Ansible 常用的一些命令
Posted
tags:
篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了Ansible 常用的一些命令相关的知识，希望对你有一定的参考价值。
Ansible版本
[[email protected] tmp]# rpm -q ansibleansible-2.1.2.0-1.el6.noarch
Ansible配置文件
[[email protected] tmp]# rpm -ql ansible | less/etc/ansible /etc/ansible/ansible.cfg //配置文件 /etc/ansible/hosts //主机清单 /etc/ansible/roles //角色 /usr/bin/ansible //主程序 /usr/bin/ansible-console /usr/bin/ansible-doc //文档命令 /usr/bin/ansible-galaxy /usr/bin/ansible-playbook //剧本 /usr/bin/ansible-pull /usr/bin/ansible-vault
Ansible语法
ansible <host-pattern> [options] //all所有/etc/ansible/hosts定义主机 “/”目录下bin并且统计多少行 [[email protected] tmp]# ansible all -a ‘ls / ‘ | grep -o "^bin" |wc -l 3
添加一个crontab任务，名称为Test，没4分钟执行一次
[[email protected] tmp]# ansible all -m cron -a "name=Test minute=*/4 job=‘/bin/date >> /tmp/date.log‘" 172.16.0.5 | SUCCESS => { "changed": true, "envs": [], "jobs": [ "1", "None", "Test" ] }172.16.0.4 | SUCCESS => { "changed": true, "envs": [], "jobs": [ "1", "None", "Test" ] }172.16.0.2 | SUCCESS => { "changed": true, "envs": [], "jobs": [ "1", "None", "Test" ] }
[[email protected] tmp]# ansible all -a ‘crontab -l‘ 172.16.0.5 | SUCCESS | rc=0 >> #Ansible: 1*/5 * * * * /bin/date > /tmp/date.log #Ansible: None */2 * * * * ls / >> /tmp/root.log #Ansible: Test */4 * * * * /bin/date >> /tmp/date.log 172.16.0.4 | SUCCESS | rc=0 >> #Ansible: 1*/5 * * * * /bin/date > /tmp/date.log #Ansible: None */2 * * * * ls / >> /tmp/root.log #Ansible: Test */4 * * * * /bin/date >> /tmp/date.log 172.16.0.2 | SUCCESS | rc=0 >> #Ansible: 1*/5 * * * * /bin/date > /tmp/date.log #Ansible: None */2 * * * * ls / >> /tmp/root.log #Ansible: Test */4 * * * * /bin/date >> /tmp/date.log
删除Test这条crontab任务,并确认是否删除
[[email protected] tmp]# ansible all -m cron -a "state=absent name=Test minute=*/4 job=‘/bin/date >> /tmp/date.log‘" //删除任务 172.16.0.5 | SUCCESS => { "changed": true, "envs": [], "jobs": [ "1", "None" ] }172.16.0.4 | SUCCESS => { "changed": true, "envs": [], "jobs": [ "1", "None" ] }172.16.0.2 | SUCCESS => { "changed": true, "envs": [], "jobs": [ "1", "None" ] } [[email protected] tmp]# ansible all -a ‘crontab -l‘ //已删除 172.16.0.5 | SUCCESS | rc=0 >> #Ansible: 1*/5 * * * * /bin/date > /tmp/date.log #Ansible: None */2 * * * * ls / >> /tmp/root.log 172.16.0.4 | SUCCESS | rc=0 >> #Ansible: 1*/5 * * * * /bin/date > /tmp/date.log #Ansible: None */2 * * * * ls / >> /tmp/root.log 172.16.0.2 | SUCCESS | rc=0 >> #Ansible: 1*/5 * * * * /bin/date > /tmp/date.log #Ansible: None */2 * * * * ls / >> /tmp/root.log
fetch 备份神器
[[email protected] tmp]# mkdir `date +%Y` //创建本地备份目录 [[email protected] tmp]# ls 2016 date.log yum.log [[email protected] tmp]# ansible all -m fetch -a "src=/tmp/fstab1 dest=/tmp/2016" //拉取远程/tmp/fstab1文件备份到本地目录/tmp/2016下 172.16.0.5 | SUCCESS => { "changed": true, "checksum": "1f9cc35736c5df82cd013c7c4445f8ba9fb05062", "dest": "/tmp/2016/172.16.0.5/tmp/fstab1", "md5sum": "30fe33abd75b1a24286d146306d3481f", "remote_checksum": "1f9cc35736c5df82cd013c7c4445f8ba9fb05062", "remote_md5sum": null }172.16.0.2 | SUCCESS => { "changed": true, "checksum": "1f9cc35736c5df82cd013c7c4445f8ba9fb05062", "dest": "/tmp/2016/172.16.0.2/tmp/fstab1", "md5sum": "30fe33abd75b1a24286d146306d3481f", "remote_checksum": "1f9cc35736c5df82cd013c7c4445f8ba9fb05062", "remote_md5sum": null }172.16.0.4 | SUCCESS => { "changed": true, "checksum": "1f9cc35736c5df82cd013c7c4445f8ba9fb05062", "dest": "/tmp/2016/172.16.0.4/tmp/fstab1", "md5sum": "30fe33abd75b1a24286d146306d3481f", "remote_checksum": "1f9cc35736c5df82cd013c7c4445f8ba9fb05062", "remote_md5sum": null } [[email protected] tmp]# tree 2016/ //查看是否备份成功2016/ ├── 172.16.0.2│ └── tmp │ └── fstab1 ├── 172.16.0.4│ └── tmp │ └── fstab1 └── 172.16.0.5 └── tmp └── fstab16 directories, 3 files
file创建远程连接
[[email protected] tmp]# ansible all -m file -a ‘src=/tmp/fstab1 path=/var/fstab.link state=link‘ //创建远程文件/tmp/fstab1软连接为/var/fstab.link 172.16.0.5 | SUCCESS => { "changed": true, "dest": "/var/fstab.link", "gid": 0, "group": "root", "mode": "0777", "owner": "root", "size": 11, "src": "/tmp/fstab1", "state": "link", "uid": 0 } 172.16.0.4 | SUCCESS => { "changed": true, "dest": "/var/fstab.link", "gid": 0, "group": "root", "mode": "0777", "owner": "root", "secontext": "unconfined_u:object_r:var_t:s0", "size": 11, "src": "/tmp/fstab1", "state": "link", "uid": 0 } 172.16.0.2 | SUCCESS => { "changed": true, "dest": "/var/fstab.link", "gid": 0, "group": "root", "mode": "0777", "owner": "root", "secontext": "unconfined_u:object_r:var_t:s0", "size": 11, "src": "/tmp/fstab1", "state": "link", "uid": 0 } [[email protected] tmp]# ansible all -m shell -a ‘ls -l /var/fst*‘ //验证是否正确 172.16.0.5 | SUCCESS | rc=0 >> lrwxrwxrwx 1 root root 11 Oct 29 22:43 /var/fstab.link -> /tmp/fstab1 172.16.0.2 | SUCCESS | rc=0 >> lrwxrwxrwx. 1 root root 11 Oct 29 22:43 /var/fstab.link -> /tmp/fstab1 172.16.0.4 | SUCCESS | rc=0 >> lrwxrwxrwx. 1 root root 11 Oct 29 22:43 /var/fstab.link -> /tmp/fstab1 [[email protected] tmp]# ansible all -m file -a ‘src=/tmp/fstab1 path=/var/fstab.link state=absent‘//删除软连接，state=absent即可 172.16.0.5 | SUCCESS => { "changed": true, "path": "/var/fstab.link", "state": "absent"} 172.16.0.2 | SUCCESS => { "changed": true, "path": "/var/fstab.link", "state": "absent"} 172.16.0.4 | SUCCESS => { "changed": true, "path": "/var/fstab.link", "state": "absent"} [[email protected] tmp]# ansible all -m shell -a ‘ls -l /var/fst*‘ //验证是否删除 172.16.0.5 | FAILED | rc=2 >>ls: cannot access /var/fst*: No such file or directory 172.16.0.2 | FAILED | rc=2 >>ls: cannot access /var/fst*: No such file or directory 172.16.0.4 | FAILED | rc=2 >>ls: cannot access /var/fst*: No such file or directory
file属性修改
path= owner= mode= 等等比如 [[email protected] tmp]# ansible all -m file -a ‘path=/tmp/fstab1 mode=0777‘ //设定属性等于777 172.16.0.5 | SUCCESS => { "changed": false, "gid": 0, "group": "root", "mode": "0777", "owner": "root", "path": "/tmp/fstab1", "size": 711, "state": "file", "uid": 0}172.16.0.2 | SUCCESS => { "changed": false, "gid": 0, "group": "root", "mode": "0777", "owner": "root", "path": "/tmp/fstab1", "secontext": "unconfined_u:object_r:admin_home_t:s0", "size": 711, "state": "file", "uid": 0}172.16.0.4 | SUCCESS => { "changed": false, "gid": 0, "group": "root", "mode": "0777", "owner": "root", "path": "/tmp/fstab1", "secontext": "unconfined_u:object_r:admin_home_t:s0", "size": 711, "state": "file", "uid": 0} [[email protected] tmp]# ansible all -a ‘ls -l /tmp/fstab1‘ //验证权限，没错都是777 172.16.0.5 | SUCCESS | rc=0 >> -rwxrwxrwx 1 root root 711 Oct 29 20:00 /tmp/fstab1172.16.0.2 | SUCCESS | rc=0 >> -rwxrwxrwx. 