ansible學習筆記之2 ad-hoc篇
ansible 學習筆記 ad-hoc
使用ansible ad-hoc搭建lnmp/lamp
首先規劃下主機，須準備5臺服務器（均為centos7）： ansible： 192.168.253.157 ansiable #IP地址 主機名 提供ansible管理 lamp服務器 ： lamp1 192.168.253.153 lamp1 #搭建lamp lamp2 192.168.253.162 lamp2 lnmp服務器： lnmp1:192.168.253.161 #搭建lnmp lnmp2：192.168.253.163
編輯host文件，通過秘鑰認證ssh連接主機
在ansible管理節點執行如下命令：
[root@ansiable ~]# ssh-copy-id -i /root/.ssh/id_rsa.pub 192.168.253.153 [root@ansiable ~]# ssh-copy-id -i /root/.ssh/id_rsa.pub 192.168.253.162 [root@ansiable ~]# ssh-copy-id -i /root/.ssh/id_rsa.pub 192.168.253.163 [root@ansiable ~]# ssh-copy-id -i /root/.ssh/id_rsa.pub 192.168.253.161
編輯用戶家目錄下的inventory.cfg，輸入如下內容：
[root@ansiable ~]# vim inventory.cfg #為了方便起見采用自定義inventory.cfg 方式編輯主機
[lamp]
192.168.253.153
192.168.253.162
[lnmp]
192.168.253.161
192.168.253.163
[root@ansiable ~]# ansible all -m ping -i inventory.cfg #-i指定自定義的inventory文件 ansible會從該文件讀取主機列表
192.168.253.163 | SUCCESS => {
"changed": false,
"ping": "pong"
}
192.168.253.161 | SUCCESS => {
"changed": false,
"ping": "pong"
}
192.168.253.153 | SUCCESS => {
"changed": false,
"ping": "pong"
}
192.168.253.162 | SUCCESS => {
"changed": false,
"ping": "pong"
}
#到此主機連通性測試結束，ansible能正常連接主機
**
前期環境準備
[root@ansiable ~]# ansible all -m shell -a 'sed -i '/SELINUX/s/enforcing/disabled/' /etc/selinux/config' -i inventory.cfg #關閉selinux 重啟有效
192.168.253.162 | SUCCESS | rc=0 >>
192.168.253.161 | SUCCESS | rc=0 >>
192.168.253.163 | SUCCESS | rc=0 >>
192.168.253.153 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible all -m shell -a 'setenforce 0' -i inventory.cfg #臨時關閉selinux
192.168.253.163 | SUCCESS | rc=0 >>
192.168.253.161 | SUCCESS | rc=0 >>
192.168.253.153 | SUCCESS | rc=0 >>
192.168.253.162 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible all -m shell -a 'getenforce' -i inventory.cfg
192.168.253.162 | SUCCESS | rc=0 >>
Permissive
192.168.253.163 | SUCCESS | rc=0 >>
Permissive
192.168.253.161 | SUCCESS | rc=0 >>
Permissive
192.168.253.153 | SUCCESS | rc=0 >>
Permissive
[root@ansiable ~]# ansible all -m service -a 'name=firewalld state=stopped enabled=false' -i inventory.cfg #關閉iptables 并永久生效
192.168.253.162 | SUCCESS => {
"changed": true,
"enabled": false,
"name": "firewalld",
"state": "stopped"
}
192.168.253.163 | SUCCESS => {
"changed": true,
"enabled": false,
"name": "firewalld",
"state": "stopped"
}
192.168.253.161 | SUCCESS => {
"changed": true,
"enabled": false,
"name": "firewalld",
"state": "stopped"
}
192.168.253.153 | SUCCESS => {
"changed": true,
"enabled": false,
"name": "firewalld",
"state": "stopped"
}
[root@ansiable ~]# ansible all -m yum -a 'name=epel* state=present' -i inventory.cfg
#添加epel源 省略部分輸出
192.168.253.153 | SUCCESS => {
"changed": true,
192.168.253.162 | SUCCESS => {
"changed": true,
192.168.253.163 | SUCCESS => {
"changed": true,
192.168.253.161 | SUCCESS => {
"changed": true,
在lnmp上安裝lnmp
[root@ansiable ~]# ansible lnmp -m yum -a 'name=nginx state=present' -i inventory.cfg
#安裝nginx
192.168.253.161 | SUCCESS => {
"changed": true,
"msg": "",
"rc": 0,
192.168.253.163 | SUCCESS => {
"changed": true,
"msg": "",
"rc": 0,
[root@ansiable ~]# ansible lnmp -m yum -a 'name=net-tools state=present' -i inventory.cfg
#安裝net-tools等等有用
192.168.253.163 | SUCCESS => {
"changed": true,
192.168.253.161 | SUCCESS => {
"changed": true,
[root@ansiable ~]# ansible lnmp -m service -a 'name=nginx state=started enabled=true' -i inventory.cfg
192.168.253.161 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "nginx",
"state": "started"
}
192.168.253.163 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "nginx",
"state": "started"
}
[root@ansiable ~]# ansible lnmp -m shell -a 'netstat -ntpl' -i inventory.cfg
#可見服務已啟動 80端口已監聽
192.168.253.163 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11839/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1336/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2046/master
