Ansible-常用模块
1.ansible实现管理的方式
Ad-Hoc ##利用ansible命令直接完成管理,主要用于临时命令使用场景
playbook ##ansible脚本,主要用于大型项目场景,需要前期的规划
2.Ad-Hoc执行方式中如何获得帮助
ansible-doc ##显示模块帮助的指令
2.1 格式
ansible-doc [参数] [模块…]
2.2 常用参数
-l ##列出可用模块
-s ##显示指定模块的playbook片段
[root@ansible ~]# ansible-doc -l | wc -l 3387 [root@ansible ~]# ansible-doc -s shell - name: Execute shell commands on targets shell: chdir: # Change into this directory before running the command. cmd: # The command to run followed by optional arguments. creates: # A filename, when it already exists, this step will *not* be run. executable: # Change the shell used to execute the command. This expects an absolute path to the executable. free_form: # The shell module takes a free form command to run, as a string. There is no actual parameter named 'free form'. See the examples on how to use this module. removes: # A filename, when it does not exist, this step will *not* be run. stdin: # Set the stdin of the command directly to the specified value. stdin_add_newline: # Whether to append a newline to stdin data. warn: # Whether to enable task warnings. [root@ansible ~]#
3.ansible命令运行方式及常用参数
3.1 格式:
ansible 清单 -m 模块 -a 模块参数
3.2 常用参数
--version ##显示版本 -m module ##指定模块,默认为command模块 --list ##显示主机列表,也可以用--list-hosts -v ##详细过程 -vv -vvv更详细过程 -k ##提示输入ssh连接密码,默认key认证 -C ##预执行检测 -T ##执行命令的超时时间,默认10s# -u ##指定远程执行的用户 -b ##执行sudo切换身份操作 -become-user=USERNAME ##指定sudo的用户 -K ##提示输入sudo密码
4.ansible的基本颜色代表信
绿色 ##执行成功但为对远程主机做任何改变
黄色 ##执行成功并对远程主机做改变
红色 ##执行失败
5.ansible中的常用模块
5.1 command
注意:Linux中的很多通配符在command模块中不支持
功能: 在远程主机执行命令,此模块为默认模块
常用参数:
chdir | ##执行命令前先进入到指定目录 |
cmd | ##运行命令指定 |
creates | ##如果文件存在将不运行 |
removes | ##如果文件存在将运行 |
free_form | ##在远程主机中执行的命令,此参数不需要加 |
在westos清单主机中建立用户lee [admin@ansible .ansible]$ ansible westos -m command -a "useradd lee" -u root -k SSH password: 172.25.32.12 | CHANGED | rc=0 >> 172.25.32.11 | CHANGED | rc=0 >> 在westos清单主机中删除用户lee [admin@ansible .ansible]$ ansible westos -m command -a "userdel lee" -u root -k SSH password: 172.25.32.12 | CHANGED | rc=0 >> 172.25.32.11 | CHANGED | rc=0 >> 查看westos清单主机中/etc/passwd/的最后一行 [admin@ansible .ansible]$ ansible westos -m command -a "chdir=/etc tail -n1 passwd" -u root -k SSH password: 172.25.32.12 | CHANGED | rc=0 >> admin:x:1000:1000::/home/admin:/bin/bash 172.25.32.11 | CHANGED | rc=0 >> admin:x:1000:1000::/home/admin:/bin/bash 在westos清单主机中如果/etc/passwd存在的话就不运行tail命令,如果不文件存在就运行tail [admin@ansible .ansible]$ ansible westos -m command -a "chdir=/etc creates=/etc/passwd tail -n1 passwd" -u root -k SSH password: 172.25.32.12 | SUCCESS | rc=0 >> skipped, since /etc/passwd exists 172.25.32.11 | SUCCESS | rc=0 >> skipped, since /etc/passwd exists 在westos清单主机中如果/etc/passwd存在的话就运行tail命令,如果文件不存在就不运行tail [admin@ansible .ansible]$ ansible westos -m command -a "chdir=/etc removes=/etc/passwd tail -n1 passwd" -u root -k SSH password: 172.25.32.12 | CHANGED | rc=0 >> admin:x:1000:1000::/home/admin:/bin/bash 172.25.32.11 | CHANGED | rc=0 >> admin:x:1000:1000::/home/admin:/bin/bash
5.2 shell
功能: 和command功能类似
常用参数:
chdir | ##执行命令前先进入到指定目录 |
cmd | ##运行命令指定 |
creates | ##如果文件存在将不运行 |
removes | ##如果文件存在在将运行 |
free_form | ##在远程主机中执行的命令,此参数不需要加 |
executable | ##指定执行环境,默认为sh |
