您的位置:首页 > 其它

ansible 自动化安装配置LAMP环境

2015-11-23 18:51 357 查看
第一部分:安装apache
一、准备工作

1、下载httpd、php、mysql 、apr、apr-util、libiconv 本次使用的版本如下:
httpd 2.4.17、php 5.6.15、mysql 5.6.19(二进制)、apr 1.5.2、apr-util 1.5.4、libiconv 1.14
2、在ansible服务端开始安装
编译安装apr
#cd /usr/local/src
#tar xf apr-1.5.2.tar.gz
#cd apr-1.5.2
#./configure --prefix=/usr/local/apr --如果提示如下错误(不知道忽略这种错误会如何,没测试):
error info:rm: cannot remove `libtoolT': No such file or directory
解决方法:
#vim configure --找到$RM "$cfgfile" 这行, 将其注释或者删除
#$RM "$cfgfile" ,然后重新执行configure 就不会报错了
#make && make install
编译安装apr-util
#cd /usr/local/src
#tar xf apr-util-1.5.4.tar.gz
#cd apr-util-1.5.4
#./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr/
#make && make install
编译安装libiconv
#tar xf libiconv-1.14.tar.gz
#cd libiconv-1.14
#./configure --prefix=/usr/local/
#make && make install
然后拷贝libiconv的so文件到一个目录
#mkdir /usr/local/libiconv
#cd /usr/local/libiconv
#cp /usr/local/lib/libiconv.la ./
#cp /usr/local/lib/libiconv.so.2.5.1 ./
#cp /usr/local/lib/preloadable_libiconv.so ./
创建软连接
#ln -sv libiconv.so.2.5.1 libiconv.so
#ln -sv libiconv.so.2.5.1 libiconv.so.2
然后打包:
#tar -zcf libiconv.tar.gz ./*
#mv libiconv.tar.gz /tmp
安装依赖包:
#yum install pcre pcre-devel -y
编译安装httpd
#tar xf httpd-2.4.17.tar.gz
#cd httpd-2.4.17
#./configure --prefix=/usr/local/apache --enable-so --enable-ssl --enable-cgi --enable-rewrite --with-zlib --with-apr=/usr/local/apr --with-apr-util=/usr/local/apr-util/
#make
#make install
在httpd.conf配置文件中添加pid文件,找到# least PidFile,添加其下:
PidFile "/var/run/httpd.pid"
User www --修改为www
Group www --修改为www
为httpd提供SysV服务脚本/etc/rc.d/init.d/httpd,如下:

#!/bin/bash
# httpd Startup script for the Apache HTTP Server
# chkconfig: - 85 15
# description: Apache is a World Wide Web server. It is used to serve \
# HTML files and CGI.
# processname: httpd
# config: /etc/httpd/conf/httpd.conf
# config: /etc/sysconfig/httpd
# pidfile: /var/run/httpd.pid
# Source function library.
. /etc/rc.d/init.d/functions
if [ -f /etc/sysconfig/httpd ]; then
. /etc/sysconfig/httpd
fi
# Start httpd in the C locale by default.
HTTPD_LANG=${HTTPD_LANG-"C"}
# This will prevent initlog from swallowing up a pass-phrase prompt if
# mod_ssl needs a pass-phrase from the user.
INITLOG_ARGS=""
# Set HTTPD=/usr/sbin/httpd.worker in /etc/sysconfig/httpd to use a server
# with the thread-based "worker" MPM; BE WARNED that some modules may not
# work correctly with a thread-based MPM; notably PHP will refuse to start.
# Path to the apachectl script, server binary, and short-form for messages.
apachectl=/usr/local/apache/bin/apachectl
httpd=${HTTPD-/usr/local/apache/bin/httpd}
prog=httpd
pidfile=${PIDFILE-/var/run/httpd.pid}
lockfile=${LOCKFILE-/var/lock/subsys/httpd}
RETVAL=0
start() {
echo -n $"Starting $prog: "
LANG=$HTTPD_LANG daemon --pidfile=${pidfile} $httpd $OPTIONS
RETVAL=$?
echo
[ $RETVAL = 0 ] && touch ${lockfile}
return $RETVAL
}

stop() {
echo -n $"Stopping $prog: "
killproc -p ${pidfile} -d 10 $httpd
RETVAL=$?
echo
[ $RETVAL = 0 ] && rm -f ${lockfile} ${pidfile}
}
reload() {
echo -n $"Reloading $prog: "
if ! LANG=$HTTPD_LANG $httpd $OPTIONS -t >&/dev/null; then
RETVAL=$?
echo $"not reloading due to configuration syntax error"
failure $"not reloading $httpd due to configuration syntax error"
else
killproc -p ${pidfile} $httpd -HUP
RETVAL=$?
fi
echo
}
# See how we were called.
case "$1" in
start)
start
;;
stop)
stop
;;
status)
status -p ${pidfile} $httpd
RETVAL=$?
