ansible的安装部署及简单应用

Ansible 是一个配置管理和应用部署工具，功能类似于目前业界的配置管理工具 Chef,Puppet,Saltstack。Ansible 是通过 Python 语言开发。Ansible 平台由 Michael DeHaan 创建，他同时也是知名软件 Cobbler 与 Func 的作者。Ansible 的第一个版本发布于 2012 年 2 月。Ansible 默认通过 SSH 协议管理机器，所以 Ansible 不需要安装客户端程序在服务器上。您只需要将 Ansible 安装在一台服务器，在 Ansible 安装完后，您就可以去管理控制其它服务器。不需要为它配置数据库，Ansible 不会以 daemons 方式来启动或保持运行状态。Ansible 可以实现以下目标：

自动化部署应用
自动化管理配置
自动化的持续交付
自动化的（AWS）云服务管理。

根据 Ansible 官方提供的信息，当前使用 Ansible 的用户有：evernote、rackspace、NASA、Atlassian、twitter 等。

1、分别配置各自主机名，并配置hosts文件（能互相解析）

8.20、8.39、8.40
#vim /etc/hosts

# hostname node1.chinasoft.com
vim /etc/hosts
192.168.8.20 node1.chinasoft.com node1
192.168.8.39 node2.chinasoft.com node2

2、在ansible服务器8.40上配置ssh免密码访问

# ssh-keygen

# ssh-copy-id -i .ssh/id_rsa.pub root@node1.chinasoft.com
# ssh-copy-id -i .ssh/id_rsa.pub root@node2.chinasoft.com
测试是否成功
# ssh node1.chinasoft.com 'date';date
# ssh node2.chinasoft.com 'date';date

3、安装ansible服务
# yum install -y epel-relase
# yum install -y ansible1.9

配置服务器组
# vim /etc/ansible/hosts

[webservers]
node1.chinasoft.com
node2.chinasoft.com

[dbserver2]
node1.chinasoft.com
node2.chinasoft.com

4、常用服务及模块的使用
查看命令的帮助文档，如copy
# ansible-doc -s copy

简单的命令测试：
①ping响应
# ansible all -m ping
node2.chinasoft.com | success >> {
    "changed": false, 
    "ping": "pong"
}

node1.chinasoft.com | success >> {
    "changed": false, 
    "ping": "pong"
}
②各服务器时间
# ansible all -a 'date'
node2.chinasoft.com | success | rc=0 >>
Mon Apr 18 20:43:48 CST 2016

node1.chinasoft.com | success | rc=0 >>
Mon Apr 18 20:43:48 CST 2016

③文件拷贝
# ansible dbservers -m copy -a "src=/etc/fstab dest=/root/fstab"
验证拷贝是否成功
# ansible dbservers -a "ls /root"
node1.chinasoft.com | success | rc=0 >>
anaconda-ks.cfg
fstab
install.log
install.log.syslog

node2.chinasoft.com | success | rc=0 >>
anaconda-ks.cfg
fstab
install.log
install.log.syslog

④添加计划任务
# ansible all -m cron -a 'name="custom job" minute=*/3 hour=* day=* month=* weekday=* job="/usr/sbin/ntpdate 192.168.8.102"'
node2.chinasoft.com | success >> {
    "changed": false, 
    "jobs": [
        "customjob", 
        "custom job"
    ]
}

node1.chinasoft.com | success >> {
    "changed": true, 
    "jobs": [
        "custom job"
    ]
}

# ansible all -a "crontab -l"
node1.chinasoft.com | success | rc=0 >>
#Ansible: custom job
*/3 * * * * /usr/sbin/ntpdate 192.168.8.102

node2.chinasoft.com | success | rc=0 >>
#Ansible: customjob
*/3 * * * * /usr/sbin/ntpdate 192.168.8.102

④在节点中添加组
# ansible-doc -s group

action: group
      gid                    # Optional `GID' to set for the group.
      name=                  # Name of the group to manage.
      state                  # Whether the group should be present or not on the remote host.
      system                 # If `yes', indicates that the group created is a system group.
添加mysql组
# ansible all -m group -a "gid=306 system=yes name=mysql"
node1.chinasoft.com | success >> {
    "changed": true, 
    "gid": 306, 
    "name": "mysql", 
    "state": "present", 
    "system": true
}

node2.chinasoft.com | success >> {
    "changed": true, 
    "gid": 306, 
    "name": "mysql", 
    "state": "present", 
    "system": true
}