指定执行环境为/bin/bash,默认为sh [admin@ansible .ansible]$ ansible westos -m shell -a "executable=sh ps ax | grep $$ " -k SSH password: 172.25.32.11 | CHANGED | rc=0 >> 4628 pts/1 S+ 0:00 sh -c ps ax | grep 3496 4630 pts/1 S+ 0:00 grep 3496 172.25.32.12 | CHANGED | rc=0 >> 4656 pts/1 S+ 0:00 sh -c ps ax | grep 3496 4658 pts/1 S+ 0:00 grep 3496 查看当前目录所在的进程 [admin@ansible .ansible]$ ansible westos -m shell -a ' ps ax | grep $$' 172.25.32.12 | CHANGED | rc=0 >> 4765 pts/1 S+ 0:00 /bin/sh -c ps ax | grep $$ 4767 pts/1 S+ 0:00 grep 4765 172.25.32.11 | CHANGED | rc=0 >> 4737 pts/1 S+ 0:00 /bin/sh -c ps ax | grep $$ 4739 pts/1 S+ 0:00 grep 4737 查看当前正在运行的进程 [admin@ansible .ansible]$ ansible westos -m shell -a 'ps' 172.25.32.12 | CHANGED | rc=0 >> PID TTY TIME CMD 4864 pts/1 00:00:00 sudo 4865 pts/1 00:00:00 sh 4866 pts/1 00:00:00 python 4867 pts/1 00:00:00 ps 172.25.32.11 | CHANGED | rc=0 >> PID TTY TIME CMD 4835 pts/1 00:00:00 sudo 4836 pts/1 00:00:00 sh 4837 pts/1 00:00:00 python 4838 pts/1 00:00:00 ps
5.3 script
功能: 在ansible主机中写好的脚本在受控主机中执行
[admin@ansible .ansible]$ exit ##回到超级用户中 logout [root@ansible ~]# vim /mnt/westos.sh [root@ansible ~]# cat /mnt/westos.sh #!/bin/bash echo $HOSTNAME [root@ansible ~]# ansible westos -m script -a "/mnt/westos.sh" -k SSH password: 172.25.32.12 | CHANGED => { "changed": true, "rc": 0, "stderr": "Shared connection to 172.25.32.12 closed.rn", "stderr_lines": [ "Shared connection to 172.25.32.12 closed." ], "stdout": "node2rn", "stdout_lines": [ "node2" ] } 172.25.32.11 | CHANGED => { "changed": true, "rc": 0, "stderr": "Shared connection to 172.25.32.11 closed.rn", "stderr_lines": [ "Shared connection to 172.25.32.11 closed." ], "stdout": "node1rn", "stdout_lines": [ "node1" ] }
5.4 copy
功能:从ansible主机复制文件到受控主机
常用参数
src | ##源文件 |
dest | ##目的地文件 |
owner/group | ##指定目的地文件所有人 |
mode | ##指定目的地文件权限 |
backup=yes | ##当受控主机中存在文件时备份原文件 |
content | ##指定文本内容直接在受控主机中生成文件 |
将/mnt/westos.sh/复制到westos清单被控主机的/mnt/中,当被控主机中存在westos.sh时备份原文件,文件所有人为admin,权限为777 [admin@ansible .ansible]$ ansible westos -m copy -a "src=/mnt/westos.sh dest=/mnt/westos.sh owner=admin mode=777 backup=yes" 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "checksum": "25a5e82036293f48d4a117c91855a16c2d36e0de", "dest": "/mnt/westos.sh", "gid": 0, "group": "root", "md5sum": "2b9854338cd858ad0f86eb55423c3f03", "mode": "0777", "owner": "admin", "size": 27, "src": "/home/admin/.ansible/tmp/ansible-tmp-1659037428.57-4624-78249132552260/source", "state": "file", "uid": 1000 } 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "checksum": "25a5e82036293f48d4a117c91855a16c2d36e0de", "dest": "/mnt/westos.sh", "gid": 0, "group": "root", "md5sum": "2b9854338cd858ad0f86eb55423c3f03", "mode": "0777", "owner": "admin", "size": 27, "src": "/home/admin/.ansible/tmp/ansible-tmp-1659037428.58-4626-250519756246854/source", "state": "file", "uid": 1000 }
在westos清单被控主机的/mnt/目录下生成文件westosfile1,文件内容为hello westos/hello linux,文件所有人为admin,权限为777 [admin@ansible .ansible]$ ansible westos -m copy -a "content='hello westosnhello linuxn' dest=/mnt/westosfile1 owner=admin mode=600" 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "checksum": "7edbc023b406807d55423480b2bfd908870d5919", "dest": "/mnt/westosfile1", "gid": 0, "group": "root", "mode": "0600", "owner": "admin", "path": "/mnt/westosfile1", "size": 25, "state": "file", "uid": 1000 } 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "checksum": "7edbc023b406807d55423480b2bfd908870d5919", "dest": "/mnt/westosfile1", "gid": 0, "group": "root", "mode": "0600", "owner": "admin", "path": "/mnt/westosfile1", "size": 25, "state": "file", "uid": 1000 }
查看westos清单被控主机的/mnt/目录 [admin@ansible .ansible]$ ansible westos -m shell -a "ls /mnt" 172.25.32.11 | CHANGED | rc=0 >> westos.sh westosfile1 172.25.32.12 | CHANGED | rc=0 >> westos.sh westosfile1 [admin@ansible .ansible]$ ansible westos -m shell -a "cat /mnt/westosfile1" 172.25.32.11 | CHANGED | rc=0 >> hello westos hello linux 172.25.32.12 | CHANGED | rc=0 >> hello westos hello linux