tcp6 0 0 :::80 :::* LISTEN 11839/nginx: master
tcp6 0 0 :::22 :::* LISTEN 1336/sshd
tcp6 0 0 ::1:25 :::* LISTEN 2046/master
192.168.253.161 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11922/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1331/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2448/master
tcp6 0 0 :::80 :::* LISTEN 11922/nginx: master
tcp6 0 0 :::22 :::* LISTEN 1331/sshd
tcp6 0 0 ::1:25 :::* LISTEN 2448/master
[root@ansiable ~]# ansible lnmp -m yum -a 'name=mariadb* state=present' -i inventory.cfg
192.168.253.163 | SUCCESS => {
"changed": true,
192.168.253.161 | SUCCESS => {
"changed": true,
[root@ansiable ~]# ansible lnmp -m copy -a 'src=my.cnf dest=/root/my.cnf owner=root group=root mode=644 backup=yes' -i inventory.cfg #拷貝配置文件
192.168.253.161 | SUCCESS => {
"changed": true,
"checksum": "f952eafb39c56591b14c941ea9795207cdc5f61a",
"dest": "/root/my.cnf",
"gid": 0,
"group": "root",
"md5sum": "7a001c0ad9c9ddc8e6d66948b0a31c7f",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:admin_home_t:s0",
"size": 699,
"src": "/root/.ansible/tmp/ansible-tmp-1479417547.44-54344140274945/source",
"state": "file",
"uid": 0
}
192.168.253.163 | SUCCESS => {
"changed": true,
"checksum": "f952eafb39c56591b14c941ea9795207cdc5f61a",
"dest": "/root/my.cnf",
"gid": 0,
"group": "root",
"md5sum": "7a001c0ad9c9ddc8e6d66948b0a31c7f",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:admin_home_t:s0",
"size": 699,
"src": "/root/.ansible/tmp/ansible-tmp-1479417547.45-78053821654257/source",
"state": "file",
"uid": 0
}
[root@ansiable ~]# ansible lnmp -m shell -a 'cp /root/my.cnf /etc/my.cnf' -i inventory.cfg
#拷貝配置文件至指定目錄
192.168.253.163 | SUCCESS | rc=0 >>
192.168.253.161 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lnmp -m shell -a 'mkdir -p /mydata/data/mysql' -i inventory.cfg
#建立數據目錄
192.168.253.161 | SUCCESS | rc=0 >>
192.168.253.163 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lnmp -m shell -a 'chown mysql:mysql /mydata/data/mysql' -i inventory.cfg
192.168.253.163 | SUCCESS | rc=0 >>
192.168.253.161 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lnmp -m service -a 'name=mariadb state=started enabled=true' -i inventory.cfg
#啟動mariadb進程
192.168.253.161 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "mariadb",
"state": "started"
}
192.168.253.163 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "mariadb",
"state": "started"
}
[root@ansiable ~]# ansible lnmp -m shell -a 'netstat -ntpl' -i inventory.cfg
192.168.253.161 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 13039/mysqld
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11922/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1331/sshd
tcp6 0 0 :::80 :::* LISTEN 11922/nginx: master
tcp6 0 0 :::22 :::* LISTEN 1331/sshd
192.168.253.163 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 12872/mysqld
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11839/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1336/sshd
tcp6 0 0 :::80 :::* LISTEN 11839/nginx: master
tcp6 0 0 :::22 :::* LISTEN 1336/sshd [root@ansiable ~]# ansible lnmp -m shell -a 'yum -y install php lighttpd-fastcgi php-cli php-mysql php-gd php-imap php-ldap php-odbc php-pear php-xml php-xmlrpc php-mbstring php-mcrypt php-mssql php-snmp php-soap' -i inventory.cfg
##安裝php所需要的組件
192.168.253.163 | SUCCESS | rc=0 >>
已加載插件：fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.cn99.com
* epel: mirror.premi.st
* extras: centos.ustc.edu.cn
* updates: mirrors.aliyun.com
正在解決依賴關系
192.168.253.161 | SUCCESS | rc=0 >>
已加載插件：fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.cn99.com
* epel: mirror.premi.st
* extras: mirrors.163.com
* updates: mirrors.163.com
完畢！
[root@ansiable ~]# echo $?