;;
restart)
stop
start
;;
condrestart)
if [ -f ${pidfile} ] ; then
stop
start
fi
;;
reload)
reload
;;
graceful|help|configtest|fullstatus)
$apachectl $@
RETVAL=$?
;;
*)
echo $"Usage: $prog {start|stop|restart|condrestart|reload|status|fullstatus|graceful|help|configtest}"
exit 1
esac
exit $RETVAL
赋予执行权限
#chmod +x /etc/init.d/httpd
启动httpd
#service httpd start
然后在浏览器测试
#http://ip --出现It works! 的网页,表示httpd安装成功了。
压缩apache目录:
#cd /usr/local/
#tar -zcf httpd-2.4.17.tar.gz apache/
#mv httpd-2.4.17.tar.gz /tmp
压缩apr目录:
#tar -zcf apr.tar.gz apr/
#mv apr.tar.gz /tmp
压缩apr-util目录:
#tar -zcf apr-util.tar.gz apr-util/
#mv apr-util.tar.gz /tmp
二、配置playbook ,通过ansible安装配置远端服务器的httpd
1、规划(实现安装和删除httpd)
安装:
#cd /etc/ansible/roles
#mkdir apache_install/{files,handlers,meta,tasks,templates,vars}
#cd apache_install
#mv /tmp/httpd.tar.gz files/
#mv /tmp/libiconv.tar.gz files/
#mv /tmp/apr.tar.gz files/
#mv /tmp/apr-util.tar.gz files/
配置meta
#vim meta/main.yml
galaxy_info:
author: liguang xing
description: Install Apache
license: MIT
min_ansible_version: 1.9.4
platforms:
- name: CentOS
version:
- 6
categories:
- Service
dependencies: []
配置vars变量
#vim vars/main.yml
apr_version: 1.5.2
apr_util_version: 1.5.4
libiconv_version: 1.14
apache_version: 2.4.17
apache_web_dir: /usr/local/apache/htdocs
apache_log: /usr/local/apache/logs/
apache_vhost: /usr/local/apache/conf/vhost
apache_port: 80
apache_user: www
配置tasks
#cat tasks/copy.yml
- name: Copy Apache software to client
copy: src={{ item }} dest=/tmp/ owner=root group=root
with_items:
- httpd-{{ apache_version }}.tar.gz
- libiconv.tar.gz
- apr.tar.gz
- apr-util.tar.gz
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: create apache user in client
user: name={{ apache_user }} state=present createhome=no shell=/sbin/nologin
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: uncompression apache software to client
shell: tar xf /tmp/httpd-{{ apache_version }}.tar.gz -C /usr/local/
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: uncompression apr software to client
shell: tar xf /tmp/apr.tar.gz -C /usr/local/
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: uncompression apr-util software to client
shell: tar xf /tmp/apr-util.tar.gz -C /usr/local/
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: copy apache sysv start service script to client
template: src=httpd dest=/etc/init.d/httpd owner=root group=root mode=0755
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: copy apache config to Client
template: src=httpd.conf dest=/usr/local/apache/conf/httpd.conf owner={{ apache_user }} group={{ apache_user }} mode=0644
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
注:when参数不配置也可以
#cat tasks/delete.yml
- name: delete apache compression software in client
shell: rm -f /tmp/httpd-{{ apache_version }}.tar.gz /tmp/libiconv.tar.gz /tmp/apr.tar.gz /tmp/apr-util.tar.gz
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
#cat tasks/install.yml
- name: create lib install dir
file: dest=/usr/local/lib state=directory
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: check apache Iconv in client
shell: find / -name "libiconv.so.2"|grep -Ev "tmp|soft"|wc -l
register: apache_iconv
ignore_errors: True
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: install apache iconv in client
shell: tar xf /tmp/libiconv.tar.gz -C /usr/local/lib/
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6 and apache_iconv|int ==0
- name: check lib in config in client
shell: grep -c /usr/local/lib/ /etc/ld.so.conf
register: apache_lib
ignore_errors: True
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: install apache Iconv in client
shell: echo "/usr/local/lib/" >> /etc/ld.so.conf;/sbin/ldconfig
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6 and apache_iconv|int ==0
- name: create apache Dir
file: dest={{ item }} state=directory
with_items:
- "{{ apache_vhost }}"
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: start apache service in client
shell: /etc/init.d/httpd start
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: add boot start apache service in client
shell: chkconfig --add httpd;chkconfig httpd on
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
# cat tasks/main.yml
- include: copy.yml
- include: install.yml
- include: delete.yml
将httpd启动脚本和httpd.conf配置文件copy一份到templates目录
#cp /etc/rc.d/init.d/httpd templates/
#cp /usr/local/apache/conf/httpd.conf templates/
template目录文件
# tree templates/
templates/
├── httpd
└── httpd.conf
2、配置common
#cd /etc/ansible/roles
#mkdir -pv common/{meta,tasks}
