ansible安装配置

ansible安装配置

1.1rpm安装
# yum install http://mirrors.sohu.com/fedora-epel/6/x86_64/epel-release-6-8.noarch.rpm
# yum install -y ansible
1.2pip安装
# yum install -y openssl-devel openssl
# tar zxf Python-2.7.8.tgz
# cd Python-2.7.8
# ./configure
# make && make install
# wget https://bootstrap.pypa.io/get-pip.py
# python get-pip.py
1.3源码安装
(1)、python2.7安装
yum install -y zlib zlib-devel
https://www.python.org/ftp/python/2.7.8/Python-2.7.8.tgz
# tar xvzf Python-2.7.8.tgz
# cd Python-2.7.8
# ./configure --prefix=/usr/local
# make --jobs=`grep processor/proc/cpuinfo | wc -l`
# make install
## 将python头文件拷贝到标准目录，以避免编译ansible时，找不到所需的头文件
# cd /usr/local/include/python2.7
# cp -a ./* /usr/local/include/
## 备份旧版本的python，并符号链接新版本的python
# cd /usr/bin
# mv python python2.6
# ln -s /usr/local/bin/python
## 修改yum脚本，使其指向旧版本的python，已避免其无法运行
# vim /usr/bin/yum
#!/usr/bin/python --> #!/usr/bin/python2.6
(2)、setuptools模块安装
https://pypi.python.org/packages/source/s/setuptools/setuptools-7.0.tar.gz
# tar xvzf setuptools-7.0.tar.gz
# cd setuptools-7.0
# python setup.py install
(3)、pycrypto模块安装
https://pypi.python.org/packages/source/p/pycrypto/pycrypto-2.6.1.tar.gz
# tar xvzf pycrypto-2.6.1.tar.gz
# cd pycrypto-2.6.1
# python setup.py install
(4)、PyYAML模块安装
http://pyyaml.org/download/libyaml/yaml-0.1.5.tar.gz
# tar xvzf yaml-0.1.5.tar.gz
# cd yaml-0.1.5
# ./configure --prefix=/usr/local
# make --jobs=`grep processor/proc/cpuinfo | wc -l`
# make install
https://pypi.python.org/packages/source/P/PyYAML/PyYAML-3.11.tar.gz
# tar xvzf PyYAML-3.11.tar.gz
# cd PyYAML-3.11
# python setup.py install
(5)、Jinja2模块安装
https://pypi.python.org/packages/source/M/MarkupSafe/MarkupSafe-0.9.3.tar.gz
# tar xvzf MarkupSafe-0.9.3.tar.gz
# cd MarkupSafe-0.9.3
# python setup.py install
https://pypi.python.org/packages/source/J/Jinja2/Jinja2-2.7.3.tar.gz
# tar xvzf Jinja2-2.7.3.tar.gz
# cd Jinja2-2.7.3
# python setup.py install
(6)、paramiko模块安装
https://pypi.python.org/packages/source/e/ecdsa/ecdsa-0.11.tar.gz
# tar xvzf ecdsa-0.11.tar.gz
# cd ecdsa-0.11
# python setup.py install
https://pypi.python.org/packages/source/p/paramiko/paramiko-1.15.1.tar.gz
# tar xvzf paramiko-1.15.1.tar.gz
# cd paramiko-1.15.1
# python setup.py install
(7)、simplejson模块安装
https://pypi.python.org/packages/source/s/simplejson/simplejson-3.6.5.tar.gz
# tar xvzf simplejson-3.6.5.tar.gz
# cd simplejson-3.6.5
# python setup.py install
(8)、ansible安装
https://github.com/ansible/ansible/archive/v1.7.2.tar.gz
# tar xvzf ansible-1.7.2.tar.gz
# cd ansible-1.7.2
# python setup.py install
2.配置
(1)、SSH免密钥登录设置，服务端与客户端建立信任
ssh-keygen
ssh-ocpy-id ip #将密钥发送给客户端
(2)、ansible配置
# vim /etc/ansible/hosts
[server]
192.168.36.149
192.168.36.144
3.使用
客户端运行命令并将结果返回
-m 【mode】模块
-a 【args】参数
command模块
批量修改ssh配置文件，将UsePAM yes改为UsePAM no
# ansible server -m command -a "sed -i 's%UsePAM yes%UsePAM no%' /etc/ssh/sshd_config"
192.168.36.215 | success | rc=0 >>
在节点上执行hostname命令
# ansible server -m command -a 'hostname'
192.168.36.214 | success | rc=0 >>
test1.example.com
script模块
在所有节点上执行主控机上的/root/test.sh脚本
# cat test.sh
hostname
# ansible server -m script -a '/root/test.sh'
192.168.36.219 | success >> {
"changed": true,
"rc": 0,
"stderr": "",
"stdout": "rs2.example.com\r\n"
}
cron模块
在指定节点上执行计划任务，每隔3分钟到主控端更新一次时间
# ansible server -m cron -a 'name="custom job" minute=*/3 hour=* day=* weekday=* job="/usr/bin/ntpdate 192.168.36.222"'
192.168.36.215 | success >> {
"changed": true,
"jobs": [
"custom job"
]
}
yum模块
批量安装软件
# ansible server -m yum -a 'state=present name=httpd'
# ansible server -m yum -a 'name=httpd'
setup模块
查看客户端的基本信息
# ansible server -m setup
file模块
远程文件符号链接创建