0
#成功
[root@ansiable ~]# ansible lnmp -m shell -a 'yum -y install php-tidy php-common php-devel php-fpm php-mysql' -i inventory.cfg
192.168.253.161 | SUCCESS | rc=0 >>
已加載插件：fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.cn99.com
* epel: mirror.lzu.edu.cn
* extras: mirrors.163.com
* updates: mirrors.163.com
軟件包 php-common-5.4.16-36.3.el7_2.x86_64 已安裝并且是最新版本
軟件包 php-mysql-5.4.16-36.3.el7_2.x86_64 已安裝并且是最新版本
正在解決依賴關系
完畢！
192.168.253.163 | SUCCESS | rc=0 >>
已加載插件：fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.cn99.com
* epel: mirror.premi.st
* extras: centos.ustc.edu.cn
* updates: mirrors.aliyun.com
完畢！
[root@ansiable ~]# echo $?
0
[root@ansiable ~]# ansible lnmp -m service -a 'name=php-fpm state=started enabled=true' -i inventory.cfg #啟動php-fpm
192.168.253.163 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "php-fpm",
"state": "started"
}
192.168.253.161 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "php-fpm",
"state": "started"
}
[root@ansiable ~]# ansible lnmp -m shell -a 'netstat -ntpl' -i inventory.cfg
#php-fpm已經啟動
192.168.253.161 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 13519/php-fpm: mast
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 13039/mysqld
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11922/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1331/sshd
tcp6 0 0 :::80 :::* LISTEN 11922/nginx: master
tcp6 0 0 :::22 :::* LISTEN 1331/sshd
192.168.253.163 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 13324/php-fpm: mast
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 12872/mysqld
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11839/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1336/sshd
tcp6 0 0 :::80 :::* LISTEN 11839/nginx: master
tcp6 0 0 :::22 :::* LISTEN 1336/sshd [root@ansiable ~]# vim /usr/share/nginx/html/info.php
#編輯測試文件添加如下內容：
<?php
phpinfo();
?>
[root@ansiable ~]# ansible lnmp -m copy -a 'src=/root/info.php dest=/usr/share/nginx/html/info.php owner=root group=root mode=644 backup=yes' -i inventory.cfg
#向下分發測試文件
192.168.253.161 | SUCCESS => {
"changed": true,
"checksum": "9e5d7cd2f45cc3a092a0cb3e68184a5826310a28",
"dest": "/usr/share/nginx/html/info.php",
"gid": 0,
"group": "root",
"md5sum": "231dda2188079d6e62e88482373b033f",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:usr_t:s0",
"size": 24,
"src": "/root/.ansible/tmp/ansible-tmp-1479421598.52-80578860901673/source",
"state": "file",
"uid": 0
}
192.168.253.163 | SUCCESS => {
"changed": true,
"checksum": "9e5d7cd2f45cc3a092a0cb3e68184a5826310a28",
"dest": "/usr/share/nginx/html/info.php",
"gid": 0,
"group": "root",
"md5sum": "231dda2188079d6e62e88482373b033f",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:usr_t:s0",
"size": 24,
"src": "/root/.ansible/tmp/ansible-tmp-1479421598.57-44193563671226/source",
"state": "file",
"uid": 0
}
[root@ansiable ~]# cp 192.168.253.161/etc/nginx/nginx.conf.default /root/
#復制該文件至 /root
[root@ansiable ~]# ansible lnmp -m shell -a ' mv /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak' -i inventory.cfg
#備份原配置文件
192.168.253.161 | SUCCESS | rc=0 >>
192.168.253.163 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lnmp -m copy -a 'src=/root/nginx.conf.default dest=/etc/nginx/nginx.conf owner=root group=root mode=644 backup=yes' -i inventory.cfg
#復制配置文件
192.168.253.161 | SUCCESS => {
"changed": true,
"checksum": "d548a69f9775dd7bfe752b7ed9a43b6a2413eda9",
"dest": "/etc/nginx/nginx.conf",
"gid": 0,
"group": "root",
"md5sum": "3a0b1f2d0a5734fe3200a48703bafed2",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:httpd_config_t:s0",
"size": 2656,
"src": "/root/.ansible/tmp/ansible-tmp-1479422681.46-206335273728822/source",
"state": "file",
"uid": 0
}
192.168.253.163 | SUCCESS => {
"changed": true,
