ansible

ansible简介

ansible 是一款强大的开源的自动化运维管理工具，底层代码主要用python编写，结合了paramiko jinjia2 yaml 三个模块

官网图片讲解

ansible:ansible的核心程序

host lnventory：记录了每一个由ansible管理的主机信息，包括：ssh端口，用户及密码，等

playbooks：任务剧本，yaml格式的文件，用来储存多任务，方便统一调用

core modules：ansible执行任何管理任务，都不是ansible自身完成的，而是由ansible的核心模块完成的；ansible在管理主机之前，先调用core modules中的模块，然后指明host lnventory中的主机中的主机，就可以完成管理主机，

custom modules：自定义模块，完成ansible核心模块无法完成的任务，此模块支持任何语言编写；

connection plugins：连接插件，ansible和host之间通信

ansible优点

No client 不需要在被管控主机上安装任何软件

No server 不用单独启用服务，能使用直接运行，使用时直接运行命令

支持sudo

基于ssh工作,安全

幂等性:无改变重复操作自动跳过机制

提供一个功能强大、操作性强的Web管理界面和REST API接口——AWX平台

配置简单、功能强大、扩展性强

支持API及自定义模块，可通过Python轻松扩展

ansible主要生成文件

/etc/ansible/ansible.cfg   #主配置文件
/etc/ansible/hosts   #管理的主机库
/usr/bin/ansible  #主程序
/usr/bin/ansible-doc   #文档
/usr/bin/ansible-playbook   #剧本

设置管理主机库

控制客户端主机的两种方式：

免密钥：ssh-keygen 可参考:https://www.cnblogs.com/du-z/p/10901774.html
参数形式：ansble_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22

编写host inventory

╭─root@localhost.localdomain ~  
╰─➤  vim /etc/ansible/hosts

#参数形式
[testhosts]
192.168.137.4 ansible_ssh_user=root ansible_ssh_port=22 ansible_ssh_pass=123456
192.168.137.5 ansible_ssh_user=root ansible_ssh_poet=22 ansible_ssh_pass=123456

.............................................................................
#免密钥模式
[testhosts]
192.168.137.4
192.168.137.5

ansible常用命令及模块

ansible-doc命令：

ansible-doc -l   #查看ansible支持的模块
ansible-doc -s model_name  #查看model_name模块的用法

ansible 常用模块

ping 模块：ping查看客户端能否管理通信

command 模块 :命令

shell 模块 : shell命令（支持正则等）

copy 模块 : 远程复制相当于scp

cron 模块：计划任务模块

mail 模块：邮件模块

ansible命令行模式

ansible <host-pattern> [options]
-f forks :启动并发线程数
-m model_name :要使用模块
-a args：特有的参数

ansible all -m ping #查看client端是否正常连通，即可管理
ansible testhosts -m setup #查看客户端信息
ansible testhosts -m copy -a 'src=/root/test.txt dest=/root/test1.txt' #copy文件到client端
ansible testhosts -m user -a "name=user1 state=present" #创建user1用户
ansible testhosts -m user -a "name=user1 state=absent" #删除user1用户
ansible testhosts -m yum -a "name=hpptd state=installed" #yum 安装apache
ansible testhosts -m service -a "name=httpd state=stoped encable=no" #停止httpd服务，开机不自起
ansible -m command -a "date" #查看时间

playbook

包括：

tasks ：一个tasks相当于一个play
variables ：变量，一次定义，多处调用
templates ：模板，可以区分不同主机的特点
handlers ：触发器，依赖于前一个任务，前一个任务如果执行改变，就会触发handlers

基础

╭─root@localhost.localdomain ~  
╰─➤  vim test.yaml
........................................... #文件内容
- hosts: testhosts
  remote_user: root
  tasks:
  - name: copy cjk
    copy: src=/root/cjk dest=/root/cjk
...........................................................
╭─root@localhost.localdomain ~  
╰─➤  ansible-playbook test.yaml 

PLAY [testhosts] ****************************************************************************************************************

TASK [Gathering Facts] **********************************************************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]

TASK [copy httpd.conf] **********************************************************************************************************
changed: [192.168.137.4]
changed: [192.168.137.5]

PLAY RECAP **********************************************************************************************************************
192.168.137.4              : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.137.5              : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

变量

╭─root@localhost.localdomain ~  
╰─➤  vim test.yaml
.................................................................#文件内容
- hosts: testhosts
  remote_user: root
  vars:
  - file: cjk
  tasks:
  - name: copy cjk
    copy: src=/root/{{ file }} dest=/root/{{ file }}
  - name: write cjk
    command: echo "hello world!" >> /root/{{ file }}
....................................................................................

