ad-hoc实战

ad-hoc实战

要求：利用Ansible搭建一个简易的作业网站，web端文件上传目录共享至nfs端，nfs的数据同步至backup

环境准备

主机名	主机角色	外网IP	内网IP
m01	ansible管理端	10.0.0.61	172.16.1.61
backup	ansible被管理端、rsync服务端、nfs服务端	10.0.0.41	172.16.1.41
nfs	ansible被管理端、rsync客户端、nfs服务端	10.0.0.31	172.16.1.31
web03	ansible被管理端、部署提交作业代码，挂载上传目录即可	10.0.0.9	172.16.1.9

Ansible管理端环境准备

# 定义管理清单
[root@m01 ~]$ vim /etc/ansible/hosts
[zy_php]
web03 ansible_ssh_host=172.16.1.9
backup ansible_ssh_host=172.16.1.41
nfs ansible_ssh_host=172.16.1.31

# 下发私钥
[root@m01 ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub root@172.16.1.9
[root@m01 ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub root@172.16.1.41
[root@m01 ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub root@172.16.1.31

---

Rsync服务部署

常规步骤

# 1.创建统一用户
groupadd www -g 666
useradd www -u 666 -g 666 -s /sbin/nologin -M

# 2.安装rsync
yum install -y rsync

# 3.修改配置文件
[root@backup ~]$ vim /etc/rsyncd.conf
uid = www
gid = www
port = 873
fake super = yes
use chroot = no
max connections = 200
timeout = 600
ignore errors
read only = false
list = false
auth users = rsync_backup
secrets file = /etc/rsync.passwd
log file = /var/log/rsyncd.log
#--------------------------------------------------------------
[zy_backup]
comment = welcome to oldboyedu backup!
path = /backup

# 4.创建备份目录
mkdir /backup

# 5.修改备份目录权限
chown www.www /backup

# 6.创建虚拟用户密码文件
echo 'rsync_backup:123' > /etc/rsync.passwd

# 7.修改密码文件权限为600
chmod 600 /etc/rsync.passwd

# 8.启动服务
systemctl start rsyncd

# 9.加入开机自启
systemctl enable rsyncd

Ansible步骤

# 1.创建统一用户
ansible backup -m group -a 'name=www gid=666 state=present'
ansible backup -m user -a 'name=www uid=666 group=666 shell=/sbin/nologin create_home=no state=present'

# 2.安装rsync
ansible bakcup -m yum -a 'name=rsync state=present'

# 3.修改配置文件
ansible backup -m copy -a 'src=/root/rsync.mb dest=/etc/rsyncd.conf owner=root group=root mode=0644'

vim /root/rsync_mb
uid = www
gid = www
port = 873
fake super = yes
use chroot = no
max connections = 200
timeout = 600
ignore errors
read only = false
list = false
auth users = rsync_backup
secrets file = /etc/rsync.passwd
log file = /var/log/rsyncd.log
#--------------------------------------------------------------
[zy_backup]
comment = welcome to oldboyedu backup!
path = /backup

# 4.创建备份目录并更改属组属主
ansible backup -m file -a 'path=/backup owner=www group=www mode=0755 state=directory'

# 5.创建密码文件并更改权限为600
ansible backup -m copy -a 'content="rsync_backup:123" dest=/etc/rsync.passwd owner=root group=root mode=0600'

# 6.启动服务并加入开机自启
ansible backup -m service -a 'name=rsyncd state=started enabled=yes'

NFS服务部署

常规步骤

# 1.创建统一用户
groupadd www -g 666
useradd www -u 666 -g 666 -s /sbin/nologin -M

# 2.安装NFS服务
yum -y install nfs-utils rpcbind

# 3.编辑共享存储配置文件
vim /etc/exports
/data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)

# 4.创建共享目录
mkdir /data

# 5.修改共享目录属主属组
chown www.www /data

# 6.启动服务
systemctl start nfs-server

# 7.加入开机自启
systemctl enable nfs-server

Ansible步骤

# 1.创建统一用户
ansible nfs -m group -a 'name=www gid=666 state=present'
ansible nfs -m user -a 'name=www uid=666 group=666 shell=/sbin/nologin create_home=no state=present'

# 2.安装nfs
ansible nfs -m yum -a 'name=nfs-utils state=present'
ansible nfs -m yum -a 'name=rpcbind state=present'

# 3.编辑共享存储配置文件
ansible nfs -m copy -a "content='/data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)' dest=/etc/exports"

