Ansible功能介紹

路徑：/sxjteam/ansible/ansible-1.1
          /etc/ansible

rpm -Uvh ansible-1.1-1.el6.noarch.rpm

安裝方法2:
sudo easy_install pip
sudo pip install ansible

免密匙登錄
$ssh-keygen -t rsa  回車
$ssh-copy-id -i ~/.ssh/id_rsa.pub 192.168.25.26  //為root用戶

為某與用戶生成免密鑰登錄
ssh-copy-id -i ~/.ssh/id_rsa.pub luominserver@192.168.25.26 //為普通用戶

/****************************************************************************** 
從設備：192.168.25.26 
python 2.6.6
ansible 環境

/***********************************************************************************
功能0：詢問所有連接
ansible all -m ping

功能1：檢查從機連通情況
ansible slave -i /etc/ansible/hosts -m ping

功能2：檢查本機連通情況
ansible localhost -i /etc/ansible/hosts -m ping

功能3：以普通用戶詢問所有節點
ansible all -m ping -u luomin

功能4：引用sudo詢問所有節點
sudo ansible all -m ping -u luomin     //luomin指的是從機的用戶名
ansible all -m ping -u bruce --sudo --sudo-user batman

比如：
(venv)[root@sxjteam bin]# ansible all -m ping -u luominmini
127.0.0.1 | FAILED => FAILED: Authentication failed.
192.168.25.12 | FAILED => FAILED: Authentication failed.
192.168.25.13 | FAILED => FAILED: Authentication failed.
192.168.25.11 | success >> {
    "changed": false, 
    "ping": "pong"
}

功能5：引用模塊批量執行
ansible all -a "/bin/echo hello"
ansible all -a "/bin/mkdir hellodb"

功能6：查看功能copy模塊幫助
ansible-doc copy

功能7：將服務器端的start.sh 傳送到從機的/目錄下
(venv)[root@sxjteam /]# ansible all -m copy -a "src=/start.sh dest=/"
127.0.0.1 | FAILED => FAILED: Authentication failed.
192.168.25.26 | success >> {
    "changed": true, 
    "dest": "/start.sh", 
    "group": "root", 
    "md5sum": "2099b00a10b5c4088d77954dc06308a2", 
    "mode": "0644", 
    "owner": "root", 
    "secontext": "system_u:object_r:etc_runtime_t:s0", 
    "size": 135, 
    "src": "/root/.ansible/tmp/ansible-1369318138.89-203647529912388/source", 
    "state": "file"
}

功能8：將從機根目錄下的start.sh 權限改為777
(venv)[root@sxjteam /]# ansible slave -m file -a "dest=/start.sh mode=777 owner=root group=root" -s
192.168.25.26 | success >> {
    "changed": true, 
    "group": "root", 
    "mode": "0777", 
    "owner": "root", 
    "path": "/start.sh", 
    "secontext": "system_u:object_r:etc_runtime_t:s0", 
    "size": 135, 
    "state": "file" 
}

功能9：在主機上遠程執行從機的start.sh腳本
(venv)[root@sxjteam /]# ansible slave -m script -a "/start.sh"
192.168.25.26 | success >> {
    "rc": 0, 
    "stderr": "", 
    "stdout": "close system firwall\nclose system selinux\n"
}

或：
ansible webservers -m command -a "/sbin/reboot -t now"

功能10：在主機上操作從機上的shell指令
(venv)[root@sxjteam /]# ansible slave -m shell -a "touch /tmp/test.sh"   
192.168.25.26 | success | rc=0 >>

功能11：在從機上創建webgame組
(venv)[root@sxjteam /]# ansible all -m group -a "name=webgame state=present" -s
127.0.0.1 | FAILED => FAILED: Authentication failed.
192.168.25.26 | success >> {
    "changed": true, 
    "gid": 501, 
    "name": "webgame", 
    "state": "present", 
    "system": false
}

功能12：在從機上創建用戶，并加入相關組以及創建用戶文件路徑
(venv)[root@sxjteam /]# ansible all -m user -a "name=luomin group=webgame home=/root/luomin state=present" -s
127.0.0.1 | FAILED => FAILED: Authentication failed.
192.168.25.26 | success >> {
    "changed": true, 
    "comment": "", 
    "createhome": true, 
    "group": 501, 
    "home": "/root/luomin", 
    "name": "luomin", 
    "shell": "/bin/bash", 
    "state": "present", 
    "system": false, 
    "uid": 500
}

功能13：yum遠程安裝linuxqq
(venv)[root@sxjteam /]# ansible slave -m yum -a "name=linuxqq state=latest" -s
192.168.25.26 | FAILED >> {
    "changed": false, 
    "failed": true, 
    "msg": "No Package matching 'linuxqq' found available, installed or updated", 
    "rc": 0, 
    "results": []
}

