ANSIBLE15

botang

1. ---
   
2. - name: Playbook Control Lab
   
3.   hosts: server3.example.com
   
4.   vars_files: ./v7.d/vars.yml
   
5.   tasks:
   
6.   - name: show1
   
7.     fail:
   
8.       msg: "the {{ inventory_hostname }} did not meet minmum reqs"
   
9.     when: >
   
10.       ansible_memfree_mb < min_ram_mb or
    
11.       ansible_distribution != "RedHat"
    
12.   
    
13.   # Install All Packages
    
14.   - name: Install Packages
    
15.     yum:
    
16.       name: "{{ packages }}"
    
17.       state: latest
    
18. 
    
19.   # Enable and Start Services
    
20.   - name: enable
    
21.     service:
    
22.       name: "{{ item }}"
    
23.       state: started
    
24.       enabled: yes
    
25.     loop: "{{ services }}"
    
26.     ignore_errors: yes
    
27. 
    
28.   # Block of Config Tasks
    
29.   - name: Setting Up the SSL Cert Directory
    
30.     block:
    
31.     - name: Create SSL Dir
    
32.       file:
    
33.         path: "{{ ssl_cert_dir }}"
    
34.         state: directory
    
35. 
    
36.     - name: Copy File
    
37.       copy:
    
38.         src: "{{ item.src }}"
    
39.         dest: "{{ item.dest }}"
    
40.       loop: "{{ web_config_files }}"
    
41.       notify: h_copyfile
    
42. 
    
43.     rescue:
    
44.     - name: Configuration Error Messge
    
45.       debug:
    
46.         msg: >
    
47.           Welcome to xxxxxxxxxxxxxx
    
48.           cccccccccccccc
    
49.           cccccccccccccc
    
50. 
    
51.     always:
    
52.     - name: Welcome
    
53.       debug:
    
54.         msg: "Welcome to 123456"
    
55. 
    
56.   - name: Config
    
57.     firewalld:
    
58.       service: "{{ item }}"
    
59.       permanent: yes
    
60.       state: enabled
    
61.       immediate: yes
    
62.     loop:
    
63.       - http
    
64.       - https
    
65. 
    
66.   handlers:
    
67.   - name: h_copyfile
    
68.     service:
    
69.       name: httpd
    
70.       state: restarted
    

复制代码

v7.d.zip (68.6 KB, 下载次数: 23)

2020-8-15 16:52 上传

点击文件名下载附件

1. ---
   
2. - name:
   
3.   hosts: srvgroup
   
4.   tasks:
   
5.   - name: Create A File and Set Permissions
   
6.     file:
   
7.       path: /srv/v7-2.txt
   
8.       owner: root
   
9.       group: root
   
10.       mode: 0600
    
11.       state: touch
    
12.       setype: public_content_t
    
13. 
    
14.   - name: Using Selinux and Permanent
    
15.     sefcontext:
    
16.       target: /srv/v7-2.txt
    
17.       setype: public_content_t
    
18.       state: present
    
19. 
    
20.   - name: Copy File Resideing on the Classroom
    
21.     copy:
    
22.       src: /etc/passwd
    
23.       dest: /srv
    
24.       force: yes
    
25. 
    
26.   - name: Geting File from Remote Machine
    
27.     fetch:
    
28.       src: /etc/passwd
    
29.       dest: /tmp/test-passwd
    
30. 
    
31.   - name: Certain One Line in File
    
32.     lineinfile:
    
33.       path: /srv/v7-2.txt
    
34.       line: "welcome to v7-2"
    
35.       create: yes
    
36. 
    
37.   - name: Certain Lines in File
    
38.     blockinfile:
    
39.       path: /srv/v7-2.txt
    
40.       block: |
    
41.         first line welcome to v7-2
    
42.         second line welocme to v7-2
    
43.       state: present
    
44. 
    
45.   - name: Delete File
    
46.     file:
    
47.       dest: /srv/v7-2.txt
    
48.       state: absent
    
49.     tags: tag1
    
50. 
    
51.   - name: Check
    
52.     stat:
    
53.       path: /srv/v7-2.txt
    
54.     register: v_check
    
55.     tags: tag2
    
56. 
    
57.   - name: Debug
    
58.     debug:
    
59.       var: v_check
    
60.     tags: tag3
    
61. 
    
62.   - name: Message
    
63.     debug:
    
64.       msg: this file
    
65.     when: v_check.failed == false
    
66.   
    
67.   - name: Synchronize
    
68.     synchronize:
    
69.       src: v7.d/secure
    
70.       dest: /srv/secure
    

复制代码

[student@classroom ansible]$ ansible-playbook  v7-2_srvgroup.yml    --step

PLAY [srvgroup] **********************************************************************************************************************************************************
Perform task: TASK: Gathering Facts (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Gathering Facts (N)o/(y)es/(c)ontinue: ***************************************************************************************************************

TASK [Gathering Facts] ***************************************************************************************************************************************************
ok: [server3.example.com]
ok: [server1.example.com]
ok: [server2.example.com]
Perform task: TASK: Create A File and Set Permissions (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Create A File and Set Permissions (N)o/(y)es/(c)ontinue: *********************************************************************************************

TASK [Create A File and Set Permissions] *********************************************************************************************************************************
changed: [server2.example.com]
changed: [server3.example.com]
changed: [server1.example.com]
Perform task: TASK: Using Selinux and Permanent (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Using Selinux and Permanent (N)o/(y)es/(c)ontinue: ***************************************************************************************************