5.5 fetch
功能: 从受控主机把文件复制到ansible主机,但不支持目录
常用参数
src | ##受控主机的源文件 |
dest | ##本机目录 |
flat | ##基本名称功能 |
将受控主机/mnt/westosfile1复制到主机的/mnt/目录下 [root@ansible mnt]# ansible 172.25.32.11 -m fetch -a "src=/mnt/westosfile1 dest=/mnt" -k SSH password: 172.25.32.11 | CHANGED => { "changed": true, "checksum": "7edbc023b406807d55423480b2bfd908870d5919", "dest": "/mnt/172.25.32.11/mnt/westosfile1", "md5sum": "e79f6eb05e162f95e496e8d4d8a24275", "remote_checksum": "7edbc023b406807d55423480b2bfd908870d5919", "remote_md5sum": null }
将受控主机复制到主机文件名字改为file [root@ansible mnt]# ansible 172.25.32.11 -m fetch -a "src=/mnt/westosfile1 dest=/mnt/file flat=yes" -k SSH password: 172.25.32.11 | CHANGED => { "changed": true, "checksum": "7edbc023b406807d55423480b2bfd908870d5919", "dest": "/mnt/file", "md5sum": "e79f6eb05e162f95e496e8d4d8a24275", "remote_checksum": "7edbc023b406807d55423480b2bfd908870d5919", "remote_md5sum": null }
5.6 file
功能: 设置文件的属性
常用参数
path | 指定文件名称 | |
state | 指定操作状态 | |
touch
absent directory link hard |
建立
删除 递归 建立软链接 建立硬连接 |
|
mode | 设定权限 | |
group/owner | 设定文件组/设定文件用户 | |
src | 源文件 | |
dest | 目标文件 | |
recurse=yes | 递归更改 |
建立文件 [admin@ansible .ansible]$ ansible westos -m file -a 'path=/mnt/test.sh state=touch' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "dest": "/mnt/test.sh", "gid": 0, "group": "root", "mode": "0644", "owner": "root", "size": 0, "state": "file", "uid": 0 } 删除文件 [admin@ansible .ansible]$ ansible westos -m file -a 'path=/mnt/test.sh state=absent' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "path": "/mnt/test.sh", "state": "absent" } 建立目录 [admin@ansible .ansible]$ ansible westos -m file -a 'path=/mnt/westos state=directory' 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "gid": 0, "group": "root", "mode": "0755", "owner": "root", "path": "/mnt/westos", "size": 6, "state": "directory", "uid": 0 } 递归修改目录权限 [admin@ansible .ansible]$ ansible westos -m file -a 'path=/mnt/westos state=directory mode=777 recurse=yes' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "gid": 0, "group": "root", "mode": "0777", "owner": "root", "path": "/mnt/westos", "size": 6, "state": "directory", "uid": 0 } 生成软链接 [admin@ansible .ansible]$ ansible westos -m file -a 'src=/mnt/westosfile1 dest=/mnt/westos state=link' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "dest": "/mnt/westos", "gid": 0, "group": "root", "mode": "0777", "owner": "root", "size": 16, "src": "/mnt/westosfile1", "state": "link", "uid": 0 } 生成硬连接 [admin@ansible .ansible]$ ansible westos -m file -a 'src=/mnt/westosfile1 dest=/mnt/westos1 state=hard' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "dest": "/mnt/westos1", "gid": 0, "group": "root", "mode": "0600", "owner": "admin", "size": 25, "src": "/mnt/westosfile1", "state": "hard", "uid": 1000 } 建立文件时设置权限及所有人,所有组 [admin@ansible .ansible]$ ansible westos -m file -a 'path=/mnt/file state=touch owner=admin group=admin mode=777' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "dest": "/mnt/file", "gid": 1000, "group": "admin", "mode": "0777", "owner": "admin", "size": 0, "state": "file", "uid": 1000 }
5.7 archive
作用: 压缩
常用参数
path | 打包目录名称 |
path | 声称打包文件名称 |
format | 打包格式 |
owner | 指定文件所属人 |
mode | 指定文件权限 |
[admin@ansible .ansible]$ ansible all -m archive -a 'path=/etc dest=/opt/etc.tar.gz format=gz owner=admin mode=700' -k SSH password: 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "archived": [ "/etc/fstab", "/etc/crypttab", "/etc/mtab", "/etc/resolv.conf", "/etc/my.cnf", "/etc/issue", "/etc/issue.net", "/etc/libuser.conf", ........
