ansible自动化安装及部署httpd
实验环境:(开始实验之前,请保证防火墙关闭,selinux关闭,时间同步)
ansible:192.168.2.7 web1:192.168.2.7 web2:192.168.2.17
OS:centos7 OS:centos7 OS:centos7
实现功能:(自动化部署两台各自主机命名的httpd服务器)
1、使用ansible的playbook实现自动化安装httpd
2、建立httpd服务器,要求提供各自基于主机名的虚拟主机:
(1)www.x.com,页面文件目录为/web/vhosts;错误日志为
/var/log/httpd/x.err,访问日志为/var/log/httpd/x.access
(2)www.y.com,页面文件目录为/web/vhosts;错误日志为 /var/log/httpd/y.err,访问日志为/var/log/httpd/y.access
(3)为两个虚拟主机建立各自的主页文件/web/vhosts/index.html,内容分别为其对应的主机名
注意:脚本是源码编译安装的httpd2.4
ansible安装
配置epel源,yum安装ansible即可
[root@ansible ~]$cat /etc/yum.repos.d/epel.repo [epel] name=aliyun epel baseurl=http://mirrors.aliyun.com/epel/$releasever/$basearch enabled=1 gpgcheck=0 [root@ansible ~]$yum -y install ansible ....
因为要部署两台主机,且ansible是依赖ssh密钥认证,所以接下来操作ansible免密码登陆web1和web2,同时也需要更改/etc/hosts文件
[root@ansible ~]$ssh-keygen Generating public/private rsa key pair. Enter file in which to save the key (/root/.ssh/id_rsa): Created directory '/root/.ssh'. Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /root/.ssh/id_rsa. Your public key has been saved in /root/.ssh/id_rsa.pub. The key fingerprint is: SHA256:o+OlbC5xbEnPKc3MnhP++eHX78+oN9RPhQTJoihxyUg root@ansible The key's randomart image is: +---[RSA 2048]----+ | .Eo . ..o | | o + . o . | | o . . . . . | | . o . . .| | + OS. ..| | . *.X. . o| | +o+.o .. o.| | .o.+= o .+oo| | += oo.++.oB| +----[SHA256]-----+ [root@ansible ~]$ssh-copy-id anaconda-ks.cfg .bash_history .bash_logout .bash_profile .bashrc .cshrc original-ks.cfg .ssh/ .tcshrc .viminfo [root@ansible ~]$ssh-copy-id 192.168.2.17 /usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub" The authenticity of host '192.168.2.17 (192.168.2.17)' can't be established. ECDSA key fingerprint is SHA256:bzwVyjsq4E6PnawN+cXFHl3yIXEgmN64I2+pwUKKKkU. ECDSA key fingerprint is MD5:1d:d8:5a:07:13:a4:5e:dc:a7:69:7c:79:95:69:fe:67. Are you sure you want to continue connecting (yes/no)? yes /usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed /usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys root@192.168.2.17's password: Number of key(s) added: 1 Now try logging into the machine, with: "ssh '192.168.2.17'" and check to make sure that only the key(s) you wanted were added. [root@ansible ~]$ssh-copy-id 192.168.2.27 /usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub" The authenticity of host '192.168.2.27 (192.168.2.27)' can't be established. ECDSA key fingerprint is SHA256:ZWtO06H5nDqNbg12inajd66G9wInPDgEg7OQpiLvSME. ECDSA key fingerprint is MD5:31:d1:a6:74:bf:e3:d2:09:8b:29:94:f1:53:1f:8c:06. Are you sure you want to continue connecting (yes/no)? y Please type 'yes' or 'no': yes /usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed /usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys root@192.168.2.27's password: Number of key(s) added: 1 Now try logging into the machine, with: "ssh '192.168.2.27'" and check to make sure that only the key(s) you wanted were added. [root@ansible ~]$ssh 192.168.2.17 Last login: Sun Nov 22 12:27:57 2020 from afocl-605021336.lan [root@web1 ~]$exit logout Connection to 192.168.2.17 closed. [root@ansible ~]$ssh 192.168.2.27 Last login: Sun Nov 22 12:28:10 2020 from afocl-605021336.lan [root@web2 ~]$exit logout Connection to 192.168.2.27 closed. [root@ansible ~]$vim /etc/hosts [root@ansible ~]$ping -c1 web1 PING web1 (192.168.2.17) 56(84) bytes of data. 64 bytes from web1 (192.168.2.17): icmp_seq=1 ttl=64 time=0.316 ms --- web1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.316/0.316/0.316/0.000 ms [root@ansible ~]$ping -c1 web2 PING web2 (192.168.2.27) 56(84) bytes of data. 64 bytes from web2 (192.168.2.27): icmp_seq=1 ttl=64 time=0.285 ms --- web2 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.285/0.285/0.285/0.000 ms [root@ansible ~]$cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.2.17 web1 www.web1.com 192.168.2.27 web2 www.web2.com [root@ansible ~]$scp /etc/hosts 192.168.2.17:/etc/hosts hosts [root@ansible ~]$scp /etc/hosts 192.168.2.27:/etc/hosts hosts
配置ansible主机清单,并测试ping
[root@ansible ~]$tail -3 /etc/ansible/hosts [webservers] web1 web2 [root@ansible ~]$ansible webservers -m ping web1 | SUCCESS => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": false, "ping": "pong" } web2 | SUCCESS => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": false, "ping": "pong" }
