008.Ansible文件管理模块

一  stat模块

检查文件状态使用，模块获取文件的状态等信息，类似与linux中的STAT命令可以用来获取文件的属主、可读/写、文件状态等信息

[root@node1 ansible]#  stat lookup_files_ex.yml

  File: ‘lookup_files_ex.yml’
  Size: 125           Blocks: 8          IO Block: 4096   regular file
Device: fd00h/64768d    Inode: 69018922    Links: 1
Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2020-04-30 18:01:52.947596173 +0800
Modify: 2020-04-30 18:01:51.624591268 +0800
Change: 2020-04-30 18:01:51.626591276 +0800
 Birth: -

[root@node1 ansible]# vim files_stat_ex.yml

- hosts: demo2.example.com
  gather_facts: no
  tasks:
    - name: stat /rtc/fstab
      stat:
        path: /etc/fstab
      register: fstab_stat
    - name: print fstab_stat
      debug:
        msg: "{{ fstab_stat }}"

[root@node1 ansible]# ansible-playbook files_stat_ex.yml

TASK [print fstab_stat] ***********************************************************************************************************************
ok: [demo2.example.com] => {
    "msg": {
        "changed": false,
        "failed": false,
        "stat": {
            "atime": 1588162552.5214317,
            "attr_flags": "",
            "attributes": [],
            "block_size": 4096,
            "blocks": 8,
            "charset": "us-ascii",
            "checksum": "8e1580bbd25809a2232e28adba26735dad99cc06",
            "ctime": 1565620911.8073654,
            "dev": 64768,
            "device_type": 0,
            "executable": false,
            "exists": true,
            "gid": 0,
            "gr_name": "root",
            "inode": 33554498,
            "isblk": false,
            "ischr": false,
            "isdir": false,
            "isfifo": false,
            "isgid": false,
            "islnk": false,
            "isreg": true,
            "issock": false,
            "isuid": false,
            "mimetype": "text/plain",
            "mode": "0644",
            "mtime": 1565620660.3251472,
            "nlink": 1,
            "path": "/etc/fstab",
            "pw_name": "root",
            "readable": true,
            "rgrp": true,
            "roth": true,
            "rusr": true,
            "size": 465,
            "uid": 0,
            "version": "598828928",
            "wgrp": false,
            "woth": false,
            "writeable": true,
            "wusr": true,
            "xgrp": false,
            "xoth": false,
            "xusr": false
        }
    }
}

二 blockinfile模块

blockinfile 是 Ansible 的一个非常实用的模块，和单行替换模块 lineinfile 类似，但是可以帮助我们在文件中插入一段文本。

[root@node1 ansible]# vim files/test.html

<html>
    <head>
    </head>
    <body>
    </body>
</html>

[root@node1 ansible]# vim blockfile_ex.yml

- name: blockinfile module test
  hosts: demo3.example.com
  tasks:
    - name: install httpd
      yum:
        name: httpd
        state: installed
    - name: copy test.html to dest
      copy:
        src: files/test.html
        dest: /var/www/html/test.html
    - name: add block
      blockinfile:
        marker: "<!--{mark} ANSIBLE MANAGED BLOCK -->"
        insertafter: "<body>"
        path: /var/www/html/test.html
        block:
          <h1>Welcome to {{ ansible_hostname}}</h1>
          <p>Last update on {{ ansible_date_time.iso8601}} </p>
    - name: start service
      service:
        name: httpd
        state: started 

执行

[root@node1 ansible]# ansible-playbook blockfile_ex.yml

访问

三 lineinfile模块

在大多数时候，我们在linux上的操作，就是针对文件的操作，通过配置管理工具对配置文件作统一的配置修改是一个非常酷的功能。

下面是官方针对该模块的说明：

lineinfile - Ensure a particular line is in a file, or replace an existing line using a back-referenced regular expression

简单讲，这个模块就是针对一个文件中行内容的操作。

下面我们详细说一说其具体可以做的事情。

3.1 修改匹配行

修改selinux示例

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /etc/selinux/config |grep  ^SELINUX="

[root@node1 ansible]# vim edit_selinux.yml

- hosts: demo3.example.com
  gather_facts: no
  tasks:
    - name: disable selinux
      lineinfile:
        path: /etc/selinux/config
        regex: ^SELINUX=
        line: SELINUX=disabled