5.8 unarchive
功能:解压缩
常用参数
copy | 默认为yes 从ansible主机复制文件到受控主机
设定为no 从受控主机中寻找src源文件 |
remote_src | 功能同copy且相反
设定为yes 表示包在受控主机 设定为no表示包在ansible主机 |
src | 包路径,可以使ansible主机也可以使受控主机 |
dest | 受控主机目录 |
mode | 加压后文件权限 <copy=yes> |
ansible westos -m unarchive -a 'src=/opt/etc.tar.gz dest=/mnt owner=admin' #把主控机中/opt/etc.tar.gz解压到受控机/mnt里,解压后所有人是admin 把受控机中/opt/etc.tar.gz解压到受控机/mnt里,copy=no等同于remote_src=yes [admin@ansible .ansible]$ ansible westos -m unarchive -a "src=/opt/etc.tar.gz dest=/mnt copy=no" 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "dest": "/mnt", "extract_results": { "cmd": [ "/bin/gtar", "--extract", "-C", "/mnt", "-z", "-f", "/opt/etc.tar.gz" ], "err": "", "out": "", "rc": 0 }, "gid": 0, "group": "root", "handler": "TgzArchive", "mode": "0755", "owner": "root", "size": 112, "src": "/opt/etc.tar.gz", "state": "directory", "uid": 0 }
5.9 hostname
作用: 管理主机名称
常用参数:name ##指定主机名称
[admin@ansible .ansible]$ ansible 172.25.32.11 -m hostname -a 'name=www.westos.org' 172.25.32.11 | CHANGED => { "ansible_facts": { "ansible_domain": "westos.org", "ansible_fqdn": "www.westos.org", "ansible_hostname": "www", "ansible_nodename": "www.westos.org", "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "name": "www.westos.org" }
5.10 cron
作用:计划任务
常用参数
minute | ##分钟 |
hour | ##小时 |
day | ##天 |
month | ##月 |
weekday | ##周 |
name | ##任务名称 |
job | ##任务脚本或命令 |
disabled | ##yes 禁用计划任务
##no 启动计划任务 |
state | ##absent 删除计划任务 |
在11:11分的时候在/mnt目录建立linux文件 [admin@ansible .ansible]$ ansible westos -m cron -a 'job="touch /mnt/linux" name=test minute=11 hour=11 ' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "envs": [], "jobs": [ "test" ] } 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "envs": [], "jobs": [ "test" ] } 禁止执行这个11:11分的时候在/mnt目录建立linux文件的任务 [admin@ansible .ansible]$ ansible westos -m cron -a 'job="touch /mnt/westosfile" name=test minute=11 hour=11 disabled=yes' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "envs": [], "jobs": [ "test" ] } 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, 删除这个11:11分的时候在/mnt目录建立linux文件的任务 [admin@ansible .ansible]$ ansible westos -m cron -a 'job="touch /mnt/linux" name=test minute=11 hour=11 state=absent' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "envs": [], "jobs": [] } 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "envs": [], "jobs": [] } "changed": true, "envs": [], "jobs": [ "test" ] }
5.11 yum_repository
作用:配置系统软件仓库源文件
name | ##指定仓库名称 |
baseurl | ##指定源路径 |
description | ##指定仓库描述 |
file | ##指定仓库文件名称 |
enabled | ##仓库是否启用 |
gpgcheck | ##仓库是否检测gpgkey |
state | ##默认值present建立/#absent 为删除 |
建立软件仓库源 [admin@ansible .ansible]$ ansible westos -m yum_repository -a "name=AppStream baseurl=http://172.25.32.250/rhel7.6/AppStream description=AppStream gpgcheck=no file=westos" -k SSH password: 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "repo": "AppStream", "state": "present" } 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "repo": "AppStream", "state": "present" } 删除建立的软件仓库源 [admin@ansible .ansible]$ ansible westos -m yum_repository -a "name=AppStream file=westos_test state=absent" -k SSH password: 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "repo": "AppStream", "state": "absent" } 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "repo": "AppStream", "state": "absent" }
5.11 yum
作用: 管理系统中的dnf仓库及管理软件
name | ##指定包 |
state | ##指定动作
#present 安装 #latest 更新 #absent 删除 |
list | ##列出指定信息 |
disable_gpg_check | #禁用gpgkey检测 |
enablerepo | ##指定安装包来源 |
disablerepo | ##禁用安装包来源 |
给被控机安装httpd服务 [admin@ansible .ansible]$ ansible westos -m yum -a "name=httpd state=present" 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "changes": { "installed": [ "httpd" ] }, "msg": "", "rc": 0, "results": [ "Loaded plugins: product-id, search-disabled-repos, subscription-managernThis system is not registered with an entitlement server. You can use subscription-manager to register.nResolving Dependenciesn--> Running transaction checkn---> Package httpd.x86_64 0:2.4.6-88.el7 will be installedn--> Processing Dependency: httpd-tools = 2.4.6-88.el7 for package: httpd-2.4.6-88.el7.x86_64n--> Processing Dependency: /etc/mime.types for package: httpd-2.4.6-88.el7.x86_64n--> Processing Dependency: libapr-1.so.0()(64bit) for package: httpd-2.4.6-88.el7.x86_64n--> Processing Dependency: libaprutil-1.so.0()(64bit) for package: httpd-2.4.6-88.el7.x86_64n--> Running transaction checkn---> Package apr.x86_64 0:1.4.8-3.el7_4.1 will be installedn---> Package apr-util.x86_64 0:1.5.2-6.el7 will be installedn---> Package httpd-tools.x86_64 0:2.4.6-88.el7 will be installedn---> Package mailcap.noarch 0:2.1.41-2.el7 will be installedn--> Finished Dependency ResolutionnnDependencies Resolvednn================================================================================n Package Arch Version Repository Sizen================================================================================nInstalling:n