#cat meta/main.yml
galaxy_info:
author: liguang xing
description: Install initializtion Software
license: MIT
min_ansible_version: 1.9.4
platforms:
- name: CentOS
versions:
- 5
- 6
- name: Ubuntu
versions:
- precise
categories:
- system
dependencies: []
#cat tasks/main.yml
- name: install initializtion require software
shell: yum -y install make cmake bc gcc gcc-c++ autoconf libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel ncurses ncurses-devel e2fsprogs e2fsprogs-devel krb5-devel libidn libidn-devel openssl openssl-devel nss_ldap openldap openldap-devel openldap-clients libxslt-devel libevent-devel ntp libtool-ltdl bison libaio libtool vim-enhanced wget readline-devel libyaml-devel patch telnet pcre pcre-devel
poll: 0
注:libaio rpm包一定要安装,mysql启动要依赖着包
3、创建apache_install.yml安装脚本
#cd /etc/ansible/roles
#cat apache_install.yml
---
- hosts: "{{host}}"
remote_user: "{{user}}"
gather_facts: True
roles:
- common
- apache_install
检查语法:
# ansible-playbook apache_install.yml --syntax-check
playbook: apache_install.yml
没错误开始执行
#ansible-playbook apache_install.yml --extra-vars "host=web user=root"
PLAY [web] ********************************************************************
GATHERING FACTS ***************************************************************
ok: [10.0.90.24]
ok: [10.0.90.25]
TASK: [common | install initializtion require software] ***********************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | Copy Apache software to client] ***********************
changed: [10.0.90.25] => (item=httpd-2.4.17.tar.gz)
changed: [10.0.90.24] => (item=httpd-2.4.17.tar.gz)
changed: [10.0.90.24] => (item=libiconv.tar.gz)
changed: [10.0.90.25] => (item=libiconv.tar.gz)
changed: [10.0.90.24] => (item=apr.tar.gz)
changed: [10.0.90.25] => (item=apr.tar.gz)
changed: [10.0.90.25] => (item=apr-util.tar.gz)
changed: [10.0.90.24] => (item=apr-util.tar.gz)
TASK: [apache_install | create apache user in client] *************************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_install | uncompression apache software to client] **************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | uncompression apr software to client] *****************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | uncompression apr-util software to client] ************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | copy apache sysv start service script to client] ******
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_install | copy apache config to Client] *************************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | create lib install dir] *******************************
ok: [10.0.90.24]
ok: [10.0.90.25]
TASK: [apache_install | check apache Iconv in client] *************************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | install apache iconv in client] ***********************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | check lib in config in client] ************************
failed: [10.0.90.24] => {"changed": true, "cmd": "grep -c /usr/local/lib/ /etc/ld.so.conf", "delta": "0:00:00.002203", "end": "2015-11-23 18:12:47.338012", "rc": 1, "start": "2015-11-23 18:12:47.335809", "warnings": []}
stdout: 0
...ignoring
failed: [10.0.90.25] => {"changed": true, "cmd": "grep -c /usr/local/lib/ /etc/ld.so.conf", "delta": "0:00:00.002412", "end": "2015-11-23 18:12:47.349201", "rc": 1, "start": "2015-11-23 18:12:47.346789", "warnings": []}
stdout: 0
...ignoring
TASK: [apache_install | install apache Iconv in client] ***********************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | create apache Dir] ************************************
changed: [10.0.90.24] => (item=/usr/local/apache/conf/vhost)
changed: [10.0.90.25] => (item=/usr/local/apache/conf/vhost)
TASK: [apache_install | start apache service in client] ***********************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | add boot start apache service in client] **************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | delete apache compression software in client] *********
changed: [10.0.90.24]
changed: [10.0.90.25]
PLAY RECAP ********************************************************************
10.0.90.24 : ok=18 changed=16 unreachable=0 failed=0
10.0.90.25 : ok=18 changed=16 unreachable=0 failed=0
然后可以到90.24和90.25这两台客户端服务器上检查apache的安装情况,进行测试。
4、删除httpd
#cd /etc/ansible/roles
#mkdir -pv apache_delete/{meta,tasks,vars}
配置yml文件
#cat apache_delete/meta/main.yml
galaxy_info:
author: liguang xing
description: Delete Apache
license: MIT