"checksum": "d548a69f9775dd7bfe752b7ed9a43b6a2413eda9",
"dest": "/etc/nginx/nginx.conf",
"gid": 0,
"group": "root",
"md5sum": "3a0b1f2d0a5734fe3200a48703bafed2",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:httpd_config_t:s0",
"size": 2656,
"src": "/root/.ansible/tmp/ansible-tmp-1479422681.48-239019232951413/source",
"state": "file",
"uid": 0
}
[root@ansiable ~]# ansible lnmp -m shell -a 'echo "cgi.fix_pathinfo = 1" >> /etc/php.ini' -i inventory.cfg
#在php.ini中加入內容
192.168.253.161 | SUCCESS | rc=0 >>
192.168.253.163 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lnmp -m service -a 'name=php-fpm state=started enabled=true' -i inventory.cfg #啟動服務 并設置自啟動
192.168.253.163 | SUCCESS => {
"changed": false,
"enabled": true,
"name": "php-fpm",
"state": "started"
}
192.168.253.161 | SUCCESS => {
"changed": false,
"enabled": true,
"name": "php-fpm",
"state": "started"
}
[root@ansiable ~]# ansible lnmp -m shell -a 'netstat -ntpl' -i inventory.cfg
#查看服務是否啟動
192.168.253.161 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 13519/php-fpm: mast
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 13039/mysqld
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11922/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1331/sshd
tcp6 0 0 :::80 :::* LISTEN 11922/nginx: master
tcp6 0 0 :::22 :::* LISTEN 1331/sshd
192.168.253.163 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 13324/php-fpm: mast
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 12872/mysqld
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11839/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1336/sshd
tcp6 0 0 :::80 :::* LISTEN 11839/nginx: master
tcp6 0 0 :::22 :::* LISTEN 1336/sshd
#可見服務已經啟動 至此lnmp服務搭建已經完成
在lamp上安裝lamp
[root@ansiable ~]# ansible lamp -m yum -a 'name=httpd state=present' -i inventory.cfg
192.168.253.153 | SUCCESS => {
"changed": true,
"msg": "",
"rc": 0,
192.168.253.162 | SUCCESS => {
"changed": true,
"rc": 0,
[root@ansiable ~]# ansible lamp -m yum -a 'name=mariadb* state=present' -i inventory.cfg
192.168.253.162 | SUCCESS => {
"changed": true,
"msg": "",
"rc": 0,
192.168.253.153 | SUCCESS => {
"changed": true,
"msg": "",
"rc": 0,
[root@ansiable ~]# ansible lamp -m shell -a 'yum -y install php lighttpd-fastcgi php-cli php-mysql php-gd php-imap php-ldap php-odbc php-pear php-xml php-xmlrpc php-mbstring php-mcrypt php-mssql php-snmp php-soap ' -i inventory.cfg
192.168.253.153 | SUCCESS | rc=0 >>
192.168.253.162 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lamp -m shell -a 'yum -y install php-tidy php-common php-devel php-fpm php-mysql ' -i inventory.cfg
192.168.253.153 | SUCCESS | rc=0 >>
192.168.253.162 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lamp -m copy -a 'src=my.cnf dest=/root/my.cnf owner=root group=root mode=644 backup=yes' -i inventory.cfg
192.168.253.153 | SUCCESS => {
"changed": true,
"checksum": "117f8759fafc92b9e23ed677679d6bb4209012ad",
"dest": "/root/my.cnf",
"gid": 0,
"group": "root",
"md5sum": "c5eb42e3f534b59885a9829e4333d905",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:admin_home_t:s0",
"size": 721,
"src": "/root/.ansible/tmp/ansible-tmp-1479429254.55-31095432034843/source",
"state": "file",
"uid": 0
}
192.168.253.162 | SUCCESS => {
"changed": true,
"checksum": "117f8759fafc92b9e23ed677679d6bb4209012ad",
"dest": "/root/my.cnf",
"gid": 0,
"group": "root",
"md5sum": "c5eb42e3f534b59885a9829e4333d905",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:admin_home_t:s0",
"size": 721,
"src": "/root/.ansible/tmp/ansible-tmp-1479429254.53-99182431200892/source",
"state": "file",
"uid": 0
}
[root@ansiable ~]# ansible lamp -m shell -a 'cp /root/my.cnf /etc/my.cnf' -i inventory.cfg
192.168.253.153 | SUCCESS | rc=0 >>
