Ansible安装部署
Ansible安装部署Ansible是一种集成IT系统的配置管理, 应用部署, 执行特定任务的开源平台. 它基于Python语言实现, 部署只需在主控端部署Ansible环境, 被控端无需安装代理工具, 只需打开SSH, 让主控端通过SSH秘钥认证对其进行所有的管理监控操作.它有一个很庞大的用户群体以及丰富的API, 相对适合部署到数量比较大且对系统软件安装要求比较严格的集群中.
安装环境:
System: Centos 6.7 x64
Master: master.example.com
Minion: client01.example.com
Minion: client02.example.com
一. 环境部署及安装
1. 关闭iptables和SELINUX
2. Master端安装EPEL第三方yum源
# rpm -Uvh http://ftp.linux.ncsu.edu/pub/epel/6/i386/epel-release-6-8.noarch.rpm 3.安装Ansible
# yum install ansible -y 4.添加环境变量以便vi能正常显示中文注释.
# vi /etc/profile
添加:
export LC_ALL=en_US.UTF-8
export LANG=en_US.UTF-8
export LANGUAGE=en_US.UTF-8
# source /etc/profile
二. 初始配置
1. 修改主机及组配置
# cd /etc/ansible
# cp hosts hosts.bak
# cat /dev/null > hosts
# vi /etc/ansible/hosts
client01.example.com
client02.example.com
client01.example.com
client02.example.com
2.配置SSH秘钥认证
# yum install ssh* -y
# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
24:13:34:e9:71:2b:20:0b:48:a6:86:9a:1d:1b:1d:26 root@master.example.comThe key's randomart image is:
+--[ RSA 2048]----+
|ooE o.+. |
|* .+..oo. |
|oooo.ooo.. |
|oo.+o+. |
|o o .S |
| |
| |
| |
| |
+-----------------+
同步公钥文件id_rsa.pub到目标主机
# ssh-copy-id -i /root/.ssh/id_rsa.pub root@client01.example.com
# ssh-copy-id -i /root/.ssh/id_rsa.pub root@client02.example.com
校验SSH免密码配置是否成功.
# ssh root@client02.example.com 如直接进入则配置完成.
3.定义主机与组
（一个组就是一个标签，标签内的主机配置一样，在使用时调用标签执行写好的脚本或命令）
所有定义的主机与组规则都在/etc/Ansible/hosts下.
常见的写法:
192.168.1.21:2135 定义一个IP为192.168.1.21, SSH端口为2135的主机.
jumper ansible_ssh_port=22 ansible_ssh_host=192.168.1.50 定义一个别名为jumper, SSH端口为22, IP为192.168.1.50的主机.
组成员主机名称范例:
www.example.com
db-.example.com
4.定义主机变量
主机可以指定变量, 后面可以供Playbooks调用
host1 http_port=80 maxRequestsPerChild=808
host2 http_port=8080 maxRequestsPerChild=909
5.定义组变量
host1
host2
ntp_server=ntp.atlanta.example.com
proxy=proxy.atlanta.example.com
6.匹配目标
重启webservers组所有SSH服务.