TASK [Using Selinux and Permanent] ***************************************************************************************************************************************
changed: [server1.example.com]
changed: [server2.example.com]
changed: [server3.example.com]
Perform task: TASK: Copy File Resideing on the Classroom (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Copy File Resideing on the Classroom (N)o/(y)es/(c)ontinue: ******************************************************************************************

TASK [Copy File Resideing on the Classroom] ******************************************************************************************************************************
changed: [server3.example.com]
changed: [server1.example.com]
changed: [server2.example.com]
Perform task: TASK: Geting File from Remote Machine (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Geting File from Remote Machine (N)o/(y)es/(c)ontinue: ***********************************************************************************************

TASK [Geting File from Remote Machine] ***********************************************************************************************************************************
changed: [server1.example.com]
changed: [server3.example.com]
changed: [server2.example.com]
Perform task: TASK: Certain One Line in File (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Certain One Line in File (N)o/(y)es/(c)ontinue: ******************************************************************************************************

TASK [Certain One Line in File] ******************************************************************************************************************************************
changed: [server2.example.com]
changed: [server1.example.com]
changed: [server3.example.com]
Perform task: TASK: Certain Lines in File (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Certain Lines in File (N)o/(y)es/(c)ontinue: *********************************************************************************************************

TASK [Certain Lines in File] *********************************************************************************************************************************************
changed: [server1.example.com]
changed: [server2.example.com]
changed: [server3.example.com]
Perform task: TASK: Delete File (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Delete File (N)o/(y)es/(c)ontinue: *******************************************************************************************************************

TASK [Delete File] *******************************************************************************************************************************************************
changed: [server1.example.com]
changed: [server3.example.com]
changed: [server2.example.com]
Perform task: TASK: Check (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Check (N)o/(y)es/(c)ontinue: *************************************************************************************************************************

TASK [Check] *************************************************************************************************************************************************************
ok: [server2.example.com]
ok: [server1.example.com]
ok: [server3.example.com]
Perform task: TASK: Debug (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Debug (N)o/(y)es/(c)ontinue: *************************************************************************************************************************

TASK [Debug] *************************************************************************************************************************************************************
ok: [server2.example.com] => {
    "v_check": {
        "changed": false,
        "failed": false,
        "stat": {
            "exists": false
        }
    }
}
ok: [server1.example.com] => {
    "v_check": {
        "changed": false,
        "failed": false,
        "stat": {
            "exists": false
        }
    }
}
ok: [server3.example.com] => {
    "v_check": {
        "changed": false,
        "failed": false,
        "stat": {
            "exists": false
        }
    }
}
Perform task: TASK: Message (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Message (N)o/(y)es/(c)ontinue: ***********************************************************************************************************************

TASK [Message] ***********************************************************************************************************************************************************
ok: [server1.example.com] => {
    "msg": "this file"
}
ok: [server2.example.com] => {
    "msg": "this file"
}
ok: [server3.example.com] => {
    "msg": "this file"
}
Perform task: TASK: Synchronize (N)o/(y)es/(c)ontinue: y

Perform task: TASK: Synchronize (N)o/(y)es/(c)ontinue: *******************************************************************************************************************

1. ---
   
2. - name: Flat
   
3.   hosts: srvgroup
   
4.   tasks:
   
5.   - name: fetch
   
6.     fetch:
   
7.       src: /var/log/secure
   
8.       dest: v7.d/
   
9.       flat: false
   
10. 
    
11.   - name: Copy A File to Managed hosts and Atrributes
    
12.     copy:
    
13.       src: /etc/passwd
    
14.       dest: /srv
    
15.       owner: devops
    
16.       group: sharedgroup
    
17.       mode: u+rw,g-wx,o-rwx
    
18.       setype: samba_share_t
    
19. 
    
20.   - name: Using the File Module to Ensure Selinux File Context
    
21.     file:
    
22.       path: /srv/passwd
    
23.       seuser: _default
    
24.       serole: _default
    
25.       setype: _default
    
26.       selevel: _default
    
27. ~                           

复制代码

1. ---
   
2. - name: Add Block of Test to a File
   
3.   hosts: srvgroup
   
4.   tasks:
   
5.   - name: Copy File
   
6.     copy:
   
7.       src: /etc/passwd
   
8.       dest: /srv
   
9. 
   
10.   - name: Add A Single
    
11.     blockinfile:
    
12.       path: /srv/passwd
    
13.       block: |
    
14.         welcome to xxxxx
    
15.         welcome to xxxxx
    
16.       state: present
    
17. 
    
18.   - name: Import Two Lines of Test of A File
    
19.     lineinfile:
    
20.       path: /srv/welcome2
    
21.       line: |
    
22.         welcome to yyyyyy
    
23.         welcome to yyyyyy
    
24.       create: yes
    

复制代码

1. ---
   
2. - name: Add Block of Test to a File
   
3.   hosts: srvgroup
   
4.   tasks:
   
5.   - name: Remove All File
   
6.     file:
   
7.       path: "{{ item }}"
   
8.       state: absent
   
9.     loop:
   
10.       - /srv/passwd
    
11.       - /srv/welcome2
    
12.     tags:
    
13.       - tag1
    

复制代码