{"id":9722,"date":"2024-04-03T09:44:00","date_gmt":"2024-04-03T01:44:00","guid":{"rendered":"https:\/\/egonlin.com\/?p=9722"},"modified":"2024-04-03T09:44:00","modified_gmt":"2024-04-03T01:44:00","slug":"%e5%a4%87%e4%bb%bd-%e7%ac%ac%e4%b8%80%e8%8a%82%ef%bc%9aansible%e5%85%a5%e9%97%a8","status":"publish","type":"post","link":"https:\/\/egonlin.com\/?p=9722","title":{"rendered":"\u5907\u4efd-\u7b2c\u4e00\u8282\uff1aansible\u5165\u95e8"},"content":{"rendered":"

\u4e00\u3001Ansible \u6982\u8ff0<\/h1>\n

1.1\u3001Ansible\u662f\u4ec0\u4e48<\/h2>\n
Ansible\u662f\u4e00\u4e2a\u81ea\u52a8\u5316\u7edf\u4e00\u914d\u7f6e\u7ba1\u7406\u5de5\u5177\u3001\u96c6\u6210\u4e86\u4e30\u5bcc\u6a21\u5757\u4ee5\u53ca\u529f\u80fd\u7ec4\u4ef6\uff0c\n\u53ef\u4ee5\u901a\u8fc7\u4e00\u4e2a\u547d\u4ee4\u5b8c\u6210\u4e00\u7cfb\u5217\u7684\u64cd\u4f5c\uff0c\u8fdb\u800c\u80fd\u51cf\u5c11\u91cd\u590d\u6027\u7684\u5de5\u4f5c\u548c\u7ef4\u62a4\u6210\u672c\uff0c\u53ef\u4ee5\u63d0\u9ad8\u5de5\u4f5c\u6548\u7387\u3002<\/code><\/pre>\n
\u4e0e\u5176\u4ed6\u81ea\u52a8\u5316\u8fd0\u7ef4\u5de5\u5177\u5bf9\u6bd4<\/p>\n
1.puppet \u5b66\u4e60\u96be\uff0c\u5b89\u88c5ruby\u73af\u5883\u96be\uff0c\u6ca1\u6709\u8fdc\u7a0b\u6267\u884c\u529f\u80fd\n2.ansible \u8f7b\u91cf\u7ea7\uff0c\u5927\u89c4\u6a21\u73af\u5883\u4e0b\u53ea\u901a\u8fc7ssh\u4f1a\u5f88\u6162\uff0c\u4e32\u884c\u7684\n3.saltstack \u4e00\u822c\u9009\u62e9salt\u4f1a\u4f7f\u7528C\/S\u7ed3\u6784\u7684\u6a21\u5f0f\uff0csalt-master\u548csalt-minion\uff0c\u5e76\u884c\u7684\uff0c\u5927\u89c4\u6a21\u6279\u91cf\u64cd\u4f5c\u7684\u60c5\u51b5\u4e0b\uff0c\u4f1a\u6bd4Ansible\u901f\u5ea6\u5feb\u4e00\u4e9b\uff0c\u5e95\u5c42\u4f7f\u7528\u7684\u662fzero-MQ\u6d88\u606f\u961f\u5217<\/code><\/pre>\n
1.2\u3001\u4e3a\u4f55\u8981\u4f7f\u7528\u5982ansible\u8fd9\u79cd\u5de5\u5177<\/h2>\n
\u8fd0\u7ef4\u5de5\u7a0b\u5e08\u89d2\u8272
\n
\"file\"<\/div><\/p>\n
1.\u63d0\u9ad8\u5de5\u4f5c\u6548\u7387\n2.\u63d0\u9ad8\u4e86\u5de5\u4f5c\u7684\u51c6\u786e\u5ea6\n3.\u51cf\u5c11\u4eba\u5458\u6210\u672c\n4.\u51cf\u5c11\u4e86\u91cd\u590d\u7684\u5de5\u4f5c<\/code><\/pre>\n
1.3\u3001Ansible\u7684\u529f\u80fd\u53ca\u4f18\u70b9<\/h2>\n
1.\u8fdc\u7a0b\u6267\u884c\n\u6279\u91cf\u6267\u884c\u8fdc\u7a0b\u547d\u4ee4\uff0c\u53ef\u4ee5\u5bf9\u591a\u53f0\u4e3b\u673a\u8fdb\u884c\u8fdc\u7a0b\u64cd\u4f5c\n\n2.\u914d\u7f6e\u7ba1\u7406\n\u6279\u91cf\u914d\u7f6e\u8f6f\u4ef6\u670d\u52a1\uff0c\u53ef\u4ee5\u8fdb\u884c\u81ea\u52a8\u5316\u65b9\u5f0f\u914d\u7f6e\uff0c\u670d\u52a1\u7684\u7edf\u4e00\u914d\u7f6e\u7ba1\u7406\uff0c\u548c\u542f\u505c\n\n3.\u4e8b\u4ef6\u9a71\u52a8\n\u901a\u8fc7Ansible\u7684\u6a21\u5757\uff0c\u5bf9\u670d\u52a1\u8fdb\u884c\u4e0d\u540c\u7684\u4e8b\u4ef6\u9a71\u52a8\n\u6bd4\u5982\uff1a\n    1\uff09\u4fee\u6539\u914d\u7f6e\u540e\u91cd\u542f\n    2\uff09\u53ea\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\uff0c\u4e0d\u91cd\u542f\n    3\uff09\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u540e\uff0c\u91cd\u65b0\u52a0\u8f7d\n    4\uff09\u8fdc\u7a0b\u542f\u505c\u670d\u52a1\u7ba1\u7406\n\n4.