1. 常用模块之万能模块

• ：shell模块支持管道符和重定向等命令，而在command模块上时不支持管道符和重定向的。
• command模块：不能使用管道符和重定向命令，因为command模块执行时不会经过shell处理，所以无法执行这些命令。其他命令都可以执行
• raw模块：执行环境中没有python也可以执行，或者说python2.几的版本中就需要使用raw模块，用法也与shell命令大同小异

1.2 模块示例

shell模块

[root@node1 ~]# ansible node1 -m shell -a 'ls /mnt/'
node1 | CHANGED | rc=0 >>
cdrom
hgfs  //意思时查看/mnt 目录下的所有文件
[root@node1 ~]# ansible node1 -m shell -a 'ls /mnt/ | grep "cdrom"' 
node1 | CHANGED | rc=0 >>
cdrom  //意思是将/mnt目录下名为cdrom的这个目录过滤出来
[root@node1 hgfs]# ansible node1 -m shell -a 'echo "redhat" >> /mnt/hgfs/test.txt '
node1 | CHANGED | rc=0 >>
将redhat追加到 /mnt/hgfs/test.txt 这个文件里面
[root@node1 hgfs]# ls
test.txt
[root@node1 hgfs]# cat test.txt 
redhat

1.3 command模块

[root@node1 ~]# ansible node1 -m command -a "ls /opt"
node1 | CHANGED | rc=0 >>
test2.txt //查看/opt目录下的文件[root@node1 opt]# ls
file.txt  test2.txt
[root@node1 opt]# ansible node1 -m command -a 'ls /opt | grep file.txt'
node1 | FAILED | rc=2 >>
/opt:
file.txt
test2.txtls: 无法访问'|': 没有那个文件或目录
ls: 无法访问'grep': 没有那个文件或目录
ls: 无法访问'file.txt': 没有那个文件或目录non-zero return code
当使用管道符的时候就会报错[root@node1 opt]# ansible node1 -m command -a "echo 'hello world > /opt/file.txt'"
node1 | CHANGED | rc=0 >>
hello world > /opt/file.txt
[root@node1 opt]# cat file.txt 
[root@node1 opt]#  //虽然没有报错但是file.txt文件里面却没有hello world这个内容

raw模块

[root@node1 opt]# ansible node1 -m raw -a 'echo "windows" > /opt/file.txt'
node1 | CHANGED | rc=0 >>
Shared connection to node1 closed.
[root@node1 opt]# cat file.txt 
windows //将windows重定向到file.txt这个文件里面[root@node1 opt]# ansible node1 -m raw -a 'date && ls /opt'
node1 | CHANGED | rc=0 >>
2021年 07月 17日 星期六 17:42:37 CST
file.txt  test2.txt
Shared connection to node1 closed.
先查看时间再查看/opt目录下的内容

常用模块之ping模块
ping模块主要是用于检查控制端的主机与指定的主机之间是否互通

[root@node1 ~]# ansible all -m ping
node2 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": false,"ping": "pong"
}
node1 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": false,"ping": "pong"
}  //主控端用主机清单里面的所有主机是否互通

2. 常用模块之yum模块

yum模块是用来管理软件的

参数	作用
present	安装软件
absent	安装最新版本
remove	卸载软件
install	安装软件

[root@node2 ~]# rpm -qa | grep httpd      
[root@node2 ~]#              //node2上没有httpd服务[root@node1 ~]# ansible node2 -m yum -a 'name=httpd state=present'  //安装httpd服务
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,"msg": "","rc": 0,[root@node2 ~]# rpm -qa | grep httpd  //到node2上查看是否安装了httpd服务
redhat-logos-httpd-81.1-1.el8.noarch
httpd-filesystem-2.4.37-21.module+el8.2.0+5008+cca404a3.noarch
httpd-2.4.37-21.module+el8.2.0+5008+cca404a3.x86_64
httpd-tools-2.4.37-21.module+el8.2.0+5008+cca404a3.x86_64

