Ansible安装及使用 - w23ta0's Blog

前言#

AnsibleWorks成立于2012年，由自动化工具Cobbler及Func的开发者Michael DeHaan创建。其Ansible平台是一个开源的配置及计算机管理平台。可实现多节点的软件部署，执行特定任务并进行配置管理。

Ansible 跟其他IT自动化技术的区别在于其关注点并非配置管理、应用部署或IT流程工作流，而是提供一个统一的界面来协调所有的IT自动化功能，因此 Ansible的系统更加易用，部署更快。受管理的节点无需安装额外的远程控制软件，由平台通过SSH（Secure SHell）对其进行管理，因此十分方便。其模块支持JSON等标准输出格式，可采用任何编程语言重写。

Ansible可以让用户避免编写脚本或代码来管理应用，同时还能搭建工作流实现IT任务的自动化执行。IT自动化可以降低技术门槛及对传统IT的依赖，从而加快项目的交付速度。

Ansible有如下优点：

轻量级，他不需要去客户端安装agent，更新时，只需要在操作机上进行一次更新即可
批量任务执行可以写成脚本，而且不用分发到远程就可以执行
使用python编写的，维护更简单
支持sudo

安装Ansible#

创建ansible用户#

1
[root@node1 ~]# useradd ansible
2
[root@node1 ~]# passwd ansible
3
更改用户 ansible 的密码 。
4
新的 密码：
5
重新输入新的 密码：
6
passwd： 所有的身份验证令牌已经成功更新。

允许执行sudo#

1
[root@node1 ~]# vi /etc/sudoers
2
# Defaults    requiretty  //表示不需要控制终端
3
ansible ALL=(ALL) NOPASSWD:ALL

安装ansible#

1
[root@node1 ~]# yum install PyYAML.x86_64 python-paramiko.noarch python-jinja2.x86_64 python-devel -y
2
[root@node1 ~]# wget https://pypi.python.org/packages/source/s/setuptools/setuptools-7.0.tar.gz
3
[root@node1 ~]# tar zxvf setuptools-7.0.tar.gz
4
[root@node1 ~]# cd setuptools-7.0
5
[root@node1 setuptools-7.0]# python setup.py install
6
[root@node1 setuptools-7.0]# cd ..
7
[root@node1 ~]# wget https://pypi.python.org/packages/source/a/ansible/ansible-1.7.2.tar.gz
8
[root@node1 ~]# tar zxvf ansible-1.7.2.tar.gz
9
[root@node1 ~]# cd ansible-1.7.2
10
[root@node1 ansible-1.7.2]# python setup.py build
11
[root@node1 ansible-1.7.2]# python setup.py install
12
[root@node1 ansible-1.7.2]# mkdir /etc/ansible
13
[root@node1 ansible-1.7.2]# cp examples/ansible.cfg /etc/ansible/
14
[root@node1 ansible-1.7.2]# cp examples/hosts /etc/ansible/

修改配置文件#

1
[root@node1 ansible-1.7.2]# vi /etc/ansible/ansible.cfg
2
hostfile       = /etc/ansible/hosts
3
library        = /usr/share/ansible
4
remote_tmp     = $HOME/.ansible/tmp
5
pattern        = *
6
forks          = 5
7
poll_interval  = 15
8
sudo_user      = ansible
9
#ask_sudo_pass = True
10
#ask_pass      = True
11
transport      = smart
12
remote_port    = 22
13
module_lang    = C
14
[root@node1 ansible-1.7.2]# vi /etc/ansible/hosts
15
#server
16
[localhost]
17
127.0.0.1
18
#client
19
[client]
20
172.16.0.112