1 root root 711 Oct 29 20:00 /tmp/fstab1172.16.0.4 | SUCCESS | rc=0 >> -rwxrwxrwx. 1 root root 711 Oct 29 20:00 /tmp/fstab1
file創建目錄
path= state=directory [[email protected] tmp]# ansible all -m file -a ‘path=/tmp/test state=directory‘//在/tmp下創建test目錄 172.16.0.5 | SUCCESS => { "changed": true, "gid": 0, "group": "root", "mode": "0755", "owner": "root", "path": "/tmp/test", "size": 4096, "state": "directory", "uid": 0}172.16.0.2 | SUCCESS => { "changed": true, "gid": 0, "group": "root", "mode": "0755", "owner": "root", "path": "/tmp/test", "secontext": "unconfined_u:object_r:user_tmp_t:s0", "size": 6, "state": "directory", "uid": 0}172.16.0.4 | SUCCESS => { "changed": true, "gid": 0, "group": "root", "mode": "0755", "owner": "root", "path": "/tmp/test", "secontext": "unconfined_u:object_r:user_tmp_t:s0", "size": 6, "state": "directory", "uid": 0} [[email protected] tmp]# ansible all -m shell -a ‘ls -l /tmp/ | grep test‘//驗證是否創建test，發現有test目錄證明創建成功 172.16.0.5 | SUCCESS | rc=0 >> drwxr-xr-x 2 root root 4096 Oct 29 23:02 test-rw-r--r-- 1 root root 8 Oct 29 20:06 testfile172.16.0.2 | SUCCESS | rc=0 >> drwxr-xr-x. 2 root root 6 Oct 29 23:02 test-rw-r--r--. 1 root root 8 Oct 29 20:06 testfile172.16.0.4 | SUCCESS | rc=0 >> drwxr-xr-x. 2 root root 6 Oct 29 23:02 test-rw-r--r--. 1 root root 8 Oct 29 20:06 testfile
yum 安裝
[[email protected] tmp]# ansible all -m yum -a ‘name=httpd‘
yum 卸載
[[email protected] tmp]# ansible all -m yum -a ‘name=httpd state=absent‘
copy ，拷貝本地/tmp/date.log至遠程主機的/tmp目錄下
[[email protected] tmp]# ansible all -m copy -a "src=/tmp/date.log dest=/tmp"
service 啟動服務并開機主動啟動(enabled等於1為自動啟動，0為關閉自動啟動)
[[email protected] tmp]# ansible all -m service -a "name=httpd state=started enabled=1"
service 停止并關閉自動自動
[[email protected] tmp]# ansible all -m service -a "name=httpd state=stopped enabled=0"
service 重啟服務
[[email protected] tmp]# ansible all -m service -a "name=httpd state=restarted"
service 重載
[[email protected] tmp]# ansible all -m service -a "name=httpd state=reloaded"
user 創建用戶
[[email protected] tmp]# ansible all -m user -a "name=mysql uid=306 system=yes"
定义Ansible的yaml
yaml格式
用户增删示例
- hosts：all //定义远程主机 remote_user: root //定义远程用户为root tasks: //定义任务，以缩进为引导 - name: create a user user5 //定义任务名称 user: user=user5 system=ture uid=555 [state=absent] //定义创建user5用户系统用户uid为555 []中为删除 - name: create a user user6 //定义任务名称 user: user=user6 uid=666 [state=absent] //定义创建user5用户系统用户uid为555 []中为删除
只检测不执行
[[email protected] ansible]# ansible-playbook --check xxx.yaml
检查在那些主机上会执行
[[email protected] ansible]# ansible-playbook --list-host xxx.yaml
检查会执行那些TAGS
[[email protected] ansible]# ansible-playbook --list-tags xxx.yaml
检查tasks列表