常用模块之script模块
是将主控端的script传给被控端上去执行

[root@node1 ~]# cat m.sh 
#!/bin/bash
x="我是node1上的脚本"
echo $x[root@node1 ~]# ansible node2 -m script -a "/root/m.sh &>/mnt/hgfs/test "
node2 | CHANGED => {"changed": true,"rc": 0,"stderr": "Shared connection to node2 closed.\r\n","stderr_lines": ["Shared connection to node2 closed."],"stdout": "","stdout_lines": []
}
[root@node2 hgfs]# pwd
/mnt/hgfs
[root@node2 hgfs]# cat test 
我是node1上的脚本[root@node1 ~]# ansible node2 -m script -a "creates=/root/m.sh /mnt/m.sh"
node2 | SKIPPED 
[root@node2 hgfs]# ls
m.sh  test  //因为node2中已经存在一个名为m.sh的文件[root@node1 ~]# ansible node2 -m script -a '/root/m.sh /mnt/m.sh'
node2 | CHANGED => {"changed": true,"rc": 0,"stderr": "Shared connection to node2 closed.\r\n","stderr_lines": ["Shared connection to node2 closed."],"stdout": "我是node1上的脚本\r\n","stdout_lines": ["我是node1上的脚本"]
}   //因为node2上的/mnt目录下有m.sh文件所以执行成功了。

参数	作用
chdir	指定一个远程主机的目录，在执行此脚本前会先进入到执行的目录中
creates	指定一个远程主机中的文件，当指定的文件存在时，就不执行对应的脚本
removes	指定一个远程主机中的文件，当指定的文件按不存在时，就不执行对应的脚本。

常用模块之template模块
可以生成模板并传至其他主机上

参数	作用
mode	设置远程节点上的template文件的权限类似于chmod
owner	设置远程节点上的template文件所属的用户
group	设置远程节点上的template文件所诉的组

常用模块之copy模块
是将本机或其他主机上的文件复制到指定的位置

参数	作用
backup	复制当前主机的文件到其他主机上，并对源文件进行备份
src、dest	src是写当前主机的要复制某个路径下的文件，dest是写入到指定的其他主机上的某个路径，可以是绝对路径也可以是相对路径
content	把目录设置成特定的值
force	其他主上有该文件，内容不同时等于yes时强制复制，等于no时，除非其他主指定位置上没有该文件按，才会复制否则不会复制

[root@node2 hgfs]# ls
test[root@node1 ~]# ansible node2 -m copy -a 'src=/root/m.sh dest=/mnt/hgfs/'
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,
//将node1上面的m.sh文件复制到node2;上的/mnt/hgfs/下
[root@node2 hgfs]# ls
m.sh  test[root@node1 ~]# ansible node2 -m copy -a 'src=/root/m.sh backup=yes  dest=/mnt/hgfs/'
node2 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": false,[root@node2 hgfs]# cat m.sh 
[root@node2 hgfs]# 
node2上的m.sh文件里面没有内容[root@node1 ~]# ansible node2 -m copy -a "src=/root/m.sh force=yes dest=/mnt/hgfs/m.sh"
node2 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": false,[root@node2 hgfs]# cat m.sh 
#!/bin/bash
x="我是node1上的脚本"
echo $x
因为node2上面有m.sh这个文件所以将node1同名文件里面的内容强制覆盖到node2同名文件里。[root@node2 hgfs]# cat test 
[root@node2 hgfs]# [root@node1 ~]# ansible node2 -m copy -a "content='hello world\n' dest=/mnt/hgfs/test"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,
[root@node2 hgfs]# cat test 
hello world
将hello world放到node2/mnt/hgfs/test目录下

