ansible的安装部署及简单应用

Ansible 是一个配置管理和应用部署工具，功能类似于目前业界的配置管理工具 Chef,Puppet,Saltstack。Ansible 是通过 Python 语言开发。Ansible 平台由 Michael DeHaan 创建，他同时也是知名软件 Cobbler 与 Func 的作者。Ansible 的第一个版本发布于 2012 年 2 月。Ansible 默认通过 SSH 协议管理机器，所以 Ansible 不需要安装客户端程序在服务器上。您只需要将 Ansible 安装在一台服务器，在 Ansible 安装完后，您就可以去管理控制其它服务器。不需要为它配置数据库，Ansible 不会以 daemons 方式来启动或保持运行状态。Ansible 可以实现以下目标：

自动化部署应用
自动化管理配置
自动化的持续交付
自动化的（AWS）云服务管理。

根据 Ansible 官方提供的信息，当前使用 Ansible 的用户有：evernote、rackspace、NASA、Atlassian、twitter 等。

1、分别配置各自主机名，并配置hosts文件（能互相解析）



8.20、8.39、8.40

#vim /etc/hosts

# hostname node1.chinasoft.com

vim /etc/hosts

192.168.8.20 node1.chinasoft.com node1

192.168.8.39 node2.chinasoft.com node2

2、在ansible服务器8.40上配置ssh免密码访问

# ssh-keygen

# ssh-copy-id -i .ssh/id_rsa.pub root@node1.chinasoft.com

# ssh-copy-id -i .ssh/id_rsa.pub root@node2.chinasoft.com

测试是否成功

# ssh node1.chinasoft.com 'date';date

# ssh node2.chinasoft.com 'date';date

3、安装ansible服务

# yum install -y epel-relase

# yum install -y ansible1.9

配置服务器组

# vim /etc/ansible/hosts

[webservers]

node1.chinasoft.com

node2.chinasoft.com

[dbserver2]

node1.chinasoft.com

node2.chinasoft.com



4、常用服务及模块的使用

查看命令的帮助文档，如copy

# ansible-doc -s copy

简单的命令测试：

①ping响应

# ansible all -m ping

node2.chinasoft.com | success >> {

"changed": false,

"ping": "pong"

}

node1.chinasoft.com | success >> {

"changed": false,

"ping": "pong"

}

②各服务器时间

# ansible all -a 'date'

node2.chinasoft.com | success | rc=0 >>

Mon Apr 18 20:43:48 CST 2016

node1.chinasoft.com | success | rc=0 >>

Mon Apr 18 20:43:48 CST 2016

③文件拷贝

# ansible dbservers -m copy -a "src=/etc/fstab dest=/root/fstab"

验证拷贝是否成功

# ansible dbservers -a "ls /root"

node1.chinasoft.com | success | rc=0 >>

anaconda-ks.cfg

fstab

install.log

install.log.syslog

node2.chinasoft.com | success | rc=0 >>

anaconda-ks.cfg

fstab

install.log

install.log.syslog

④添加计划任务

# ansible all -m cron -a 'name="custom job" minute=*/3 hour=* day=* month=* weekday=* job="/usr/sbin/ntpdate 192.168.8.102"'

node2.chinasoft.com | success >> {

"changed": false,

"jobs": [

"customjob",

"custom job"

]

}

node1.chinasoft.com | success >> {

"changed": true,

"jobs": [

"custom job"

]

}

# ansible all -a "crontab -l"

node1.chinasoft.com | success | rc=0 >>

#Ansible: custom job

*/3 * * * * /usr/sbin/ntpdate 192.168.8.102

node2.chinasoft.com | success | rc=0 >>

#Ansible: customjob

*/3 * * * * /usr/sbin/ntpdate 192.168.8.102

④在节点中添加组

# ansible-doc -s group

action: group

gid # Optional `GID' to set for the group.

name= # Name of the group to manage.

state # Whether the group should be present or not on the remote host.

system # If `yes', indicates that the group created is a system group.