# 4.创建出共享目录并修改属主属组
ansible nfs -m file -a 'path=/data owner=www group=www mode=0755 state=directory'

# 5.启动服务并加入开机自启
ansible nfs -m service -a 'name=nfs-server state=started enabled=yes'

Http服务部署

常规步骤

# 1.创建统一用户
groupadd www -g 666
useradd www -u 666 -g 666 -s /sbin/nologin -M

# 2.安装http服务
yum install -y httpd php

# 3.统一用户
vim /etc/httpd/conf/httpd.conf
1）修改前
User apache
Group apache
2）修改后
User www
Group www

# 4.进入站点目录部署代码
cd /var/www/html
rz

# 5.解压代码文件
unzip kaoshi.zip 

# 6.修改php代码，更改上传目录
vim /var/www/html/upload_file.php
$wen="/var/www/html/pic";

# 7.上传图片至/var/www/html/pic文件中
cd /var/www/html/pic
rz

# 8.更改站点目录属主属组
chown www.www /var/www/html/

# 9.启动服务
systemctl start httpd

Ansible步骤

# 1.创建统一用户
ansible web03 -m group -a 'name=www gid=666 state=present'
ansible web03 -m user -a 'name=www uid=666 group=666 shell=/sbin/nologin create_home=no state=present'

# 2.安装http服务
ansible web03 -m yum -a 'name=httpd state=present'
ansible web03 -m yum -a 'name=php state=present'

# 3.修改配置文件，统一用户
ansible web03 -m copy -a 'src=/root/httpd.conf dest=/etc/httpd/conf/httpd.conf owner=root group=root mode=0644'
vim /root/httpd.conf
ServerRoot "/etc/httpd"

Listen 80

Include conf.modules.d/*.conf

User www
Group www

ServerAdmin root@localhost

<Directory />
    AllowOverride none
    Require all denied
</Directory>

DocumentRoot "/var/www/html"

<Directory "/var/www">
    AllowOverride None

    Require all granted
</Directory>

<Directory "/var/www/html">

    Options Indexes FollowSymLinks

    AllowOverride None

    Require all granted
</Directory>

<IfModule dir_module>
    DirectoryIndex index.html
</IfModule>

<Files ".ht*">
    Require all denied
</Files>

ErrorLog "logs/error_log"

LogLevel warn

<IfModule log_config_module>

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common

    <IfModule logio_module>

      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    </IfModule>

    CustomLog "logs/access_log" combined
</IfModule>

<IfModule alias_module>

    ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"

</IfModule>

<Directory "/var/www/cgi-bin">
    AllowOverride None
    Options None
    Require all granted
</Directory>

<IfModule mime_module>

    TypesConfig /etc/mime.types

    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz

    AddType text/html .shtml
    AddOutputFilter INCLUDES .shtml
</IfModule>

AddDefaultCharset UTF-8

<IfModule mime_magic_module>

    MIMEMagicFile conf/magic
</IfModule>

EnableSendfile on

IncludeOptional conf.d/*.conf

# 4.部署代码至站点目录
ansible web03 -m unarchive -a 'src=/root/kaoshi.zip dest=/var/www/html/'

# 5.在站点目录下创建用户上传目录
ansible web03 -m file -a 'path=/var/www/html/pic state=directory'

# 6.修改php代码，更改上传目录
ansible web03 -m copy -a 'src=/root/upload.conf dest=/var/www/html/upload_file.php owner=root group=root mode=0644'
vim /root/upload.conf
<?php

header("Content-type:text/html;charset=utf-8");

ini_set('date.timezone','Asia/Shanghai');

$wen=/var/www/html/pic;

$pre=preg_match("/^([0-9])+_/",$_FILES['file']["name"][0]);
$size =$_FILES['file']["size"][0];

if (!is_dir($wen.'/')) {

  mkdir($wen.'/', 0777);

}

// foreach($_FILES['file']['error'] as $k=>$v){

  if ($_FILES["file"]["error"][0] > 0 ) {
    echo "上传失败！请查看是否选择了需要上传的文件！";
    }else if($pre==0){

    echo "上传失败！文件名有误，请修改文件名为你的编号加下划线开头<br/>例如：33_蒋某某.docx";