# ansible webservers -m service -a "name=sshd state=restarted"
client01.example.com | success >> {
"changed": true,
"name": "sshd",
"state": "started"
}
client02.example.com | success >> {
"changed": true,
"name": "sshd",
"state": "started"
}
三. Ansible常用模块及API
1.远程命令模块
command: 执行远程主机SHELL命令:
# ansible webservers -m command -a "free -m"
client01.example.com | success | rc=0 >>
total used free shared buffers cached
Mem: 996 108 887 0 7 41
-/+ buffers/cache: 58 937
Swap: 1023 0 1023
client02.example.com | success | rc=0 >>
total used free shared buffers cached
Mem: 996 108 888 0 7 41
-/+ buffers/cache: 58 937
Swap: 1023 0 1023
script: 远程执行MASTER本地SHELL脚本.(类似scp+shell)
# echo "df -h" > ~/test.sh
# ansible webservers -m script -a "~/test.sh"
client01.example.com | success >> {
"changed": true,
"rc": 0,
"stderr": "OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: Applying options for *\r\ndebug1: auto-mux: Trying existing master\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug1: mux_client_request_session: master session id: 2\r\nShared connection to client01.example.com closed.\r\n",
"stdout": "Filesystem SizeUsed Avail Use% Mounted on\r\n/dev/sda3 6.6G815M5.5G13% /\r\ntmpfs 499M 0499M 0% /dev/shm\r\n/dev/sda1 190M 27M154M15% /boot\r\n"
}
client02.example.com | success >> {
"changed": true,
"rc": 0,
"stderr": "OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: Applying options for *\r\ndebug1: auto-mux: Trying existing master\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug1: mux_client_request_session: master session id: 2\r\nShared connection to client02.example.com closed.\r\n",
"stdout": "Filesystem SizeUsed Avail Use% Mounted on\r\n/dev/sda3 6.6G815M5.5G13% /\r\ntmpfs 499M 0499M 0% /dev/shm\r\n/dev/sda1 190M 27M154M15% /boot\r\n"
}
2. copy模块
实现主控端向目标主机拷贝文件, 类似scp功能.
该实例实现~/test.sh文件至webservers组目标主机/tmp下, 并更新文件owner和group
# ansible webservers -m copy -a "src=~/test.sh dest=/tmp/ owner=root group=root mode=0755"
client01.example.com | success >> {
"changed": true,
"checksum": "c989bd551bfa8c755f6cacacb90c5c509432110e",
"dest": "/tmp/test.sh",
"gid": 0,
"group": "root",
"md5sum": "69a238d8cb3c5f979252010b3299e524",
"mode": "0755",
"owner": "root",
"size": 6,
"src": "/root/.ansible/tmp/ansible-tmp-1445322165.21-234077402845688/source",
"state": "file",
"uid": 0
}
client02.example.com | success >> {
"changed": true,
"checksum": "c989bd551bfa8c755f6cacacb90c5c509432110e",
"dest": "/tmp/test.sh",
"gid": 0,
"group": "root",
"md5sum": "69a238d8cb3c5f979252010b3299e524",
"mode": "0755",
"owner": "root",
"size": 6,
"src": "/root/.ansible/tmp/ansible-tmp-1445322165.2-164402895387597/source",
"state": "file",
"uid": 0
}
3.stat模块
获取远程文件状态信息, 包括atime, ctime, mtime, md5, uid, gid等信息.
# ansible webservers -m stat -a "path=/etc/sysctl.conf"
client02.example.com | success >> {
"changed": false,
"stat": {
、
、
、
}
}
client01.example.com | success >> {
"changed": false,
"stat": {
、
、
、
}
}
4.get_url模块
实现在远程主机下载指定URL到本地.
#ansible webservers -m get_url -a "url=http://www.showerlee.com dest=/tmp/index.html mode=0400 force=yes"
client02.example.com | success >> {
"changed": true,
"checksum": "470d6ab960810153bb8149c3754b0e8a2d89209d",
"dest": "/tmp/index.html",
"gid": 0,
"group": "root",
"md5sum": "009949f770f35a4ea82105e5e923abcb",
"mode": "0400",
"msg": "OK (unknown bytes)",
"owner": "root",
"sha256sum": "",
"size": 81635,
"src": "/tmp/tmpa44PoE",
"state": "file",
"uid": 0,
"url": "http://www.showerlee.com"
}
client01.example.com | success >> {
"changed": true,
"checksum": "9b1afd16f97c07638965ba0c5cf01037af00a38a",
"dest": "/tmp/index.html",
"gid": 0,
"group": "root",
"md5sum": "5a935e77927286dfcb7a0190e8af461b",
"mode": "0400",
"msg": "OK (unknown bytes)",
"owner": "root",
"sha256sum": "",
"size": 81679,
"src": "/tmp/tmp5WHuj0",
"state": "file",
"uid": 0,
"url": "http://www.showerlee.com"
}
5.yum模块
Linux包管理平台操作,常见都会有yum和apt, 此处会调用yum管理模式
# ansible webservers -m yum -a "name=curl state=latest"
client01.example.com | success >> {
"changed": false,
"msg": "",
"rc": 0,
"results": [
"All packages providing curl are up to date"
]
}
client02.example.com | success >> {
"changed": false,
"msg": "",
"rc": 0,
"results": [
"All packages providing curl are up to date"
]
}
6. cron模块
远程主机crontab配置
# ansible webservers -m cron -a "name='check dir' hour='5,2' job='ls -alh > /dev/null'"
client02.example.com | success >> {
"changed": true,
"jobs": [
"check dir"
]
}
client01.example.com | success >> {
"changed": true,
"jobs": [
"check dir"
]
}
7.service模块
远程主机系统服务管理
# ansible webservers -m service -a "name=crond state=stopped"
# ansible webservers -m service -a "name=crond state=restarted"
# ansible webservers -m service -a "name=crond state=reloaded"
8.user服务模块
远程主机系统用户管理
添加用户:
# ansible webservers -m user -a "name=johnd comment='John Doe'"
删除用户:
# ansible webservers -m user -a "name=johnd state=absent remove=yes"
四. playbook介绍（http://www.jianshu.com/p/41c4ed3ce779）
1、playbook简介
像很多其它配置文件管理方法一样，Ansible使用一种比较直白的方法来描述自己的任务配置文件。
Ansible 的任务配置文件被称之为“playbook”，我们可以称之为“剧本”。
每一出剧本（playbook）中都包含一系列的任务，这每个任务在ansible中又被称为一出“戏剧”（play）。一个剧本（playbook）中包含多出戏剧（play）。
2、playbook语法简介
YAML语法编写
格式如下所示：house:
family:
name: Doe
parents:
- John
- Jane
children:
- Paul
- Mark
- Simone
address:
number: 34
street: Main Street
city: Nowheretown
zipcode: 12345
3、playbook实战
之前我们分享的Ansbile基础模块使用时，那种Ad-hoc点对点的，一次执行一个模块的操作方式已经使得Andsible一种非常强大的管理工具；但playbook将会使Ansible成为超一流的管理工具。
现在越来越多的DevOPS也开始将目光移向了Ansible，因为Ansible可以轻松的将shell脚本或简单的shell命令转换为Ansible plays.
：
#!/bin/bash
# 安装Apache
yum install --quiet -y httpd httpd-devel
# 复制配置文件
cp /path/to/config/httpd.conf /etc/httpd/conf/httpd.conf
cp /path/to/httpd-vhosts.conf /etc/httpd/conf/httpd-vhosts.conf
# 启动Apache，并设置开机启动
service httpd start
chkconfig httpd on
将其转换为一个完整的playbook后：
---
- hosts: all
tasks:
- name: "安装Apache"
command: yum install --quiet -y httpd httpd-devel
- name: "复制配置文件"
command: cp /tmp/httpd.conf /etc/httpd/conf/httpd.conf
command: cp /tmp/httpd-vhosts.conf /etc/httpd/conf/httpd-vhosts.conf
- name: "启动Apache，并设置开机启动"
command: service httpd start
command: chkconfig httpd on
将以上内容放在一个名为playbook.yml的文件中，直接调用ansible-playbook命令，即可运行，运行结果和脚本运行结果一致：
# ansible-playbook ./playbook.yml 在上述playbook中，我们使用了“command”模块来运行了标准的shell命令。我们还给了每一出play一个“name”，因此当我们运行playbook时，每一个play都会有非常易读的的信息输出：
本文转载自：
http://www.showerlee.com/archives/1649
http://www.jianshu.com/p/41c4ed3ce779
页:
[1]