\u7ba1\u7406\u516c\u6709\u4e91\n\u901a\u8fc7API\u63a5\u53e3\u7684\u65b9\u5f0f\u7ba1\u7406\u516c\u6709\u4e91\uff0c\u4e0d\u8fc7\u8fd9\u65b9\u9762\u505a\u7684\u4e0d\u5982saltstack.\nsaltstack\u672c\u8eab\u53ef\u4ee5\u901a\u8fc7saltcloud\u7ba1\u7406\u5404\u5927\u4e91\u5382\u5546\u7684\u4e91\u5e73\u53f0\u3002\n\n5.\u4e8c\u6b21\u5f00\u53d1\n\u56e0\u4e3a\u8bed\u6cd5\u662fPython\uff0c\u6240\u4ee5\u4fbf\u4e8e\u8fd0\u7ef4\u8fdb\u884c\u4e8c\u6b21\u5f00\u53d1\u3002\n\n6.\u4efb\u52a1\u7f16\u6392\n\u53ef\u4ee5\u901a\u8fc7playbook\u7684\u65b9\u5f0f\u6765\u7edf\u4e00\u7ba1\u7406\u670d\u52a1\uff0c\u5e76\u4e14\u53ef\u4ee5\u4f7f\u7528\u4e00\u6761\u547d\u4ee4\uff0c\u5b9e\u73b0\u4e00\u5957\u67b6\u6784\u7684\u90e8\u7f72\n\n7.\u8de8\u5e73\u53f0\uff0c\u8de8\u7cfb\u7edf\n\u51e0\u4e4e\u4e0d\u53d7\u5230\u5e73\u53f0\u548c\u7cfb\u7edf\u7684\u9650\u5236<\/code><\/pre>\n
\u4e8c\u3001Ansible \u6784\u6210<\/h1>\n
2.1\u3001\u7ec4\u6210\u90e8\u5206<\/h2>\n
1.\u8fde\u63a5\u63d2\u4ef6connection plugins\uff1a\u7528\u4e8e\u8fde\u63a5\u4e3b\u673a\/\u88ab\u7ba1\u7406\u7aef\n2.\u6838\u5fc3\u6a21\u5757core modules      \uff1a\u603b\u63a7\uff0c \u5b83\u8d1f\u8d23\u8c03\u7528\u5177\u4f53\u7684\u6a21\u5757\u6765\u505a\u5177\u4f53\u7684\u4e8b\u60c5\n3.\u81ea\u5b9a\u4e49\u6a21\u5757custom modules  \uff1a\u6839\u636e\u81ea\u5df1\u7684\u9700\u6c42\u7f16\u5199\u5177\u4f53\u7684\u6a21\u5757\n4.\u63d2\u4ef6plugins               \uff1a\u5b8c\u6210\u6a21\u5757\u529f\u80fd\u7684\u8865\u5145\uff0c\u4f8b\u5982Email\u3001loggin\n5.\u4efb\u52a1\u526f\u672c\/\u5267\u672cPlay Books   \uff1a\u5267\u672cplaybookansible\u7684\u914d\u7f6e\u6587\u4ef6,\u5c06\u591a\u4e2a\u4efb\u52a1\u5b9a\u4e49\u5728\u5267\u672c\u4e2d\uff0c\u7531ansible\u81ea\u52a8\u6267\u884c\n6.\u4e3b\u673a\u6e05\u5355Host inventor     \uff1a\u5b9a\u4e49ansible\u9700\u8981\u64cd\u4f5c\u7684\u4e3b\u673a\u4fe1\u606f\n\n\u6700\u91cd\u8981\u7684\u4e00\u70b9\u662f ansible\u662f\u6a21\u5757\u5316\u7684 \u5b83\u6240\u6709\u7684\u64cd\u4f5c\u90fd\u4f9d\u8d56\u4e8e\u6a21\u5757<\/code><\/pre>\n
\"file\"<\/div><\/p>\n
2.2\u3001Ansible\u6267\u884c\u6d41\u7a0b<\/h2>\n
1.Ansible\u8bfb\u53d6Play Book\u5267\u672c\uff0c\u5267\u672c\u4e2d\u4f1a\u8bb0\u5f55\u5bf9\u54ea\u4e9b\u4e3b\u673a\u6267\u884c\u54ea\u4e9b\u4efb\u52a1\u3002   #\u4f8b\u5982\uff1aweb \u5b89\u88c5nginx\n2.\u9996\u5148Ansible\u901a\u8fc7\u4e3b\u673a\u6e05\u5355\u627e\u5230\u8981\u6267\u884c\u7684\u4e3b\u673a\uff0c\u7136\u540e\u8c03\u7528\u5177\u4f53\u7684\u6a21\u5757\u3002     #web \u662f\u8c01\n3.\u7136\u540eAnsible\u4f1a\u901a\u8fc7\u8fde\u63a5\u63d2\u4ef6\u8fde\u63a5\u5bf9\u5e94\u7684\u4e3b\u673a\u5e76\u63a8\u9001\u5bf9\u5e94\u7684\u4efb\u52a1\u5217\u8868\u3002     #\u4f8b\u5982\uff1a\u4f7f\u7528yum\u6a21\u5757\u5b89\u88c5nginx\n4.\u6700\u540e\u88ab\u7ba1\u7406\u7684\u4e3b\u673a\u4f1a\u5c06Ansible\u53d1\u9001\u8fc7\u6765\u7684\u4efb\u52a1\u89e3\u6790\u4e3a\u672c\u5730Shell\u547d\u4ee4\u6267\u884c\u3002#\u53d7\u63a7\u7aef\u6267\u884cyum install -y nginx<\/code><\/pre>\n