httpd x86_64 2.4.6-88.el7 AppStream 1.2 MnInstalling for dependencies:n apr x86_64 1.4.8-3.el7_4.1 AppStream 103 kn apr-util x86_64 1.5.2-6.el7 AppStream 92 kn httpd-tools x86_64 2.4.6-88.el7 AppStream 90 kn mailcap noarch 2.1.41-2.el7 AppStream 31 knnTransaction Summaryn================================================================================nInstall 1 Package (+4 Dependent packages)nnTotal download size: 1.5 MnInstalled size: 4.3 MnDownloading packages:n--------------------------------------------------------------------------------nTotal 33 MB/s | 1.5 MB 00:00 nRunning transaction checknRunning transaction testnTransaction test succeedednRunning transactionn Installing : apr-1.4.8-3.el7_4.1.x86_64 1/5 n Installing : apr-util-1.5.2-6.el7.x86_64 2/5 n Installing : httpd-tools-2.4.6-88.el7.x86_64 3/5 n Installing : mailcap-2.1.41-2.el7.noarch 4/5 n Installing : httpd-2.4.6-88.el7.x86_64 5/5 n Verifying : mailcap-2.1.41-2.el7.noarch 1/5 n Verifying : httpd-2.4.6-88.el7.x86_64 2/5 n Verifying : apr-1.4.8-3.el7_4.1.x86_64 3/5 n Verifying : apr-util-1.5.2-6.el7.x86_64 4/5 n Verifying : httpd-tools-2.4.6-88.el7.x86_64 5/5 nnInstalled:n httpd.x86_64 0:2.4.6-88.el7 nnDependency Installed:n apr.x86_64 0:1.4.8-3.el7_4.1 apr-util.x86_64 0:1.5.2-6.el7 n httpd-tools.x86_64 0:2.4.6-88.el7 mailcap.noarch 0:2.1.41-2.el7 nnComplete!n" ] } 卸载httpd服务,但不删除依赖关系 [admin@ansible .ansible]$ ansible westos -m yum -a 'name=httpd state=absent autoremove=no' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "changes": { "removed": [ "httpd" ] }, "msg": "", "rc": 0, "results": [ "Loaded plugins: product-id, search-disabled-repos, subscription-managernThis system is not registered with an entitlement server. You can use subscription-manager to register.nResolving Dependenciesn--> Running transaction checkn---> Package httpd.x86_64 0:2.4.6-88.el7 will be erasedn--> Finished Dependency ResolutionnnDependencies Resolvednn================================================================================n Package Arch Version Repository Sizen================================================================================nRemoving:n httpd x86_64 2.4.6-88.el7 @AppStream 3.7 MnnTransaction Summaryn================================================================================nRemove 1 PackagennInstalled size: 3.7 MnDownloading packages:nRunning transaction checknRunning transaction testnTransaction test succeedednRunning transactionn Erasing : httpd-2.4.6-88.el7.x86_64 1/1 n Verifying : httpd-2.4.6-88.el7.x86_64 1/1 nnRemoved:n httpd.x86_64 0:2.4.6-88.el7 nnComplete!n" ] } 卸载httpd服务,也卸载依赖关系 [admin@ansible .ansible]$ ansible westos -m yum -a 'name=httpd state=absent autoremove=yes' 172.25.32.12 | SUCCESS => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": false, "msg": "", "rc": 0, "results": [ "httpd is not installed" ] } 指定下载的源(通过AppStream来安装) [admin@ansible .ansible]$ ansible westos -m yum -a 'name=httpd state=present enablerepo=AppStream' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "changes": { "installed": [ "httpd" ] }, "msg": "", "rc": 0, "results": [ "Loaded plugins: product-id, search-disabled-repos, subscription-managernThis system is not registered with an entitlement server. You can use subscription-manager to register.nResolving Dependenciesn--> Running transaction checkn---> Package httpd.x86_64 0:2.4.6-88.el7 will be installedn--> Finished Dependency ResolutionnnDependencies Resolvednn================================================================================n Package Arch Version Repository Sizen================================================================================nInstalling:n httpd x86_64 2.4.6-88.el7 AppStream 1.2 MnnTransaction Summaryn================================================================================nInstall 1 PackagennTotal download size: 1.2 MnInstalled size: 3.7 MnDownloading packages:nDelta RPMs disabled because /usr/bin/applydeltarpm not installed.nRunning transaction checknRunning transaction testnTransaction test succeedednRunning transactionn Installing : httpd-2.4.6-88.el7.x86_64 1/1 n Verifying : httpd-2.4.6-88.el7.x86_64 1/1 nnInstalled:n httpd.x86_64 0:2.4.6-88.el7 nnComplete!n" ] } 列出httpd的相关信息 [admin@ansible .ansible]$ ansible westos -m yum -a 'name=httpd state=absent autoremove=yes' 172.25.32.12 | SUCCESS => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": false, "msg": "", "rc": 0, "results": [ "httpd is not installed" ] } 更新httpd服务 [admin@ansible .ansible]$ ansible westos -m yum -a 'name="httpd" state=latest' 172.25.32.11 | SUCCESS => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": false, "changes": { "installed": [], "updated": [] }, "msg": "", "rc": 0, "results": [ "All packages providing httpd are up to date", "" ] }
5.13 service
作用: 管理系统服务状态
常用参数
name | ##指定服务名称 |
state | ##指定对服务的动作
