包括：
- tasks ：一个tasks至关于一个play
- variables ：变量，一次定义，多处调用
- templates ：模板，能够区分不一样主机的特色
- handlers ：触发器，依赖于前一个任务，前一个任务若是执行改变，就会触发handlers
基础
╭─root@localhost.localdomain ~
╰─➤ vim test.yaml
........................................... #文件内容
- hosts: testhosts
remote_user: root
tasks:
- name: copy cjk
copy: src=/root/cjk dest=/root/cjk
...........................................................
╭─root@localhost.localdomain ~
╰─➤ ansible-playbook test.yaml
PLAY [testhosts] ****************************************************************************************************************
TASK [Gathering Facts] **********************************************************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]
TASK [copy httpd.conf] **********************************************************************************************************
changed: [192.168.137.4]
changed: [192.168.137.5]
PLAY RECAP **********************************************************************************************************************
192.168.137.4 : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
192.168.137.5 : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
变量
╭─root@localhost.localdomain ~
╰─➤ vim test.yaml
.................................................................#文件内容
- hosts: testhosts
remote_user: root
vars:
- file: cjk
tasks:
- name: copy cjk
copy: src=/root/{{ file }} dest=/root/{{ file }}
- name: write cjk
command: echo "hello world!" >> /root/{{ file }}
....................................................................................
╭─root@localhost.localdomain ~
╰─➤ ansible-playbook test.yaml
PLAY [testhosts] ********************************************************************************************************************
TASK [Gathering Facts] **************************************************************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]
TASK [copy cjk] *********************************************************************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]
TASK [weite cjk] ********************************************************************************************************************
changed: [192.168.137.5]
changed: [192.168.137.4]
PLAY RECAP **************************************************************************************************************************
192.168.137.4 : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
192.168.137.5 : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
注册变量
╭─root@localhost.localdomain ~
╰─➤ vim test.yaml
.......................................................#文件内容
- hosts: testhosts
remote_user: root
tasks:
- name: get date
command: date '+%F %T'
register: date_output #至关于date_output=$(date)
- name: echo date_output
shell: echo {{ date_output.stdout }} >> /root/cjk #.stdout 把内容标准输出
..................................................................................
迭代1
相似于python中的for 循环，可灵活运用运维
╭─root@localhost.localdomain ~
╰─➤ vim test.yaml
..........................................................#文件内容
- hosts: testhosts
remote_user: root
tasks:
- name: create users
user: name={{ item }} state=absent
with_items:
- user1
- user2
- user3
....................................................................
╭─root@localhost.localdomain ~
╰─➤ ansible-playbook test.yaml
PLAY [testhosts] *******************************************************************
TASK [Gathering Facts] *************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]
TASK [create users] ****************************************************************
ok: [192.168.137.5] => (item=user1)
ok: [192.168.137.4] => (item=user1)
ok: [192.168.137.5] => (item=user2)
ok: [192.168.137.4] => (item=user2)
ok: [192.168.137.5] => (item=user3)
ok: [192.168.137.4] => (item=user3)
PLAY RECAP *************************************************************************
192.168.137.4 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
192.168.137.5 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
迭代2
╭─root@localhost.localdomain ~
╰─➤ vim test.yaml
..........................................................#文件内容
- hosts: testhosts
remote_user: root
tasks:
- name: create users
user: name={{ item.name }} state=absent groups={{ item.groups }}
with_items:
- { name: 'testuser1', groups: 'group1' }
- { name: 'testuser2', groups: 'group2' }
....................................................................
触发器
notify：若是执行的任务被改变，会触发handlers任务dom
╭─root@localhost.localdomain ~
╰─➤ vim test.yaml
................................................#文件内容
- hosts: testhosts
remote_user: root
tasks:
- name: copy cjk
copy: src=/root/cjk dest=/root/cjk
notify:
- back cjk
handlers:
- name: back cjk
command: cp /root/cjk /home/cjk.back
- name: test
command: rm -rf /root/cjk
.....................................................................