  }else if ($size<10) {

    echo "上传失败！文件为空文件！";
  }else{

    $tmp_name = $_FILES["file"]["tmp_name"][0];
    $name =$_FILES["file"]["name"][0];

    if (file_exists($wen."/" . $name))
      {
      echo "上传失败，文件".$_FILES["file"]["name"][0] . " 已经存在 ";
      }
    else
      {
      move_uploaded_file($tmp_name,$wen."/".$name);
      echo "文件".$_FILES["file"]["name"][0]."上传成功";
      }

}

// }
?>

# 7.更改站点目录属主属组
ansible web03 -m file -a 'path=/var/www/html state=file owner=www group=www mode=0755 state=directory'

# 8.启动服务
ansible web03 -m service -a 'name=httpd state=started'

挂载web端上传目录至nfs共享目录，并利用backup备份

常规步骤

-web端操作
# 1.安装nfs
yum -y install nfs-utils

# 2.挂载上传目录至nfs共享目录
mount -t nfs 172.16.1.31:/data /var/www/html/pic

-nfs端操作
# 1.安装rsync
yum install -y rsync

# 1.创建密码文件
echo '123' > /etc/rsync.passwd

# 2.给密码文件授权
chmod 600 /etc/rsync.passwd

# 3.备份共享目录至backup端
rsync -avz --delete /data rsync_backup@172.16.1.41::zy_backup --password-file=/etc/rsync.passwd

Ansible步骤

-web端
# 1.安装nfs
ansible web03 -m yum -a 'name=nfs-utils state=present'

# 2.挂载上传目录至nfs共享目录
ansible web03 -m mount -a 'path=/var/www/html/pic src=172.16.1.31:/data fstype=nfs state=mounted'

-nfs端
# 1.安装rsync
ansible nfs -m yum -a 'name=rsync state=present'

# 1.创建密码文件,并指定权限
ansible nfs -m copy -a 'src=/root/mima dest=/etc/rsync.passwd mode=600'
vim /root/mima
123

# 2.备份共享目录至backup端
ansible nfs -m shell -a 'rsync -avz --delete /data rsync_backup@172.16.1.41::zy_backup --password-file=/etc/rsync.passwd'

ansible nfs -m cron -a 'name="共享目录备份" minute=*/1 job="/usr/bin/rsync -avz --delete /data rsync_backup@172.16.1.41::zy_backup --password-file=/etc/rsync.passwd &>/dev/null"'

整合Ansible脚本

Ansible管理端需要准备的环境

# 1.准备好rsync配置文件
vim /root/rsync_mb
uid = www
gid = www
port = 873
fake super = yes
use chroot = no
max connections = 200
timeout = 600
ignore errors
read only = false
list = false
auth users = rsync_backup
secrets file = /etc/rsync.passwd
log file = /var/log/rsyncd.log
#--------------------------------------------------------------
[zy_backup]
comment = welcome to oldboyedu backup!
path = /backup

# 2.准备好web端http配置文件
vim /root/httpd.conf
ServerRoot "/etc/httpd"

Listen 80

Include conf.modules.d/*.conf

User www
Group www

ServerAdmin root@localhost

<Directory />
    AllowOverride none
    Require all denied
</Directory>

DocumentRoot "/var/www/html"

<Directory "/var/www">
    AllowOverride None

    Require all granted
</Directory>

<Directory "/var/www/html">

    Options Indexes FollowSymLinks

    AllowOverride None

    Require all granted
</Directory>

<IfModule dir_module>
    DirectoryIndex index.html
</IfModule>

<Files ".ht*">
    Require all denied
</Files>

ErrorLog "logs/error_log"

LogLevel warn

<IfModule log_config_module>

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common

    <IfModule logio_module>

      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    </IfModule>

    CustomLog "logs/access_log" combined
</IfModule>

<IfModule alias_module>

    ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"

</IfModule>

<Directory "/var/www/cgi-bin">
    AllowOverride None
    Options None
    Require all granted
</Directory>

<IfModule mime_module>

    TypesConfig /etc/mime.types

    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz

    AddType text/html .shtml
    AddOutputFilter INCLUDES .shtml
</IfModule>

AddDefaultCharset UTF-8

<IfModule mime_magic_module>

    MIMEMagicFile conf/magic
</IfModule>

EnableSendfile on

IncludeOptional conf.d/*.conf

# 3.准备好站点配置文件
vim /root/upload.conf
<?php

header("Content-type:text/html;charset=utf-8");

ini_set('date.timezone','Asia/Shanghai');