###常用命令之service模块
启动、重启、停止和重启服务

[root@node1 ~]# ansible node2 -m service -a "name=httpd state=started"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},[root@node2 ~]# systemctl status httpd
● httpd.service - The Apache HTTP ServerLoaded: loaded (/usr/lib/systemd/system/httpd.service; disabled>Active: active (running) since Sat 2021-07-17 20:57:16 CST; 13s>Docs: man:httpd.service(8)
开启httpd服务[root@node1 ~]# ansible node2 -m service -a "name=httpd state=stopped"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},[root@node2 ~]# systemctl status httpd
● httpd.service - The Apache HTTP ServerLoaded: loaded (/usr/lib/systemd/system/httpd.service; disabled>Active: inactive (dead)Docs: man:httpd.service(8
关闭httpd服务[root@node1 ~]# ansible node2 -m service -a "name=httpd state=restarted"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"
重启httpd服务[root@node1 ~]# ansible node2 -m service -a "name=httpd enabled=yes"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"
设置开机自启httpd服务

###常用命令之systemd模块
这个模块和service模块用法相似唯一不同的是这个模块可以设置masked状态，当masked=yes开启时，若服务是关闭状态则不能开启，masked是关闭时，服务能正常开启

[root@node1 ~]# ansible node2 -m systemd -a "name=httpd state=stopped"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"
关闭node2上的httpd服务[root@node1 ~]# ansible node2 -m systemd -a "name=httpd masked=yes state=started"
node2 | FAILED! => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": false,"msg": "Unable to start service httpd: Failed to start httpd.service: Unit httpd.service is masked.\n"
}
当我们开启masked时httpd服务就开启不成功[root@node1 ~]# ansible node2 -m systemd -a "name=httpd masked=no state=started"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,
当我们关闭masked时，服务便能正常开启。

###常用模块之user模块
是用来管理用户的

[root@node1 ~]# ansible node2 -m group -a "name=tom state=present gid=1001 "
ansible node2 -m user -a "name=tom uid=1001 group=1001 state=present"
创建一个名为tom的用户并指定uid和gid[root@node1 ~]# ansible node2 -m user -a "name=tom state=absent remove=yes"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,"force": false,"name": "tom",
删除tom用户并且删除其家目录
[root@node2 ~]# ll /home/
总用量 0
drwx------. 2 admin admin 62 7月  10 18:08 admin
drwx------  2  1001  1001 62 7月  15 19:02 tom[root@node2 ~]# ll /home/
总用量 0
drwx------. 2 admin admin 62 7月  10 18:08 admin

常用模块之group模块
是用来管理组的

[root@node1 ~]# ansible node2 -m group -a "name=apache gid=500 state=present"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,"gid": 500,"name": "apache","state": "present","system": false
}[root@node2 ~]# tail -3 /etc/group
rngd:x:992:
admin:x:1000:
apache:x:500:
创建出一个名为apache的500的组[root@node1 ~]# ansible node2 -m group -a "name=apache state=absent"node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,"name": "apache",
删除这个组

###常用模块之file模块

参数	作用
mode	设置远程节点上的文件的权限类似于chmod
owner	设置远程节点上的文件所属的用户
group	设置远程节点上的文件所诉的组

[root@node1 ~]# ansible node2 -m file -a "path=/home/zz owner=root mode=711"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"
修改zz这个用户的属主为root以及权限为属主有所有权限，属组和其他用户有执行权限[root@node2 home]# ll /home/
总用量 0
drwx------. 2 admin admin 62 7月  10 18:08 admin
drwx--x--x  2 root  zz    62 7月  18 10:34 zz

###常用模块之cron模块
是用于管理计划任务的

参数	作用
present	表示添加
absent	表示移除
job	后面跟要执行的内容
minute	表示分钟
hour	小时
day	天
weekday	周
month	月
disabled	使计划任务失效，但一定要写全任务的name,minute,hour,month,weekday,job否则只是修改原计划的内容
backup	backup=yes表示修改或删除对应计划任务时，会先进行备份