╭─root@localhost.localdomain ~
╰─➤ ansible-playbook test.yaml
PLAY [testhosts] *******************************************************************
TASK [Gathering Facts] *************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]
TASK [copy cjk] ********************************************************************
changed: [192.168.137.4]
changed: [192.168.137.5]
RUNNING HANDLER [back cjk] *********************************************************
changed: [192.168.137.5]
changed: [192.168.137.4]
PLAY RECAP *************************************************************************
192.168.137.4 : ok=3 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
192.168.137.5 : ok=3 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
╭─root@localhost.localdomain ~
╰─➤ ansible-playbook test.yaml
PLAY [testhosts] *******************************************************************
TASK [Gathering Facts] *************************************************************
ok: [192.168.137.5]
ok: [192.168.137.4]
TASK [copy cjk] ********************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]
PLAY RECAP *************************************************************************
192.168.137.4 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
192.168.137.5 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
when语句
when条件语句:能够根据setup模块显示出客户端信息为依据来判断
╭─root@localhost.localdomain ~
╰─➤ vim test.yaml
.............................................#文件内容
- hosts: testhosts
remote_user: root
tasks:
- name: restart network
service: name=network state=restarted
when: ansible_distribution=='CentOS' and ansible_distribution_major_version=='8'
..................................................................
╭─root@localhost.localdomain ~
╰─➤ ansible-playbook test.yaml
PLAY [testhosts] *******************************************************************
TASK [Gathering Facts] *************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]
TASK [restart network] *************************************************************
skipping: [192.168.137.4]
skipping: [192.168.137.5]
PLAY RECAP *************************************************************************
192.168.137.4 : ok=1 changed=0 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0
192.168.137.5 : ok=1 changed=0 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0
异常处理
ignore_errors:若是任务出错，直接跳过，不会影响其余任务
╭─root@localhost.localdomain ~
╰─➤ vim test.yaml
........................................#文件内容
- hosts: testhosts
remote_user: root
tasks:
- name: restart httpd
service: name=network state=restarted
ignore_errors: yes
- name: test
command: echo 'hello' > /root/cjk
...........................................................................................
╭─root@localhost.localdomain ~
╰─➤ ansible-playbook test.yaml
PLAY [testhosts] *******************************************************************
TASK [Gathering Facts] *************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]
TASK [restart httpd] ***************************************************************
fatal: [192.168.137.5]: FAILED! => {"changed": false, "msg": "Unable to start service network: Job for network.service failed because the control process exited with error code. See \"systemctl status network.service\" and \"journalctl -xe\" for details.\n"}
...ignoring
changed: [192.168.137.4]
TASK [test] ************************************************************************
changed: [192.168.137.4]
changed: [192.168.137.5]
PLAY RECAP *************************************************************************
192.168.137.4 : ok=3 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
192.168.137.5 : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=1
template
第一步：编写.yaml文件将copy 换成template
╭─root@localhost.localdomain ~
╰─➤ vim test.yaml
.......................................#文件内容
- hosts: testhosts
remote_user: root
tasks:
- name: copy cjk
template: src=/root/cjk dest=/root/cjk
.............................................................
第二步：编辑要拷贝的文件cjk，把要区分的地方用用变量定义{{ 变量名 }}
╭─root@localhost.localdomain ~
╰─➤ vim cjk
hello world!!!
this is {{ ip }}
第三步：vim /etc/ansible/hosts 在主机后面定义变量的值:变量名=变量值
╭─root@localhost.localdomain ~ ╰─➤ vim /etc/ansible/hosts [testhosts] 192.168.137.4 ansible_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22 ip=1 92.168.137.4 192.168.137.5 ansible_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22 ip=1 92.168.137.5
第四步：执行
╭─root@localhost.localdomain ~ ╰─➤ ansible-playbook test.yaml
第五步：验证
192.168.137.4 主机
╭─root@localhost.localdomain ~ ╰─➤ cat cjk hello world!!! this is 192.168.137.4
192.168.137.5 主机
╭─root@localhost.localdomain ~ ╰─➤ cat cjk hello world!!! this is 192.168.137.5
roles
做用：定义角色，减小代码的复习
第一步：roles目录
╭─root@localhost.localdomain ~
╰─➤ mkdir -pv playbookse/roles/{webservers,dbservers}/{files,tasks,vars,templates,handlers}
第二步：编写文件
#编写tasks文件
╭─root@localhost.localdomain ~
╰─➤ vim /root/playbooks/roles/webservers/tasks/main.yaml
......................................................................