min_ansible_version: 1.9.4
platforms:
- name: CentOS
versions:
- 6
categories:
- Service
dependencies: []
# cat apache_delete/tasks/delete.yml
- name: stop httpd service in client
service: name=httpd state=stopped
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete boot start in client
shell: chkconfig --del httpd
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apache Dir in client
shell: rm -rf /usr/local/apache
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apr Dir in client
shell: rm -rf /usr/local/apr
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apr-util Dir in client
shell: rm -rf /usr/local/apr-util
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apache service script in client
shell: rm -f /etc/init.d/httpd
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apache user
shell: userdel www
ignore_errors: yes
when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
# cat apache_delete/tasks/main.yml
- include: delete.yml
5、创建apache_delete.yml删除脚本
#cd /etc/ansible/roles
#cat apache_delete.yml
---
- hosts: "{{host}}"
remote_user: "{{user}}"
gather_facts: True
roles:
- apache_delete
检查语法:
# ansible-playbook apache_delete.yml --syntax-check
playbook: apache_delete.yml
没有错误,开始执行:
# ansible-playbook apache_delete.yml --extra-vars "host=web user=root"
PLAY [web] ********************************************************************
GATHERING FACTS ***************************************************************
ok: [10.0.90.25]
ok: [10.0.90.24]
TASK: [apache_delete | stop httpd service in client] **************************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_delete | delete boot start in client] ***************************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_delete | delete apache Dir in client] ***************************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_delete | delete apr Dir in client] ******************************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_delete | delete apr-util Dir in client] *************************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_delete | delete apache service script in client] ****************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_delete | delete apache user] ************************************
changed: [10.0.90.24]
changed: [10.0.90.25]
PLAY RECAP ********************************************************************
10.0.90.24 : ok=8 changed=7 unreachable=0 failed=0
10.0.90.25 : ok=8 changed=7 unreachable=0 failed=0
第二部分: 安装mysql
一、首先下载mysql二进制安装包下载地址;http://dev.mysql.com/downloads/mysql/我使用的是mysql-5.6.19-linux-glibc2.5-x86_64.tar.gz1、将安装过程整合到ansible#cd /usr/local/src#tar xf mysql-5.6.19-linux-glibc2.5-x86_64.tar.gz#mv mysql-5.6.19-linux-glibc2.5-x86_64 mysql再次打包#tar -zcf mysql-5.6.19.tar.gz mysql/#mv mysql-5.6.19.tar.gz /tmp2、创建目录并配置yml文件:#cd /etc/ansible/roles#mkdir -pv mysql_install/{files,meta,tasks,templates,vars}#cd mysql_install#mv /tmp/mysql-5.6.19.tar.gz files/meta目录:#cat meta/main.yml(参照apache_install/meta/目录中的main.yml,将description:修改下即可)tasks目录:# cat tasks/copy.yml - name: copy mysql software to in client copy: src=mysql-5.6.19.tar.gz dest=/tmp/mysql-5.6.19.tar.gz owner=root group=root when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: create mysql user In client user: name={{ mysql_user }} state=present createhome=no shell=/sbin/nologin when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6 and ansible_distribution_version|int >=6- name: Copy Mysql Start Script To Redhat Client template: src=mysqld dest=/etc/init.d/mysqld owner=root group=root mode=0755 when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Copy Install Mysql Script To Redhat Client template: src=install_mysql.sh dest=/tmp/ owner=root group=root mode=0755 when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Copy Mysql Config To Redhat Client template: src=my.cnf dest=/tmp/ owner=root group=root mode=0644 when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Copy Mysql Security Script To Redhat Client template: src=mysql_security.sh dest=/tmp/ owner=root group=root mode=0755 when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6# cat tasks/delete.yml - name: Delete Mysql compression Software In Redhat Client shell: rm -f /tmp/mysql-5.6.19.tar.gz /tmp/mysql_security.sh when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6# cat tasks/install.yml - name: Create Mysql Install Dir file: dest=/data/mysql state=directory when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Uncompression Mysql Software To Redhat