一、模块简单使用
1.copy模块
[root@ansible ~]# ansible web -m copy -a 'src=/tmp/server dest=/tmp/server'192.168.3.46 | success >> { "changed": true, "checksum": "5f7cfc5ceb0fb7f0791f7c38f9cad6987a078dde", "dest": "/tmp/server", "gid": 0, "group": "root", "md5sum": "e8b32bc4d7b564ac6075a1418ad8841e", "mode": "0644", "owner": "root", "size": 7, "src": "/root/.ansible/tmp/ansible-tmp-1435889276.72-124161155336789/source", "state": "file", "uid": 0}192.168.3.45 | success >> { "changed": false, "checksum": "5f7cfc5ceb0fb7f0791f7c38f9cad6987a078dde", "dest": "/tmp/server", "gid": 0, "group": "root", "md5sum": "e8b32bc4d7b564ac6075a1418ad8841e", "mode": "0644", "owner": "root", "size": 7, "src": "/root/.ansible/tmp/ansible-tmp-1435889276.72-472×××0537742/source", "state": "file", "uid": 0}#查看结果#查看结果时使用shell模块，支持管道，重定向[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep server'192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 10:11 server192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 10:11 server 2.file模块
#将上面的文件server的权限修改成777#修改之前的权限如下[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep server'192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 10:11 server192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 10:11 server#修改权限[root@ansible ~]# ansible web -m file -a 'dest=/tmp/server mode=777 '192.168.3.45 | success >> { "changed": false, "gid": 0, "group": "root", "mode": "0777", "owner": "root", "path": "/tmp/server", "size": 7, "state": "file", "uid": 0}192.168.3.46 | success >> { "changed": true, "gid": 0, "group": "root", "mode": "0777", "owner": "root", "path": "/tmp/server", "size": 7, "state": "file", "uid": 0}查看结果[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep server'192.168.3.46 | success | rc=0 >>-rwxrwxrwx 1 root root 7 Jul 3 10:11 server192.168.3.45 | success | rc=0 >>-rwxrwxrwx 1 root root 7 Jul 3 10:11 server 3.yum模块
#安装nmap软件[root@ansible ~]# ansible web -m yum -a 'name=nmap state=installed'192.168.3.46 | success >> { "changed": true, "msg": "", "rc": 0, "results": [ "Loaded plugins: fastestmirror, security\nLoading mirror speeds from cached hostfile\n * base: mirrors.pubyun.com\n * extras: mirrors.pubyun.com\n * updates: mirrors.pubyun.com\nSetting up Install Process\nResolving Dependencies\n--> Running transaction check\n---> Package nmap.x86_64 2:5.51-4.el6 will be installed\n--> Finished Dependency Resolution\n\nDependencies Resolved\n\n================================================================================\n Package Arch Version Repository Size\n================================================================================\nInstalling:\n nmap x86_64 2:5.51-4.el6 base 2.8 M\n\nTransaction Summary\n================================================================================\nInstall 1 Package(s)\n\nTotal download size: 2.8 M\nInstalled size: 9.7 M\nDownloading Packages:\nRunning rpm_check_debug\nRunning Transaction Test\nTransaction Test Succeeded\nRunning Transaction\n\r Installing : 2:nmap-5.51-4.el6.x86_64 1/1 \n\r Verifying : 2:nmap-5.51-4.el6.x86_64 1/1 \n\nInstalled:\n nmap.x86_64 2:5.51-4.el6 \n\nComplete!\n" ]}192.168.3.45 | success >> { "changed": false, "msg": "", "rc": 0, "results": [ "nmap: Nothing to do" ]}#查看结果[root@ansible ~]# ansible web -m shell -a 'rpm -qa |grep nmap'192.168.3.46 | success | rc=0 >>nmap-5.51-4.el6.x86_64192.168.3.45 | success | rc=0 >>nmap-5.51-4.el6.x86_64 二、playbooks配置管理
1.进行sehll模块操作，测试删除文件
先查看一下客户端的server-test是否存在