[[email protected] ansible]# ansible-playbook --list-tasks xxx.yaml
执行
[[email protected] ansible]# ansible-playbook xxx.yaml
yaml格式
服务安装配置示例
- hosts: webserver //定义远程主机 remote_user: root //定义远程用户为root tasks: //定义任务 - name: Yum install httpd service //定义任务名称 yum: name=httpd //定义Yum Module安装服务 - name: Copy cinfigure copy: src=config/httpd/conf/httpd.conf7 dest=/etc/httpd/conf/httpd.conf tags: config //定义tags标签 notify: reload httpd //定义notify通知必须与handlers -name：values一致 - name: Service httpd start service: name=httpd state=started handlers: //定义handlers - name: reload httpd //定义调用上面notify的名称 service: name=httpd state=reloaded //采取的动作
只运行tags标签的config
[[email protected] working]# ansible-playbook -t config xxx.yaml
只运行tags标签的connfig并且触发notify通知
[[email protected] working]# ansible-playbook -t config web.yaml PLAY [webserver] *************************************************************** TASK [setup] ******************************************************************* ok: [172.16.0.4] ok: [172.16.0.2] TASK [Copy cinfigure] ********************************************************** changed: [172.16.0.2] //发现配置文件有变动host changed: [172.16.0.4] //发现配置文件有变动host RUNNING HANDLER [reload httpd] //运行了我们定义的任务 ************************************************* changed: [172.16.0.4] //handlers采取的动作host changed: [172.16.0.2] //handlers采取的动作host PLAY RECAP ********************************************************************* 172.16.0.2 : ok=3 changed=2 unreachable=0 failed=0 172.16.0.4 : ok=3 changed=2 unreachable=0 failed=0
yaml格式
服务安装配置示例
- hosts: dbserver //定义远程主机
remote_user: root //定义远程用户
tasks: //定义任务
- name: install {{ pkname }} //使用变量，执行命令时可以传参变量最好保持一致
yum: name={{ pkname }} //使用变量，执行命令时可以传参，变量最好保持一致执行示例，建议执行前做检查
[[email protected] working]# ansible-playbook -e pkname=memcached --check memcached.yaml //执行前检查，-e参数表示使用变量，pkname=values为传参的软件包名称 [[email protected] working]# ansible-playbook -e pkname=memcached memcached.yaml //-e参数表示使用变量，pkname=values为传参的软件包名称 PLAY [dbserver] **************************************************************** TASK [setup] ******************************************************************* ok: [172.16.0.5] TASK [install memcached] ******************************************************* changed: [172.16.0.5] PLAY RECAP ********************************************************************* 172.16.0.5 : ok=2 changed=1 unreachable=0 failed=0
Host Inventory
定义向不同主机传递不同参数
[[email protected] working]# cat ../hosts | grep -v "#" [webserver] 172.16.0.2 hname=www1 //hname为变量名 172.16.0.4 hname=www2 //hname为变量名 [dbserver] 172.16.0.5 hname=dbserver
定义向不同主机传递不同参数yaml
[[email protected] working]# cat hname.yaml - hosts: all remote_user: root tasks: - name: Modify Hostname hostname: name={{ hname }} //这里一定要用{{ values }}
执行
[[email protected] working]# ansible-playbook hname.yaml
查看结果
[[email protected] working]# ansible all -a "hostname"172.16.0.5 | SUCCESS | rc=0 >> dbserver172.16.0.2 | SUCCESS | rc=0 >> www1172.16.0.4 | SUCCESS | rc=0 >> www2
本文出自 “SunshineBoySZF” 博客，请务必保留此出处http://sunshineboyszf.blog.51cto.com/12087328/1867310
以上是关于Ansible 常用的一些命令的主要内容，如果未能解决你的问题，请参考以下文章