ssh互信#

1
[root@node1 ansible-1.7.2]# su - ansible
2
[ansible@node1 ~]$
3
[ansible@node1 ~]$ ssh-keygen -t rsa
4
Generating public/private rsa key pair.
5
Enter file in which to save the key (/home/ansible/.ssh/id_rsa):
6
Created directory '/home/ansible/.ssh'.
7
Enter passphrase (empty for no passphrase):
8
Enter same passphrase again:
9
Your identification has been saved in /home/ansible/.ssh/id_rsa.
10
Your public key has been saved in /home/ansible/.ssh/id_rsa.pub.
11
The key fingerprint is:
12
dc:c9:ac:d8:46:81:37:72:08:f3:77:06:98:33:cb:5f ansible@node1
13
The key's randomart image is:
14
+--[ RSA 2048]----+
15
|    o  o.        |
16
|     +=o .       |
17
|     .=+* o      |
18
|      o* OE.     |
19
|       .S.=      |
20
|       +..       |
21
|      . +        |
22
|       .         |
23
|                 |
24
+-----------------+
25
[ansible@node1 ~]$
26
[ansible@node1 ~]$ ssh-keygen -t dsa
27
Generating public/private dsa key pair.
28
Enter file in which to save the key (/home/ansible/.ssh/id_dsa):
29
Enter passphrase (empty for no passphrase):
30
Enter same passphrase again:
31
Your identification has been saved in /home/ansible/.ssh/id_dsa.
32
Your public key has been saved in /home/ansible/.ssh/id_dsa.pub.
33
The key fingerprint is:
34
b3:a6:94:bf:5c:21:a3:c5:8b:74:b8:a5:8c:62:34:d2 ansible@node1
35
The key's randomart image is:
36
+--[ DSA 1024]----+
37
|                 |
38
|                 |
39
|                 |
40
| .     o         |
41
|. E   o S .      |
42
| o . + X * .     |
43
|  o . O + .      |
44
| . . . = .       |
45
|      . +.       |
46
+-----------------+
47
[ansible@node1 ~]$
48
[ansible@node1 ~]$ cd .ssh/
49
[ansible@node1 .ssh]$ cat *.pub > authorized_keys
50
[ansible@node1 .ssh]$ chmod -R 700 .
51

52
#测试本机互信
53
[ansible@node1 .ssh]$ ssh 127.0.0.1
54
The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.
55
RSA key fingerprint is fa:73:59:f5:08:95:b2:2e:7f:3e:52:91:8a:e6:47:1f.
56
Are you sure you want to continue connecting (yes/no)? yes
57
Warning: Permanently added '127.0.0.1' (RSA) to the list of known hosts.
58
[ansible@node1 ~]$ exit
59
logout
60
Connection to 127.0.0.1 closed.

远程ssh互信配置测试#

1
[ansible@node1 .ssh]$ scp authorized_keys ansible@172.16.0.112:
2
The authenticity of host '172.16.0.112 (172.16.0.112)' can't be established.
3
RSA key fingerprint is fa:73:59:f5:08:95:b2:2e:7f:3e:52:91:8a:e6:47:1f.
4
Are you sure you want to continue connecting (yes/no)? yes
5
Warning: Permanently added '192.168.253.131' (RSA) to the list of known hosts.
6
ansible@172.16.0.112's password:
7
authorized_keys100%  998     1.0KB/s   00:00
8

9
#测试是否互信成功
10
[ansible@node1 .ssh]$ ssh 172.16.0.112
11
[ansible@node2 ~]$ mkdir .ssh
12
[ansible@node2 ~]$ mv authorized_keys .ssh/
13
[ansible@node2 ~]$ chmod -R 700 .ssh/

使用Ansible#

使用ping模块测试是否成功#

1
[ansible@node1 ~]$ ansible all -m ping
2
127.0.0.1 | success >> {
3
    "changed": false,
4
    "ping": "pong"
5
}
6

7
172.16.0.112 | success >> {
8
    "changed": false,
9
    "ping": "pong"
10
}

查看时间#

1
[ansible@node1 ~]$ ansible all -m command -a "sudo date"
2
127.0.0.1 | success | rc=0 >>
3
Fri Apr 22 23:48:42 CST 2016
4