#查看客户端文件是否存在[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep server'192.168.3.46 | success | rc=0 >>-rwxrwxrwx 1 root root 7 Jul 3 10:11 server192.168.3.45 | success | rc=0 >>-rwxrwxrwx 1 root root 7 Jul 3 10:11 server#copy一个文件过去，并改名server-test[root@ansible ~]# ansible web -m copy -a 'src=/tmp/server dest=/tmp/server-test'192.168.3.45 | success >> { "changed": true, "checksum": "5f7cfc5ceb0fb7f0791f7c38f9cad6987a078dde", "dest": "/tmp/server-test", "gid": 0, "group": "root", "md5sum": "e8b32bc4d7b564ac6075a1418ad8841e", "mode": "0644", "owner": "root", "size": 7, "src": "/root/.ansible/tmp/ansible-tmp-1435890098.45-251819240728163/source", "state": "file", "uid": 0}192.168.3.46 | success >> { "changed": false, "checksum": "5f7cfc5ceb0fb7f0791f7c38f9cad6987a078dde", "dest": "/tmp/server-test", "gid": 0, "group": "root", "md5sum": "e8b32bc4d7b564ac6075a1418ad8841e", "mode": "0644", "owner": "root", "size": 7, "src": "/root/.ansible/tmp/ansible-tmp-1435890098.45-111789114670174/source", "state": "file", "uid": 0}#查看结果[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep server'192.168.3.45 | success | rc=0 >>-rwxrwxrwx 1 root root 7 Jul 3 10:11 server-rw-r--r-- 1 root root 7 Jul 3 10:24 server-test192.168.3.46 | success | rc=0 >>-rwxrwxrwx 1 root root 7 Jul 3 10:11 server-rw-r--r-- 1 root root 7 Jul 3 10:24 server-test 写一个删除客户端上/tmp/server-test文件的playbooks
[root@ansible ansible]# pwd/etc/ansible[root@ansible ansible]# cat test.yml - hosts: web #要执行删除操作的客户端 remote_user: root #在远程执行使用的用户 tasks: #任务 - name: delete /tmp/server-test #任务说明 shell: rm -rf /tmp/server-test #执行shell操作，删除文件/tmp/server #执行playbooks[root@ansible ~]# ansible-playbook /etc/ansible/test.yml PLAY [web] ******************************************************************** GATHERING FACTS *************************************************************** ok: [192.168.3.46]ok: [192.168.3.45]TASK: [delete /tmp/server-test] *********************************************** changed: [192.168.3.46]changed: [192.168.3.45]PLAY RECAP ******************************************************************** 192.168.3.45 : ok=2 changed=1 unreachable=0 failed=0 192.168.3.46 : ok=2 changed=1 unreachable=0 failed=0 #查看结果[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep server'192.168.3.45 | success | rc=0 >>-rwxrwxrwx 1 root root 7 Jul 3 10:11 server192.168.3.46 | success | rc=0 >>-rwxrwxrwx 1 root root 7 Jul 3 10:11 server #结果显示server-test文件已删除
2.template模块操作
#创建templates的playbooks[root@ansible ~]# cat /etc/ansible/template.yml- hosts: web remote_user: root tasks: - name: use template module copy file template: src=/tmp/server dest=/tmp/server-template #执行template.yml[root@ansible ~]# ansible-playbook /etc/ansible/template.yml PLAY [web] ******************************************************************** GATHERING FACTS *************************************************************** ok: [192.168.3.45]ok: [192.168.3.46]TASK: [use template module copy file] ***************************************** changed: [192.168.3.45]ok: [192.168.3.46]PLAY RECAP ******************************************************************** 192.168.3.45 : ok=2 changed=1 unreachable=0 failed=0 192.168.3.46 : ok=2 changed=0 unreachable=0 failed=0 #查看结果[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep template'192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 10:47 server-template192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 10:47 server-template
3.多项目同时更新