\u4e09\u3001Ansible\u4f7f\u7528<\/h1>\n
3.1\u3001\u73af\u5883\u51c6\u5907<\/h2>\n\n\n\n\n\n\n\n
\u4e3b\u673a<\/th>\nIP<\/th>\n\u8eab\u4efd<\/th>\n<\/tr>\n<\/thead>\n
m01<\/td>\n192.168.71.11<\/td>\n\u63a7\u5236\u7aef<\/td>\n<\/tr>\n
web01<\/td>\n192.168.71.14<\/td>\n\u53d7\u63a7\u7aef<\/td>\n<\/tr>\n
web02<\/td>\n192.168.71.15<\/td>\n\u53d7\u63a7\u7aef<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
3.2\u3001\u63a7\u5236\u7aef\u5b89\u88c5ansible<\/h2>\n
#1.\u5b89\u88c5epel\u6e90\uff08centos9\u4e5f\u53ef\u4ee5\u7528\u8fd9\u4e2a\u6e90\uff0c\u56e0\u4e3a\u4f9d\u8d56\u7684\u662fpython\u73af\u5883\uff09\n[root@m01 ~]# wget -O \/etc\/yum.repos.d\/epel.repo http:\/\/mirrors.aliyun.com\/repo\/epel-7.repo\n\n#2.\u5b89\u88c5Ansible\n[root@m01 ~]# yum install -y ansible<\/code><\/pre>\n
3.3\u3001\u76f8\u5173\u6587\u4ef6\u4ecb\u7ecd<\/h2>\n
\u5feb\u901f\u4e86\u89e3\u5b89\u88c5\u7684\u76f8\u5173\u6587\u4ef6\uff0c\u540e\u7eed\u4f1a\u5c55\u5f00\u4ecb\u7ecd<\/p>\n
# \u914d\u7f6e\u6587\u4ef6\n\/etc\/ansible\/ansible.cfg `\u4e3b\u914d\u7f6e\u6587\u4ef6\uff0c\u914d\u7f6eansible\u5de5\u4f5c\u7279\u6027`\n\/etc\/ansible\/hosts `\u4e3b\u673a\u6e05\u5355`\n\/etc\/ansible\/roles `\u5b58\u653e\u89d2\u8272\u7684\u76ee\u5f55`\n\n# \u7a0b\u5e8f\n\/usr\/bin\/ansible          `\u4e3b\u7a0b\u5e8f\uff0c\u4e34\u65f6\u547d\u4ee4\u6267\u884c\u5de5\u5177`\n\/usr\/bin\/ansible-doc      `\u67e5\u770b\u914d\u7f6e\u6587\u6863\uff0c\u6a21\u5757\u529f\u80fd\u67e5\u770b\u5de5\u5177`\n\/usr\/bin\/ansible-galaxy   `\u4e0b\u8f7d\/\u4e0a\u4f20\u4f18\u79c0\u4ee3\u7801\u6216Roles\u6a21\u5757\u7684\u5b98\u7f51\u5e73\u53f0`\n\/usr\/bin\/ansible-playbook `\u5b9a\u5236\u81ea\u52a8\u5316\u4efb\u52a1\uff0c\u7f16\u6392\u5267\u672c\u5de5\u5177`\n\/usr\/bin\/ansible-pull     `\u8fdc\u7a0b\u6267\u884c\u547d\u4ee4\u7684\u5de5\u5177`\n\/usr\/bin\/ansible-vault    `\u6587\u4ef6\u52a0\u5bc6\u5de5\u5177`\n\/usr\/bin\/ansible-console  `\u57fa\u4e8eConsole\u754c\u9762\u4e0e\u7528\u6237\u4ea4\u4e92\u7684\u6267\u884c\u5de5\u5177`\n<\/code><\/pre>\n
3.4\u3001ansible\u53c2\u6570<\/h2>\n
# ansible <host-pattern> [options]\n#\u4e0d\u5e38\u7528\u53c2\u6570\n--version   #ansible\u7248\u672c\u4fe1\u606f\n-v          #\u663e\u793a\u8be6\u7ec6\u4fe1\u606f\n-i          #\u4e3b\u673a\u6e05\u5355\u6587\u4ef6\u8def\u5f84\uff0c\u9ed8\u8ba4\u662f\u5728\/etc\/ansible\/hosts\n-k          #\u63d0\u793a\u8f93\u5165ssh\u5bc6\u7801\uff0c\u800c\u4e0d\u4f7f\u7528\u57fa\u4e8essh\u7684\u5bc6\u94a5\u8ba4\u8bc1\n-C          #\u6a21\u62df\u6267\u884c\u6d4b\u8bd5\uff0c\u4f46\u4e0d\u4f1a\u771f\u7684\u6267\u884c\n-T          #\u6267\u884c\u547d\u4ee4\u7684\u8d85\u65f6\n\n#\u5e38\u7528\u53c2\u6570\n-m          #\u4f7f\u7528\u7684\u6a21\u5757\u540d\u79f0\n-a          #\u4f7f\u7528\u7684\u6a21\u5757\u53c2\u6570\uff0c\u6a21\u5757\u7684\u5177\u4f53\u52a8\u4f5c\n--syntax-check      #\u9a8c\u8bc1\u8bed\u6cd5\n\n[root@lb ~]# ansible --version\nansible [core 2.14.9]\n  config file = \/etc\/ansible\/ansible.cfg\n  