弄了近一个月的Ansible脚本部署工作，做了一些整理，列出了我常用的一些指令，与模块用法。Ansible 是个好东西，就是相关资料不多，列出这些基本模块用法可以覆盖大部分工作了。
安装
推荐包管理器（yum）
yum install -y ansible
# 在被控节点需要安装，（文件传输）
yum install -y libselinux-python
指令
Ad-Hoc
# 在所有主机上Do shell
ansible -i hosts all -m shell -a "systemctl restart docker"
# 信息采集+条件过滤
ansible nodes -m setup -a "filter=ansible_local"
# 限制主机执行+外部参数
ansible nodes -l 192.168.1.211 -m setup -a "filter=ansible_local" --extra-vars "ansible_sshpass=666"
常用模块
文件操作
# copy
- name: Write docker daemon.conf file
copy: src=daemon.json dest=/etc/docker/daemon.json mode=0440
# file
- name: Create config file directory
file: path={{ flannel_config_dir }} state=directory
- name: Verify docker config files exists
file: path={{ docker_config_dir }}/{{ item }} state=touch
- name: Clean up the flannel config file
file: path=/tmp/flannel-config.json state=absent
# 以下两个常组合使用
run_once: true
delegate_to: "{{ groups['etcd'][0] }}"
# template
- name: replace repo
template:
src: offline.repo.j2
dest: /etc/yum.repos.d/offline.repo
# lineinfile 用于配置文件修改
- name: Install http_proxy into docker(-network)
lineinfile: dest={{ docker_config_net }} regexp="^{{ docker_env_export }}http_proxy=" line="{{docker_env_export}}http_proxy={{ http_proxy }}"
when: http_proxy is defined
notify:
- restart docker
tags: configure
命令
# shell
- name: Create CA cert
shell: "cfssl gencert -initca ca-csr.json | cfssljson -bare ca -"
args:
chdir: "{{ etcd_cert_tempdir }}/"
# 当下面路径存在时不执行shell
creates: "{{ etcd_ca_file }}"
when: inventory_hostname == groups['masters'][0]
# command
- name: reload systemd
command: systemctl --system daemon-reload
# script
- name: Detect docker version
script: detect-docker-version.sh
register: docker_version
System
# debug
- name: Detected version
debug:
msg: "{{ docker_version.stdout | regex_replace('(\\r\\n)','') }}"
# service
- name: stop docker
service: name=docker state=stopped
# yum_repository
- name: Setup base repo
yum_repository:
name: offline
description: offline
baseurl: http://{{ offline_yum_repo }}/base
enabled: yes
gpgcheck: no
