2.Ansible Playbook剧本

Posted 2021-03-24 yinwu

1.playbook？playbook翻译过来就是“剧本”，那playbook组成如下

play: 定义的是主机的角色
task: 定义的是具体执行的任务
playbook: 由一个或多个play组成，一个play可以包含多个task任务
简单理解为: 使用不同的模块完成一件事情
通俗理解playbook?
- playbook      剧本                     <---文件     YAML     
- play          找谁       明星             找那个主机     web01
- task          做什么     干什么事情       yum  copy service
  - 找多个明星,做多件事情
  - 找一个明星,做多件事情

2.playbook的优势

1.功能比ad-hoc更全
2.能很好的控制先后执行顺序, 以及依赖关系
3.语法展现更加的直观
4.ad-hoc无法持久使用，playbook可以持久使用

3.playbook的配置语法是由yaml语法描述的，扩展名是yaml

缩进
YAML使用固定的缩进风格表示层级结构,每个缩进由两个空格组成, 不能使用tabs
冒号
以冒号结尾的除外，其他所有冒号后面所有必须有空格。
短横线
表示列表项，使用一个短横杠加一个空格。
多个项使用同样的缩进级别作为同一列表

Playbook执行结果返回颜色状态:
红色： 表示有task执行失败或者提醒的信息
黄色：表示执行了且改变了远程主机状态
绿色：表示执行成功

4.使用playbook编写一个创建文件的yml

创建一个文件---》两种方法
[root@manager project1]# cat f1.yml 

- hosts: webservers
  tasks:

    - name: Create New File
      file: path=/tmp/123.txt state=touch owner=root group=root mode=600

    - name: Create New File2
      file:
        path: /tmp/456.txt
        state: touch
        owner: root
        group: root
        mode: 0666

案例一、使用ansible安装并配置nfs服务

---》172.16.1.31   nfs
---》172.16.1.7    clinet
---》172.16.1.8    clinet

#1.新增一台nfs服务器
[root@manager project1]# cat hosts 
[nfsservers]
172.16.1.31

[webservers]
172.16.1.7
172.16.1.8
下发公钥至存储服务器
[root@manager project1]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@172.16.1.31

#2.测试三台主机是否通
[root@manager project1]# ansible all -m ping -i hosts

#3.编写一个nfs-server的yml
    1.安装nfs         yum
    2.配置nfs         copy
    3.初始化环境     
        用户          group  user
        目录          file
        授权          file
    4.启动服务         systemd

[root@manager project1]# cat nfs_server.yml 
- hosts: nfsservers
  tasks:
    - name: Installed NFS Server
      yum:
        name: nfs-utils
        state: present

    - name: Configure NFS Server
      copy:
        src: ./file/exports.j2 
        dest: /etc/exports
        owner: root
        group: root
        mode: 0644
        backup: yes

    - name: Create NFS Group www
      group:
        name: www
        gid: 666

    - name: Create NFS User www
      user:
        name: www
        group: www
        uid: 666
        create_home: no
        shell: /sbin/nologin

    - name: Create NFS Share Directory
      file:
        path: /ansible_data
        state: directory
        owner: www
        group: www
        mode: 0755
        recurse: yes

    - name: Systemd NFS Server 
      systemd:
        name: nfs
        state: restarted
        enabled: yes


#4.编写一个nfs-clinet的yml
[root@manager project1]# cat nfs_client.yml 
- hosts: webservers
  tasks:

    - name: Mount NFS Server share directory
      mount:
        src: 172.16.1.31:/ansible_data
        path: /mnt
        fstype: nfs
        opts: defaults
        state: mounted

案例二、使用ansible安装并配置nginx服务

1.安装        yum
2.配置        copy
3.启动        systmd
4.触发重启   handlers

[root@manager project1]# cat nginx.yml 
- hosts: webservers
  tasks:

    - name: Installed Nginx Server
      yum:
        name: nginx
        state: present

    - name: Configure Nginx Server
      copy:
        src: ./file/nginx.conf.j2
        dest: /etc/nginx/nginx.conf
        owner: root
        group: root
        mode: 0644
        backup: yes
      notify: Restart Nginx Server
      
    - name: Systmd nginx Server
      systemd:
        name: nginx
        state: started
        enabled: yes

  handlers:
    - name: Restart Nginx Server
      systemd:
        name: nginx
        state: restarted

案例三：使用AnsiblePlaybook方式构建LAP架构，具体操作步骤如下:

1.使用yum安装 httpd、php、firewalld等   7.1   5.3
2.使用get_url下载http://fj.xuliangwei.com/public/index.php文件
3.启动httpd、firewalld、等服务
4.添加防火墙规则，放行http的流量

#1.配置主机清单
[root@manager project1]# cat hosts 
[nfsservers]
172.16.1.31

[backupservers]
172.16.1.41

[web:children]
nfsservers
backupservers

[webservers]
172.16.1.7
172.16.1.8


#2.lamp剧本具体配置
[root@manager project1]# cat lamp.yml 
- hosts: web
  tasks:
    - name: Installed Httpd Server     //1.安装httpd
      yum: 
        name: httpd
        state: present

