ansible操作(一)

ansible晋级操作之ad-hoc命令

所谓的ad-hoc命令！

如果我们敲入一些命令去比较快的完成一些事情,而不需要将这些执行的命令特别保存下来, 这样的命令就叫做 ad-hoc 命令。Ansible提供两种方式去完成任务,一是 ad-hoc 命令,一是写 Ansible playbook.前者可以解决一些简单的任务, 后者解决较复杂的任务.

在学习了 playbooks 之后,你才能体会到 Ansible 真正的强大之处在哪里.

在什么情境下去使用ad-hoc 命令呢?

比如说查看ip,查看服务状态等.那种少了命令即可实现的操作

测试操作

[root@localhost ~]# ansible group1 -a "ls"
[DEPRECATION WARNING]: DEFAULT_SUDO_USER option, In favor of Ansible Become, which is a generic framework. See
become_user. , use become instead. This feature will be removed in version 2.8. Deprecation warnings can be disabled
 by setting deprecation_warnings=False in ansible.cfg.
10.0.15.60 | CHANGED | rc=0 >>
test1.txt

10.0.15.66 | CHANGED | rc=0 >>
test2.txt
-------------------------------------------------------
group1是在/etc/ansible/hosts中设置的组，即操作当前组中的主机
不了解的朋友可以看看我上篇博客:传送门

#上面的警告可以通过修改配置文件进行注释
编辑ansible.cfg 修改deprecation_warnings 为False即可

ansible group1 -a "ls" -u username    #-u username 表示指定的用户执行 

ansible有许多模块,默认是 ‘command’,也就是命令模块
我们可以通过 -m 选项来指定“不同的模块”.在前面所示的例子中, 因为我们是要在 group1 组下的服务器中执行 ls 命令,因为是执行命令,所以就不需要指定command模块。使用 默认设定就OK

注意：command 模块不支持 shell 变量,也不支持管道等 shell 相关的东西.如果你想使用 shell相关的这些东西, 请使用’shell’ 模块.

shell模块使用

[root@localhost ~]# ansible group1 -m shell -a 'echo $PATH'
10.0.15.66 | CHANGED | rc=0 >>
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin

10.0.15.60 | CHANGED | rc=0 >>
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/usr/local/cpgroup/jdk/bin:/usr/local/cpgroup/jdk/jre/bin:/usr/local/cpgroup/ant/dist/bin:/usr/local/cpgroup/maven/bin:/usr/local/cpgroup/python/bin:/usr/local/git/bin

!!!注意使用Ansible ad-hoc 命令行接口时(与使用 Playbooks 的情况相反)。尤其注意shell 引号的规则。比如在上面的例子中,如果使用双引号”echo $PATH”,求出PATH”变量在当前系统的值,而我们想要将这个命令传递到其他机器上面
[root@localhost ~]# ansible group1 -m shell -a "echo $PATH"
10.0.15.66 | CHANGED | rc=0 >>
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/usr/local/go/bin:/root/bin

10.0.15.60 | CHANGED | rc=0 >>
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/usr/local/go/bin:/root/bin

[root@localhost ~]# echo $PATH
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/usr/local/go/bin:/root/bin

ansible下的scp

[root@localhost ~]# ansible group1 -m copy -a "src=/root/1.txt dest=/root/1.txt"
10.0.15.66 | CHANGED => {
    "changed": true,
    "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",
    "dest": "/root/1.txt",
    "gid": 0,
    "group": "root",
    "md5sum": "d41d8cd98f00b204e9800998ecf8427e",
    "mode": "",
    "owner": "root",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 0,
    "src": "/root/.ansible/tmp/ansible-tmp-1550550512.6-88436779222448/source",
    "state": "file",
    "uid": 0
}
10.0.15.60 | CHANGED => {
    "changed": true,
    "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",
    "dest": "/root/1.txt",
    "gid": 0,
    "group": "root",
    "md5sum": "d41d8cd98f00b204e9800998ecf8427e",
    "mode": "",
    "owner": "root",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 0,
    "src": "/root/.ansible/tmp/ansible-tmp-1550550512.59-19910559807601/source",
    "state": "file",
    "uid": 0
}

ansible修改文件权限

[root@localhost ~]# ansible group1 -m file -a "dest=/root/1.txt mode=777"
10.0.15.60 | CHANGED => {
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "",
    "owner": "root",
    "path": "/root/1.txt",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 0,
    "state": "file",
    "uid": 0
}
10.0.15.66 | CHANGED => {
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "",
    "owner": "root",
    "path": "/root/1.txt",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 0,
    "state": "file",
    "uid": 0
}