修改权限（文件的具体权限根据情况而定）
# ansible server -m file -a 'dest=/root/test mode=777 owner=root group=root'
192.168.36.215 | success >> {
"changed": true,
"gid": 0,
"group": "root",
"mode": "0777",
"owner": "root",
"path": "/root/test",
"size": 0,
"state": "file",
"uid": 0
}
group模块
在所有节点上创建一个名为cyl的组，gid为2014
# ansible server -m group -a 'gid=2014 name=cyl'
192.168.36.214 | success >> {
"changed": true,
"gid": 2014,
"name": "cyl",
"state": "present",
"system": false
}
user模块
在所有节点上创建一个名为cyl的用户，组为cyl
# ansible server -m user -a 'name=cyl group=cyl state=present'
192.168.36.214 | success >> {
"append": false,
"changed": false,
"comment": "centos64",
"group": 2014,
"home": "/home/cyl",
"move_home": false,
"name": "cyl",
"shell": "/bin/bash",
"state": "present",
"uid": 500
}
删除所有节点上的cyl用户（可加参数state=absent）
# ansible server -m user -a 'name=cyl remove=yes'
192.168.36.215 | success >> {
"append": false,
"changed": false,
"comment": "centos64",
"group": 2014,
"home": "/home/cyl",
"move_home": false,
"name": "cyl",
"shell": "/bin/bash",
"state": "present",
"uid": 500
}
service模块
启动所有节点上的httpd服务，并让其开机自启
# ansible server -m service -a 'name=httpd state=restarted enabled=yes'
192.168.36.214 | success >> {
"changed": true,
"enabled": true,
"name": "httpd",
"state": "started"
}
ping模块
检查节点机器是否连通
# ansible server -m ping
192.168.36.215 | success >> {
"changed": false,
"ping": "pong"
}
raw模块
在节点上运行hostname命令
# ansible server -m raw -a 'hostname|tree'
192.168.36.215 | success | rc=0 >>
synchronize模块
delete=yes 使两边的内容一样（即以推送方为主）
compress=yes 开启压缩，默认为开启
--exclude=.git 忽略同步.git结尾的文件
# ansible server -m synchronize -a 'src=/root/cyl dest=/root/ compress=yes'
192.168.36.215 | success >> {
"changed": true,
"cmd": "rsync --delay-updates -FF --compress --archive --rsh 'ssh -o StrictHostKeyChecking=no' --out-format='<<CHANGED>>%i %n%L' \"/root/cyl\" \"root@192.168.36.215:/root/\"",
"msg": ".d..t...... cyl/\n",
"rc": 0,
"stdout_lines": [
".d..t...... cyl/"
]
}

copy模块
批量拷贝文件


# ansible server -m copy -a 'src=/root/cyl dest=/root/'