5
172.16.0.112 | success | rc=0 >>
6
Fri Apr 22 23:48:42 CST 2016

使用yum安装软件#

1
[ansible@node1 ~]$ ansible all -m command -a "sudo yum install zip unzip -y"
2
127.0.0.1 | success | rc=0 >>
3
Loaded plugins: fastestmirror, security
4
Loading mirror speeds from cached hostfile
5
 * base: mirrors.btte.net
6
 * extras: mirrors.yun-idc.com
7
 * updates: mirrors.yun-idc.com
8
Setting up Install Process
9
Package zip-3.0-1.el6_7.1.x86_64 already installed and latest version
10
Package unzip-6.0-2.el6_6.x86_64 already installed and latest version
11
Nothing to do   #说明此软件之前在每台服务器都已经装过了
12

13
172.16.0.112 | success | rc=0 >>
14
Loaded plugins: fastestmirror, security
15
Loading mirror speeds from cached hostfile
16
 * base: mirrors.btte.net
17
 * extras: mirrors.yun-idc.com
18
 * updates: mirrors.yun-idc.com
19
Setting up Install Process
20
Resolving Dependencies
21
--> Running transaction check
22
---> Package unzip.x86_64 0:6.0-2.el6_6 will be installed
23
---> Package zip.x86_64 0:3.0-1.el6_7.1 will be installed
24
--> Finished Dependency Resolution
25

26
Dependencies Resolved
27

28
================================================================================
29
 Package        Arch            Version                  Repository        Size
30
================================================================================
31
Installing:
32
 unzip          x86_64          6.0-2.el6_6              base             149 k
33
 zip            x86_64          3.0-1.el6_7.1            updates          259 k
34

35
Transaction Summary
36
================================================================================
37
Install       2 Package(s)
38

39
Total download size: 408 k
40
Installed size: 1.1 M
41
Downloading Packages:
42
--------------------------------------------------------------------------------
43
Total   2.5 MB/s | 408 kB     00:00
44
Running rpm_check_debug
45
Running Transaction Test
46
Transaction Test Succeeded
47
Running Transaction
48
  Installing : zip-3.0-1.el6_7.1.x86_64                 1/2
49
  Installing : unzip-6.0-2.el6_6.x86_64                 2/2
50
  Verifying  : unzip-6.0-2.el6_6.x86_64                 1/2
51
  Verifying  : zip-3.0-1.el6_7.1.x86_64                 2/2
52