configured module search path = ['\/root\/.ansible\/plugins\/modules', '\/usr\/share\/ansible\/plugins\/modules']\n  ansible python module location = \/usr\/lib\/python3.9\/site-packages\/ansible\n  ansible collection location = \/root\/.ansible\/collections:\/usr\/share\/ansible\/collections\n  executable location = \/usr\/bin\/ansible\n  python version = 3.9.18 (main, Sep  7 2023, 00:00:00) [GCC 11.4.1 20230605 (Red Hat 11.4.1-2)] (\/usr\/bin\/python3)\n  jinja version = 3.1.2\n  libyaml = True\n[root@lb ~]# <\/code><\/pre>\n
3.5\u3001ansible\u914d\u7f6e\u6587\u4ef6\u89e3\u91ca<\/h2>\n
[root@m01 ~]# cat \/etc\/ansible\/ansible.cfg  \n[defaults]\n#inventory      = \/etc\/ansible\/hosts      #\u4e3b\u673a\u5217\u8868\u914d\u7f6e\u6587\u4ef6\n#library        = \/usr\/share\/my_modules\/  #\u5e93\u6587\u4ef6\u5b58\u653e\u76ee\u5f55\n#remote_tmp     = ~\/.ansible\/tmp          #\u4e34\u65f6py\u6587\u4ef6\u5b58\u653e\u5728\u8fdc\u7a0b\u4e3b\u673a\u76ee\u5f55\n#local_tmp      = ~\/.ansible\/tmp          #\u672c\u673a\u7684\u4e34\u65f6\u6267\u884c\u76ee\u5f55\n#forks          = 5                       #\u9ed8\u8ba4\u5e76\u53d1\u6570\n#sudo_user      = root                    #\u9ed8\u8ba4sudo\u7528\u6237\n#ask_sudo_pass = True                     #\u6bcf\u6b21\u6267\u884c\u662f\u5426\u8be2\u95eesudo\u7684ssh\u5bc6\u7801\n#ask_pass      = True                     #\u6bcf\u6b21\u6267\u884c\u662f\u5426\u8be2\u95eessh\u5bc6\u7801\n#remote_port    = 22                      #\u8fdc\u7a0b\u4e3b\u673a\u7aef\u53e3\nhost_key_checking = False                 #\u68c0\u67e5\u5bf9\u5e94\u670d\u52a1\u5668\u7684host_key\uff0c\u5efa\u8bae\u8bbe\u4e3aFalse\nlog_path = \/var\/log\/ansible.log           #ansible\u65e5\u5fd7\n\n#\u666e\u901a\u7528\u6237\u63d0\u6743\u64cd\u4f5c\n[privilege_escalation]\n#become=True\n#become_method=sudo\n#become_user=root\n#become_ask_pass=False<\/code><\/pre>\n
\u56db\u3001\u4e3b\u673a\u6e05\u5355\u914d\u7f6e<\/h1>\n
4.1.\u57fa\u4e8e\u5bc6\u7801\u7684\u65b9\u5f0f<\/h2>\n
1\uff09\u5355\u4e3b\u673a\u914d\u7f6e<\/h3>\n
#\u65b9\u5f0f\u4e00\uff1a ip + \u7aef\u53e3 + \u7528\u6237\u540d + \u7528\u6237\u5bc6\u7801\n[root@m01 ~]# vim \/etc\/ansible\/hosts \n[web01]\n192.168.71.14 ansible_ssh_user=root ansible_ssh_port=22 ansible_ssh_pass='1'\n[web02]\n192.168.71.15 ansible_ssh_user=root ansible_ssh_port=22 ansible_ssh_pass='1'\n\n#\u6d4b\u8bd5\n[root@lb ~]# ansible web01 -m ping\n192.168.71.14 | SUCCESS => {\n    "ansible_facts": {\n        "discovered_interpreter_python": "\/usr\/bin\/python3"\n    },\n    "changed": false,\n    "ping": "pong"\n}<\/code><\/pre>\n
#\u65b9\u5f0f\u4e8c\uff1a ip + \u9ed8\u8ba4\u7528\u6237\u540d\u4e0eansible\u547d\u4ee4\u6240\u5904\u7528\u6237\u4e00\u81f4\u3001\u9ed8\u8ba422\u53f7\u7aef\u53e3\n[root@m01 ~]# vim \/etc\/ansible\/hosts \n[web01]\n192.168.71.14 ansible_ssh_pass='1'\n[web02]\n192.168.71.15 ansible_ssh_pass='1'\n\n[root@lb ~]# ansible web02 -m ping\n192.168.71.15 | SUCCESS => {\n    "ansible_facts": {\n        "discovered_interpreter_python": "\/usr\/bin\/python"\n    },\n    "changed": false,\n    "ping": "pong"\n}<\/code><\/pre>\n