[root@node1 ~]# ansible node2 -m cron -a "minute='*/1' job='/usr/bin/echo hello >> /mnt/hgfs/test' name=test"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,"envs": [],"jobs": ["test"]
每隔一分钟向 /mnt/hgfs/test文件追加hello。[root@node1 ~]# ansible node2 -m cron -a "name=test state=absent"node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},
删除计划任务[root@node1 ~]# ansible node2 -a 'crontab -l'
node2 | CHANGED | rc=0 >>
删除成功

###常用模块之setup模块
是用来收集其他主机的信息

[root@node1 ~]# ansible node2 -m setup
node2 | SUCCESS => {"ansible_facts": {
查看node2主机上的信息

###blockinfile模块的使用
可以在指定都文件按中插入一段文本

参数	作用
path	指定要操作的文件
block	指定要写入的文本，此参数和content都可用，作用相同
marker	会替换开始和结束的标记
state	有两个可选的值为present、absent。present作用是当标记的文本存在时会更新没有就写入，absent作用是删除标记的文本
insertafter	默认插入到文本的末尾
create	当操作的文件不存在时，是否要创建文件默认情况下为false
backup	在文件修改前对文件进行备份

[root@node1 ~]# ansible node2 -m blockinfile -a "path=/mnt/hgfs/test block='hello linux'"
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,"msg": "Block inserted"
}
在node2的/mnt/hgfs/test文件里面添加hello linux
[root@node2 hgfs]# cat test 
# BEGIN ANSIBLE MANAGED BLOCK
hello linux[root@node1 ~]# ansible node2 -m blockinfile -a "path=/mnt/hgfs/test block='hello world\n' marker='#{marker} hello to linux' "
node2 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,"msg": "Block inserted"
}
在test文件的 hello linux的后面添加一行hello world

部署lamp架构

主机	IP地址
node1(ansible)	192.168.182.137
node2(httpd)	192.168.182.138
node3(mysql)	192.168.182.139
node4(php)	192.168.182.140

1.首先安装apache服务,并设置开机自启

[root@node1 ~]# ansible node2 -m yum -a "name=httpd state=present enabled=yes"
[root@node1 ~]# ansible node2 -m service -a "name=httpd state=started"

2.在/etc/httpd/conf/httpd.conf添加下面几行内容
AddType application/x-httpd-php .php # 让httpd支持PHP
DirectoryIndex index.html index.php # 添加默认首页

3.安装MySQL,并设置开机自启

[root@node1 ~]# ansible node3 -m yum -a "name=mariadb-server state=present [root@node1 ~]# ansible node3 -m service -a "name=mariadb enabled=yes"[root@node1 ~]# ansible node3 -m yum -a "name=mariadb-server state=present " //开启数据库服务

4.安装PHP

[root@node1 ~]# ansible node4 -m yum -a "name=php-* state=present"

5.关闭防火墙和selinux

[root@node1 ~]# ansible all -m shell -a "systemctl stop firewalld ; systemctl disable firewalld"[root@node1 ~]# ansible all -m shell -a "setenforce 0 ; getenforce 0 "

6.修改apache配置文件

[[root@node1 ~]# ansible node2 -m blockinfile -a "path=/etc/httpd/conf/httpd.conf path='index.html' 'marker='#{mark} DirectoryIndex to index.html "
192.168.182.138 | CHANGED | rc=0 >>