#started #stoped #restarted #reloaded |
enabled | ##设定服务开机是否启动
#yes开启启动 #no开机不启动 |
开启httpd服务,并指定开机启动 [admin@ansible .ansible]$ ansible westos -m service -a "name=httpd state=started enabled=yes" 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "enabled": true, "name": "httpd", "state": "started", "status": { "ActiveEnterTimestampMonotonic": "0", "ActiveExitTimestampMonotonic": "0", "ActiveState": "inactive", "After": "-.mount network.target basic.target system.slice remote-fs.target tmp.mount systemd-journald.socket nss-lookup.target", "AllowIsolate": "no", "AmbientCapabilities": "0", ........ 重启httpd服务 [admin@ansible .ansible]$ ansible westos -m service -a "name=httpd state=restarted enabled=yes" 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "enabled": true, "name": "httpd", "state": "started", "status": { "ActiveEnterTimestamp": "Fri 2022-07-29 07:34:50 UTC", "ActiveEnterTimestampMonotonic": "4964679459", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "-.mount systemd-journald.socket network.target nss-lookup.target basic.target tmp.mount remote-fs.target system.slice", "AllowIsolate": "no", "AmbientCapabilities": "0",
5.14 firewalld
常用参数
zone | ##火墙的域 |
service | ##服务名称 |
permanent | ##永久生效 |
state | ##允许 enabled
##拒绝 disabled |
immediate | ##立即生效 |
开启火墙并永久指定火墙的域为public 且立即生效, [admin@ansible .ansible]$ ansible westos -m firewalld -a 'zone=public service=http permanent=yes state=enabled immediate=yes' 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "msg": "Permanent and Non-Permanent(immediate) operation, Changed service http to enabled" } 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "msg": "Permanent and Non-Permanent(immediate) operation, Changed service http to enabled" } 在被控主机中: [root@www ~]# firewall-cmd --list-all public target: default icmp-block-inversion: no interfaces: sources: services: ssh dhcpv6-client http ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules:
5.15 user
作用: 模块可以帮助我们管理远程主机上的用户,比如创建用户、修改用户、删除用户、为用户创建密钥对等操作
name | ##必须参数,用于指定要操作的用户名称。 |
group | ##指定用户所在的基本组。 |
gourps | ##指定用户所在的附加组。 |
append | ##指定添加附加组默认值为no |
shell | ##指定用户的默认shell。 |
uid | ##指定用户的uid号。 |
comment | ##指定用户的注释信息。 |
state | ##用于指定用户是否存在于远程主机
#present 建立 #absent 删除 |
remove | ##当删除用户是删除用户家目录,默认值为no |
password | ##此参数用于指定用户的密码。但密码为明文,
##可以用openssl password -6 ‘密码’生成加密字符 |
generate_ssh_key | ##生成sshkey |
建立lee用户 [admin@ansible .ansible]$ ansible westos -m user -a 'name=lee' 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "comment": "", "create_home": true, "group": 1001, "home": "/home/lee", "name": "lee", "shell": "/bin/bash", "state": "present", "stderr": "useradd: warning: the home directory already exists.nNot copying any file from skel directory into it.nCreating mailbox file: File existsn", "stderr_lines": [ "useradd: warning: the home directory already exists.", "Not copying any file from skel directory into it.", "Creating mailbox file: File exists" ], "system": false, "uid": 1001 } 删除lee用户 [admin@ansible .ansible]$ ansible westos -m user -a 'name=lee state=absent' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "force": false, "name": "lee", "remove": false, "state": "absent" } 指定lee用户的uid为6666 [admin@ansible .ansible]$ ansible westos -m user -a 'name=lee uid=6666' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "comment": "", "create_home": true, "group": 6666, "home": "/home/lee", "name": "lee", "shell": "/bin/bash", "state": "present", "stderr": "useradd: warning: the home directory already exists.nNot copying any file from skel directory into it.nCreating mailbox file: File existsn", "stderr_lines": [ "useradd: warning: the home directory already exists.", "Not copying any file from skel directory into it.", "Creating mailbox file: File exists" ], "system": false, "uid": 6666 } 指定lee用户所在的组为admin [admin@ansible .ansible]$ ansible westos -m user -a 'name=lee group=admin' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "append": false, "changed": true, "comment": "", "group": 1000, "home": "/home/lee", "move_home": false, "name": "lee", "shell": "/bin/bash", "state": "present", "uid": 6666 } 指定用户所在的附加组为admin [admin@ansible .ansible]$ ansible westos -m user -a 'name=lee groups=admin' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "append": false, "changed": true, "comment": "", "group": 1000, "groups": "admin", "home": "/home/lee", "move_home": false, "name": "lee", "shell": "/bin/bash", "state": "present", "uid": 6666 } 生成加密字符【$符是特殊字符,所有要用转译字符】 [admin@ansible .ansible]$ openssl passwd -1 'westos' #设置密码 $1$oD/nYgUs$ztibP8DFmgBBgAxM4r6i/. [admin@ansible .ansible]$ ansible westos -m user -a 'name=lee password="$1$oD/nYgUs$ztibP8DFmgBBgAxM4r6i/."' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "comment": "", "create_home": true, "group": 100, "home": "/home/lee", "name": "lee", "password": "NOT_LOGGING_PASSWORD", "shell": "/bin/bash", "state": "present", "stderr": "useradd: warning: the home directory already exists.nNot copying any file from skel directory into it.nCreating mailbox file: File existsn", "stderr_lines": [ "useradd: warning: the home directory already exists.", "Not copying any file from skel directory into it.", "Creating mailbox file: File exists" ], "system": false, "uid": 1001 } 生成密钥 [admin@ansible .ansible]$ ansible westos -m user -a 'name=lee generate_ssh_key=yes' 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "append": false, "changed": true, "comment": "", "group": 100, "home": "/home/lee", "move_home": false, "name": "lee", "shell": "/bin/bash", "ssh_fingerprint": "2048 SHA256:5w9/Fcx+J8KIFc1HtjAyMXi/aB76xdPUewv/aGZSG6M ansible-generated on www.westos.org (RSA)", "ssh_key_file": "/home/lee/.ssh/id_rsa", "ssh_public_key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx53ERXMA8HSsuLcqyoKcwynKuE2Iirn5zOD+6rHMHh+grpJZ/KvrxhMOOyrAMXS81Lm7+qksct2522bnsY7ARB4g6vANtkdM3GrYqffy1/tCAwO4X6HOrPrS3WuX3Fc7M++plvrxt6ze5RSxnRIcDUwRRKeeKmwsHCcpHKNdVYrM/BlBuKfj7ecwMOYZEWGCm2/yeoParqK5d5psy/58yiGclQvMUEl1/8Atguwxsh/T2Ta2pALMLWcWUDYsYaDxl8pKrwnXK0IntPF+b2eGa5Z9HoBS1H32ZBEjb/xGb9WAy0mn8ip4/xEW9qN6PE1RXvAl8ihSvTJw8zNMqcsWF ansible-generated on www.westos.org", "state": "present", "uid": 1001 }
5.16 group
作用: group 模块可以帮助我们管理远程主机上的组。
常用参数
name | ##用于指定要操作的组名称。 |
state | ##用于指定组的状态
#present 建立 #absent 删除 |
gid | ##用于指定组的gid。 |
添加组westoslee [admin@ansible .ansible]$ ansible westos -m group -a 'name=westoslee' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "gid": 6667, "name": "westoslee", "state": "present", "system": false } 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "gid": 6667, "name": "westoslee", "state": "present", "system": false } 指定westoslee组的gid为8888 [admin@ansible .ansible]$ ansible westos -m group -a 'name=westoslee gid=8888' 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "gid": 8888, "name": "westoslee", "state": "present", "system": false } 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "gid": 8888, "name": "westoslee", "state": "present", "system": false } 删除westoslee组 [admin@ansible .ansible]$ ansible westos -m group -a 'name=westoslee state=absent' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "name": "westoslee", "state": "absent" } 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "name": "westoslee", "state": "absent" }
5.17 lineinfile
path | ##指定要操作的文件。 |
line | ##指定文本内容。 “|+” 表示格式化输入 |
regexp | ##使用正则表达式匹配对应的行当替换文本时
##如果有多行文本都能被匹配 ##则只有最后面被匹配到的那行文本才会被替换 ##当删除文本时,如果有多行文本都能被匹配 ##这么这些行都会被删除。 |
state | ##当想要删除对应的文本时需要将state参数的值设置为absent
#state的默认值为present。 |
backrefs | ##当内容无匹配规则时不对文件做任何更改,默认值为no
##向后引用regexp变量信息 |
insertafter | ##借助insertafter参数可以将文本插入到“指定的行”之后
##insertafter参数的值可以设置为EOF或者正则表达式 |
insertbefore | ##借助insertbefore参数可以将文本插入到“指定的行”之前
#insertbefore参数的值可以设置为BOF或者正则表达式 |
backup | ##是否在修改文件之前对文件进行备份。 |
create | ##当要操作的文件并不存在时,是否创建对应的文件。 |
给被控机建立/mnt下的westos文件,并编写内容n表示换行 [admin@ansible .ansible]$ ansible westos -m copy -a 'content="hello westosnhello testnhello linuxn" dest=/mnt/westos ' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "changed": true, "checksum": "868d8bfc146c9de5569f3fca88677b0f35abf30e", "dest": "/mnt/westos", "gid": 0, "group": "root", "md5sum": "b035847bf1e123742bd8e58647178d0d", "mode": "0644", "owner": "root", "size": 36, "src": "/home/admin/.ansible/tmp/ansible-tmp-1659096272.79-5119-87992278885050/source", "state": "file", "uid": 0 } 在已经存在的文本(/mnt/westos)中写入nihao [admin@ansible .ansible]$ ansible westos -m lineinfile -a 'path=/mnt/westos line="nihao"' 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup": "", "changed": true, "msg": "line added" } 把以hello开头的行替替换成hello westos,匹配到多行的替换只能替换最后一行,其他行不进行替换 [admin@ansible .ansible]$ ansible westos -m lineinfile -a 'path=/mnt/westos regexp="^hello" line="hello westos" ' 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup": "", "changed": true, "msg": "line replaced" } 把以hello开头的行全部删除 ,匹配到多行的删除会全部删除 [admin@ansible .ansible]$ ansible westos -m lineinfile -a 'path=/mnt/westos regexp="^hello" line="hello westos" ' 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup": "", "changed": true, "msg": "line replaced" } 将westos文件中满足条件【h后边的任意四个字符,中间任意字符,w后任意五个字符】的行替换为字符1 {因为 backrefs=no就不向后引用regexp} [admin@ansible .ansible]$ ansible westos -m lineinfile -a 'path=/mnt/westos regexp="(h.{4}.*(w.{5}))" line="1" backrefs=no' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup": "", "changed": true, "msg": "line added" } 将westos文件中满足条件【h后边的任意四个字符,中间任意字符,w后任意五个字符】的行替换为regexp的第一部分条件 [admin@ansible .ansible]$ ansible westos -m lineinfile -a 'path=/mnt/westos regexp="(h.{4}).*(w.