Client shell: tar zxf /tmp/mysql-5.6.19.tar.gz -C /usr/local/ when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Modify Mysql Dir Permission In Redhat Client file: path={{ item }} owner={{ mysql_user }} group={{ mysql_user }} mode=0755 with_items: - "{{ mysql_datadir }}" - "{{ mysql_basedir }}" when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Install Mysql Script In Redhat Client shell: /bin/bash /tmp/install_mysql.sh when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Start Myql Security Script In Redhat Client shell: /bin/bash /tmp/mysql_security.sh when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Add Boot Start Mysql Service In Redhat Client shell: chkconfig --add mysqld;chkconfig mysqld on when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6#cat tasks/main.yml - include: copy.yml- include: install.yml- include: delete.yml3|、templates目录:#cd /etc/ansible/roles/mysql_install#cat templates/install_mysql.sh --脚本内容:#!/bin/bashmv /tmp/my.cnf /etc/my.cnfchown -R {{ mysql_user }}:{{ mysql_user }} {{ mysql_datadir }} {{ mysql_basedir }}####init mysql DB##cd {{ mysql_basedir }}./scripts/mysql_install_db --defaults-file=/etc/my.cnf --datadir={{ mysql_datadir }} --user={{ mysql_user }} >> /dev/null 2>&1 &sleep 3service mysqld start##add mysql env##echo 'MANPATH /usr/local/mysql/man' >> /etc/man.configln -sv /usr/local/mysql/include /usr/include/mysqlecho '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.confldconfig##chkconfig --add mysqldchkconfig mysqld on rm -f /tmp/$(basename $0)
拷贝mysql的配置文件到templates目录(也可以根据自己需求配置my.cnf,如下:)# cat templates/my.cnf
[client]
port = {{ mysql_port }}
socket = {{ mysql_sock }}
[mysqld]
character-set-server = utf8
port = {{ mysql_port }}
socket = {{ mysql_sock }}
datadir = {{ mysql_datadir }}
log-error = {{ mysql_datadir }}/mysql-error.log
pid-file = {{ mysql_datadir }}/mysql.pid
log-bin = {{ mysql_datadir }}/mysql-bin
skip-external-locking
skip-name-resolve
skip-symbolic-links
server-id = 1
binlog_format=mixed
binlog_cache_size=8M
max_binlog_cache_size=24M
max_binlog_size=1G
expire_logs_days=7
default_storage_engine = innodb
key_buffer_size = 384M
sort_buffer_size = 2M
read_buffer_size = 2M
read_rnd_buffer_size = 16M
join_buffer_size = 2M
thread_cache_size = 32
thread_concurrency = 16
explicit_defaults_for_timestamp=true
interactive_timeout = 120
wait_timeout = 120
table_open_cache = 4096
open_files_limit = 10240
back_log=600
max_connections = 5000
max_connect_errors = 5000
max_allowed_packet = 16M
tmp_table_size = 256M
max_heap_table_size = 512M
bulk_insert_buffer_size = 64M
myisam_sort_buffer_size = 64M
myisam_repair_threads =1
myisam-recover-options
long_query_time = 2
slow_query_log
slow_query_log_file = {{ mysql_datadir }}/slow.log
innodb_buffer_pool_size = 1G
innodb_data_file_path = ibdata1:1G:autoextend
innodb_data_home_dir = {{ mysql_datadir }}
innodb_log_group_home_dir = {{ mysql_datadir }}
innodb_file_io_threads = 4
innodb_thread_concurrency = 8
innodb_flush_log_at_trx_commit = 2
innodb_log_buffer_size = 256M
innodb_log_file_size = 512M
innodb_log_files_in_group = 3
innodb_max_dirty_pages_pct = 90
innodb_lock_wait_timeout = 120
innodb_file_per_table = 1
innodb_support_xa=0
innodb_flush_method = O_DIRECT
[mysqldump]
quick
max_allowed_packet = 32M
[mysql]
no-auto-rehash
[myisamchk]
key_buffer_size = 512M
sort_buffer_size = 512M
read_buffer = 8M
write_buffer = 8M
[mysqlhotcopy]
interactive-timeout
拷贝mysqld启动脚本:#cp /usr/local/src/mysql/support-files/mysql.server templates/设置密码脚本:# cat templates/mysql_security.sh #!/bin/bash{{ mysql_basedir }}/bin/mysql -h localhost -u root -e "set password for 'root'@'localhost' = password('mima');"templates目录结构:# tree templates/templates/├── install_mysql.sh├── my.cnf├── mysqld└── mysql_security.shvars 目录:# cat vars/main.yml mysql_basedir: /usr/local/mysqlmysql_datadir: /data/mysqlmysql_user: mysqlmysql_database_user: rootmysql_passwd: 'mima'mysql_port: 3306mysql_sock: /data/mysql/mysql.sockmysql_charset: utf8mysql_collation: utf8_general_cimysql_version: mysql-5.6.19-linux-glibc2.5-x86_64.tar.gz3、创建mysql_install.yml安装文件#cd /etc/ansible/roles# cat mysql_install.yml --- - hosts: "{{host}}" remote_user: "{{user}}" gather_facts: True roles: - common - mysql_install4、开始执行#ansible-playbook mysql_install.yml --syntax-check --检测语法playbook: mysql_install.yml没错误,开始执行:# ansible-playbook mysql_install.yml --extra-vars "host=web user=root"PLAY [web] ******************************************************************** GATHERING FACTS *************************************************************** ok: [10.0.90.24]TASK: [common | install initializtion require software] *********************** changed: [10.0.90.24]TASK: [mysql_install | copy mysql software to in client] ********************** ok: [10.0.90.24]TASK: [mysql_install | create mysql user In client] ************************** changed: [10.0.90.24]TASK: [mysql_install | Copy Mysql Start Script To Redhat Client] ************** changed: [10.0.90.24]TASK: [mysql_install | Copy Install Mysql Script To Redhat Client] *********** changed: [10.0.90.24]TASK: [mysql_install | Copy Mysql Config To Redhat Client] ******************** changed: [10.0.90.24]TASK: [mysql_install | Copy Mysql Security Script To Redhat Client] *********** changed: [10.0.90.24]TASK: [mysql_install | Create Mysql Install Dir] ****************************** changed: [10.0.90.24]TASK: [mysql_install | Uncompression Mysql Software To Redhat Client] ********* changed: [10.0.90.24]TASK: [mysql_install | Modify Mysql Dir Permission In Redhat Client] ********** changed: [10.0.90.24] => (item=/data/mysql)changed: [10.0.90.24] => (item=/usr/local/mysql)TASK: [mysql_install | Install Mysql Script In Redhat Client] ***************** changed: [10.0.90.24]TASK: [mysql_install | Start Myql Security Script In Redhat Client] *********** changed: [10.0.90.24]TASK: [mysql_install | Add Boot Start Mysql Service In Redhat Client] ********* changed: [10.0.90.24]TASK: [mysql_install | Delete Mysql compression Software In Redhat Client] **** changed: [10.0.90.24]PLAY RECAP ******************************************************************** 10.0.90.24 : ok=15 changed=13 unreachable=0 failed=0 成功之后到90.24服务器上查看mysql是否安装成功!我测试没问题二、删除mysql1、创建目录:#cd /etc/ansible/roles#mkdir -pv mysql_delete/{meta,tasks,vars}# cat meta/main.yml (参照apache_install/meta/目录中的main.yml,将description:修改下即可) # cat tasks/delete.yml - name: Stop Mysql Service service: name=mysqld state=stopped ignore_errors: yes when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Delete Mysql Boot Start Script shell: chkconfig --del mysqld ignore_errors: yes when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Delete Mysql Dir And Socket shell: rm -rf {{ mysql_basedir }} {{ mysql_datadir }} when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Delete Mysql User shell: userdel {{ mysql_user }} ignore_errors: yes when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Delete Mysql Service Start Script shell: rm -f /etc/init.d/mysqld when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Delete Mysql lib shell: rm -f /etc/ld.so.conf.d/mysql.conf when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Delete Mysql include file shell: rm -f /usr/include/mysql when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6- name: Delete Mysql config file shell: rm -f /etc/my.cnf when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6#cat tasks/main.yml - include: delete.yml#cat vars/main.yml mysql_basedir: /usr/local/mysqlmysql_datadir: /data/mysqlmysql_user: mysql2、创建mysql_delete.yml文件:#cd /etc/ansible/roles#cat mysql_delete.yml ---- hosts: "{{host}}" remote_user: "{{user}}" gather_facts: True roles: - mysql_delete3、检测语法并执行:# ansible-playbook mysql_delete.yml --syntax-checkplaybook: mysql_delete.yml 没有报错,开始执行# ansible-playbook mysql_delete.yml --extra-vars "host=web user=root"PLAY [web] ******************************************************************** GATHERING FACTS *************************************************************** ok: [10.0.90.24]TASK: [mysql_delete | Stop Mysql Service] ************************************* changed: [10.0.90.24]TASK: [mysql_delete | Delete Mysql Boot Start Script] ************************* changed: [10.0.90.24]TASK: [mysql_delete | Delete Mysql Dir And Socket] **************************** changed: [10.0.90.24]TASK: [mysql_delete | Delete Mysql User] ************************************** changed: [10.0.90.24]TASK: [mysql_delete | Delete Mysql Service Start Script] ********************** changed: [10.0.90.24]TASK: [mysql_delete | Delete Mysql lib] *************************************** changed: [10.0.90.24]TASK: [mysql_delete | Delete Mysql include file] ****************************** changed: [10.0.90.24]TASK: [mysql_delete | Delete Mysql config file] ******************************* changed: [10.0.90.24]PLAY RECAP ******************************************************************** 10.0.90.24 : ok=9 changed=8 unreachable=0 failed=0 第三部分:安装php
一、在ansible服务端安装php或者其他服务器上(服务器架构和ansible客户端保持一致)
注:本文档编译安装的php没有编译太多模块,仅供参考,如果需要其他模块,请自行编译加入!