或：
[luomin@sxjteam /]$ sudo ansible slave -m yum -a "name=httpd state=latest" -s

192.168.25.11 | success >> {
    "changed": false, 
    "msg": "", 
    "rc": 0, 
    "results": [
        "All packages providing httpd are up to date"
    ]
}

192.168.25.12 | success >> {
    "changed": true, 
    "msg": "Warning: RPMDB altered outside of yum.\n", 
    "rc": 0, 
    "results": [
        "\n================================================================================\n Package           Arch       Version                       Repository     Size\n================================================================================\nInstalling:\n httpd             i686       2.2.15-28.el6.centos          updates       828 k\nInstalling for dependencies:\n httpd-tools       i686       2.2.15-28.el6.centos          updates        73 k\n\nTransaction Summary\n================================================================================\nInstall       2 Package(s)\n\nTotal download size: 901 k\nInstalled size: 2.9 M\n\nInstalled:\n  httpd.i686 0:2.2.15-28.el6.centos                                             \n\nDependency Installed:\n  httpd-tools.i686 0:2.2.15-28.el6.centos                                       \n\n"
    ]
}
.......

功能14：遠程開啟從機的httpd服務
(venv)[root@sxjteam /]# ansible slave -m service -a "name=httpd state=running" -s
192.168.25.26 | success >> {
    "changed": true, 
    "name": "httpd", 
    "state": "started"
}

功能15：并行5個線程來重啟從機
ansible slave -a "/usr/bin/reboot" -f 5

功能16：文件的復制
(venv)[root@sxjteam /]# ansible slave -m copy -a "src=/YUM dest=/"
192.168.25.26 | success >> {
    "changed": true, 
    "dest": "/YUM", 
    "group": "root", 
    "md5sum": "d41d8cd98f00b204e9800998ecf8427e", 
    "mode": "0644", 
    "owner": "root", 
    "secontext": "system_u:object_r:etc_runtime_t:s0", 
    "size": 0, 
    "src": "/root/.ansible/tmp/ansible-1369328312.29-168067270856148/source", 
    "state": "file"
}

功能17：創建目錄
(venv)[root@sxjteam /]# ansible slave -m file -a "dest=/newdir mode=600 owner=root group=root state=directory"
192.168.25.26 | success >> {
    "changed": true, 
    "group": "root", 
    "mode": "0600", 
    "owner": "root", 
    "path": "/newdir", 
    "secontext": "unconfined_u:object_r:default_t:s0", 
    "size": 4096, 
    "state": "directory"
}

功能18：刪除從機下的newdir目錄
(venv)[root@sxjteam /]# ansible slave -m file -a "dest=/newdir state=absent"
192.168.25.26 | success >> {
    "changed": true, 
    "path": "/newdir", 
    "state": "absent"
}

功能19：創建用戶ans，密碼123456
(venv)[root@sxjteam /]# ansible slave -m user -a "name=ans password=123456"
192.168.25.26 | success >> {
    "changed": true, 
    "comment": "", 
    "createhome": true, 
    "group": 502, 
    "home": "/home/ans", 
    "name": "ans", 
    "password": "NOT_LOGGING_PASSWORD", 
    "shell": "/bin/bash", 
    "state": "present", 
    "system": false, 
    "uid": 501
}

功能20：服務狀態查看
A:查看是否已經開啟
ansible slave -m service -a "name=httpd state=started"

比如：
[luomin@sxjteam /]$ sudo ansible slave -m service -a "name=httpd state=started"

192.168.25.11 | success >> {
    "changed": false, 
    "name": "httpd", 
    "state": "started"
}//表示已經開啟

192.168.25.11 | success >> {
    "changed": true, 
    "name": "httpd", 
    "state": "started"
}//表示未開啟

B:查看是否已經關閉
ansible slave -m service -a "name=httpd state=stopped"

192.168.25.11 | success >> {
    "changed": false, 
    "name": "httpd", 
    "state": "stopped"
}//已經關閉

192.168.25.11 | success >> {
    "changed": true, 
    "name": "httpd", 
    "state": "stopped"
}//已經開啟

C:遠程重啟服務
ansible slave -m service -a "name=httpd state=restarted"

功能21：在同一組（webgame）的所有從機用10個線程來進行重啟
ansible webgame -a "/sbin/reboot" -f 10

功能22：以luomin賬戶執行
ansible webgame -a "/usr/bin/ls" -u luomin

功能23：以luomin賬戶sudo運行
ansible webgame -a "/usr/bin/foo" -u luomin --sudo [--ask-sudo-pass]

功能24：查看腳本幫助
ansible-playbook --help

生活不易，碼農辛苦
如果您覺得本網站對您的學習有所幫助,可以手機掃描二維碼進行捐贈