╭─root@localhost.localdomain ~  
╰─➤  ansible-playbook test.yaml   

PLAY [testhosts] ********************************************************************************************************************

TASK [Gathering Facts] **************************************************************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]

TASK [copy cjk] *********************************************************************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]

TASK [weite cjk] ********************************************************************************************************************
changed: [192.168.137.5]
changed: [192.168.137.4]

PLAY RECAP **************************************************************************************************************************
192.168.137.4              : ok=3    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.137.5              : ok=3    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

注册变量

╭─root@localhost.localdomain ~  
╰─➤  vim test.yaml 
.......................................................#文件内容
- hosts: testhosts
  remote_user: root
  tasks:
  - name: get date
    command: date '+%F %T'
    register: date_output       #相当于date_output=$(date)
  - name: echo date_output
    shell: echo {{ date_output.stdout }} >> /root/cjk     #.stdout  把内容标准输出
..................................................................................

迭代1

类似于python中的for 循环，可灵活运用

╭─root@localhost.localdomain ~  
╰─➤  vim test.yaml 
..........................................................#文件内容
- hosts: testhosts
  remote_user: root
  tasks:
  - name: create users
    user: name={{ item }} state=absent
    with_items:
    - user1
    - user2
    - user3
....................................................................
╭─root@localhost.localdomain ~  
╰─➤  ansible-playbook test.yaml 

PLAY [testhosts] *******************************************************************

TASK [Gathering Facts] *************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]

TASK [create users] ****************************************************************
ok: [192.168.137.5] => (item=user1)
ok: [192.168.137.4] => (item=user1)
ok: [192.168.137.5] => (item=user2)
ok: [192.168.137.4] => (item=user2)
ok: [192.168.137.5] => (item=user3)
ok: [192.168.137.4] => (item=user3)

PLAY RECAP *************************************************************************
192.168.137.4              : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.137.5              : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

迭代2

╭─root@localhost.localdomain ~  
╰─➤  vim test.yaml 
..........................................................#文件内容
- hosts: testhosts
  remote_user: root
  tasks:
  - name: create users
    user: name={{ item.name }} state=absent groups={{ item.groups }}
    with_items:
    - { name: 'testuser1', groups: 'group1' }
    - { name: 'testuser2', groups: 'group2' }
....................................................................

触发器

notify：如果执行的任务被改变，会触发handlers任务

╭─root@localhost.localdomain ~  
╰─➤  vim test.yaml

................................................#文件内容
- hosts: testhosts
  remote_user: root
  tasks:
  - name: copy cjk
    copy: src=/root/cjk dest=/root/cjk
    notify:
    - back cjk
  handlers:
  - name: back cjk
    command: cp /root/cjk /home/cjk.back
  - name: test
    command: rm -rf /root/cjk
.....................................................................
╭─root@localhost.localdomain ~  
╰─➤  ansible-playbook test.yaml

PLAY [testhosts] *******************************************************************

TASK [Gathering Facts] *************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]

TASK [copy cjk] ********************************************************************
changed: [192.168.137.4]
changed: [192.168.137.5]

RUNNING HANDLER [back cjk] *********************************************************
changed: [192.168.137.5]
changed: [192.168.137.4]

PLAY RECAP *************************************************************************
192.168.137.4              : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.137.5              : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

╭─root@localhost.localdomain ~  
╰─➤  ansible-playbook test.yaml

PLAY [testhosts] *******************************************************************

TASK [Gathering Facts] *************************************************************
ok: [192.168.137.5]
ok: [192.168.137.4]

TASK [copy cjk] ********************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]

