ansible 自动化安装apache

243eqd

ansible 自动化配置安装apache
一、准备工作
1、下载httpd、php、mysql ，我本次实验使用的版本如下：
http     2.4.17
php      5.6.15
mysql    5.6.19  二进制版本
apr      1.5.2
apr-util 1.5.4
libiconv 1.14
2、在ansible服务端开始安装
编译安装apr
#cd /usr/local/src
#tar xf apr-1.5.2.tar.gz
#cd apr-1.5.2
#./configure --prefix=/usr/local/apr  --如果提示如下错误（不知道忽略这种错误会如何，没测试）：
………………
error info：rm: cannot remove `libtoolT': No such file or directory
………………
解决方法：
#vim configure --找到$RM "$cfgfile" 这行， 将其注释掉
#$RM "$cfgfile" ，然后重新执行configure 就不会报错了
#make && make install

编译安装apr-util
#cd /usr/local/src
#tar xf apr-util-1.5.4.tar.gz
#cd apr-util-1.5.4
#./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr/
#make && make install

#tar xf libiconv-1.14.tar.gz
#cd libiconv-1.14
#./configure --prefix=/usr/local/
#make && make install
然后拷贝libiconv的so文件到一个目录
#mkdir /usr/local/libiconv
#cd /usr/local/libiconv
#cp /usr/local/lib/libiconv.la ./
#cp /usr/local/lib/libiconv.so.2.5.1 ./
#cp /usr/local/lib/preloadable_libiconv.so ./
创建软连接
#ln -sv libiconv.so.2.5.1 libiconv.so
#ln -sv libiconv.so.2.5.1 libiconv.so.2
然后打包：
#tar -zcf libiconv.tar.gz ./*
#mv libiconv.tar.gz /tmp

安装httpd
安装依赖包：
#yum install pcre pcre-devel -y
#tar xf httpd-2.4.17.tar.gz
#cd httpd-2.4.17
#./configure --prefix=/usr/local/apache  --enable-so --enable-ssl --enable-cgi --enable-rewrite --with-zlib \
--with-apr=/usr/local/apr --with-apr-util=/usr/local/apr-util/
#make
#make install
在httpd.conf配置文件中添加pid文件，找到# least PidFile，添加其下：
PidFile  "/var/run/httpd.pid"
为httpd提供SysV服务脚本/etc/rc.d/init.d/httpd，内容如下：
#cat httpd
#!/bin/bash
#
# httpd        Startup script for the Apache HTTP Server
#
# chkconfig: - 85 15
# description: Apache is a World Wide Web server.  It is used to serve \
#               HTML files and CGI.
# processname: httpd
# config: /etc/httpd/conf/httpd.conf
# config: /etc/sysconfig/httpd
# pidfile: /var/run/httpd.pid

# Source function library.
. /etc/rc.d/init.d/functions

if [ -f /etc/sysconfig/httpd ]; then
        . /etc/sysconfig/httpd
fi

# Start httpd in the C locale by default.
HTTPD_LANG=${HTTPD_LANG-"C"}

# This will prevent initlog from swallowing up a pass-phrase prompt if
# mod_ssl needs a pass-phrase from the user.
INITLOG_ARGS=""

# Set HTTPD=/usr/sbin/httpd.worker in /etc/sysconfig/httpd to use a server
# with the thread-based "worker" MPM; BE WARNED that some modules may not
# work correctly with a thread-based MPM; notably PHP will refuse to start.

# Path to the apachectl script, server binary, and short-form for messages.
apachectl=/usr/local/apache/bin/apachectl
httpd=${HTTPD-/usr/local/apache/bin/httpd}
prog=httpd
pidfile=${PIDFILE-/var/run/httpd.pid}
lockfile=${LOCKFILE-/var/lock/subsys/httpd}
RETVAL=0

start() {
        echo -n $"Starting $prog: "
        LANG=$HTTPD_LANG daemon --pidfile=${pidfile} $httpd $OPTIONS
        RETVAL=$?
        echo
        [ $RETVAL = 0 ] && touch ${lockfile}
        return $RETVAL
}

stop() {
        echo -n $"Stopping $prog: "
        killproc -p ${pidfile} -d 10 $httpd
        RETVAL=$?
        echo
        [ $RETVAL = 0 ] && rm -f ${lockfile} ${pidfile}
}
reload() {
    echo -n $"Reloading $prog: "
    if ! LANG=$HTTPD_LANG $httpd $OPTIONS -t >&/dev/null; then
        RETVAL=$?
        echo $"not reloading due to configuration syntax error"
        failure $"not reloading $httpd due to configuration syntax error"
    else
        killproc -p ${pidfile} $httpd -HUP
        RETVAL=$?
    fi
    echo
}

# See how we were called.
case "$1" in
  start)
        start
        ;;
  stop)
        stop
        ;;
  status)
        status -p ${pidfile} $httpd
        RETVAL=$?
        ;;
  restart)
        stop
        start
        ;;
  condrestart)
        if [ -f ${pidfile} ] ; then
                stop
                start
        fi
        ;;
  reload)
        reload
        ;;
  graceful|help|configtest|fullstatus)
        $apachectl $@
        RETVAL=$?
        ;;
  *)
        echo $"Usage: $prog {start|stop|restart|condrestart|reload|status|fullstatus|graceful|help|configtest}"
        exit 1
esac

exit $RETVAL
授予权限
#chmod +x /etc/init.d/httpd
启动httpd
#service httpd start
然后在浏览器测试
#http://ip   --出现It works! 的网页，表示httpd安装成功了。

压缩apache目录：
#cd /usr/local/
#tar -zcf httpd-2.4.17.tar.gz apache/
#mv httpd-2.4.17.tar.gz /tmp
压缩apr目录：
#tar -zcf apr.tar.gz apr/
#mv apr.tar.gz /tmp
压缩apr-util目录：
#tar -zcf apr-util.tar.gz apr-util/
#mv apr-util.tar.gz /tmp
二、配置playbook ,通过ansible安装配置远端服务器的httpd
1、规划(实现安装和删除httpd）
安装：
#cd /etc/ansible/roles
#mkdir apache_install/{files,handlers,meta,tasks,templates,vars}
#cd apache_install
#mv /tmp/httpd.tar.gz files/
#mv /tmp/libiconv.tar.gz files/
#mv /tmp/apr.tar.gz files/
#mv /tmp/apr-util.tar.gz files/

配置meta
#vim  meta/main.yml
galaxy_info:
  author: liguang xing
  description: Install Apache
  license: MIT
  min_ansible_version: 1.9.4
  platforms:
  - name: CentOS
    version:
    - 6
  categories:
  - Service
  dependencies: []
配置vars
#vim vars/main.yml
apr_version: 1.5.2
apr_util_version: 1.5.4
libiconv_version: 1.14
apache_version: 2.4.17
apache_web_dir: /usr/local/apache/htdocs
apache_log: /usr/local/apache/logs/
apache_vhost: /usr/local/apache/conf/vhost
apache_port: 80
apache_user: www

配置tasks
#cat tasks/copy.yml
- name: Copy Apache software to client
  copy: src={{ item }} dest=/tmp/ owner=root group=root
  with_items:
    - httpd-{{ apache_version }}.tar.gz
    - libiconv.tar.gz
    - apr.tar.gz
    - apr-util.tar.gz
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: create apache user in client
  user: name={{ apache_user }} state=present createhome=no shell=/sbin/nologin
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: uncompression apache software to client
  shell: tar xf /tmp/httpd-{{ apache_version }}.tar.gz -C /usr/local/
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: uncompression apr software to client
  shell: tar xf /tmp/apr.tar.gz -C /usr/local/
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: uncompression apr-util software to client
  shell: tar xf /tmp/apr-util.tar.gz -C /usr/local/
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: copy apache sysv start service script to client
  template: src=httpd dest=/etc/init.d/httpd owner=root group=root mode=0755
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: copy apache config to Client
  template: src=httpd.conf dest=/usr/local/apache/conf/httpd.conf owner={{ apache_user }} group={{ apache_user }} mode=0644
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6

注：when参数不配置也可以
#cat  tasks/delete.yml
- name: delete apache compression software in client
  shell: rm -f /tmp/httpd-{{ apache_version }}.tar.gz /tmp/libiconv.tar.gz /tmp/apr.tar.gz /tmp/apr-util.tar.gz
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
#cat tasks/install.yml
- name: create lib install dir
  file: dest=/usr/local/lib state=directory
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: check apache Iconv in client
  shell: find / -name "libiconv.so.2"|grep -Ev "tmp|soft"|wc -l
  register: apache_iconv
  ignore_errors: True
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: install apache iconv in client
  shell: tar xf /tmp/libiconv.tar.gz -C /usr/local/lib/
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6 and apache_iconv|int ==0
- name: check lib in config in client
  shell: grep -c /usr/local/lib/ /etc/ld.so.conf
  register: apache_lib
  ignore_errors: True
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: install apache Iconv in client
  shell: echo "/usr/local/lib/" >> /etc/ld.so.conf;/sbin/ldconfig
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6 and apache_iconv|int ==0
- name: create apache Dir
  file: dest={{ item }} state=directory
  with_items:
    - "{{ apache_vhost }}"
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: start apache service in client
  shell: /etc/init.d/httpd start
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: add boot start apache service in client
  shell: chkconfig --add httpd;chkconfig httpd on
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
# cat tasks/main.yml
- include: copy.yml
- include: install.yml
- include: delete.yml

将httpd启动脚本和httpd.conf配置文件copy一份到templates目录

2、配置common
#cd /etc/ansible/roles
#mkdir -pv common/{meta,tasks}
#cat meta/main.yml
galaxy_info:
  author: liguang xing
  description: Install initializtion Software
  license: MIT
  min_ansible_version: 1.9.4
  platforms:
  - name: CentOS
    versions:
    - 5
    - 6
  - name: Ubuntu
    versions:
    - precise
  categories:
  - system
dependencies: []

#cat tasks/main.yml
- name: install initializtion require software
  shell: yum -y install make cmake bc gcc gcc-c++ autoconf libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel ncurses ncurses-devel e2fsprogs e2fsprogs-devel krb5-devel libidn libidn-devel openssl openssl-devel nss_ldap openldap openldap-devel openldap-clients libxslt-devel libevent-devel ntp libtool-ltdl bison libtool vim-enhanced wget readline-devel libyaml-devel patch telnet pcre pcre-devel
  poll: 0

3、创建安装脚本
#cd /etc/ansible/roles
#cat apache_install.yml
---
- hosts: "{{host}}"
  remote_user: "{{user}}"
  gather_facts: True
  roles:
    - common
    - apache_install

检查语法：
# ansible-playbook apache_install.yml --syntax-check
playbook: apache_install.yml
没错误开始执行
#ansible-playbook apache_install.yml --extra-vars "host=web user=root"
PLAY [web] ********************************************************************
GATHERING FACTS ***************************************************************
ok: [10.0.90.24]
ok: [10.0.90.25]
TASK: [common | install initializtion require software] ***********************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | Copy Apache software to client] ***********************
changed: [10.0.90.25] => (item=httpd-2.4.17.tar.gz)
changed: [10.0.90.24] => (item=httpd-2.4.17.tar.gz)
changed: [10.0.90.24] => (item=libiconv.tar.gz)
changed: [10.0.90.25] => (item=libiconv.tar.gz)
changed: [10.0.90.24] => (item=apr.tar.gz)
changed: [10.0.90.25] => (item=apr.tar.gz)
changed: [10.0.90.25] => (item=apr-util.tar.gz)
changed: [10.0.90.24] => (item=apr-util.tar.gz)
TASK: [apache_install | create apache user in client] *************************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_install | uncompression apache software to client] **************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | uncompression apr software to client] *****************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | uncompression apr-util software to client] ************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | copy apache sysv start service script to client] ******
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_install | copy apache config to Client] *************************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | create lib install dir] *******************************
ok: [10.0.90.24]
ok: [10.0.90.25]
TASK: [apache_install | check apache Iconv in client] *************************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | install apache iconv in client] ***********************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | check lib in config in client] ************************
failed: [10.0.90.24] => {"changed": true, "cmd": "grep -c /usr/local/lib/ /etc/ld.so.conf", "delta": "0:00:00.002203", "end": "2015-11-23 18:12:47.338012", "rc": 1, "start": "2015-11-23 18:12:47.335809", "warnings": []}
stdout: 0
...ignoring
failed: [10.0.90.25] => {"changed": true, "cmd": "grep -c /usr/local/lib/ /etc/ld.so.conf", "delta": "0:00:00.002412", "end": "2015-11-23 18:12:47.349201", "rc": 1, "start": "2015-11-23 18:12:47.346789", "warnings": []}
stdout: 0
...ignoring
TASK: [apache_install | install apache Iconv in client] ***********************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | create apache Dir] ************************************
changed: [10.0.90.24] => (item=/usr/local/apache/conf/vhost)
changed: [10.0.90.25] => (item=/usr/local/apache/conf/vhost)
TASK: [apache_install | start apache service in client] ***********************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | add boot start apache service in client] **************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_install | delete apache compression software in client] *********
changed: [10.0.90.24]
changed: [10.0.90.25]
PLAY RECAP ********************************************************************
10.0.90.24                 : ok=18   changed=16   unreachable=0    failed=0   
10.0.90.25                 : ok=18   changed=16   unreachable=0    failed=0   

然后可以到90.24和90.25这两台客户端服务器上检查apache的安装情况，进行测试。

4、删除apache
#cd /etc/ansible/roles
#mkdir -pv apache_delete/{meta,tasks,vars}
配置yml文件
#cat apache_delete/meta/main.yml
galaxy_info:
  author: liguang xing
  description: Delete Apache
  license: MIT
  min_ansible_version: 1.9.4
  platforms:
  - name: CentOS
    versions:
    - 6
  categories:
  - Service
dependencies: []

# cat apache_delete/tasks/delete.yml
- name: stop httpd service in client
  service: name=httpd state=stopped
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete boot start in client
  shell: chkconfig --del httpd
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apache Dir in client
  shell: rm -rf /usr/local/apache
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apr Dir in client
  shell: rm -rf /usr/local/apr
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apr-util Dir in client
  shell: rm -rf /usr/local/apr-util
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apache service script in client
  shell: rm -f /etc/init.d/httpd
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
- name: delete apache user
  shell: userdel www
  ignore_errors: yes
  when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6

# cat apache_delete/tasks/main.yml
- include: delete.yml

5、创建删除脚本
#cd /etc/ansible/roles
#cat apache_delete.yml
---
- hosts: "{{host}}"
  remote_user: "{{user}}"
  gather_facts: True
  roles:
    - apache_delete

检查语法：
# ansible-playbook apache_delete.yml --syntax-check
playbook: apache_delete.yml
没有错误，开始执行：
# ansible-playbook apache_delete.yml --extra-vars "host=web user=root"
PLAY [web] ********************************************************************
GATHERING FACTS ***************************************************************
ok: [10.0.90.25]
ok: [10.0.90.24]
TASK: [apache_delete | stop httpd service in client] **************************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_delete | delete boot start in client] ***************************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_delete | delete apache Dir in client] ***************************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_delete | delete apr Dir in client] ******************************
changed: [10.0.90.24]
changed: [10.0.90.25]
TASK: [apache_delete | delete apr-util Dir in client] *************************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_delete | delete apache service script in client] ****************
changed: [10.0.90.25]
changed: [10.0.90.24]
TASK: [apache_delete | delete apache user] ************************************
changed: [10.0.90.24]
changed: [10.0.90.25]
PLAY RECAP ********************************************************************
10.0.90.24                 : ok=8    changed=7    unreachable=0    failed=0   
10.0.90.25                 : ok=8    changed=7    unreachable=0    failed=0