#\u65b9\u5f0f\u4e09\uff1a ip + \u53d8\u91cf\u5bc6\u7801\n[root@m01 ~]# vim \/etc\/ansible\/hosts \n[web01]\n192.168.71.14\n[web02]\n192.168.71.15 ansible_ssh_pass='1'\n\n[web01:vars]\nansible_ssh_pass='1'<\/code><\/pre>\n
2\uff09\u591a\u4e3b\u673a\u914d\u7f6e<\/h3>\n
[root@m01 ~]# vim \/etc\/ansible\/hosts \n[web01]\n192.168.71.14 ansible_ssh_pass='1'\n[web02]\n192.168.71.15 ansible_ssh_pass='1'\n\n[web_group1]\n192.168.71.14 ansible_ssh_pass='1'\n192.168.71.15 ansible_ssh_pass='1'\n\n[root@lb ansible]# ansible web_group1 -m ping # \u4e5f\u53ef\u4ee5ansible "web_group1" -m ping\n192.168.71.15 | SUCCESS => {\n    "ansible_facts": {\n        "discovered_interpreter_python": "\/usr\/bin\/python"\n    },\n    "changed": false,\n    "ping": "pong"\n}\n192.168.71.14 | SUCCESS => {\n    "ansible_facts": {\n        "discovered_interpreter_python": "\/usr\/bin\/python3"\n    },\n    "changed": false,\n    "ping": "pong"<\/code><\/pre>\n
4.2.\u57fa\u4e8e\u79d8\u94a5\u7684\u65b9\u5f0f<\/h2>\n
1\uff09\u751f\u6210\u5bc6\u94a5\u5bf9<\/h3>\n
1.\u751f\u6210\u5bc6\u94a5\u5bf9\n[root@m01 ~]# ssh-keygen\n\n2.\u63a8\u9001\u516c\u94a5\n[root@m01 ~]# ssh-copy-id root@192.168.71.14\n[root@m01 ~]# ssh-copy-id root@192.168.71.15<\/code><\/pre>\n
2\uff09\u914d\u7f6e\u4e3b\u673a\u6e05\u5355<\/h3>\n
[root@m01 ~]# vim \/etc\/ansible\/hosts  \n[web_group1]\n192.168.71.14\n192.168.71.15<\/code><\/pre>\n
3\uff09\u914d\u5408\/etc\/hosts\u89e3\u6790<\/h3>\n
\u672c\u5730\/etc\/hosts\u6587\u4ef6\u6dfb\u52a0\u89e3\u6790\u540e\uff0c\u4e5f\u53ef\u4ee5\u628aip\u6362\u6210\u4e3b\u673a\u540d<\/p>\n
#\u914d\u7f6e\u4e3b\u673a\u6e05\u5355\n[root@m01 ~]# vim \/etc\/ansible\/hosts \n[web_group]\nweb01\nweb02\n\n#\u914d\u7f6ehosts\n[root@m01 ~]# vim \/etc\/hosts\n192.168.71.14 web01\n192.168.71.15 web02\n\n#\u6d4b\u8bd5\n[root@lb ansible]# ansible web_group1 -m ping\nweb02 | SUCCESS => {\n    "ansible_facts": {\n        "discovered_interpreter_python": "\/usr\/bin\/python"\n    },\n    "changed": false,\n    "ping": "pong"\n}\nweb01 | SUCCESS => {\n    "ansible_facts": {\n        "discovered_interpreter_python": "\/usr\/bin\/python3"\n    },\n    "changed": false,\n    "ping": "pong"\n}<\/code><\/pre>\n
4.3.\u5b9a\u4e49\u6574\u5408\u7ec4<\/h2>\n
1\uff09\u5b9a\u4e49\u6574\u5408\u7ec4<\/h3>\n
[root@m01 ~]# vim \/etc\/ansible\/hosts \n[web_group1]\nweb01\nweb02\n[nfs_server]\nnfs ansible_ssh_pass='1'\n[rsync_server]\nbackup ansible_ssh_pass='1'\n[db_server]\ndb01 ansible_ssh_pass='1'\n#\u5b9a\u4e49\u6574\u5408\u7ec4\uff0cwww:children\u4ee3\u8868www\u8fd9\u4e2a\u5927\u7ec4\u4e0b\u9762\u5305\u542b\u591a\u4e2a\u5c0f\u7ec4\n[www:children]\nweb_group1\nnfs_server\nrsync_server\n\n#\u914d\u7f6ehosts\n[root@m01 ~]# vim \/etc\/hosts\n192.168.71.14 web01\n192.168.71.15 web02\n192.168.71.16 nfs\n192.168.71.12 backup\n192.168.71.13 db01<\/code><\/pre>\n
