搭建环境

• 安装Ansible

yum -y install ansible

• 配置主机清单

 vim /etc/ansible/hosts

定义主机清单

• 检查主机清单是否添加成功

[root@Client ansible]#ansible all --list-hosts
  hosts (3):
    host1.centos7
    host2.centos7
    host3.centos7
[root@Client ansible]#ansible lb --list-hosts
  hosts (1):
    host1.centos7
[root@Client ansible]#ansible tc --list-hosts
  hosts (2):
    host2.centos7
    host3.centos7
[root@Client ansible]#

• 基于ssh做无密钥认证

[root@Client ansible]#ssh-keygen -t rsa -P ''
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
02:6e:ab:d7:9a:35:54:25:7b:e6:2d:f7:c8:d8:aa:c1 root@Client.centos7
The key's randomart image is:
+--[ RSA 2048]----+
|        . .      |
|         +       |
|    .   o o      |
|   . . . + .     |
|    o o S o o    |
|   . o o   * o   |
|    ..o E . + .  |
|   ..o.. . .     |
|  ..o.  ...      |
+-----------------+
[root@Client ansible]#ssh-copy-id -i ~/.ssh/id_rsa.pub root@host1
The authenticity of host 'host1 (192.168.10.11)' can't be established.
ECDSA key fingerprint is 9a:7d:a7:45:06:e0:7f:f2:d5:9c:35:05:8c:c2:f7:e9.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), 
to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now 
it is to install the new keys
root@host1's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@host1'"
and check to make sure that only the key(s) you wanted were added.

[root@Client ansible]#ssh-copy-id -i ~/.ssh/id_rsa.pub root@host2
...
[root@Client ansible]#ssh-copy-id -i ~/.ssh/id_rsa.pub root@host3
...

• 测试 ssh 链接

• 执行简单的ansible命令测试能否管控远程主机

[root@Client ansible]#ansible all -m shell -a "ifconfig ens33" 

• 同步时间

创建角色

需要创建三个角色分别为nginx 和 tomcat 以及 jdk

• 编写playbook剧本nt.yml :

• 编写nginx角色的tasks :

• 编写nginx角色的配置文件 :

• 编写nginx角色的handlers :

• 测试一下nginx角色能否成执行：

• 在lb主机上查看进程和端口是否存在：

• 编辑tomcat角色的tasks :

• 编写jdk角色的tasks :

• 编写jdk角色的files/java.sh :

• 编写jdk角色的vars/main.yml :

完善我们的剧本nt.yml

执行我们的剧本

[root@Client ansible]#ansible-playbook nt.yml   

PLAY [lb] **********************************************************************

TASK [setup] *******************************************************************
ok: [host1.centos7]

TASK [nginx : install nginx] ***************************************************
ok: [host1.centos7]

TASK [nginx : install conf] ****************************************************
ok: [host1.centos7]

TASK [nginx : start nginx] *****************************************************
ok: [host1.centos7]

PLAY [tc] **********************************************************************

TASK [setup] *******************************************************************
ok: [host3.centos7]
ok: [host2.centos7]

TASK [jdk : install openjdk] ***************************************************
changed: [host2.centos7]
changed: [host3.centos7]

TASK [jdk : install evn file] **************************************************
changed: [host3.centos7]
changed: [host2.centos7]

TASK [tomcat : install package] ************************************************
changed: [host3.centos7] => (item=[u'tomcat', u'tomcat-admin-webapps', u'tomcat-webapps', u'tomcat-docs-webapp'])
changed: [host2.centos7] => (item=[u'tomcat', u'tomcat-admin-webapps', u'tomcat-webapps', u'tomcat-docs-webapp'])

TASK [tomcat : start tomcat] ***************************************************
changed: [host3.centos7]
changed: [host2.centos7]

PLAY RECAP *********************************************************************
host1.centos7              : ok=4    changed=0    unreachable=0    failed=0   
host2.centos7              : ok=5    changed=4    unreachable=0    failed=0   
host3.centos7              : ok=5    changed=4    unreachable=0    failed=0   

[root@Client ansible]#

最终测试

在浏览器里输入www.grh.io