53
Installed:
54
  unzip.x86_64 0:6.0-2.el6_6             zip.x86_64 0:3.0-1.el6_7.1
55

56
Complete!   #安装成功

查看ansible内置模块#

1
[ansible@node1 ~]$ ansible-doc -l
2
acl                  Sets and retrieves file ACL information.
3
add_host             add a host (and alternatively a group) to the ansible-playbo
4
airbrake_deployment  Notify airbrake about app deployments
5
alternatives         Manages alternative programs for common commands
6
apache2_module       enables/disables a module of the Apache2 webserver
7
apt                  Manages apt-packages
8
apt_key              Add or remove an apt key
9
apt_repository       Add and remove APT repositories
10
apt_rpm              apt_rpm package manager
11
arista_interface     Manage physical Ethernet interfaces
12
arista_l2interface   Manage layer 2 interfaces
13
arista_lag           Manage port channel (lag) interfaces
14
arista_vlan          Manage VLAN resources
15
assemble             Assembles a configuration file from fragments
16
assert               Fail with custom message
17
at                   Schedule the execution of a command or script file via the a
18
authorized_key       Adds or removes an SSH authorized key
19
azure                create or terminate a virtual machine in azure
20
bigip_facts          Collect facts from F5 BIG-IP devices
21
bigip_monitor_http   Manages F5 BIG-IP LTM http monitors
22
bigip_monitor_tcp    Manages F5 BIG-IP LTM tcp monitors
23
bigip_node           Manages F5 BIG-IP LTM nodes
24
bigip_pool           Manages F5 BIG-IP LTM pools
25
bigip_pool_member    Manages F5 BIG-IP LTM pool members
26
boundary_meter       Manage boundary meters
27
bzr                  Deploy software (or files) from bzr branches
28
campfire             Send a message to Campfire
29
capabilities         Manage Linux capabilities
30
cloudformation       create a AWS CloudFormation stack
31
command              Executes a command on a remote node
32
composer             Dependency Manager for PHP
33
copy                 Copies files to remote locations.
34
cpanm                Manages Perl library dependencies.
35
cron                 Manage cron.d and crontab entries.
36
datadog_event        Posts events to DataDog  service
37
debconf              Configure a .deb package
38
debug                Print statements during execution
39
digital_ocean        Create/delete a droplet/SSH_key in DigitalOcean
40
digital_ocean_domain Create/delete a DNS record in DigitalOcean
41
digital_ocean_sshkey Create/delete an SSH key in DigitalOcean
42
django_manage        Manages a Django application.
43
dnsimple             Interface with dnsimple.com (a DNS hosting service).
44
dnsmadeeasy          Interface with dnsmadeeasy.com (a DNS hosting service).
45
docker               manage docker containers
46
docker_image         manage docker images
47
easy_install         Installs Python libraries
48
ec2                  create, terminate, start or stop an instance in ec2, return
49
ec2_ami              create or destroy an image in ec2, return imageid
50
ec2_ami_search       Retrieve AWS AMI for a given operating system.
51
ec2_asg              Create or delete AWS Autoscaling Groups
52
ec2_eip              associate an EC2 elastic IP with an instance.
53
ec2_elb              De-registers or registers instances from EC2 ELBs
54
ec2_elb_lb           Creates or destroys Amazon ELB. - Returns information about
55
ec2_facts            Gathers facts about remote hosts within ec2 (aws)
56
ec2_group            maintain an ec2 VPC security group.
57
ec2_key              maintain an ec2 key pair.
58
ec2_lc               Create or delete AWS Autoscaling Launch Configurations
59
ec2_metric_alarm     Create/update or delete AWS Cloudwatch 'metric alarms'
60
ec2_scaling_policy   Create or delete AWS scaling policies for Autoscaling groups
61
ec2_snapshot         creates a snapshot from an existing volume
62
ec2_tag              create and remove tag(s) to ec2 resources.
63
ec2_vol              create and attach a volume, return volume id and device map.
64
ec2_vpc              configure AWS virtual private clouds
65
ejabberd_user        Manages users for ejabberd servers
66
elasticache          Manage cache clusters in Amazon Elasticache.
67
facter               Runs the discovery program `facter' on the remote system...
68
fail                 Fail with custom message
69
fetch                Fetches a file from remote nodes
70
file                 Sets attributes of files
71
filesystem           Makes file system on block device
72
fireball             Enable fireball mode on remote node
73
firewalld            Manage arbitrary ports/services with firewalld
74
flowdock             Send a message to a flowdock
75
gc_storage           This module manages objects/buckets in Google Cloud Storage.
76
gce                  create or terminate GCE instances
77
gce_lb               create/destroy GCE load-balancer resources
78
gce_net              create/destroy GCE networks and firewall rules
79
gce_pd               utilize GCE persistent disk resources