PLAY RECAP *************************************************************************
192.168.137.4              : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.137.5              : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

when语句

when条件语句:可以根据setup模块显示出客户端信息为依据来判断

╭─root@localhost.localdomain ~  
╰─➤  vim test.yaml 
.............................................#文件内容
- hosts: testhosts
  remote_user: root
  tasks:
  - name: restart network
    service: name=network state=restarted
    when: ansible_distribution=='CentOS' and ansible_distribution_major_version=='8'
..................................................................
╭─root@localhost.localdomain ~  
╰─➤  ansible-playbook test.yaml

PLAY [testhosts] *******************************************************************

TASK [Gathering Facts] *************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]

TASK [restart network] *************************************************************
skipping: [192.168.137.4]
skipping: [192.168.137.5]

PLAY RECAP *************************************************************************
192.168.137.4              : ok=1    changed=0    unreachable=0    failed=0    skipped=1    rescued=0    ignored=0   
192.168.137.5              : ok=1    changed=0    unreachable=0    failed=0    skipped=1    rescued=0    ignored=0

异常处理

ignore_errors:如果任务出错，直接跳过，不会影响其他任务

╭─root@localhost.localdomain ~  
╰─➤  vim test.yaml 
........................................#文件内容
- hosts: testhosts
  remote_user: root
  tasks:
  - name: restart httpd
    service: name=network state=restarted
    ignore_errors: yes
  - name: test
    command: echo 'hello' > /root/cjk
...........................................................................................
╭─root@localhost.localdomain ~  
╰─➤  ansible-playbook test.yaml

PLAY [testhosts] *******************************************************************

TASK [Gathering Facts] *************************************************************
ok: [192.168.137.4]
ok: [192.168.137.5]

TASK [restart httpd] ***************************************************************
fatal: [192.168.137.5]: FAILED! => {"changed": false, "msg": "Unable to start service network: Job for network.service failed because the control process exited with error code. See "systemctl status network.service" and "journalctl -xe" for details.
"}
...ignoring
changed: [192.168.137.4]

TASK [test] ************************************************************************
changed: [192.168.137.4]
changed: [192.168.137.5]

PLAY RECAP *************************************************************************
192.168.137.4              : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.137.5              : ok=3    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=1

template

第一步：编写.yaml文件将copy 换成template

╭─root@localhost.localdomain ~  
╰─➤  vim test.yaml   
.......................................#文件内容
- hosts: testhosts
  remote_user: root
  tasks:
  - name: copy cjk
    template: src=/root/cjk dest=/root/cjk
.............................................................

第二步：编辑要拷贝的文件cjk，把要区分的地方用用变量定义{{ 变量名 }}

╭─root@localhost.localdomain ~  
╰─➤  vim cjk

hello world!!!
this is {{ ip }}

第三步：vim /etc/ansible/hosts 在主机后面定义变量的值:变量名=变量值

╭─root@localhost.localdomain ~  
╰─➤  vim /etc/ansible/hosts 

[testhosts]
192.168.137.4 ansible_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22 ip=1
92.168.137.4
192.168.137.5 ansible_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22 ip=1
92.168.137.5

第四步：执行

╭─root@localhost.localdomain ~  
╰─➤  ansible-playbook test.yaml

第五步：验证

192.168.137.4 主机

╭─root@localhost.localdomain ~  
╰─➤  cat cjk
hello world!!!
this is 192.168.137.4

192.168.137.5 主机

╭─root@localhost.localdomain ~  
╰─➤  cat cjk    
hello world!!!
this is 192.168.137.5

roles

作用：定义角色，减少代码的复习

第一步：roles目录

╭─root@localhost.localdomain ~  
╰─➤  mkdir -pv playbookse/roles/{webservers,dbservers}/{files,tasks,vars,templates,handlers}

第二步：编写文件

#编写tasks文件

╭─root@localhost.localdomain ~  
╰─➤  vim /root/playbooks/roles/webservers/tasks/main.yaml
......................................................................
- name: yum httpd
  yum: name=httpd state=installed
- name: copy httpd.conf
  template: src={{ conf_file }} dest=/etc/httpd/conf/{{ conf_file }}
  notify:
  - restart httpd
.....................................................................