192.168.253.162 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lamp -m shell -a 'mkdir -p /mydata/data/mysql' -i inventory.cfg
192.168.253.162 | SUCCESS | rc=0 >>
192.168.253.153 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lamp -m shell -a 'chown mysql:mysql /mydata/data/mysql' -i inventory.cfg
192.168.253.153 | SUCCESS | rc=0 >>
192.168.253.162 | SUCCESS | rc=0 >>
[root@ansiable ~]# ansible lamp -m copy -a 'src=my.cnf dest=/root/my.cnf owner=root group=root mode=644 backup=yes' -i inventory.cfg
192.168.253.153 | SUCCESS => {
"changed": true,
"checksum": "117f8759fafc92b9e23ed677679d6bb4209012ad",
"dest": "/root/my.cnf",
"gid": 0,
"group": "root",
"md5sum": "c5eb42e3f534b59885a9829e4333d905",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:admin_home_t:s0",
"size": 721,
"src": "/root/.ansible/tmp/ansible-tmp-1479429254.55-31095432034843/source",
"state": "file",
"uid": 0
}
192.168.253.162 | SUCCESS => {
"changed": true,
"checksum": "117f8759fafc92b9e23ed677679d6bb4209012ad",
"dest": "/root/my.cnf",
"gid": 0,
"group": "root",
"md5sum": "c5eb42e3f534b59885a9829e4333d905",
"mode": "0644",
"owner": "root",
"secontext": "system_u:object_r:admin_home_t:s0",
"size": 721,
"src": "/root/.ansible/tmp/ansible-tmp-1479429254.53-99182431200892/source",
"state": "file",
"uid": 0
}
[root@ansiable ~]# ansible lamp -m service -a 'name=httpd state=started enabled=true' -i inventory.cfg
192.168.253.162 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "httpd",
"state": "started"
}
192.168.253.153 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "httpd",
"state": "started"
}
[root@ansiable ~]# ansible lamp -m service -a 'name=mariadb state=started enabled=true' -i inventory.cfg
192.168.253.153 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "mariadb",
"state": "started"
}
192.168.253.162 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "mariadb",
"state": "started"
}
[root@ansiable ~]# ansible lamp -m service -a 'name=php-fpm state=started enabled=true' -i inventory.cfg
192.168.253.162 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "php-fpm",
"state": "started"
}
192.168.253.153 | SUCCESS => {
"changed": true,
"enabled": true,
"name": "php-fpm",
"state": "started"
}
[root@ansiable ~]# ansible lamp -m shell -a 'netstat -ntpl' -i inventory.cfg
192.168.253.162 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 12408/php-fpm: mast
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 12322/mysqld
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1338/sshd
tcp6 0 0 :::80 :::* LISTEN 11970/httpd
tcp6 0 0 :::22 :::* LISTEN 1338/sshd
192.168.253.153 | SUCCESS | rc=0 >>
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 12420/php-fpm: mast
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 12334/mysqld
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1318/sshd
tcp6 0 0 :::80 :::* LISTEN 11982/httpd
tcp6 0 0 :::22 :::* LISTEN 1318/sshd
#至此搭建完成
其中
#vim /info.php #添加如下內容： <?php phpinfo(); ?>
ad-hoc搭建mysql主從
主機規劃： ansible ：192.168.253.157 ansiable myysql主： 192.168.253.164 mariadb_master mysql從： 192.168.253.166 mariadb_slave1 192.168.253.165 mariadb_slave2 簡介： 搭建一主兩從 使用ansible mysql_replication模塊搭建管理主從 為了方便起見 mysql采用空密碼。
配置文件：
以下是mariadb_master上的配置文件（主）：
[mysqld]
datadir=/mydata/data/mysql/ socket=/var/lib/mysql/mysql.sock symbolic-links=0 innodb_file_per_table = ON skip_name_resolve = ON log-bin = binlog log-bin-index = binlog.index #開啟二進制日志 relay-log=relay-log #開啟中繼日志 server_id=1 #設置serverid [mysqld_safe] log-error=/var/log/mariadb/mariadb.log pid-file=/var/run/mariadb/mariadb.pid !includedir /etc/my.cnf.d 以下是mariadb_slave1上的配置文件（從）： [mysqld] datadir=/mydata/data/mysql/ socket=/var/lib/mysql/mysql.sock symbolic-links=0 innodb_file_per_table = ON skip_name_resolve = ON log-bin = binlog log-bin-index = binlog.index #開啟二進制日志 