    - name: Installed PHP Server       //2.安装PHP
      yum: 
        name: php
        state: present

    - name: Configure Httpd WebSite     //3.配置站点
      get_url:
        url: http://fj.xuliangwei.com/public/index.php
        dest: /var/www/html/index.php
        mode: 0644

    - name: Systemd Httpd Server    //4.启动http服务
      systemd:
        name: httpd
        state: started

    - name: Systemd Firewalld Server    //5.启动防火墙firewalld
      systemd:
        name: firewalld
        state: started


    - name: Configure Firewalld Rule    //6.放行http
      firewalld:
        service: http
        state: enabled

案例四、搭建可道云网盘 31 41 apache+php

1.安装      apache+php
2,下载代码
3.启动      systemd
4.下载代码   wget  解压

[root@manager project1]# cat kod.yml 
- hosts: web
  tasks:
    - name: Installed Httpd Server
      yum:
        name: httpd
        state: present

    - name: Installed PHP Server
      yum:
        name: php
        state: present

    - name: Get kodcloud code
      synchronize:
        src: ./file/kod
        dest: /var/www/html/kodcloud

    - name: Chmod kodcloud
      file:
        path: /var/www/html
        owner: root
        group: root
        mode: 0777
        recurse: yes

    - name: Systemd Httpd Server
      systemd:
        name: httpd
        state: restarted

案例五： Nginx+PHP 搭建可道云

先手动实现，其次再写剧本
    - 1.配置yum源     nginx  php
    - 2.安装软件包    (循环的方式)
                    - nginx  php71w
    - 3.创建用户      www  统一UID和GID
    - 4.配置nginx.conf配置文件,修改启用用户为www
    - 5.配置php的权限  /etc/php-fpm.d/www.conf
    - 6.添加虚拟主机  /etc/nginx/conf.d/xx.conf
    - 7.创建网站的站点目录
    - 8.传输代码至站点目录
    - 9.启动nginx和php
    - 10.修改配置还需要能够实现自动重启
剧本配置如下：
[root@manager project1]# cat lnp.yml 
- hosts: webservers
  tasks:
        #1.配置nginx源
    - name: Installed Nginx repo
      yum_repository:
        name: nginx
        description: nginx repo
        baseurl: http://nginx.org/packages/centos/$releasever/$basearch/
        gpgcheck: no

        #2.配置php源
    - name: Installed PHP repo
      yum_repository:
        name: php
        description: webtatic-php
        baseurl: http://192.168.0.128/php
        gpgcheck: no

        #3.安装nginx和php软件
    - name: Installed Nginx and PHP Packages
      yum: 
        name: "{{ packages }}"
      vars: 
        packages:
        - nginx
        - php71w
        - php71w-cli
        - php71w-common
        - php71w-devel
        - php71w-gd
        - mod_php71w
        - php71w-fpm
        - php71w-opcache

        #4.创建属组www
    - name: Create Group www
      group:
        name: www
        gid: 666

        #5.创建属主www
    - name: Create User www
      user:
        name: www
        group: www
        uid: 666
        create_home: no
        shell: /sbin/nologin

        #6.管理nginx配置文件
    - name: Configure Nginx.conf
      copy:
        src: ./file/nginx.conf.j2
        dest: /etc/nginx/nginx.conf
      notify: Restart Nginx Server

        #7.管理php-fpm配置文件
    - name: Configure php-fpm.conf
      copy:
        src: ./file/php-www.conf.j2
        dest: /etc/php-fpm.d/www.conf
      notify: Restart PHP-fpm Server

        #8.创建虚拟主机
    - name: Add Nginx VirtHost kod.cheng.com
      copy:
        src: ./file/kod.cheng.com.conf.j2
        dest: /etc/nginx/conf.d/kod.cheng.com.conf
      notify: Restart Nginx Server
 
        #9.创建站点目录
    - name: Init Nginx BseEnv
      file:
        path: /code
        state: directory
        owner: www
        group: www
        recurse: yes

        #10.同步代码至站点目录
    - name: Push kodcloud code
      synchronize:
        src: ./file/kod
        dest: /code

        #11.授权站点目录权限
    - name: Chmod kodcloud
      file: 
        path: /code
        owner: www
        group: www
        mode: 0777
        recurse: yes

        #12.启动nginx服务
    - name: Systemd Nginx Server
      systemd:
        name: nginx
        state: started
        enabled: yes

        #13.启动php-fpm
    - name: Systemd PHP-fpm Server
      systemd:
        name: php-fpm
        state: started
        enabled: yes

  handlers:
    - name: Restart Nginx Server
      systemd:
        name: nginx
        state: restarted

    - name: Restart PHP-fpm Server
      systemd:
        name: php-fpm
        state: restarted

6.模块练习：

1.安装httpd服务             yum

2.编写简单网页测试内容            copy

3.启动服务并加入开机自启       service|systemd

4.放行对应的端口               firewalld