添加mysql组

# ansible all -m group -a "gid=306 system=yes name=mysql"

node1.chinasoft.com | success >> {

"changed": true,

"gid": 306,

"name": "mysql",

"state": "present",

"system": true

}

node2.chinasoft.com | success >> {

"changed": true,

"gid": 306,

"name": "mysql",

"state": "present",

"system": true

}

# ansible all -a "tail -1 /etc/group"

node2.chinasoft.com | success | rc=0 >>

mysql:x:306:

node1.chinasoft.com | success | rc=0 >>

mysql:x:306:

⑥yum命令的使用

# ansible-doc -s yum

action: yum

conf_file # The remote yum configuration file to use for the transaction.

disable_gpg_check # Whether to disable the GPG checking of signatures of packages being installed. Has an effect only if state is `present' or `latest'.

disablerepo # `Repoid' of repositories to disable for the install/update operation. These repos will not persist beyond the transaction. When specifying multiple repos, separ

enablerepo # `Repoid' of repositories to enable for the install/update operation. These repos will not persist beyond the transaction. When specifying multiple repos, separa

list # Various (non-idempotent) commands for usage with `/usr/bin/ansible' and `not' playbooks. See examples.

name= # Package name, or package specifier with version, like `name-1.0'. When using state=latest, this can be '*' which means run: yum -y update. You can also pass a u

state # Whether to install (`present', `latest'), or remove (`absent') a package.

update_cache # Force updating the cache. Has an effect only if state is `present' or `latest'.

安装httpd软件

# ansible all -m yum -a "name=httpd state=present"

查看是否安装了httpd

# ansible all -a "rpm -q httpd"

node1.chinasoft.com | success | rc=0 >>

httpd-2.2.15-47.el6.centos.4.x86_64

node2.chinasoft.com | success | rc=0 >>

httpd-2.2.15-47.el6.centos.4.x86_64

⑦查看服务状态

# ansible all -a "service httpd status"

node2.chinasoft.com | FAILED | rc=3 >>

httpd 已停

node1.chinasoft.com | FAILED | rc=3 >>

httpd 已停

启动httpd服务，并设置开机自启动

# ansible all -m service -a "state=started enabled=yes name=httpd"

node1.chinasoft.com | success >> {

"changed": true,

"enabled": true,

"name": "httpd",

"state": "started"

}

node2.chinasoft.com | success >> {

"changed": true,

"enabled": true,

"name": "httpd",

"state": "started"

}

# ansible all -a "service httpd status"

node1.chinasoft.com | success | rc=0 >>

httpd (pid 2575) 正在运行...

node2.chinasoft.com | success | rc=0 >>

httpd (pid 2371) 正在运行...

校验是否开机自启动

# ansible all -a "chkconfig --list httpd"

node1.chinasoft.com | success | rc=0 >>

httpd 0:off1:off2:on3:on4:on5:on6:off

node2.chinasoft.com | success | rc=0 >>

httpd 0:off1:off2:on3:on4:on5:on6:off

5、剧本的简单使用

①通过脚本添加组

# vim test.yaml

- hosts: all

remote_user: root

tasks:

- name: add a group

group: gid=1000 name=testgroup1 system=no

- name: execute a commond

command: /bin/date

执行剧本

# ansible-playbook test.yaml

PLAY [all] ********************************************************************

GATHERING FACTS ***************************************************************

ok: [node2.chinasoft.com]

ok: [node1.chinasoft.com]

TASK: [add a group] ***********************************************************

changed: [node2.chinasoft.com]

changed: [node1.chinasoft.com]

TASK: [execute a commond] *****************************************************

changed: [node2.chinasoft.com]

changed: [node1.chinasoft.com]

PLAY RECAP ********************************************************************

node1.chinasoft.com : ok=3 changed=2 unreachable=0 failed=0

node2.chinasoft.com : ok=3 changed=2 unreachable=0 failed=0

②通过脚本修改httpd配置文件，修改端口为8080

# vim web.yaml

- hosts: all

remote_user: root

tasks:

- name: ensure apache latest version

yum: state=latest name=httpd

- name: apache configure file

copy: src=/root/httpd.conf dest=/etc/httpd/conf/httpd.conf force=yes

notify:

- restart httpd

handlers:

- name: restart httpd

service: name=httpd state=restarted

执行剧本

# ansible-playbook web.yaml