relay-log=relay-log #開啟中繼日志 server_id=2 #serverid read-only = 1 #設置只讀 [mysqld_safe] log-error=/var/log/mariadb/mariadb.log pid-file=/var/run/mariadb/mariadb.pid !includedir /etc/my.cnf.d 以下是mariadb_slave2上的配置文件（從）： [mysqld] datadir=/mydata/data/mysql/ socket=/var/lib/mysql/mysql.sock symbolic-links=0 innodb_file_per_table = ON skip_name_resolve = ON log-bin = binlog log-bin-index = binlog.index #開啟二進制日志 relay-log=relay-log #開啟中繼日志 server_id=3 #serverid read-only = 1 #設置只讀 [mysqld_safe] log-error=/var/log/mariadb/mariadb.log pid-file=/var/run/mariadb/mariadb.pid !includedir /etc/my.cnf.d
現在正式開始：
[root@ansiable ~]# ssh-copy-id root@192.168.253.164
[root@ansiable ~]# ssh-copy-id root@192.168.253.165
[root@ansiable ~]# ssh-copy-id root@192.168.253.166
#以秘鑰的方式連接
[root@ansiable ~]# cat inventory.cfg #在資產列表文件中編輯如下內容
[mysql_master]
192.168.253.164
[mysql_slave]
192.168.253.166
192.168.253.165
[mysql_all]
192.168.253.166
192.168.253.165
192.168.253.164
[root@ansiable ~]# ansible mysql_all -m ping -i inventory #主機連通性測試
[WARNING]: provided hosts list is empty, only localhost is available
[root@ansiable ~]# ansible mysql_all -m ping -i inventory.cfg
192.168.253.164 | SUCCESS => {
"changed": false,
"ping": "pong"
}
192.168.253.166 | SUCCESS => {
"changed": false,
"ping": "pong"
}
192.168.253.165 | SUCCESS => {
"changed": false,
"ping": "pong"
}
[root@ansiable ~]# ansible mysql_all -m copy -a 'src=/root/my.cnf dest=/etc/my.cnf owner=root group=root mode=644 backup=yes' -i inventory.cfg
#向所有主機提供配置文件
[root@ansiable ~]# ansible mysql_all -m shell -a 'yum install gcc python-devel -y' -i inventory.cfg #安裝模塊依賴
[root@ansiable ~]# ansible mysql_all -m shell -a 'yum install epel-release -y' -i inventory.cfg #安裝epel源
[root@ansiable ~]# ansible mysql_all -m shell -a ' yum -y install python-pip -y' -i inventory.cfg #安裝pip
[root@ansiable ~]# ansible mysql_all -m service -a 'name=mariadb state=restarted' -i inventory.cfg #確認各節點配置文件正確并重啟服務
192.168.253.164 | SUCCESS => {
"changed": true,
"name": "mariadb",
"state": "started"
}
192.168.253.165 | SUCCESS => {
"changed": true,
"name": "mariadb",
"state": "started"
}
192.168.253.166 | SUCCESS => {
"changed": true,
"name": "mariadb",
"state": "started"
}
[root@mariadb_master ~]# mysql #在master節點創建主從復制賬號密碼
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 48
Server version: 5.5.50-MariaDB MariaDB Server
Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MariaDB [(none)]> GRANT REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'rpluser'@'%' IDENTIFIED BY 'rplpasswd';
Query OK, 0 rows affected (0.18 sec)
MariaDB [(none)]> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.05 sec)
[root@ansiable ~]# ansible mysql_master -m mysql_replication -a 'login_user=root mode=getmaster' -i inventory.cfg #獲取master信息
192.168.253.164 | SUCCESS => {
"Binlog_Do_DB": "",
"Binlog_Ignore_DB": "",
"File": "binlog.000005",
"Position": 245,
"changed": false
}
[root@ansiable ~]# ansible mysql_slave -m mysql_replication -a 'login_user=root mode=changemaster master_host="192.168.253.164" master_user=rpluser master_password=rplpasswd master_log_file="binlog.000005" master_log_pos=245' -i inventory.cfg
#設置從節點
192.168.253.166 | SUCCESS => {
"changed": true
}
192.168.253.165 | SUCCESS => {
"changed": true
}
[root@ansiable ~]# ansible mysql_slave -m mysql_replication -a 'login_user=root mode=startslave' -i inventory.cfg
192.168.253.166 | SUCCESS => {
"changed": true,
"msg": "Slave started "
}
192.168.253.165 | SUCCESS => {
"changed": true,
"msg": "Slave started "
}
[root@ansiable ~]# ansible mysql_slave -m mysql_replication -a 'login_user=root mode=getslave' -i inventory.cfg
#查看主從情況
192.168.253.165 | SUCCESS => {
"Connect_Retry": 60,
"Exec_Master_Log_Pos": 8409,
"Last_Errno": 0,
"Last_Error": "",
"Last_IO_Errno": 0,