2\uff09\u67e5\u770b\u6574\u5408\u7ec4\u4e0b\u9762\u7684\u4e3b\u673a\u7ec4<\/h3>\n
[root@m01 ~]# ansible www --list-host\n  hosts (4):\n    web01\n    web02\n    nfs\n    backup<\/code><\/pre>\n
3\uff09\u57fa\u4e8e\u4e0a\u8ff0\u914d\u7f6e\u4ecb\u7ecdhost-pattern<\/h3>\n
ansible\u7684Host-pattern<\/p>\n
\u5339\u914d\u4e3b\u673a\u7684\u5217\u8868: \u7edf\u4e00\u7528\u5355\u5f15\u53f7\u5305\u88f9\uff0c\u9632\u6b62bash\u89e3\u6790\n    \u5355\u53f0\u4e3b\u673a\uff1a\n        ansible 'web01' -m ping\n    All \uff1a\u8868\u793a\u6240\u6709Inventory\u4e2d\u7684\u6240\u6709\u4e3b\u673a\n        ansible all \u2013m ping\n    * :\u901a\u914d\u7b26\uff1a\u5fc5\u987b\u662f\/etc\/ansible\/hosts\u5185\u5b9a\u4e49\u7684\n        ansible '*' -m ping  (*\u8868\u793a\u6240\u6709\u4e3b\u673a)\n        ansible 'web*' -m ping  # ansible 192.168.1.* -m ping\n    \u903b\u8f91\u6216\uff1a':'\n        ansible "web02:db_server" -m ping  # web02\u4e3b\u673a \u6216db_server\u7ec4\n        ansible "web_group1:db_server" -m ping  # \u6240\u6709\u5c5e\u4e8eweb_group1\u7ec4 \u6216db_server\u7ec4\n        ansible \u201c192.168.1.10:192.168.1.20\u201d -m ping # \u5fc5\u987b\u6587\u4ef6\u4e2d\u5b9a\u4e49\u4e86\u8fd9\u4e9b\u5730\u5740\u624d\u53ef\u4ee5\n    \u903b\u8f91\u4e0e ':&'\n        ansible "web_group1:&db_server" -m ping # \u5728web_group1\u7ec4\u5e76\u4e14\u4e5f\u5728db_server\u7ec4\u5185\u7684\u4e3b\u673a\n    \u903b\u8f91\u975e ':!'\n        ansible 'web_group1:!db_server' -m ping  # \u6ce8\u610f\u4e00\u5b9a\u8981\u7528\u5355\u5f15\u53f7\u3002\u5728web_group1\u7ec4\u4f46\u4e0d\u5728db_server\u7ec4\n    \u7efc\u5408\u903b\u8f91\n        ansible 'group1:&group2:&group3:!group4' -m ping # \u540c\u65f6\u5728group1\u3001group2\u3001group3\u4e2d\uff0c\u4f46\u4e0d\u5728group4\u4e2d\n\n        ansible\u7684host-pattern\u4e2d\uff1a\u201c\u4e0e\u201d\uff08AND\uff09 > \u201c\u6216\u201d\uff08OR\uff09 > \u201c\u975e\u201d\uff08NOT\uff09\u3002\n        python\u4e2d\uff1aNOT\u6700\u9ad8\uff0c\u7136\u540e\u662fAND\uff0c\u6700\u540e\u662fOR\u3002\n\n        # \u793a\u4f8b\n        [root@lb ansible]# cat \/etc\/ansible\/hosts\n        [group1]\n        192.168.71.12 ansible_ssh_pass='1'\n        192.168.71.13 ansible_ssh_pass='1'\n        [group2]\n        192.168.71.12 ansible_ssh_pass='1'\n        192.168.71.13 ansible_ssh_pass='1'\n        192.168.71.14 ansible_ssh_pass='1'\n        [group3]\n        192.168.71.12 ansible_ssh_pass='1'\n        192.168.71.13 ansible_ssh_pass='1'\n        192.168.71.15 ansible_ssh_pass='1'\n        [group4]\n        192.168.71.13 ansible_ssh_pass='1'\n        [root@lb ansible]# ansible 'group1:&group2:&group3:!group4' -m ping\n        192.168.71.12 | SUCCESS => {\n            "ansible_facts": {\n                "discovered_interpreter_python": "\/usr\/bin\/python3"\n            },\n            "changed": false,\n            "ping": "pong"\n        }\n\n    \u6b63\u5219\u8868\u8fbe\u5f0f\n        ansible '~(db|web).*' -m ping  # ~\u524d\u7f00\u4ee3\u8868\u542f\u7528\u6b63\u5219\uff0c\u7528\u7684\u5c31\u662fpython\u7684\u6b63\u5219\uff0c\u5339\u914d\u7684\u662fhosts\u6574\u4e2a\u6587\u4ef6\u5305\u62ec\u4e3b\u673a\u7ec4\u540d\u4e0e\u4e3b\u673a\u540d<\/code><\/pre>\n