{5})" line="1" backrefs=yes' 172.25.32.12 | SUCCESS => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup": "", "changed": false, "msg": "" } 在文件中最后一行后添加#######ok########## [admin@ansible .ansible]$ ansible westos -m lineinfile -a 'path=/mnt/westos line="#######ok##########" insertafter=EOF' 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup": "", "changed": true, "msg": "line added" } 在hello字符前添加#######ok##########;匹配到多行,则在最后一行有hello字符前添加 [admin@ansible .ansible]$ ansible westos -m lineinfile -a 'path=/mnt/westos line="#######ok##########" insertbefore=BOF' 172.25.32.11 | SUCCESS => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup": "", "changed": false, "msg": "" } 在第一行前添加#######ok########## [admin@ansible .ansible]$ ansible westos -m lineinfile -a 'path=/mnt/westos line="#######ok##########" insertbefore=BOF' 172.25.32.11 | SUCCESS => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup": "", "changed": false, "msg": "" } 在test字符前一行添加 [admin@ansible .ansible]$ ansible westos -m lineinfile -a 'path=/mnt/westos line="#######ok##########" insertbefore=test' 172.25.32.12 | SUCCESS => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup": "", "changed": false, "msg": "" }
5.18 line |+
[admin@ansible .ansible]$ cat westos.yml - name: test hosts: westos tasks: - lineinfile: path: /mnt/westos line: |+ westos linux lee [admin@ansible .ansible]$ ansible-playbook westos.yml PLAY [test] *********************************************************************************************************************** TASK [Gathering Facts] ************************************************************************************************************ ok: [172.25.32.12] ok: [172.25.32.11] TASK [lineinfile] ***************************************************************************************************************** changed: [172.25.32.12] changed: [172.25.32.11] PLAY RECAP ************************************************************************************************************************ 172.25.32.11 : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 172.25.32.12 : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
5.19 replace
作用 : 模块可以根据我们指定的正则表达式替换文件中的字符串,文件中所有被匹配到的字符串都会被替换
常用参数
path | ##指定要操作的文件 |
regexp | ##指定一个正则表达式
#文件中与正则匹配的字符串将会被替换。 |
replace | ##指定最终要替换成的字符串。 |
backup | ##是否在修改文件之前对文件进行备份,最好设置为yes。 |
把带有westos字符的全部替换成lee,并且备份westos原文件 [admin@ansible .ansible]$ ansible westos -m replace -a 'path=/mnt/westos regexp="westos" replace="lee" backup=yes' 172.25.32.12 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup_file": "/mnt/westos.10640.2022-07-29@12:35:34~", "changed": true, "msg": "1 replacements made" } 172.25.32.11 | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "backup_file": "/mnt/westos.10650.2022-07-29@12:35:33~", "changed": true, "msg": "1 replacements made" }
5.20 setup
作用: setup模块用于收集远程主机的一些基本信息
常用参数: filter ##用于进行条件过滤。如果设置,仅返回匹配过滤条件的信息。
显示被控机的主机名 [admin@ansible .ansible]$ ansible westos -m setup -a "filter='ansible_fqdn'" 172.25.32.12 | SUCCESS => { "ansible_facts": { "ansible_fqdn": "lb-182-230.above.com", "discovered_interpreter_python": "/usr/bin/python" }, "changed": false } 172.25.32.11 | SUCCESS => { "ansible_facts": { "ansible_fqdn": "www.westos.org", "discovered_interpreter_python": "/usr/bin/python" }, "changed": false } 显示被控机的ip地址 [admin@ansible .ansible]$ ansible westos -m setup -a "filter='ansible_all_ipv4_addresses'" 172.25.32.12 | SUCCESS => { "ansible_facts": { "ansible_all_ipv4_addresses": [ "172.25.32.12" ], "discovered_interpreter_python": "/usr/bin/python" }, "changed": false } 172.25.32.11 | SUCCESS => { "ansible_facts": { "ansible_all_ipv4_addresses": [ "172.25.32.11" ], "discovered_interpreter_python": "/usr/bin/python" }, "changed": false }
5.21 debug
作用:调试模块,用于在调试中输出信息
常用参数
msg: | ##调试输出的消息 |
var: | ##将某个任务执行的输出作为变量传递给debug模块
##debug会直接将其打印输出 |
verbosity: | ##debug的级别(默认是0级,全部显示) |
输出hello [admin@ansible .ansible]$ ansible westos -m debug -a 'msg=hello' 172.25.32.11 | SUCCESS => { "msg": "hello" } 172.25.32.12 | SUCCESS => { "msg": "hello" } 输出被控机的主机名【不能用ansible命令,因为看不到结果,但是可以在playbook中看到效果】 [admin@ansible .ansible]$ cat test.yml - name: test hosts: westos tasks: - name: debug debug: var: ansible_facts['fqdn'] [admin@ansible .ansible]$ ansible-playbook test.yml PLAY [test] *********************************************************************************************************************** TASK [Gathering Facts] ************************************************************************************************************ ok: [172.25.32.12] ok: [172.25.32.11] TASK [debug] ********************************************************************************************************************** ok: [172.25.32.11] => { "ansible_facts['fqdn']": "www.westos.org" } ok: [172.25.32.12] => { "ansible_facts['fqdn']": "lb-182-230.above.com" } PLAY RECAP ************************************************************************************************************************ 172.25.32.11 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 172.25.32.12 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0