[root@node1]# ansible node2 -m lineinfile -a 'path=/etc/httpd/conf/httpd.conf insertafter="AddType application/x-gzip.gz.tgz" line="AddType application/x-httpd-php .php"'
192.168.182.138 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "backup": "", "changed": true, "msg": "line added"}[root@node1]# ansible node2 -m lineinfile -a 'path=/etc/httpd/conf/httpd.conf insertafter="AddType application/x-gzip .gz.tgz" line="AddType application/x-httpd-php-source.phps"'*192.168.182.138 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "backup": "", "changed": true, "msg": "line added"}[root@node1]# ansible node2 -m lineinfile -a 'path=/etc/httpd/conf/httpd.conf insertafter="# LoadModule foo_module modules/mod_foo.so" line="LoadModule proxy_module modules/mod_proxy.so"'*192.168.182.138 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "backup": "", "changed": true, "msg": "line added"}[root@node1]# ansible node2 -m lineinfile -a 'path=/etc/httpd/conf/httpd.conf insertafter="# LoadModule foo_module modules/mod_foo.so" line="LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so"'*192.168.182.138 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "backup": "", "changed": true, "msg": "line added"}

7.将文件传输到apache服务器

[root@node1]# vim /root/httpd.conf[root@node1]# cat /root/httpd.conf<VirtualHost *:80>DocumentRoot "/var/www/html/"ServerName  www.xyz.comProxyRequests OffProxyPassMatch ^/(.*.php)$ fcgi://192.168.182.140:9000/www/html/$1</VirtualHost>[root@node1]# ansible node2 -m copy -a 'src=/root/httpd.conf dest=/etc/httpd/conf.d/'192.168.182.138 | CHANGED => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": true,"checksum": "2f62d8c0ccd379743622054a99c758a6423f8ec8","dest": "/etc/httpd/conf.d/httpd.conf","gid": 0,"group": "root","md5sum": "604f9a468f676a906d01bb7d1cb72645","mode": "0644","owner": "root","secontext": "system_u:object_r:httpd_config_t:s0","size": 187,"src": "/root/.ansible/tmp/ansible-tmp-1626679607.87-66439-218859208379640/source","state": "file","uid": 0}

8.修改PHP配置文件

[root@node1]# ansible node4 -m lineinfile -a 'path=/etc/php-fpm.d/www.conf regexp="listen = /usr" line="listen = 0.0.0.0:9000"'192.168.182.140 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "backup": "", "changed": true, "msg": "line added"}[root@node1]# ansible node4 -m lineinfile -a 'path=/etc/php-fpm.d/www.conf regexp="listen.allowed_clients = 127.0.0.1" line="listen.allowed_clients = 192.168.182.138"'192.168.182.140 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "backup": "", "changed": true, "msg": "line added"}

9.将PHP测试文件放置PHP服务器

[root@node1 ~]# ansible node4 -m copy -a 'src=index.php dest=/www/html/'192.168.182.140 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "changed": true, "checksum": "012ee25cceff745e681fbb3697a06f3712f55554", "dest": "/www/html/index.php", "gid": 0,

10.将源码放在PHP服务端的/var/www/html目录下

[root@node1 html]# vim /etc/httpd/conf/httpd.conf# probably should define those extensions to indicate media types:#AddType application/x-compress .ZAddType application/x-gzip .gz .tgzAddType application/x-httpd-php-source .phpsAddType application/x-httpd-php .phpProxyrequests OffProxyPassMatch ^/(.*\.php)$ fcgi://192.168.182.137:9000/var/www/html/$1

11.修改PHP服务监听方式

[root@node4 ~]# vim /etc/php-fpm.d/www.conf; Note: This value is mandatory.listen = /run/php-fpm/www.socklisten = 9000; Set listen(2) backlog.; Default Value: 511;listen.backlog = 511

12.重启服务MySQL、PHP、apache

[root@node1]# ansible node2 -m service -a 'name=httpd state=restarted'192.168.182.138 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "changed": true, "name": "httpd", "state": "started", "status": {[root@node1]# ansible node4 -m service -a 'name=php-fpm state=restarted'192.168.182.140 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "changed": true, "name": "php-fpm", "state": "started", "status": {[root@node1]# ansible node3-m service -a 'name=mariadb state=restarted'192.168.182.139 | CHANGED =>   {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "changed": true, "name": "mariadb", "state": "started", "status": {

12.重启之后,用apache主机的IP地址访问。