\u4e94\u3001Ansible Ad-hoc<\/h1>\n
5.1\u3001ad-hoc\u6982\u8ff0<\/h2>\n
1.\u4ec0\u4e48ad-hoc<\/h3>\n
ad-hoc\u6a21\u5f0f\u7b80\u800c\u8a00\u4e4b\u5c31\u662f"\u4e34\u65f6\u547d\u4ee4"\uff0c\u6267\u884c\u5b8c\u5373\u7ed3\u675f\uff0c\u5e76\u4e0d\u4f1a\u4fdd\u5b58\n\u8bed\u6cd5\nansible [pattern] -m [module] -a "[module options]"<\/code><\/pre>\n
2.\u4f7f\u7528\u573a\u666f<\/h3>\n
\u6bd4\u5982\u5728\u591a\u53f0\u673a\u5668\u4e0a\u67e5\u770b\u67d0\u4e2a\u8fdb\u7a0b\u662f\u5426\u542f\u52a8\uff0c\u6216\u62f7\u8d1d\u6307\u5b9a\u6587\u4ef6\u5230\u672c\u5730\uff0c\u7b49\u7b49\n\u4e34\u65f6\u4f7f\u7528\u7684\u547d\u4ee4\uff0c\u4e00\u6b21\u4f7f\u7528<\/code><\/pre>\n
3.ad-hoc\u6a21\u5f0f\u4f7f\u7528<\/h3>\n
\"file\"<\/div><\/p>\n
[root@m01 ~]# ansible web01 -m command -a 'df -h' # comand\u6a21\u5757\u642d\u914da\u53c2\u6570\u6267\u884cshell\u547d\u4ee4\nweb01 | CHANGED | rc=0 >>\nFilesystem      Size  Used Avail Use% Mounted on\n\/dev\/sda3        18G  1.6G   17G   9% \/\ndevtmpfs        476M     0  476M   0% \/dev\ntmpfs           487M     0  487M   0% \/dev\/shm\ntmpfs           487M  7.7M  479M   2% \/run\ntmpfs           487M     0  487M   0% \/sys\/fs\/cgroup\n\/dev\/sda1      1014M  127M  888M  13% \/boot\ntmpfs            98M     0   98M   0% \/run\/user\/0\n\n[root@m01 ~]# ansible web_group -m command -a 'free -m'\nweb01 | CHANGED | rc=0 >>\n              total        used        free      shared  buff\/cache   available\nMem:            972         128         481           7         362         658\nSwap:          1023           0        1023\nweb02 | CHANGED | rc=0 >>\n              total        used        free      shared  buff\/cache   available\nMem:            972         111         551           7         309         691\nSwap:          1023           0        1023<\/code><\/pre>\n
4.ad-hoc\u7ed3\u679c\u8fd4\u56de\u989c\u8272<\/h3>\n
\u7eff\u8272: \u4ee3\u8868\u88ab\u7ba1\u7406\u7aef\u4e3b\u673a\u6ca1\u6709\u88ab\u4fee\u6539\n\u9ec4\u8272: \u4ee3\u8868\u88ab\u7ba1\u7406\u7aef\u4e3b\u673a\u53d1\u73b0\u53d8\u66f4\n\u7ea2\u8272: \u4ee3\u8868\u51fa\u73b0\u4e86\u6545\u969c\uff0c\u6ce8\u610f\u67e5\u770b\u63d0\u793a<\/code><\/pre>\n
5.ad-hoc\u5e38\u7528\u6a21\u5757<\/h3>\n
command             # \u6267\u884cshell\u547d\u4ee4(\u4e0d\u652f\u6301\u7ba1\u9053\u7b49\u7279\u6b8a\u5b57\u7b26)\nshell               # \u6267\u884cshell\u547d\u4ee4\uff08\u652f\u6301\u7ba1\u9053\uff09\nscripts             # \u6267\u884cshell\u811a\u672c\nyum_repository      # \u914d\u7f6eyum\u4ed3\u5e93\nyum                 # \u5b89\u88c5\u8f6f\u4ef6\ncopy                # \u53d8\u66f4\u914d\u7f6e\u6587\u4ef6\nfile                # \u5efa\u7acb\u76ee\u5f55\u6216\u6587\u4ef6\nservice             # \u542f\u52a8\u4e0e\u505c\u6b62\u670d\u52a1\nsystemd             # \u542f\u52a8\u4e0e\u505c\u6b62\u670d\u52a1\nmount               # \u6302\u8f7d\u8bbe\u5907\ncron                # \u5b9a\u65f6\u4efb\u52a1\nget_url             #\u4e0b\u8f7d\u8f6f\u4ef6\nfirewalld           #\u9632\u706b\u5899\nselinux             #selinux\nsetup               #\u83b7\u53d6\u4e3b\u673a\u4fe1\u606f<\/code><\/pre>\n