"Last_IO_Error": "",
"Last_SQL_Errno": 0,
"Last_SQL_Error": "",
"Master_Host": "192.168.253.164",
"Master_Log_File": "binlog.000005",
"Master_Port": 3306,
"Master_SSL_Allowed": "No",
"Master_SSL_CA_File": "",
"Master_SSL_CA_Path": "",
"Master_SSL_Cert": "",
"Master_SSL_Cipher": "",
"Master_SSL_Key": "",
"Master_SSL_Verify_Server_Cert": "No",
"Master_Server_Id": 1,
"Master_User": "rpluser",
"Read_Master_Log_Pos": 8409,
"Relay_Log_File": "relay-log.000002",
"Relay_Log_Pos": 8690,
"Relay_Log_Space": 8978,
"Relay_Master_Log_File": "binlog.000005",
"Replicate_Do_DB": "",
"Replicate_Do_Table": "",
"Replicate_Ignore_DB": "",
"Replicate_Ignore_Server_Ids": "",
"Replicate_Ignore_Table": "",
"Replicate_Wild_Do_Table": "",
"Replicate_Wild_Ignore_Table": "",
"Seconds_Behind_Master": 0,
"Skip_Counter": 0,
"Slave_IO_Running": "Yes",
"Slave_IO_State": "Waiting for master to send event",
"Slave_SQL_Running": "Yes",
"Until_Condition": "None",
"Until_Log_File": "",
"Until_Log_Pos": 0,
"changed": false
}
192.168.253.166 | SUCCESS => {
"Connect_Retry": 60,
"Exec_Master_Log_Pos": 8409,
"Last_Errno": 0,
"Last_Error": "",
"Last_IO_Errno": 0,
"Last_IO_Error": "",
"Last_SQL_Errno": 0,
"Last_SQL_Error": "",
"Master_Host": "192.168.253.164",
"Master_Log_File": "binlog.000005",
"Master_Port": 3306,
"Master_SSL_Allowed": "No",
"Master_SSL_CA_File": "",
"Master_SSL_CA_Path": "",
"Master_SSL_Cert": "",
"Master_SSL_Cipher": "",
"Master_SSL_Key": "",
"Master_SSL_Verify_Server_Cert": "No",
"Master_Server_Id": 1,
"Master_User": "rpluser",
"Read_Master_Log_Pos": 8409,
"Relay_Log_File": "relay-log.000002",
"Relay_Log_Pos": 8690,
"Relay_Log_Space": 8978,
"Relay_Master_Log_File": "binlog.000005",
"Replicate_Do_DB": "",
"Replicate_Do_Table": "",
"Replicate_Ignore_DB": "",
"Replicate_Ignore_Server_Ids": "",
"Replicate_Ignore_Table": "",
"Replicate_Wild_Do_Table": "",
"Replicate_Wild_Ignore_Table": "",
"Seconds_Behind_Master": 0,
"Skip_Counter": 0,
"Slave_IO_Running": "Yes",
"Slave_IO_State": "Waiting for master to send event",
"Slave_SQL_Running": "Yes",
"Until_Condition": "None",
"Until_Log_File": "",
"Until_Log_Pos": 0,
"changed": false
}
#這時主從搭建就完成了
我們來進行測試：
master節點：
[root@mariadb_master ~]# mysql <hellodb.sql [root@mariadb_master ~]# mysql Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 28 Server version: 5.5.50-MariaDB MariaDB Server Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> SHOW DATABASES ; +--------------------+ | Database | +--------------------+ | information_schema | | hellodb | | mysql | | performance_schema | | test | +--------------------+ 5 rows in set (0.00 sec) MariaDB [(none)]> use hellodb Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed MariaDB [hellodb]> quit ; Bye [root@mariadb_master ~]# mysql Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 33 Server version: 5.5.50-MariaDB MariaDB Server Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> CREATE DATABASE replication; Query OK, 1 row affected (0.00 sec) MariaDB [(none)]> use replication ; Database changed MariaDB [replication]> CREATE TABLE t1(id int unsigned auto_increment primary key, name char(30)); Query OK, 0 rows affected (0.11 sec) MariaDB [replication]> DESC t1; +-------+------------------+------+-----+---------+----------------+ | Field | Type | Null | Key | Default | Extra | +-------+------------------+------+-----+---------+----------------+ | id | int(10) unsigned | NO | PRI | NULL | auto_increment | | name | char(30) | YES | | NULL | | +-------+------------------+------+-----+---------+----------------+ 2 rows in set (0.10 sec) MariaDB [replication]> SHOW MASTER STATUS; +---------------+----------+--------------+------------------+ | File | Position | Binlog_Do_DB | Binlog_Ignore_DB | +---------------+----------+--------------+------------------+ | binlog.000005 | 8166 | | | +---------------+----------+--------------+------------------+ 1 row in set (0.00 sec)