[root@node1 ansible]# ansible-playbook edit_selinux.yml

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /etc/selinux/config |grep  ^SELINUX="

demo3.example.com | CHANGED | rc=0 >>
SELINUX=disabled

在node3节点写入一个文件

[root@node3 ~]# vim /tmp/test.conf

Listen 127.0.0.1:80
Listen 80
Port

3.2 插入匹配行

[root@node1 ansible]# vim lineinfile.yml

- hosts: demo3.example.com
  gather_facts: no
  tasks:
    - name: inser after
      lineinfile:
        path: /tmp/test.conf
        insertafter: "^Listen 80"   #在之后插入
        line: "aaaaa"
    - name: inser befor
      lineinfile:
        path: /tmp/test.conf
        insertbefore: "^Listen 80"    #之前插入
        line: "befor bbbb"

执行

[root@node1 ansible]# ansible-playbook lineinfile.yml

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /tmp/test.conf"

demo3.example.com | CHANGED | rc=0 >>
Listen 127.0.0.1:80
befor bbbb
Listen 80
aaaaa
Port

3.3 删除匹配行

[root@node1 ansible]# vim lineinfile.yml

- hosts: demo3.example.com
  gather_facts: no
  vars:
    testfile: "/tmp/test.conf"
  tasks:
    - name: inser after
      lineinfile:
        path: "{{testfile}}"
        insertafter: "^Listen 80"
        line: "aaaaa"
    - name: inser befor
      lineinfile:
        path: "{{ testfile }}"
        insertbefore: "^Listen 80"
        line: "befor bbbb"
    - name: delete line
      lineinfile:
        path: "{{ testfile }}"
        regex: "^Port"
        state: absent

[root@node1 ansible]# ansible-playbook lineinfile.yml

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /tmp/test.conf"

demo3.example.com | CHANGED | rc=0 >>
Listen 127.0.0.1:80
befor bbbb
Listen 80
aaaaa

3.4 文件存在则添加一行内容

往/etc/hosts里添加一行10.1.61.131 test.dz11.com（多次执行，不会重复添加），示例如下：

- name: add a line
  lineinfile:
    path: /etc/hosts
    line: '10.1.61.131 test.dz11.com'

如果有匹配的行则修改该行，如果不匹配则添加

[root@node1 ansible]# vim lineinfile.yml

- hosts: demo3.example.com
  gather_facts: no
  vars:
    testfile: "/tmp/test.conf"
  tasks:
    - name: inser after
      lineinfile:
        path: "{{testfile}}"
        insertafter: "^Listen 80"
        line: "aaaaa"
    - name: inser befor
      lineinfile:
        path: "{{ testfile }}"
        insertbefore: "^Listen 80"
        line: "befor bbbb"
    - name: delete line
      lineinfile:
        path: "{{ testfile }}"
        regex: "^Port"
        state: absent
    - name: regex
      lineinfile:
        path: "{{testfile}}"
        regex: "^Listen 8080 "
        line: "Listen 809090 "

[root@node1 ansible]# ansible-playbook lineinfile.yml

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /tmp/test.conf"

demo3.example.com | CHANGED | rc=0 >>
Listen 127.0.0.1:80
befor bbbb
Listen 80
aaaaa
Listen 809090 

3.5 参数backrefs，backup说明

• backup： 是否备份原文件，默认为no
• backrefs：
  • 当backrefs为no时，如果regex没有匹配到行，则添加一行，如果Regx匹配到行，则修改该行
  • 当backrefs为yes时，如果regex没有匹配到行，则保持原文件不变，如果regex匹配到行，则修改该行
  • backrefs默认为no，所以上面那个示例中，我们没有配置backrefs，而默认没有匹配，则修改。

3.6 使用validate验证文件是否正确修改

在一些场景下，我们修改完文件后，需要对文件做一下测试，用以检查文件修改之后，是否能正常运行。如http.conf、nginx.conf等，一旦改错，而不加以测试，可能会直接导致http服务挂掉。

可以使用validate关键字，在修改完成以后，对文件执行检测：

- name: test validate
  lineinfile:
      dest: /etc/sudoers
      state: present
      regexp: '^%ADMIN ALL='
      line: '%ADMIN ALL=(ALL)'
      validate: 'visudo -cf %s'    #这里就是执行检测，比如nginx就可以写入nginx -t检测配置文件
  tags:
    - testsudo

博主声明：本文的内容来源主要来自誉天教育晏威老师，由本人实验完成操作验证，需要的博友请联系誉天教育（http://www.yutianedu.com/），获得官方同意或者晏老师（https://www.cnblogs.com/breezey/）本人同意即可转载，谢谢！