80
gem                  Manage Ruby gems
81
get_url              Downloads files from HTTP, HTTPS, or FTP to node
82
git                  Deploy software (or files) from git checkouts
83
github_hooks         Manages github service hooks.
84
glance_image         Add/Delete images from glance
85
group                Add or remove groups
86
group_by             Create Ansible groups based on facts
87
grove                Sends a notification to a grove.io channel
88
hg                   Manages Mercurial (hg) repositories.
89
hipchat              Send a message to hipchat
90
homebrew             Package manager for Homebrew
91
homebrew_cask        Install/uninstall homebrew casks.
92
homebrew_tap         Tap a Homebrew repository.
93
hostname             Manage hostname
94
htpasswd             manage user files for basic authentication
95
include_vars         Load variables from files, dynamically within a task.
96
ini_file             Tweak settings in INI files
97
irc                  Send a message to an IRC channel
98
jabber               Send a message to jabber user or chat room
99
jboss                deploy applications to JBoss
100
jira                 create and modify issues in a JIRA instance
101
kernel_blacklist     Blacklist kernel modules
102
keystone_user        Manage OpenStack Identity (keystone) users, tenants and role
103
layman               Manage Gentoo overlays
104
librato_annotation   create an annotation in librato
105
lineinfile           Ensure a particular line is in a file, or replace an existin
106
linode               create / delete / stop / restart an instance in Linode Publi
107
lldp                 get details reported by lldp
108
locale_gen           Creates of removes locales.
109
logentries           Module for tracking logs via logentries.com
110
lvg                  Configure LVM volume groups
111
lvol                 Configure LVM logical volumes
112
macports             Package manager for MacPorts
113
mail                 Send an email
114
modprobe             Add or remove kernel modules
115
mongodb_user         Adds or removes a user from a MongoDB database.
116
monit                Manage the state of a program monitored via Monit
117
mount                Control active and configured mount points
118
mqtt                 Publish a message on an MQTT topic for the IoT
119
mysql_db             Add or remove MySQL databases from a remote host.
120
mysql_replication    Manage MySQL replication
121
mysql_user           Adds or removes a user from a MySQL database.
122
mysql_variables      Manage MySQL global variables
123
nagios               Perform common tasks in Nagios related to downtime and notif
124
netscaler            Manages Citrix NetScaler entities
125
newrelic_deployment  Notify newrelic about app deployments
126
nexmo                Send a SMS via nexmo
127
nova_compute         Create/Delete VMs from OpenStack
128
nova_keypair         Add/Delete key pair from nova
129
npm                  Manage node.js packages with npm
130
ohai                 Returns inventory data from `Ohai'
131
open_iscsi           Manage iscsi targets with open-iscsi
132
openbsd_pkg          Manage packages on OpenBSD.
133
openvswitch_bridge   Manage Open vSwitch bridges
134
openvswitch_port     Manage Open vSwitch ports
135
opkg                 Package manager for OpenWrt
136
osx_say              Makes an OSX computer to speak.
137
ovirt                oVirt/RHEV platform management
138
pacman               Manage packages with `pacman'
139
pagerduty            Create PagerDuty maintenance windows
140
pause                Pause playbook execution
141
ping                 Try to connect to host and return `pong' on success.
142
pingdom              Pause/unpause Pingdom alerts
143
pip                  Manages Python library dependencies.
144
pkgin                Package manager for SmartOS
145
pkgng                Package manager for FreeBSD >= 9.0
146
pkgutil              Manage CSW-Packages on Solaris
147
portage              Package manager for Gentoo
148
portinstall          Installing packages from FreeBSD's ports system
149
postgresql_db        Add or remove PostgreSQL databases from a remote host.
150
postgresql_privs     Grant or revoke privileges on PostgreSQL database objects...
151
postgresql_user      Adds or removes a users (roles) from a PostgreSQL database..
152
quantum_floating_ip  Add/Remove floating IP from an instance
153
quantum_floating_ip_associate Associate or disassociate a particular floating IP with an i
154
quantum_network      Creates/Removes networks from OpenStack
155
quantum_router       Create or Remove router from openstack
156
quantum_router_gateway set/unset a gateway interface for the router with the specif
157
quantum_router_interface Attach/Dettach a subnet's interface to a router
158
quantum_subnet       Add/Remove floating IP from an instance
159
rabbitmq_parameter   Adds or removes parameters to RabbitMQ
160
rabbitmq_plugin      Adds or removes plugins to RabbitMQ
161
