Ansible快速开始¶

sshpass¶

sshpass - noninteractive ssh password provider
sshpass -p 123456 ssh -o StrictHostKeyChecking=no root@172.16.1.41 "hostname"

创建密钥对

ssh-keygen -t dsa -P '' -f ~/.ssh/id_dsa >/dev/null 2>&1

sshpass非交互式工具使用

sshpass -p 123456 ssh -o StrictHostKeyChecking=no root@172.16.1.41 "uptime"
sshpass -p 123456 scp -o StrictHostKeyChecking=no /etc/hosts root@172.16.1.41:~

# -p:指定ssh连接用户的密码
# -o StrictHostKeyChecking=no 避免第一次登录出现公钥检查。

# 非交互分发公钥
sshpass -p111111 ssh-copy-id -i /root/.ssh/id_dsa.pub "-p50517 -o StrictHostKeyChecking=no 172.16.1.41"

fenfa_key.sh¶

# !/bin/bash

for n in 41 31 8
do
sshpass -p111111 ssh-copy-id -i /root/.ssh/id_dsa.pub "-p50517 -o StrictHostKeyChecking=no 172.16.1.$n"
done

key_provider.sh¶

[root@manager scripts]# cat key_provider.sh

# !/bin/bash

[ ! -f ~/.ssh/id_dsa.pub ] && ssh-keygen -t dsa -P '' -f ~/.ssh/id_dsa >/dev/null 2>&1
Port=52113

for n in 41 31 8 51 7
do
sshpass -p111111 ssh-copy-id -i ~/.ssh/id_dsa.pub "-p$Port -o StrictHostKeyChecking=no 172.16.1.$n"
done

基于ssh-copy-id 脚本原理实现的批量分发秘钥

for n in 31 61 41 7 8
do
 sshpass -p 123456 ssh -o StrictHostKeyChecking=no 172.16.1.$n "mkdir -m 700 -p ~/.ssh/"
 sshpass -p 123456 scp -o StrictHostKeyChecking=no ~/.ssh/id_dsa.pub     yjj@172.16.1.$n:~/.ssh/authorized_keys
 sshpass -p 123456 ssh -o StrictHostKeyChecking=no 172.16.1.$n "chmod 600 ~/.ssh/authorized_keys"
 /bin/ls -ld /home/yjj/.ssh
 /bin/ls -l /home/yjj/.ssh
done

Ansible¶

使用Ansible¶

python语言是运维人员必会的语言！

ansible是一个基于Python开发的自动化运维工具！其功能实现基于SSH远程连接服务！

ansible可以实现批量系统配置、批量软件部署、批量文件拷贝、批量运行命令等功能

特点

no agents：不需要在被管控主机上安装任何客户端；
no server：无服务器端，使用时直接运行命令即可；
modules in any languages：基于模块工作，可使用任意语言开发模块；
yaml，not code：使用yaml语言定制剧本playbook；
ssh by default：基于SSH工作；
strong multi-tier solution：可实现多级指挥。

配置文件

ansible 应用程序的主配置文件：/etc/ansible/ansible.cfg
Host Inventory 定义管控主机：/etc/ansible/hosts

[root@db01 scritps]# ansible --version
ansible 2.1.1.0
  config file = /etc/ansible/ansible.cfg
  configured module search path = Default w/o overrides
添加控制组
[root@db01 scritps]# vim /etc/ansible/hosts
## 表示把下面那些地址加入  yjj这个组
[yjj]
172.16.1.41
172.16.1.31
172.16.1.8
172.16.1.7
172.16.1.51

修改端口

[root@db01 scritps]# vim /etc/ansible/ansible.cfg
##

#poll_interval  = 15
#sudo_user      = root
#ask_sudo_pass = True
#ask_pass      = True
#transport      = smart
remote_port    = 52113
#module_lang    = C
#module_set_locale = True

执行命令

[root@db01 scritps]# ansible yjj -m command -a "hostname"

  -m MODULE_NAME, --module-name=MODULE_NAME
                        module name to execute (default=command)
  -a MODULE_ARGS, --args=MODULE_ARGS
                        module arguments

[root@db01 scritps]# ansible yjj -m command -a "grep keepcache /etc/yum.conf"
[root@db01 scritps]# ansible yjj -m command -a "sed -i 's#keepcache=0#keepcache=1#g' /etc/yum.conf"

查看帮助¶

[root@db01 scritps]# ansible-doc -h
Usage: ansible-doc [options] [module...]