1、下载php源码,地址:http://php.net/downloads.php
本次下载的是php-5.6.15.tar.gz
2、开始编译安装php
如果想让编译的php支持mcrypt扩展,需要下载(http://www.rpmfind.net) 如下两个rpm包并安装之:
libmcrypt-2.5.8-9.el6.x86_64.rpm
libmcrypt-devel-2.5.8-9.el6.x86_64.rpm
安装libmcrypt:
#cd /usr/local/src
# rpm -ivh libmcrypt-2.5.8-9.el6.x86_64.rpm libmcrypt-devel-2.5.8-9.el6.x86_64.rpm
Preparing... ########################################### [100%]
1:libmcrypt ########################################### [ 50%]
2:libmcrypt-devel ########################################### [100%]
安装php:
#tar xf php-5.6.15.tar.gz
#cd php-5.6.15
#./configure --prefix=/usr/local/php --with-mysql=/usr/local/mysql --with-openssl --with-mysqli=/usr/local/mysql/bin/mysql_config \
--enable-mbstring --with-freetype-dir --with-jpeg-dir --with-png-dir --with-zlib --with-libxml-dir=/usr --enable-xml \
--with-apxs2=/usr/local/apache/bin/apxs --with-mcrypt --with-iconv=/usr/local/
#make
#make test
#make install
3、为php提供配置文件
#mkdir /etc/php
#cp php.ini-production /etc/php/php.ini
4、编辑apache配置文件httpd.conf,以使apache支持php
# vim /usr/local/apache/conf/httpd.conf
(1)在AddType处添加如下两行
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
(2)定位至DirectoryIndex index.html
添加index.php:
DirectoryIndex index.php index.html

测试是否可以正常解析显示php格式的网页:
#cd /usr/local/apache/htdocs
#cat index.php
<html><body><h1>
php is works!
</h1></body></html>
<?php
phpinfo();
?>
重启httpd
#service httpd restart
在浏览器中测试: http://ip --如果网页显示php测试页面,表示已经支持php网页。(我测试是可以正常打开php测试页面的)
注:如果无法显示php的网页,查看selinux和iptables,selinux需要disabled或者permissive状态!!!
5、测试php和mysql的连接情况
#vim index.php
<html><body><h1>
php is works!
</h1></body></html>
<?php
$conn=mysql_connect('localhost:/data/mysql/mysql.sock','root','123456');
if($conn)
echo "Success...";
else
echo "Failure...";
mysql_close();
?>
注:我的mysql是编译安装的,sock文件在/data/mysql/目录,如果sock文件在/tmp目录,localhost后面就不需要指定sock路径。
然后再浏览器测试: http://ip --出现如下页面,表示php与mysql连接正常
php is works!
Success...
二、整合php并通过ansible安装到客户端
1、创建目录
#cd /etc/ansible/roles
#mkdir -pv php_install/{files,meta,tasks,templates,vars}
2、压缩php目录并拷贝文件
#cd /usr/local/
#tar -zcf php-5.6.15.tar.gz php/
#mv php-5.6.15.tar.gz /etc/ansible/roles/php_install/files
拷贝libmcrypt文件
#cd /usr/local/src
#cp libmcrypt-*.rpm /etc/ansible/roles/php_install/files
拷贝libphp5.so文件(没有这个so文件,apache将无法解析php页面)
#cp /usr/local/apache/modules/libphp5.so /etc/ansible/roles/php_install/files
拷贝httpd.conf文件
#cd /etc/ansible/roles/php_install
#cp /usr/local/apache/conf/httpd.conf templates/
拷贝php.ini文件
#cp /etc/php/php.ini templates/
创建install_lib.sh脚本
#vim templates/install_lib.sh
#!/bin/bash
cd /tmp
rpm -ivh libmcrypt-2.5.8-9.el6.x86_64.rpm libmcrypt-devel-2.5.8-9.el6.x86_64.rpm
3、创建yml文件
#cat meta/main.yml (参考apache_install/meta/目录中的main.yml,将description:修改下即可)
#cat tasks/copy.yml
- name: copy php software to client
copy: src=php-5.6.15.tar.gz dest=/tmp/ owner=root group=root
- name: copy php libphp5.so file to client
copy: src=libphp5.so dest=/usr/local/apache/modules/ owner=root group=root mode=0755
- name: uncompression php software to client
shell: tar xf /tmp/php-5.6.15.tar.gz -C /usr/local/
- name: copy install lib script to client
template: src=install_lib.sh dest=/tmp/ owner=root group=root mode=0755
- name: copy libmcrypt package to client
copy: src=libmcrypt-2.5.8-9.el6.x86_64.rpm dest=/tmp/ owner=root group=root
- name: copy libmcrypt-devel package to client
copy: src=libmcrypt-devel-2.5.8-9.el6.x86_64.rpm dest=/tmp/ owner=root group=root
- name: create php config Dir
file: dest=/etc/php state=directory
- name: copy php config file to client
template: src=php.ini dest=/etc/php owner=root group=root
- name: copy httpd.conf config file to client
template: src=httpd.conf dest=/usr/local/apache/conf/ owner=root group=root
#cat tasks/delete.yml
- name: delete php software and libmcrypt in client
shell: rm -f /tmp/php-5.6.15.tar.gz /tmp/libmcrypt-*.rpm /tmp/install_lib.sh
#cat tasks/install.yml
- name: install libmcrypt package in client
shell: /bin/bash /tmp/install_lib.sh
#cat tasks/main.yml
- include: copy.yml
- include: install.yml
- include: delete.yml
templates 目录下文件:
#tree templates/
templates/
├── httpd.conf
├── install_lib.sh
└── php.ini
files目录下文件
#tree files
files
├── libmcrypt-2.5.8-9.el6.x86_64.rpm