從節點：
[root@mariadb_slave1 ~]# mysql Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 7 Server version: 5.5.50-MariaDB MariaDB Server Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> SHOW DATABASE ; ERROR 1064 (42000): You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'DATABASE' at line 1 MariaDB [(none)]> SHOW DATABASES ; +--------------------+ | Database | +--------------------+ | information_schema | | mysql | | performance_schema | | test | +--------------------+ 4 rows in set (0.37 sec) MariaDB [(none)]> SHOW DATABASES ; +--------------------+ | Database | +--------------------+ | information_schema | | hellodb | | mysql | | performance_schema | | replication | | test | +--------------------+ 6 rows in set (0.00 sec) MariaDB [(none)]> use replication Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed MariaDB [replication]> DESC t1 ; +-------+------------------+------+-----+---------+----------------+ | Field | Type | Null | Key | Default | Extra | +-------+------------------+------+-----+---------+----------------+ | id | int(10) unsigned | NO | PRI | NULL | auto_increment | | name | char(30) | YES | | NULL | | +-------+------------------+------+-----+---------+----------------+ 2 rows in set (0.09 sec) #主節點的操作已然同步到從節點并執行 slave2節點的測試過程省略
mysql_replication模塊各項參數解釋：
[root@ansiable ~]# ansible-doc -s mysql_replication #通過ansible-doc查看模塊幫助文檔 - name: Manage MySQL replication action: mysql_replication config_file # Specify a config file from which user and password are to be read #指明存放保存著主從同步的用戶和密碼的配置文件以便于讀取 connect_timeout # The connection timeout when connecting to the MySQL server. 設定連接超時時常 login_host # Host running the database 運行著主庫的地址(存疑) login_password # The password used to authenticate with 指定登錄用戶的密碼 login_port # Port of the MySQL server. Requires login_host be defined as other then localhost if login_port is used 指定登錄的端口 login_unix_socket # The path to a Unix domain socket for local connections 指定登錄的套接字 login_user # The username used to authenticate with 指定登錄mysql用戶 master_auto_position # does the host uses GTID based replication or not 設定是否基于GTID進行復制 master_connect_retry # same as mysql variable master_host # same as mysql variable 主庫的地址 master_log_file # same as mysql variable 主庫二進制日志位置 master_log_pos # same as mysql variable 主節點二進制日志pos 位置 master_password # same as mysql variable 主從同步賬號的密碼 master_port # same as mysql variable 主節點的端口 master_ssl # same as mysql variable master_ssl_ca # same as mysql variable master_ssl_capath # same as mysql variable master_ssl_cert # same as mysql variable master_ssl_cipher # same as mysql variable master_ssl_key # same as mysql variable master_user # same as mysql variable #登錄的主從同步用戶名
mode # module operating mode. Could be getslave (SHOW SLAVE STATUS), getmaster (SHOW MASTER STATUS), changemaster(CHANGE MASTER TO), startslave (START SLAVE), stopslave (STOP SLAVE),
resetslave (RESET SLAVE), resetslaveall (RESET SLAVE ALL)這里面的mode的值其中（等號右邊均為mysql命令）：
getslave=SHOW SLAVE STATUS
getmaster =SHOW MASTER STATUS
changemaster=CHANGE MASTER TO
startslave =START SLAVE
stopslave=STOP SLAVE
resetslave=RESET SLAVE
resetslaveall=RESET SLAVE ALL
relay_log_file # same as mysql variable 指定中繼日志位置 relay_log_pos # same as mysql variable 指定中繼日志pos ssl_ca # The path to a Certificate Authority (CA) certificate. This option, if used, must specify the same certificate as used by the server. ssl_cert # The path to a client public key certificate. ssl_key # The path to the client private key.
總結
雖然ansible的ad-hoc模式下也很強大但是在此模式下我們還是沒法獲得更高程度的自動化，這時我們就需要playbook了
原創文章，作者：Net17_desperado，如若轉載，請注明出處：http://www.www58058.com/60089