#编写playbooks[root@ansible ~]# cat /etc/ansible/multi_copy.yml- hosts: web remote_user: root gather_facts: False tasks: - name: copy local server to client template: src=/tmp/server dest=/tmp/test-`item` with_items: - server-1 - server-2 - server-3#执行playbooks [root@ansible ~]# ansible-playbook /etc/ansible/multi_copy.yml PLAY [web] ******************************************************************** TASK: [copy local server to client] ******************************************* changed: [192.168.3.46] => (item=server-1)changed: [192.168.3.45] => (item=server-1)changed: [192.168.3.45] => (item=server-2)changed: [192.168.3.46] => (item=server-2)changed: [192.168.3.46] => (item=server-3)changed: [192.168.3.45] => (item=server-3)PLAY RECAP ******************************************************************** 192.168.3.45 : ok=1 changed=1 unreachable=0 failed=0 192.168.3.46 : ok=1 changed=1 unreachable=0 failed=0#查看结果[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep server'192.168.3.45 | success | rc=0 >>-rwxrwxrwx 1 root root 7 Jul 3 10:11 server-rw-r--r-- 1 root root 7 Jul 3 10:47 server-template-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-1-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 10:52 server-template-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-1-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3
4.根据条件进行删除
#查看客户端文件[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep test'192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-1-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-1-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3#查看客户端的收集信息[root@ansible ~]# ansible web -m setup -a 'filter=ansible_all_ipv4_addresses'192.168.3.45 | success >> { "ansible_facts": { "ansible_all_ipv4_addresses": [ "192.168.3.45" ] }, "changed": false}192.168.3.46 | success >> { "ansible_facts": { "ansible_all_ipv4_addresses": [ "192.168.3.46" ] }, "changed": false}[root@ansible ~]# ansible web -m setup -a 'filter=ansible_os_family'192.168.3.45 | success >> { "ansible_facts": { "ansible_os_family": "RedHat" }, "changed": false}192.168.3.46 | success >> { "ansible_facts": { "ansible_os_family": "RedHat" }, "changed": false}#编写playbooks,目的是只删除IP=192.168.3.46的test-server-1文件[root@ansible ~]# cat /etc/ansible/delete.yml- hosts: web remote_user: root gather_facts: True #需要收集客户端信息 tasks: - name: if system is centos and ip is 192.168.3.46 ,them rm /tmp/test-server-1 shell: rm -rf /tmp/test-server-1 when: ansible_os_family == "RedHat" and ansible_all_ipv4_addressesp[0] == "192.168.3.46" #这里是执行delete操作的前提条件 #执行playbooks[root@ansible ~]# ansible-playbook /etc/ansible/delete.yml PLAY [web] ******************************************************************** GATHERING FACTS *************************************************************** ok: [192.168.3.45]ok: [192.168.3.46]TASK: [if system is centos and ip is 192.168.3.46 ,them rm /tmp/test-server-1] *** skipping: [192.168.3.45]changed: [192.168.3.46]PLAY RECAP ******************************************************************** 192.168.3.45 : ok=1 changed=0 unreachable=0 failed=0 192.168.3.46 : ok=2 changed=1 unreachable=0 failed=0 #查看结果，我们在上面的delete.yml中设置了条件#只删除IP=192.168.3.46上的test-server-1[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep test'192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2 #文件已被删除-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 11:38 test-server-1 #这里的文件没有被删除-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3 5.playbooks扩展:var
#查看客户端文件[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep test' 192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 11:38 test-server-1-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 13:15 test-server-1-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3#编写playbook[root@ansible ~]# cat /etc/ansible/delete_vars.yml- hosts: "`host`" #引用变量host，值需要手动传入 remote_user: "`user`" #引用变量user，值需要手动传入 gather_facts: "`gather`" #引用变量gather，值需要手动传入 tasks: - name: if system is centos,then rm /tmp/test-server-1 shell: rm -rf /tmp/test-server-1 when: ansible_os_family == "RedHat" #执行playbook，手动传入需要的参数[root@ansible ~]# ansible-playbook /etc/ansible/delete_vars.yml --extra-vars "host=web user=root gather=True"PLAY [web] ******************************************************************** GATHERING FACTS *************************************************************** ok: [192.168.3.45]ok: [192.168.3.46]TASK: [if system is centos,then rm /tmp/test-server-1] ************************ changed: [192.168.3.45]changed: [192.168.3.46]PLAY RECAP ******************************************************************** 192.168.3.45 : ok=2 changed=1 unreachable=0 failed=0 192.168.3.46 : ok=2 changed=1 unreachable=0 failed=0 #查看结果[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep test'192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3
6.使用tar选择行的执行任务
#查看客户端的文件[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep test'192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 13:29 test-server-1-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 13:29 test-server-1-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3#编写带有tag的playbook[root@ansible ~]# cat /etc/ansible/delete_tags.yml - hosts: "{ {host}]" remote_user: "`user`" gather_facts: "`gather`" tasks: - name: if system is centos,then rm /tmp/test-server-1 shell: rm -rf /tmp/test-server-1 tags: server-1 - name: if system is centos,them rm /tmp/test-server-2 shell: rm -rf /tmp/test-server-2 tags: server-2 #执行playbooks[root@ansible ~]# ansible-playbook /etc/ansible/delete_tags.yml --extra "host=web user=root gather=True",未指定tagsPLAY [web] ******************************************************************** GATHERING FACTS *************************************************************** ok: [192.168.3.45]ok: [192.168.3.46]TASK: [if system is centos,then rm /tmp/test-server-1] ************************ changed: [192.168.3.46]changed: [192.168.3.45]TASK: [if system is centos,them rm /tmp/test-server-2] ************************ changed: [192.168.3.46]changed: [192.168.3.45]PLAY RECAP ******************************************************************** 192.168.3.45 : ok=3 changed=2 unreachable=0 failed=0 192.168.3.46 : ok=3 changed=2 unreachable=0 failed=0 #查看结果#从下面的结果中我们能看出，在不指定tags的情况先客户端将2个任务都执行了，即在客户端上删除了/tmp/test-server-1和/tmp/test-server-2这2个文件[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep test'192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3#我们将客户端的文件恢复[root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep test'192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 14:06 test-server-1-rw-r--r-- 1 root root 7 Jul 3 14:06 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 14:06 test-server-1-rw-r--r-- 1 root root 7 Jul 3 14:06 test-server-2-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3#执行playbook，指定运行tags:server-2#正常情况下是只删除/tmp/test-server-2这个文件，/tmp/test-server-1这个文件是不会删除的[root@ansible ~]# ansible-playbook /etc/ansible/delete_tags.yml --extra "host=web user=root gather=True" --tags server-2PLAY [web] ******************************************************************** GATHERING FACTS *************************************************************** ok: [192.168.3.45]ok: [192.168.3.46]TASK: [if system is centos,them rm /tmp/test-server-2] ************************ changed: [192.168.3.46]changed: [192.168.3.45]PLAY RECAP ******************************************************************** 192.168.3.45 : ok=2 changed=1 unreachable=0 failed=0 192.168.3.46 : ok=2 changed=1 unreachable=0 failed=0 [root@ansible ~]# ansible web -m shell -a 'ls -l /tmp |grep test'192.168.3.46 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 14:06 test-server-1-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3192.168.3.45 | success | rc=0 >>-rw-r--r-- 1 root root 7 Jul 3 14:06 test-server-1 #该文件还存在-rw-r--r-- 1 root root 7 Jul 3 11:07 test-server-3 #总结，如果palybooks带有tags，不指定任何tags，默认会执行所有的任务。如果指定了tags，只执行指定的tags任务，其余的tags任务不会执行