# ansible all -a "tail -1 /etc/group"
node2.chinasoft.com | success | rc=0 >>
mysql:x:306:

node1.chinasoft.com | success | rc=0 >>
mysql:x:306:

⑥yum命令的使用
# ansible-doc -s yum
  action: yum
      conf_file              # The remote yum configuration file to use for the transaction.
      disable_gpg_check      # Whether to disable the GPG checking of signatures of packages being installed. Has an effect only if state is `present' or `latest'.
      disablerepo            # `Repoid' of repositories to disable for the install/update operation. These repos will not persist beyond the transaction. When specifying multiple repos, separ
      enablerepo             # `Repoid' of repositories to enable for the install/update operation. These repos will not persist beyond the transaction. When specifying multiple repos, separa
      list                   # Various (non-idempotent) commands for usage with `/usr/bin/ansible' and `not' playbooks. See examples.
      name=                  # Package name, or package specifier with version, like `name-1.0'. When using state=latest, this can be '*' which means run: yum -y update. You can also pass a u
      state                  # Whether to install (`present', `latest'), or remove (`absent') a package.
      update_cache           # Force updating the cache. Has an effect only if state is `present' or `latest'.

安装httpd软件
# ansible all -m yum -a "name=httpd state=present"
查看是否安装了httpd
# ansible all -a "rpm -q httpd"
node1.chinasoft.com | success | rc=0 >>
httpd-2.2.15-47.el6.centos.4.x86_64

node2.chinasoft.com | success | rc=0 >>
httpd-2.2.15-47.el6.centos.4.x86_64

⑦查看服务状态
# ansible all -a "service httpd status"
node2.chinasoft.com | FAILED | rc=3 >>
httpd 已停

node1.chinasoft.com | FAILED | rc=3 >>
httpd 已停

启动httpd服务，并设置开机自启动
# ansible all -m service -a "state=started enabled=yes name=httpd"
node1.chinasoft.com | success >> {
    "changed": true, 
    "enabled": true, 
    "name": "httpd", 
    "state": "started"
}

node2.chinasoft.com | success >> {
    "changed": true, 
    "enabled": true, 
    "name": "httpd", 
    "state": "started"
}

# ansible all -a "service httpd status"
node1.chinasoft.com | success | rc=0 >>
httpd (pid  2575) 正在运行...

node2.chinasoft.com | success | rc=0 >>
httpd (pid  2371) 正在运行...

校验是否开机自启动
# ansible all -a "chkconfig --list httpd"
node1.chinasoft.com | success | rc=0 >>
httpd          0:off1:off2:on3:on4:on5:on6:off

node2.chinasoft.com | success | rc=0 >>
httpd          0:off1:off2:on3:on4:on5:on6:off

5、剧本的简单使用
①通过脚本添加组
# vim test.yaml
- hosts: all
  remote_user: root
  tasks:
    - name: add a group
      group: gid=1000 name=testgroup1 system=no
    - name: execute a commond
      command: /bin/date

执行剧本
# ansible-playbook test.yaml

PLAY [all] ********************************************************************

GATHERING FACTS *************************************************************** 
ok: [node2.chinasoft.com]
ok: [node1.chinasoft.com]

TASK: [add a group] *********************************************************** 
changed: [node2.chinasoft.com]
changed: [node1.chinasoft.com]

TASK: [execute a commond] ***************************************************** 
changed: [node2.chinasoft.com]
changed: [node1.chinasoft.com]

PLAY RECAP ******************************************************************** 
node1.chinasoft.com        : ok=3    changed=2    unreachable=0    failed=0   
node2.chinasoft.com        : ok=3    changed=2    unreachable=0    failed=0

②通过脚本修改httpd配置文件，修改端口为8080
# vim web.yaml

- hosts: all
  remote_user: root
  tasks:
    - name: ensure apache latest version
      yum: state=latest name=httpd
    - name: apache configure file
      copy: src=/root/httpd.conf dest=/etc/httpd/conf/httpd.conf force=yes
      notify:
        - restart httpd
  handlers:
      - name: restart httpd
        service: name=httpd state=restarted

执行剧本

# ansible-playbook web.yaml