rabbitmq_policy      Manage the state of policies in RabbitMQ.
162
rabbitmq_user        Adds or removes users to RabbitMQ
163
rabbitmq_vhost       Manage the state of a virtual host in RabbitMQ
164
raw                  Executes a low-down and dirty SSH command
165
rax                  create / delete an instance in Rackspace Public Cloud
166
rax_cbs              Manipulate Rackspace Cloud Block Storage Volumes
167
rax_cbs_attachments  Manipulate Rackspace Cloud Block Storage Volume Attachments.
168
rax_clb              create / delete a load balancer in Rackspace Public Cloud...
169
rax_clb_nodes        add, modify and remove nodes from a Rackspace Cloud Load Bal
170
rax_dns              Manage domains on Rackspace Cloud DNS
171
rax_dns_record       Manage DNS records on Rackspace Cloud DNS
172
rax_facts            Gather facts for Rackspace Cloud Servers
173
rax_files            Manipulate Rackspace Cloud Files Containers
174
rax_files_objects    Upload, download, and delete objects in Rackspace Cloud File
175
rax_identity         Load Rackspace Cloud Identity
176
rax_keypair          Create a keypair for use with Rackspace Cloud Servers
177
rax_meta             Manipulate metadata for Rackspace Cloud Servers
178
rax_network          create / delete an isolated network in Rackspace Public Clou
179
rax_queue            create / delete a queue in Rackspace Public Cloud
180
rax_scaling_group    Manipulate Rackspace Cloud Autoscale Groups
181
rax_scaling_policy   Manipulate Rackspace Cloud Autoscale Scaling Policy
182
rds                  create, delete, or modify an Amazon rds instance
183
rds_param_group      manage RDS parameter groups
184
rds_subnet_group     manage RDS database subnet groups
185
redhat_subscription  Manage Red Hat Network registration and subscriptions using
186
redis                Various redis commands, slave and flush
187
replace              Replace all instances of a particular string in a file using
188
rhn_channel          Adds or removes Red Hat software channels
189
rhn_register         Manage Red Hat Network registration using the `rhnreg_ks' co
190
riak                 This module handles some common Riak operations
191
rollbar_deployment   Notify Rollbar about app deployments
192
route53              add or delete entries in Amazons Route53 DNS service
193
rpm_key              Adds or removes a gpg key from the rpm db
194
s3                   idempotent S3 module putting a file into S3.
195
script               Runs a local script on a remote node after transferring it..
196
seboolean            Toggles SELinux booleans.
197
selinux              Change policy and state of SELinux
198
service              Manage services.
199
set_fact             Set host facts from a task
200
setup                Gathers facts about remote hosts
201
shell                Execute commands in nodes.
202
slack                Send Slack notifications
203
slurp                Slurps a file from remote nodes
204
sns                  Send Amazon Simple Notification Service (SNS) messages
205
stackdriver          Send code deploy and annotation events to stackdriver
206
stat                 retrieve file or file system status
207
subversion           Deploys a subversion repository.
208
supervisorctl        Manage the state of a program or group of programs running v
209
svr4pkg              Manage Solaris SVR4 packages
210
swdepot              Manage packages with swdepot package manager (HP-UX)
211
synchronize          Uses rsync to make synchronizing file paths in your playbook
212
sysctl               Manage entries in sysctl.conf.
213
template             Templates a file out to a remote server.
214
twilio               Sends a text message to a mobile phone through Twilio.
215
typetalk             Send a message to typetalk
216
ufw                  Manage firewall with UFW
217
unarchive            Copies an archive to a remote location and unpack it
218
uri                  Interacts with webservices
219
urpmi                Urpmi manager
220
user                 Manage user accounts
221
virt                 Manages virtual machines supported by libvirt
222
vsphere_guest        Create/delete/manage a guest VM through VMware vSphere.
223
wait_for             Waits for a condition before continuing.
224
win_feature          Installs and uninstalls Windows Features
225
win_get_url          Fetches a file from a given URL
226
win_group            Add and remove local groups
227
win_msi              Installs and uninstalls Windows MSI files
228
win_ping             A windows version of the classic ping module.
229
win_service          Manages Windows services
230
win_stat             returns information about a Windows file
231
win_user             Manages local Windows user accounts
232
xattr                set/retrieve extended attributes
233
yum                  Manages packages with the `yum' package manager
234
zfs                  Manage zfs
235
zypper               Manage packages on SuSE and openSuSE
236
zypper_repository    Add and remove Zypper repositories