修改文件所属用户所属组

[root@localhost ~]# ansible group1 -m file -a "dest=/root/1.txt mode=644 owner=www-data group=www-data"
10.0.15.66 | CHANGED => {
    "changed": true,
    "gid": 1000,
    "group": "www-data",
    "mode": "",
    "owner": "www-data",
    "path": "/root/1.txt",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 0,
    "state": "file",
    "uid": 1000
}
10.0.15.60 | CHANGED => {
    "changed": true,
    "gid": 1001,
    "group": "www-data",
    "mode": "",
    "owner": "www-data",
    "path": "/root/1.txt",
    "secontext": "system_u:object_r:admin_home_t:s0",
    "size": 0,
    "state": "file",
    "uid": 1001
}

创建与删除

ansible group -m file -a "dest=/root/test state=directory"
没有state参数默认创建文件，添加后变为创建目录
state=absent 这个参数代表删除文件
在创建过程中可以在双引号中添加一些其他参数 如mode owner group等

yum的管理

Ansible 提供对 yum 和 apt 的支持

#查看当前包是否安装
[root@localhost ~]# ansible group1 -m yum -a "name=net-tools state=present"
10.0.15.66 | SUCCESS => {
    "ansible_facts": {
        "pkg_mgr": "yum"
    },
    "changed": false,
    "msg": "",
    "rc": 0,
    "results": [
        "net-tools-2.0-0.24.20131004git.el7.x86_64 providing net-tools is already installed"
    ]
}

10.0.15.60 | SUCCESS => {
    "ansible_facts": {
        "pkg_mgr": "yum"
    },
    "changed": false,
    "msg": "",
    "rc": 0,
    "results": [
        "net-tools-2.0-0.22.20131004git.el7.x86_64 providing net-tools is already installed"
    ]
}

ansible进行用户管理

使用 ‘user’ 模块可以方便的创建账户,删除账户,或是管理现有的账户

创建用户
[root@localhost ~]# ansible all -m user -a "name=test password=123456"
[WARNING]: The input password appears not to have been hashed. The 'password' argument must be encrypted for this
module to work properly.

10.0.15.66 | CHANGED => {
    "changed": true,
    "comment": "",
    "create_home": true,
    "group": 1001,
    "home": "/home/test",
    "name": "test",
    "password": "NOT_LOGGING_PASSWORD",
    "shell": "/bin/bash",
    "state": "present",
    "system": false,
    "uid": 1001
}
10.0.15.60 | CHANGED => {
    "changed": true,
    "comment": "",
    "create_home": true,
    "group": 1002,
    "home": "/home/test",
    "name": "test",
    "password": "NOT_LOGGING_PASSWORD",
    "shell": "/bin/bash",
    "state": "present",
    "system": false,
    "uid": 1002
}
删除用户
[root@localhost ~]# ansible all -m user -a "name=test state=absent"
10.0.15.60 | CHANGED => {
    "changed": true,
    "force": false,
    "name": "test",
    "remove": false,
    "state": "absent"
}
10.0.15.66 | CHANGED => {
    "changed": true,
    "force": false,
    "name": "test",
    "remove": false,
    "state": "absent"
}

创建组
[root@localhost ~]# ansible all -m group -a "name=test"
10.0.15.66 | CHANGED => {
    "changed": true,
    "gid": 1001,
    "name": "test",
    "state": "present",
    "system": false
}
10.0.15.60 | CHANGED => {
    "changed": true,
    "gid": 1002,
    "name": "test",
    "state": "present",
    "system": false
}

删除组
[root@localhost ~]# ansible all -m group -a "name=test state=absent"
10.0.15.60 | CHANGED => {
    "changed": true,
    "name": "test",
    "state": "absent"
}
10.0.15.66 | CHANGED => {
    "changed": true,
    "name": "test",
    "state": "absent"
}

官方文档:传送门