6.command \u6a21\u5757\uff08\u4e0d\u8bc6\u522b\u7279\u6b8a\u7b26\u53f7\uff09<\/h3>\n
#\u4e0d\u52a0\u53c2\u6570\u65f6\u9ed8\u8ba4\u4f7f\u7528\u7684\u5c31\u662f command \u6a21\u5757\n[root@m01 ~]# ansible web01 -m command -a 'free -m'\nweb01 | CHANGED | rc=0 >>\n              total        used        free      shared  buff\/cache   available\nMem:            972         128         480           7         363         658\nSwap:          1023           0        1023\n\n#\u4e0d\u8bc6\u522b\u7279\u6b8a\u7b26\u53f7\n[root@m01 ~]# ansible web01 -m command -a 'ps -ef | grep nginx'\nweb01 | FAILED | rc=1 >>\nerror: garbage option\nUsage:\n ps [options]\n\n Try 'ps --help <simple|list|output|threads|misc|all>'\n  or 'ps --help <s|l|o|t|m|a>'\n for additional help text.\nFor more details see ps(1).non-zero return code<\/code><\/pre>\n
7.shell \u6a21\u5757<\/h3>\n
#\u652f\u6301\u7279\u6b8a\u7b26\u53f7\n[root@m01 ~]# ansible web01 -m shell -a 'ps -ef | grep nginx'\nweb01 | CHANGED | rc=0 >>\nroot      12680  12675  0 17:51 pts\/0    00:00:00 \/bin\/sh -c ps -ef | grep nginx\nroot      12682  12680  0 17:51 pts\/0    00:00:00 grep nginx\n\n#\u83b7\u53d6\u4e3b\u673a\u4fe1\u606f\uff0c\u4f7f\u7528\u53d8\u91cf\u52a0\u8f6c\u4e49\u7b26\u53f7\n[root@m01 ~]# ansible web01 -m shell -a "ifconfig eth0 | awk 'NR==2 {print $2}'"\nweb01 | CHANGED | rc=0 >>\n        inet 10.0.0.7  netmask 255.255.255.0  broadcast 10.0.0.255\n\n[root@m01 ~]# ansible web01 -m shell -a "ifconfig eth0 | awk 'NR==2 {print \\$2}'"\nweb01 | CHANGED | rc=0 >>\n10.0.0.7\n[root@m01 ~]# <\/code><\/pre>\n
8.ansible\u5e2e\u52a9<\/h3>\n
#1.\u67e5\u770b\u6240\u6709\u6a21\u5757\n[root@m01 ~]# ansible-doc -l\n\n#2.\u67e5\u770b\u6307\u5b9a\u6a21\u5757\u7684\u7528\u6cd5\n[root@m01 ~]# ansible-doc yum\n\n#3.\u67e5\u770b\u6a21\u5757\u53c2\u6570\n[root@m01 ~]# ansible-doc -s yum<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
\u4e00\u3001Ansible \u6982\u8ff0 1.1\u3001Ansible\u662f\u4ec0\u4e48 Ansible\u662f\u4e00\u4e2a\u81ea\u52a8\u5316\u7edf\u4e00\u914d\u7f6e\u7ba1\u7406\u5de5\u5177\u3001\u96c6\u6210\u4e86\u4e30\u5bcc […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts\/9722"}],"collection":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9722"}],"version-history":[{"count":1,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts\/9722\/revisions"}],"predecessor-version":[{"id":9723,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts\/9722\/revisions\/9723"}],"wp:attachment":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9722"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9722"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}