$wen=/var/www/html/pic;

$pre=preg_match("/^([0-9])+_/",$_FILES['file']["name"][0]);
$size =$_FILES['file']["size"][0];

if (!is_dir($wen.'/')) {

  mkdir($wen.'/', 0777);

}

// foreach($_FILES['file']['error'] as $k=>$v){

  if ($_FILES["file"]["error"][0] > 0 ) {
    echo "上传失败！请查看是否选择了需要上传的文件！";
    }else if($pre==0){

    echo "上传失败！文件名有误，请修改文件名为你的编号加下划线开头<br/>例如：33_蒋某某.docx";

  }else if ($size<10) {

    echo "上传失败！文件为空文件！";
  }else{

    $tmp_name = $_FILES["file"]["tmp_name"][0];
    $name =$_FILES["file"]["name"][0];

    if (file_exists($wen."/" . $name))
      {
      echo "上传失败，文件".$_FILES["file"]["name"][0] . " 已经存在 ";
      }
    else
      {
      move_uploaded_file($tmp_name,$wen."/".$name);
      echo "文件".$_FILES["file"]["name"][0]."上传成功";
      }

}

// }
?>

# 4.在本地准备rsync客户端密码文件
vim /root/mima
123

脚本整合

[root@m01 ~]$ cat sb.sh
# 1.所有机器上创建统一用户
ansible zy_php -m group -a 'name=www gid=666 state=present'
ansible zy_php -m user -a 'name=www uid=666 group=666 shell=/sbin/nologin create_home=no state=present'

# 2.所有机器安装对应服务
ansible bakcup -m yum -a 'name=rsync state=present'
ansible nfs -m yum -a 'name=nfs-utils state=present'
ansible nfs -m yum -a 'name=rpcbind state=present'
ansible nfs -m yum -a 'name=rsync state=present'
ansible web03 -m yum -a 'name=httpd state=present'
ansible web03 -m yum -a 'name=php state=present'
ansible web03 -m yum -a 'name=nfs-utils state=present'

# 3.准备所有服务需要的文件
## rsync
ansible backup -m copy -a 'src=/root/rsync_mb dest=/etc/rsyncd.conf owner=root group=root mode=0644'
## nfs
ansible nfs -m copy -a "content='/data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)' dest=/etc/exports"
## httpd
ansible web03 -m copy -a 'src=/root/httpd.conf dest=/etc/httpd/conf/httpd.conf owner=root group=root mode=0644'
## php代码
nsible web03 -m copy -a 'src=/root/upload.conf dest=/var/www/html/upload_file.php owner=root group=root mode=0644'
## rsync客户端密码文件
ansible nfs -m copy -a 'src=/root/mima dest=/etc/rsync.passwd mode=600'

# 4.backup端：
## 创建备份目录并更改属组属主
ansible backup -m file -a 'path=/backup owner=www group=www mode=0755 state=directory'
## 创建密码文件并更改权限为600
ansible backup -m copy -a 'content="rsync_backup:123" dest=/etc/rsync.passwd owner=root group=root mode=0600'
## 启动服务并加入开机自启
ansible backup -m service -a 'name=rsyncd state=started enabled=yes'

# 5.nfs端：
## 创建出共享目录并修改属主属组
ansible nfs -m file -a 'path=/data owner=www group=www mode=0755 state=directory'
## 启动服务并加入开机自启
ansible nfs -m service -a 'name=nfs-server state=reloaded enabled=yes'

# 6.web端：
## 部署代码至站点目录
ansible web03 -m unarchive -a 'src=/root/kaoshi.zip dest=/var/www/html/'
## 在站点目录下创建用户上传目录
ansible web03 -m file -a 'path=/var/www/html/pic state=directory'
## 更改站点目录属主属组
ansible web03 -m file -a 'path=/var/www/html state=file owner=www group=www mode=0755 state=directory'
## 启动服务
ansible web03 -m service -a 'name=httpd state=started'

# 7.做共享和备份
## 挂载上传目录至nfs共享目录
ansible web03 -m mount -a 'path=/var/www/html/pic src=172.16.1.31:/data fstype=nfs state=mounted'
## 备份共享目录至backup端
ansible nfs -m shell -a 'rsync -avz --delete /data rsync_backup@172.16.1.41::zy_backup --password-file=/etc/rsync.passwd'