#编写vars文件

╭─root@localhost.localdomain ~  
╰─➤  vim /root/playbooks/roles/webservers/vars/main.yaml
..................................#定义变量
conf_file: httpd.conf
....................................

#编写handlers文件

╭─root@localhost.localdomain ~/playbooks  
╰─➤  vim roles/webservers/handlers/main.yaml 
....................................................#触发器
- name: restart httpd
  service: name=httpd state=restarted
........................................................

#复制文件到templates目录下

╭─root@localhost.localdomain ~  
╰─➤  cp /etc/httpd/conf/httpd.conf /root/playbooks/roles/webservers/templates/

#编写inventory文件

╭─root@localhost.localdomain ~  
╰─➤  mkdir /root/playbooks/inventory/ 
╭─root@localhost.localdomain ~  
╰─➤  vim  /root/playbooks/invnetoryinvnetory/testhosts 
.........................................#给文件中的变量赋值template
[testhosts]
192.168.137.4 ansible_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22 port=8888
192.168.137.5 ansible_ssh_user=root ansible_ssh_pass=123456 ansible_ssh_port=22 port=9999
...............................................................invnetory/testhosts

#编写文件中的变量内容

╭─root@localhost.localdomain ~  
╰─➤  vim /root/playbooks/roles/webservers/templates/httpd.conf
............................................#修改文件中的变量template
...

Listen {{ port }}

...
..................................................................

#编辑启动文件

╭─root@localhost.localdomain ~  
╰─➤  vim /root/playbooks/httpd.yaml
...............................................................
- hosts: testhosts
  remote_user: root
  roles:
  - webservers
.................................................................

第三步：查看playbooks目录

╭─root@localhost.localdomain ~  
╰─➤  tree playbooks
playbooks
├── httpd.yaml
├── inventory
│   └── testhosts
└── roles
    ├── dbservers
    │   ├── files
    │   ├── handlers
    │   ├── tasks
    │   ├── templates
    │   └── vars
    └── webservers
        ├── files
        │   └── httpd.conf
        ├── handlers
        │   └── main.yaml
        ├── tasks
        │   └── main.yaml
        ├── templates
        │   └── httpd.conf
        └── vars
            └── main.yaml

第四步：执行

╭─root@localhost.localdomain ~  
╰─➤  cd playbooks    #需要在有启动文件（.yaml）的目录中执行
╭─root@localhost.localdomain ~/playbooks  
╰─➤  ansible-playbook httpd.yaml

第五步：检验

192.168.173.4主机

╭─root@localhost.localdomain ~  
╰─➤  ss -ntl
State      Recv-Q Send-Q Local Address:Port               Peer Address:Port              
LISTEN     0      128            *:22                         *:*                  
LISTEN     0      128            *:8888                       *:*                  
LISTEN     0      100    127.0.0.1:25                         *:*                  
LISTEN     0      128           :::22                        :::*                  
LISTEN     0      100          ::1:25                        :::*

192.168.173.5主机

╭─root@localhost.localdomain ~  
╰─➤  ss -ntl
State      Recv-Q Send-Q Local Address:Port               Peer Address:Port              
LISTEN     0      128            *:9999                       *:*                  
LISTEN     0      128            *:22                         *:*                  
LISTEN     0      100    127.0.0.1:25                         *:*                  
LISTEN     0      128           :::22                        :::*                  
LISTEN     0      100          ::1:25                        :::*

相关阅读:
【js】实现输入框不允许输入某些特殊字符
 springboot集成druid实现数据源监控
 SpringBoot整合Druid并配置数据源监控
 SpringBoot集成Druid实现数据源管理和监控
 同一个catch字句中捕获多个java异常
 【JWT】JSON Web Token原理与实现
 行级锁实验:sql语句条件中的索引对锁的影响
 什么是乐观锁，什么是悲观锁，如何实现
 Linux命令与文件的查找which、wheris、locate、find
vi编辑器永久设置行号、缩进
原文地址：https://www.cnblogs.com/du-z/p/11103559.html