Options:
  -h, --help            show this help message and exit
  -l, --list            List available modules
  -M MODULE_PATH, --module-path=MODULE_PATH
                        specify path(s) to module library (default=None)
  -s, --snippet         Show playbook snippet for specified module(s)
  -v, --verbose         verbose mode (-vvv for more, -vvvv to enable
                        connection debugging)
  --version             show program's version number and exit

Ansible模块¶

查看模块

[root@manager scripts]# ansible-doc -l
a10_server                         Manage A10 Networks AX/SoftAX/Thunder/vThunder d...
a10_service_group                  Manage A10 Networks devices' service groups
a10_virtual_server                 Manage A10 Networks devices' virtual servers
acl                                Sets and retrieves file ACL information.
add_host                           add a host (and alternatively a group) to the an...
airbrake_deployment                Notify airbrake about app deployments
alternatives                       Manages alternative programs for common commands
apache2_module                     enables/disables a module of the Apache2 webserv...
apk                                Manages apk packages
……

ping¶

测试远程主机的运行状态

[root@manager scripts]# ansible yjj -m ping
172.16.1.7 | SUCCESS => {
    "changed": false,
    "ping": "pong"
}
172.16.1.41 | SUCCESS => {
    "changed": false,
    "ping": "pong"
}
172.16.1.8 | SUCCESS => {
    "changed": false,
    "ping": "pong"
}
172.16.1.31 | SUCCESS => {
    "changed": false,
    "ping": "pong"
}
172.16.1.51 | SUCCESS => {
    "changed": false,
    "ping": "pong"
}

command¶

在远程主机上执行命令

file¶

设置文件的属性

copy¶

复制文件到远程主机

shell¶

切换到某个shell执行指定的指令，参数与command相同。

与command不同的是，此模块可以支持命令管道，同时还有另一个模块也具备此功能：raw

-a 'command' 运行shell命令

ansible all -m shell -a echo "123456789" |passwd --stdin user1'
[root@manager scripts]#  ansible 172.16.1.31 -m shell -a 'useradd user1 && echo "123456789" |passwd --stdin user1'

cron¶

定时任务管理

-a 'name= state= minute= hour= day= month= weekday= job='

[root@manager scripts]#  ansible yjj -m cron -a 'name="time sync" state=present minute="*/5" job="/usr/sbin/ntpdate ntp1.aliyun.com >/dev/null 2>&1"'
172.16.1.8 | SUCCESS => {
    "changed": true,
    "envs": [],
    "jobs": [
        "Time",
        "time sync"
    ]
}
172.16.1.7 | SUCCESS => {
    "changed": true,
    "envs": [],
    "jobs": [
        "Time",
        "time sync"
    ]
}

验证

# Ansible: time sync

*/5 * * * * /usr/sbin/ntpdate ntp1.aliyun.com >/dev/null 2>&1

user¶

系统用户管理

[root@manager scripts]#  ansible yjj -m user -a 'name=yjj shell=/bin/bash comment="wodege" uid=888'
172.16.1.8 | SUCCESS => {
    "changed": true,
    "comment": "wodege",
    "createhome": true,
    "group": 888,
    "home": "/home/yjj",
    "name": "yjj",
    "shell": "/bin/bash",
    "state": "present",
    "system": false,
    "uid": 888
}
172.16.1.7 | SUCCESS => {
    "changed": true,
    "comment": "wodege",
    "createhome": true,
    "group": 888,
    "home": "/home/yjj",
    "name": "yjj",
    "shell": "/bin/bash",
    "state": "present",
    "system": false,
    "uid": 888
}

[root@web01 ~]# tail -1 /etc/passwd
yjj:x:888:888:wodege:/home/yjj:/bin/bash

group¶

系统用户组管理

template¶

service¶

系统服务管理

-a 'name= state={started|stopped|restarted} enabled=(是否开机自动启动)  runlevel='

#state must be one of: running,started,stopped,restarted,reloaded,

[root@manager scripts]# ansible yjj -m service -a 'name=crond state=started'
172.16.1.7 | SUCCESS => {
    "changed": false,
    "name": "crond",
    "state": "started"
}
172.16.1.8 | SUCCESS => {
    "changed": false,
    "name": "crond",
    "state": "started"
}

script¶

The script module takes the script name followed by a list of space-delimited arguments. The local script at path will be transferred to the remote node and then executed. The given script will be processed through the shell environment on the remote node. This module does not require python on the remote system, much like the [raw] module.

远程执行  -a '/PATH/TO/SCRIPT' 运行脚本

ansible all -m script -a '/tmp/a.sh'

[root@db01 scritps]# ansible 172.16.1.31 -m script -a '/server/scritps/1.sh'