- name: yum httpd
yum: name=httpd state=installed
- name: copy httpd.conf
template: src={{ conf_file }} dest=/etc/httpd/conf/{{ conf_file }}
notify:
- restart httpd
.....................................................................
#编写vars文件
╭─root@localhost.localdomain ~
╰─➤ vim /root/playbooks/roles/webservers/vars/main.yaml
..................................#定义变量
conf_file: httpd.conf
....................................
#编写handlers文件
╭─root@localhost.localdomain ~/playbooks
╰─➤ vim roles/webservers/handlers/main.yaml
....................................................#触发器
- name: restart httpd
service: name=httpd state=restarted
........................................................
#复制文件到templates目录下
╭─root@localhost.localdomain ~
╰─➤ cp /etc/httpd/conf/httpd.conf /root/playbooks/roles/webservers/templates/
#编写inventory文件
╭─root@localhost.localdomain ~
╰─➤ mkdir /root/playbooks/inventory/
╭─root@localhost.localdomain ~
╰─➤ vim /root/playbooks/invnetoryinvnetory/testhosts
.........................................#给文件中的变量赋值template
[testhosts]
192.168.137.4 ansible_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22 port=8888
192.168.137.5 ansible_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22 port=9999
...............................................................invnetory/testhosts
#编写文件中的变量内容
╭─root@localhost.localdomain ~
╰─➤ vim /root/playbooks/roles/webservers/templates/httpd.conf
............................................#修改文件中的变量template
...
Listen {{ port }}
...
..................................................................
#编辑启动文件
╭─root@localhost.localdomain ~
╰─➤ vim /root/playbooks/httpd.yaml
...............................................................
- hosts: testhosts
remote_user: root
roles:
- webservers
.................................................................
第三步：查看playbooks目录
╭─root@localhost.localdomain ~
╰─➤ tree playbooks
playbooks
├── httpd.yaml
├── inventory
│ └── testhosts
└── roles
├── dbservers
│ ├── files
│ ├── handlers
│ ├── tasks
│ ├── templates
│ └── vars
└── webservers
├── files
│ └── httpd.conf
├── handlers
│ └── main.yaml
├── tasks
│ └── main.yaml
├── templates
│ └── httpd.conf
└── vars
└── main.yaml
第四步：执行
╭─root@localhost.localdomain ~ ╰─➤ cd playbooks #须要在有启动文件（.yaml）的目录中执行 ╭─root@localhost.localdomain ~/playbooks ╰─➤ ansible-playbook httpd.yaml
第五步：检验
192.168.173.4主机
╭─root@localhost.localdomain ~ ╰─➤ ss -ntl State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 128 *:22 *:* LISTEN 0 128 *:8888 *:* LISTEN 0 100 127.0.0.1:25 *:* LISTEN 0 128 :::22 :::* LISTEN 0 100 ::1:25 :::*
192.168.173.5主机
╭─root@localhost.localdomain ~ ╰─➤ ss -ntl State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 128 *:9999 *:* LISTEN 0 128 *:22 *:* LISTEN 0 100 127.0.0.1:25 *:* LISTEN 0 128 :::22 :::* LISTEN 0 100 ::1:25 :::*
相关文章
- 1. Ansible--初始ansible
- 2. Ansible--Ansible之Playbook
- 3. Ansible--Ansible之Roles
- 4. [ansible] Ansible Inventory Manager
- 5. Ansible之ansible-playbook roles
- 6. Ansible 一： 配置ansible
- 7. ansible
- 8. Ansible
- 更多相关文章...
- • NewSQL-TiDB相关
相关标签/搜索
每日一句
-
每一个你不满意的现在，都有一个你没有努力的曾经。
欢迎关注本站公众号,获取更多信息