├── libmcrypt-devel-2.5.8-9.el6.x86_64.rpm
├── libphp5.so
└── php-5.6.15.tar.gz
4、创建php_install.yml文件
#cd /etc/ansible/roles
# cat php_install.yml
---
- hosts: "{{host}}"
remote_user: "{{user}}"
gather_facts: True
roles:
- common
- php_install
5、检测语法并执行:
#ansible-playbook php_install.yml --syntax-check
执行:
#ansible-playbook php_install.yml --extra-vars "host=web user=root"
PLAY [web] ********************************************************************
GATHERING FACTS ***************************************************************
ok: [10.0.90.24]
TASK: [common | install initializtion require software] ***********************
changed: [10.0.90.24]
TASK: [php_install | copy php software to client] *****************************
ok: [10.0.90.24]
TASK: [php_install | copy php libphp5.so file to client] *********************
changed: [10.0.90.24]
TASK: [php_install | uncompression php software to client] ********************
changed: [10.0.90.24]
TASK: [php_install | copy install lib script to client] ***********************
ok: [10.0.90.24]
TASK: [php_install | copy libmcrypt package to client] ************************
ok: [10.0.90.24]
TASK: [php_install | copy libmcrypt-devel package to client] ******************
ok: [10.0.90.24]
TASK: [php_install | create php config Dir] **********************************
ok: [10.0.90.24]
TASK: [php_install | copy php config file to client] **************************
changed: [10.0.90.24]
TASK: [php_install | copy httpd.conf config file to client] *******************
ok: [10.0.90.24]
TASK: [php_install | install libmcrypt package in client] *********************
ok: [10.0.90.24]
PLAY RECAP ********************************************************************
10.0.90.24 : ok=11 changed=10 unreachable=0 failed=0

三、删除php
1、创建目录
#cd /etc/ansible/roles
#mkdir -pv php_delete/{meta,tasks}
2、创建yml文件
#cd php_delete
#cat meta/main.yml (参考apache_install/meta/目录中的main.yml文件,将description:修改下即可)
# cat tasks/delete.yml
- name: delete php directory in client
shell: rm -rf /usr/local/php
- name: delete php config file in client
shell: rm -f /etc/php/php.ini
#cat tasks/main.yml
- include: delete.yml
3、创建php_delete.yml文件
#cd /etc/ansible/roles
# cat php_delete.yml
---
- hosts: "{{host}}"
remote_user: "{{user}}"
gather_facts: True
roles:
- php_delete
4、检测语法并执行
#ansible-playbook php_delete.yml --syntax-check
执行:
#ansible-playbook php_delete.yml --extra-vars "host=web user=root"
PLAY [web] ********************************************************************
GATHERING FACTS ***************************************************************
ok: [10.0.90.24]
TASK: [php_delete | delete php directory in client] ***************************
changed: [10.0.90.24]
TASK: [php_delete | delete php config file in client] *************************
changed: [10.0.90.24]
PLAY RECAP ********************************************************************
10.0.90.24 : ok=3 changed=2 unreachable=0 failed=0
第四部分:整合ansible安装LAMP环境
1、创建安装lamp的lamp_install.yml文件
#cd /etc/ansible/roles
#vim lamp_install.yml
---
- hosts: "{{host}}"
remote_user: "{{user}}"
gather_facts: True
roles:
- apache_install
- mysql_install
- php_install
测试:
# ansible-playbook lamp_install.yml --syntax-check
playbook: lamp_install.yml --无报错,执行:
# ansible-playbook lamp_install.yml --extra-vars "host=web user=root"
PLAY [web] ********************************************************************
…………………… 太多了,省略
PLAY RECAP ********************************************************************
10.0.90.24 : ok=41 changed=38 unreachable=0 failed=0
2、创建删除lamp的lamp_delete.yml文件
#cd /etc/ansible/roles
#vim lamp_delete.yml
---
- hosts: "{{host}}"
remote_user: "{{user}}"
gather_facts: True
roles:
- apache_delete
- mysql_delete
- php_delete
测试:
# ansible-playbook lamp_delete.yml --syntax-check
playbook: lamp_delete.yml --无报错,执行:
# ansible-playbook lamp_delete.yml --extra-vars "host=web user=root"

…………………………省略
PLAY RECAP ********************************************************************
10.0.90.24 : ok=18 changed=17 unreachable=0 failed=0

注:参考链接:/article/4255582.html

本人也是刚开始研究ansible,不足之处,请多多指出!
本文出自 “知识体系” 博客,请务必保留此出处http://linuxg.blog.51cto.com/4410110/1716094
内容来自用户分享和网络整理,不保证内容的准确性,如有侵权内容,可联系管理员处理 点击这里给我发消息
标签: