第五十二天 Ansible playbook

作者: 杨小倪 | 来源:发表于2019-10-10 22:16 被阅读0次

Ansible playbook

1.什么是Playbook

playbook翻译过来就是剧本的意思
playbook：定义一个文本文件，以yml为后缀结尾（翻译：我有一个剧本）
play：定义主机角色（翻译：找那个大腕明星）
task：定义的是具体执行的任务（翻译：大腕每集拍什么）

总结： playbook是由一个或多个play组成，一个play可以包含多个task任务；可以理解为：使用不同的模块共同完成一件事情

QQ图片20191010221741.png

2.Ansible playbook与AD-Hoc的关系

1.playbook是对AD-Hoc的一种编排方式。
2.playbook可以持久运行，而AD-Hoc只能临时运行
3.playbook适合复杂的任务，而AD-Hoc适合做快速简单的工作
4.playbook能控制任务执行的先后顺序。

3.playbook语法格式

语法	描述
缩进	YAML使用固定的缩进风格表示层级结构，每个缩进有两个空格组成，不能使用tabs
冒号	以冒号结尾的除外，其他所有冒号后面所有必须有空格
短横线	表示列表项，使用一个短横线加一个空格。多个项使用同样的缩进级别作为同一列表

1.使用playbook编写一个创建文件的yml

[root@manager project1]# vim f1.yml    

- hosts: webservers
  tasks:

    - name: Create New File
      file: path=/tmp/123.txt state=touch owner=root group=root mode=0600

    - name: Create New File2
      file:
        path: /tmp/456.txt
        state: touch
        owner: root
        group: root
        mode: 0666

#检测是否有书写错误
[root@manager project1]# ansible-playbook --syntax f1.yml -i hosts

playbook: f1.yml

#模拟执行
[root@manager project1]# ansible-playbook -C f1.yml -i hosts

playbook: f1.yml

4.Ansible Playbook 练习

案例一

1.编写安装配置nfs服务的playbook文件

准备机器
172.16.1.31         nfs
172.16.1.7          client
172.16.1.8          client

1.先推公钥：
[root@manager project1]# ssh-copy-id  -i ~/.ssh/id_rsa.pub root@172.16.1.31
[root@manager project1]# ssh-copy-id  -i ~/.ssh/id_rsa.pub root@172.16.1.7
[root@manager project1]# ssh-copy-id  -i ~/.ssh/id_rsa.pub root@172.16.1.8

2.编写主机清单
[root@manager project1]# vim hosts 

[nfsservers]
172.16.1.31


[backupservers]
172.16.1.41

[web:children]
nfsservers
backupservers


[webservers]
172.16.1.7
172.16.1.8

3.测试所有主机是否能通
[root@manager project1]# ansible all -m ping -i hosts


4.编写一个nfs-server的yml
    1.安装         yum
    2.配置         copy
    3.初始化环境     
        用户       group user
        目录       file
        授权       file
    4.启动服务      systemd
    
    
[root@manager project1]# vim nfs_server.yml 

- hosts: nfsservers
  tasks:
    - name: Installed NFS Server
      yum:
        name: nfs-utils
        state: present

    - name: Configure NFS Server
      copy:
        src: ./file/exports.j2
        dest: /etc/exports
        owner: root
        group: root
        mode: 0644
        backup: yes

    - name: Create NFS Group www
      group:
        name: www
        gid: 666

    - name: Create NFS User www
      user:
        name: www
        group: www
        uid: 666
        create_home: no
        shell: /sbin/nologin

    - name: Create NFS Share Directory
      file:
        path: /ansible_data
        state: directory
        owner: www
        group: www
        mode: 0755
        recurse: yes

    - name: Create NFS server
      systemd:
        name: nfs
        state: restarted
        enabled: yes
 
 5.准备对应的文件
[root@manager project1]# vim file/exports.j2 

/ansible_data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)


6.编写nfs-client客户端yml

[root@manager project1]# vim nfs_client.yml 

- hosts: webservers
  tasks:

    - name: Mount NFS Server share directory
      mount:
        src: 172.16.1.31:/ansible_data
        path: /mnt
        fstype: nfs
        opts: defaults
        state: mounted

案例二

2.使用ansible安装并配置httpd服务

1.安装            yum
2.配置            copy
3.启动            systemd


1.编辑ansible文件
[root@manager project1]# vim nginx.yml 

- hosts: webservers
  tasks:

    - name: Installed Nginx Server
      yum:
        name: nginx
        state: present

    - name: Configure Nginx Server
      copy:
        src: ./file/nginx.conf.j2
        dest: /etc/nginx/nginx.conf
        owner: root
        group: root
        mode: 0644
        backup: yes
      notify: Restart Nginx Server      #当配置文件发生改变的时候，notify触发重启

    - name: Systemd nginx Server
      systemd:
        name: nginx
        state: started
        enabled: yes

  handlers:
    - name: Restart Nginx Server
      systemd:
        name: nginx
        state: restarted

2.准备相对应的文件
[root@manager project1]# vim file/nginx.conf.j2 

user www;
worker_processes  2;

error_log  /var/log/nginx/error.log notice;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

        access_log /var/log/nginx/access.log main;

    sendfile        on;
    #tcp_nopush     on;
    keepalive_timeout  65;
    #gzip  on;
    include /etc/nginx/conf.d/*.conf;
}


3.检测语法
[root@manager project1]# ansible-playbook --syntax nginx.yml -i hosts 

playbook: nginx.yml


4.执行
[root@manager project1]# ansible-playbook nginx.yml -i hosts

案例三

使用ansible playbook 方式构建LAp 架构

1.使用yum安装httpd、php、firewalld
2.启动httpd、firewalld、等服务
3.添加防火墙规则、放行httpd的流量
4.使用get_url下载http://fj.xuliangwei.com/public/index.php

[root@manager project1]# vim lamp.yml 

- hosts: web
  tasks:

    - name: Installed Httpd Server
      yum:
        name: httpd
        state: present

    - name: Installed PHP Server
      yum:
        name: httpd
        state: present

    - name: Configure Httpd WebSite
      get_url:
        url: http://fj.xuliangwei.com/public/index.php
        dest: /var/www/html/index.php
        mode: 0644

    - name: Systemd Httpd Server
      systemd:
        name: httpd
        state: started

    - name: Systemd Firewalld Server
      systemd:
        name: firewalld
        stare: started
    - name: Configure Firewalld Rule
      firewalld:
        server: http
        state: enable
 
 2.检测语法
[root@manager project1]# ansible-playbook --syntax lamp.yml -i hosts 

playbook: lamp.yml

3.执行
[root@manager project1]# ansible-playbook lamp.yml -i hosts 

4.访问 10.0.0.41 出现如下界面

1570715400673.png

案例四

搭建可道云网盘 31 41

1.安装
2.配置
3.启动
4.下载代码

[root@manager project1]# vim kod.yml 

- hosts: web
  tasks:
    - name: Installed Httpd Server
      yum:
        name: httpd
        state: present

    - name: Installed PHP Server
      yum:
        name: php
        state: present

    - name:
      file:
        path: /var/www/html/kodcloud
        owner: root
        group: root
        state: directory


    - name: Get kodcloud Code
      unarchive:
        src: http://static.kodcloud.com/update/download/kodexplorer4.40.zip
        dest: /var/www/html/kodcloud
        copy: no
        group: root
        owner: root
        mode: 777

    - name:
      file:
        path: /var/www/html/kodcloud
        owner: root
        group: root
        mode: '0777'
        recurse: yes

    - name: Systemd Httpd Server
      systemd:
        name: httpd
        state: restarted


 2.检测语法
[root@manager project1]# ansible-playbook --syntax kod.yml -i hosts 

playbook: lamp.yml

3.执行
[root@manager project1]# ansible-playbook kod.yml -i hosts 

4.访问 10.0.0.41/kodcloud

案例五

搭建 Nginx+PHP 可道云

1.先动手实现
    1.配置yum源  Nginx php
    2.创建用户  www 统一UID和GID
    3.安装软件包
        nginx php71w
    4.配置Nginx.conf配置文件，修改启动用户为www
    5.添加虚拟主机 /etc/nginx/conf.d/xx.conf
    6.配置php的权限 /etc/php-fpm.d/www.conf
    7.启动nginx 和 php
    8.修改配置，能够实现自动重启

2.ansible方式



1.编写ansible文件
[root@manager project1]# vim lnp.yml 

- hosts: webservers
  tasks:

    #1.配置yum源仓库 nginx php
    - name: Installed Nginx repo
      yum_repository:
        name: nginx
        description: nginx repos
        baseurl: http://nginx.org/packages/centos/$releasever/$basearch/
        gpgcheck: no

    #2.配置yum源仓库  php
    - name: Installed php repo
      yum_repository:
        name: webtatic-php
        description: php repos
        baseurl: http://us-east.repo.webtatic.com/yum/el7/x86_64/
        gpgcheck: no

    #3.安装nginx和php
    - name: Installed Nginx and PHP Packages
      yum:
        name: "{{ packages }}"
      vars:
        packages:
          - nginx
          - php71w
          - php71w-cli
          - php71w-common
          - php71w-devel
          - php71w-embedded
          - php71w-gd
          - php71w-mcrypt
          - php71w-mbstring
          - php71w-pdo
          - php71w-xml
          - php71w-fpm
          - php71w-mysqlnd
          - php71w-opcache
          - php71w-pecl-memcached
          - php71w-pecl-redis
          - php71w-pecl-mongodb


    #4.创建程序启动的用户身份
    - name: Create Group www
      group:
        name: www
        gid: 666

    - name: Create User www
      user:
        name: www
        group: www
        uid: 666
        create_home: no
        shell: /sbin/nologin

    #5.管理nginx配置文件
    - name: Configure nginx.conf
      copy:
        src: ./file/nginx.conf.j2
        dest: /etc/nginx/nginx.conf
      notify: Restart Nginx server

    #6.管理php-fpm配置文件
    - name: Configure php-fpm.conf
      copy:
        src: ./file/php-www.conf.j2
        dest: /etc/php-fpm.d/www.conf
      notify: Restart PHP-FPM Server

    #7.添加kodcloud虚拟主机（检查语法）
    - name: Add Nginx VirtHost kod.oldxu.com
      copy:
        src: ./file/kold.oldxu.com.conf.j2
        dest: /etc/nginx/conf.d/klod.oldxu.com.conf
      notify: Restart Nginx server

    - name: Init Nginx BaseEnv
      file:
        path: /code
        state: directory
        owner: www
        group: www
        recurse: yes

    - name: Push Kodcloud Code
      unarchive:
        src: http://static.kodcloud.com/update/download/kodexplorer4.40.zip
        dest: /code/
        copy: no
        group: root
        owner: root
        mode: 777

    - name: Chmod kodcloud
      file:
        path: /code
        owner: www
        group: www
        mode: 0777
        recurse: yes

    - name: Systemd Nginx Server
      systemd:
        name: nginx
        state: started
        enabled: yes

    - name: Systemd PHP-FPM Server
      systemd:
        name: php-fpm
        state: started
        enabled: yes

#当nginx或php 配置文件发生变更才会触发此操作
  handlers:
    - name: Restart Nginx server
      systemd:
        name: nginx
        state: restarted

    - name: Restart PHP-FPM Server
      systemd:
        name: php-fpm
        state: restarted


2.增加当前文件所需要的配置文件

[root@manager project1]# vim file/nginx.conf.j2 

user www;
worker_processes  2;

error_log  /var/log/nginx/error.log notice;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

        access_log /var/log/nginx/access.log main;

    sendfile        on;
    #tcp_nopush     on;
    keepalive_timeout  65;
    #gzip  on;
    include /etc/nginx/conf.d/*.conf;
}



[root@manager project1]# vim file/php-www.conf.j2 

[root@manager project1]# vim file/kold.oldxu.com.conf.j2 

server {
        listen 80;
        server_name kod.oldxu.com;
        root /code;
        client_max_body_size 500m;

        location / {
                index index.php index.html;
        }

        location ~ \.php$ {
                fastcgi_pass 127.0.0.1:9000;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                include fastcgi_params;
        }
}




3. 检测语法
[root@manager project1]# ansible-playbook --syntax lnp.yml -i hosts

playbook: lnp.yml


4.执行
[root@manager project1]# ansible-playbook lnp.yml -i hosts

5.访问 kod.oldxu.com

第五十二天 Ansible playbook

Ansible playbook

1.什么是Playbook

2.Ansible playbook与AD-Hoc的关系

3.playbook语法格式

4.Ansible Playbook 练习

案例一

案例二

案例三

案例四

案例五

相关文章

网友评论

延伸阅读

深度阅读

栏目导航

热点阅读