接下来开始部署自动化安装httpd及配置,思路如下:
1、拷贝源码包到各主机/data目录下
2、运行脚本(源码编译安装的httpd2.4版本)
3、配置服务
准备工作
[root@ansible ~]$mkdir /data/playbook/roles -pv mkdir: created directory ‘/data/playbook’ mkdir: created directory ‘/data/playbook/roles’ [root@ansible ~]$cd !:1 cd /data/playbook/roles [root@ansible roles]$ [root@ansible roles]$mkdir httpd24/{files,tasks,handlers,templates} -pv mkdir: created directory ‘httpd24’ mkdir: created directory ‘httpd24/files’ mkdir: created directory ‘httpd24/tasks’ mkdir: created directory ‘httpd24/handlers’ mkdir: created directory ‘httpd24/templates’ [root@ansible roles]$tree -d . └── httpd24 ├── files ├── handlers ├── tasks └── templates [root@ansible roles]$cd httpd24/tasks/ [root@ansible tasks]$vim main.yml [root@ansible tasks]$cat main.yml - include: time.yml - include: copypkg.yml - include: script.yml - include: dir.yml - include: config.yml - include: index.yml [root@ansible tasks]$awk '{print $3}' main.yml | while read file; do touch $file ; done [root@ansible tasks]$ll total 28 -rw-r--r-- 1 root root 228 Nov 22 19:38 config.yml -rw-r--r-- 1 root root 211 Nov 22 18:25 copypkg.yml -rw-r--r-- 1 root root 208 Nov 22 20:14 dir.yml -rw-r--r-- 1 root root 77 Nov 22 20:23 index.yml -rw-r--r-- 1 root root 0 Nov 22 17:35 install.yml -rw-r--r-- 1 root root 127 Nov 22 20:23 main.yml -rw-r--r-- 1 root root 46 Nov 22 19:34 script.yml -rw-r--r-- 1 root root 105 Nov 22 18:10 time.yml
编写各个yml文件,如下:
[root@ansible tasks]$cat time.yml - name: install ntpdate yum: name=ntpdate - name: time synchronization shell: ntpdate ntp.aliyun.com [root@ansible tasks]$cat copypkg.yml - name: copy apr package copy: src=apr-1.7.0.tar.gz dest=/data - name: copy apr-util package copy: src=apr-util-1.6.1.tar.gz dest=/data - name: copy httpd package copy: src=httpd-2.4.39.tar.bz2 dest=/data [root@ansible tasks]$cat script.yml - name: run script script: install_httpd.sh [root@ansible tasks]$cat dir.yml - name: virtual host configure dir file: path=/app/httpd24/conf/vhosts state=directory - name: log dir file: path=/var/log/httpd state=directory - name: data dir file: path=/web/vhosts state=directory [root@ansible tasks]$cat config.yml - name: include configure dir shell: echo "Include conf/vhosts/*.conf" >> /app/httpd24/conf/httpd.conf - name: configure virtual host template: src=web.conf.j2 dest=/app/httpd24/conf/vhosts/web.conf notify: restart httpd [root@ansible tasks]$cat index.yml - name: index page template: src=index.html.j2 dest=/web/vhosts/index.html [root@ansible roles]$vim /data/playbook/roles/role_httpd.yml [root@ansible roles]$cat /data/playbook/roles/role_httpd.yml - hosts: webservers roles: - role: httpd24
开始执行
[root@ansible roles]$pwd /data/playbook/roles [root@ansible roles]$ansible-playbook role_httpd.yml
实验结果,如下:
[root@web1 ~]$ss -tnl State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 100 127.0.0.1:25 *:* LISTEN 0 128 *:22 *:* LISTEN 0 100 [::1]:25 [::]:* LISTEN 0 128 [::]:80 [::]:* LISTEN 0 128 [::]:22 [root@web1 ~]$curl web1 web1 [root@web1 ~]$curl www.web1.com web1 [root@web1 ~]$systemctl is-enabled httpd24 enabled [root@web2 ~]$ss -tnl State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 100 127.0.0.1:25 *:* LISTEN 0 128 *:22 *:* LISTEN 0 100 [::1]:25 [::]:* LISTEN 0 128 [::]:80 [::]:* LISTEN 0 128 [::]:22 [root@web2 ~]$curl web2 web2 [root@web2 ~]$curl www.web2.com web2 [root@web2 ~]$systemctl is-enabled httpd24 enabled
- 自动化服务安装部署工具-Ansible
- 比Ansible更吊的自动化运维工具,自动化统一安装部署_自动化部署udeploy1.0
- Linux系统实现ansible自动化安装配置httpd的方法
- 自动化运维之详细部署安装Ansible服务(超简单)
- 自动化部署与统一安装升级 - 类ansible工具 udeploy0.3版本发布 (更新时间2014-12-24)
- 自动化运维工具--Ansible(安装部署、模块简介与操作)
- 自动化运维工具Ansible实战安装部署
- 自动化运维之Ansible的安装部署与命令模块
- 部署 SaltStack 自动化运维工具,并简易批量安装 httpd 服务
- 自动化运维工具Ansible实战(一)安装部署
- 安装部署自动化运维之Ansible
- 自动化批量部署工具Ansible笔记之ansible安装与Inventory文件
- 自动化运维工具Ansible实战(一)安装部署
- 自动化运维工具Ansible(一)---安装部署
- Kubernetes 和 Swarm 两种docker集群,基于ansible的自动化安装部署(已测)
- 自动化运维工具Ansible详细部署
- 自动化运维工具ansible安装及使用
- [操作系统]自动化集成部署udeployer 批量统一安装一键部署
- 项目自动化之道-5.安装与部署之诊断测试
- Docker安装gitlab-runner 实现自动化部署