cobbler 批量安装系统
ansible 简单配置之inventory(清单)
-
免秘钥登录系统
ssh-keygen ssh-copy-id -i id_rsa.pub xzdnsaipso@111.11.252.132 iptables -I INPUT -s 111.11.208.2 -p tcp --dport 22 -j ACCEPT
-
配置文件
vim /etc/ansible/hosts
ansible modules (模块)
-
参考：
https://docs.ansible.com/ansible/latest/modules/modules_by_category.html
-
commad （命令）
/usr/local/bin/ansible DNS-cache -m command -a "df -h" /usr/local/bin/ansible DNS-cache -m command -a "free -g" /usr/local/bin/ansible all -m command -a "ifconfig eth0" -
shell （管道）
/usr/local/bin/ansible DNS -m shell -a "ifconfig |grep eth*" /usr/local/bin/ansible DNS -m shell -a "ifconfig eth0 | awk 'NR==2'" /usr/local/bin/ansible DNS -m shell -a "ifconfig eth0 | awk 'NR==2';df -h;free -g;w" -
yum 安装软件，仅限root用户
/usr/local/bin/ansible other -m yum -a "name=httpd state=installed" /usr/local/bin/ansible other -m shell -a "rpm -qa|grep httpd" /usr/local/bin/ansible other -m yum -a "name=httpd state=removed" -
copy (copy文件 向文件写东西)
ansible-doc copy #查看copy模块用法 /usr/local/bin/ansible other -m copy -a "src=/etc/hosts dest=/tmp/test" /usr/local/bin/ansible other -m command -a "ls /tmp/test -l" /usr/local/bin/ansible other -m command -a "cat /tmp/test" /usr/local/bin/ansible other -m copy -a "src=/etc/hosts dest=/tmp/test.txt owner=alipms group=alipms mode=0600" /usr/local/bin/ansible other -m copy -a "src=/etc/hosts dest=/tmp/test backup=yes" /usr/local/bin/ansible other -m copy -a "content='ansible 123 com' dest=/tmp/test backup=yes" -
service 启动服务
/usr/local/bin/ansible other -m service -a "name=httpd state=started|stopped|restarted|reloaded enabled=yes" enabled 是否让服务器开启自动启动 /usr/local/bin/ansible other -m copy -a "content='This is ansible test.' dest=/var/www/html/index.html" /usr/local/bin/ansible other -m service -a "name=httpd state=restarted" script (直接执行shell脚本，但是少用)
/usr/local/bin/ansible other -m script -a "script.sh"-
file 创建文件和目录
/usr/local/bin/ansible other -m file -a "path=/tmp/file_test state=directory" /usr/local/bin/ansible other -m file -a "path=/tmp/file_test/test.txt state=touch" path recurse 递归 state directory 在远端创建目录 touch 在远端创建文件 link 创建软连接文件 hard 创建硬连接文件 mode 设置文件或目录券商 owner group group（root用户）
/usr/local/bin/ansible other -m group -a "name=gps gid=888"-
user（root用户）
/usr/local/bin/ansible other -m user -a "name=test uid=999 group=888 shell=/sbin/nologin create_home=no" /usr/local/bin/ansible other -m user -a "name=test uid=999 group=888 shell=/sbin/nologin state=absen" 删除用户 uid group groups 指定附加组 password 给用户添加密码 shell 指定用户登录的shell create_home 是否创建家目录 ----------------------------------------------------------------------- echo 123.com | openssl passwd -salt 'ok.' -stdin ; echo 123.com | openssl passwd -salt 'no.' -stdin $1$123456$ubeM.omJvWFVdZGIzK6BV. /usr/local/bin/ansible other -m user -a "name=xlm password='$1$NWCVGKb/$uozMg09Bsz2FNGjW72HGA.'" 创建xlm用户并设定密码为：123.com -
cron
ansible-doc cron 查看帮助 /usr/local/bin/ansible other -m cron -a "minute=* hour=* day=* month=* weekday=* job='/bin/sh test.sh'" /usr/local/bin/ansible other -m cron -a "job='/bin/sh test.sh'" /usr/local/bin/ansible other -m cron -a "name='ansible add crontd.' job='/bin/sh test.sh'" /usr/local/bin/ansible other -m cron -a "name='ansible add crontd.' job='/bin/sh test.sh' state=absent" /usr/local/bin/ansible other -m cron -a "name='ansible add crontd.' job='/bin/sh test.sh' disabled=yes" 注释定时任务 -
mount （挂载目录设备仅限root用户）
/usr/local/bin/ansible other -m mount -a "path=/backup src=111.11.252.86:/data fstype=nfs opts=defaults state=present" 只写配置文件 /etc/fstab，并不会挂载 /usr/local/bin/ansible other -m mount -a "path=/backup src=111.11.252.86:/data fstype=nfs opts=defaults state=mounted" state absent 卸载设备并清理写入到/etc/fstab配置 mounted 挂载设备并将配置写入/etc/fstab配置 present 仅将挂载配置写入到/etc/fstab配置，并不会挂载（鸡肋，不用） unmounted 临时卸载，不会清理/etc/fstab配置
- 检查主机是否ping
/usr/local/bin/ansible all -m ping /usr/local/bin/ansible DNS-cache -m ping /usr/local/bin/ansible 111.11.252.86 -m ping
