安装ansible
测试机器环境
3台centos7.5
ip1:192.168.12.14
ip2:192.168.12.15
ip3:192.168.12.16
ip1为主服务器安装控制端
默认yum安装就好，命令如下：
[root@wsn-ansible1 ~]# yum -y install ansible
[root@wsn-ansbile1 ~]# ansible --version
ansible 2.7.2
config file = /etc/ansible/ansible.cfg
configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
ansible python module location = /usr/lib/python2.7/site-packages/ansible
executable location = /bin/ansible
python version = 2.7.5 (default, Jul 13 2018, 13:06:57) [GCC 4.8.5 20150623 (Red Hat 4.8.5-28)]
Ansible配置及测试
ansible的主机和组的默认配置在/etc/ansible/hosts，我们可以不用默认配置直接建立一个新的配置，使用的时候指定就可以。
建立一个放ansible配置的目录和文件
[root@wsn-ansbile1 ~]# mkdir -p /root/ansible_test
[root@wsn-ansbile1 ~]# cd /root/ansible_test/
[root@wsn-ansbile1 ansible_test]# touch host.wsn
[root@wsn-ansbile1 ansible_test]# vim host.wsn
内容如下：
[webservers]
192.168.12.15
192.168.12.16
[root@wsn-ansbile1 ansible_test]# ansible -i host.wsn 192.168.12.15 -m ping -k
SSH password:
192.168.12.15 | SUCCESS => {
"changed": false,
"ping": "pong"
}
[root@wsn-ansible1 ansible_test]# ansible -i host.wsn webservers -m ping -k
SSH password:
192.168.12.15 | SUCCESS => {
"changed": false,
"ping": "pong"
}
192.168.12.16 | SUCCESS => {
"changed": false,
"ping": "pong"
}
由于主控机器和被控机器没有建立免密码登录所以要加上-k参数，提供root的密码，-i参数是指定主机和组的配置，webservers是组名。
配置Linux免密码登录
首先关闭selinux不然会出现问题命令如下：
[root@wsn-ansible1 ~]# setenforce 0
上面的命令是临时关闭，建议永久关闭
[root@wsn-ansible1 ~]# vim /etc/selinux/config
SELINUX=disabled 改成disabled
创建免密码密钥
[root@wsn-ansible1 ~]# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:LQB7G8BSr4KNNbouZ0x0BY8oxXK3FtKk9tr5dsQ7Z7M root@wsn-ansible1
The key's randomart image is:
+---[RSA 2048]----+
| ..=*. |
|..=o=B. |
|.o*+o+* |
| O.o+o + . |
|+.ooo ..S . |
| ..+ . o. |
|.o. o . . |
|o + .. + + |
|.+ ... +Eo |
+----[SHA256]-----+
[root@wsn-ansible1 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.12.14
/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host '192.168.12.14 (192.168.12.14)' can't be established.
ECDSA key fingerprint is SHA256:GDKal+vbb4MrmyKyw3EtZBUAtlRnKI/FAxRE1Z+fa+E.
ECDSA key fingerprint is MD5:6f:af:69:ef:ff:34:a6:89:0e:88:34:21:8a:0a:0f:38.
Are you sure you want to continue connecting (yes/no)? yes
/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.12.14's password:
Number of key(s) added: 1
Now try logging into the machine, with: "ssh 'root@192.168.12.14'"
and check to make sure that only the key(s) you wanted were added.
[root@wsn-ansible1 ~]# ssh 192.168.12.14
Last login: Tue Nov 20 10:43:14 2018
[root@wsn-ansible1 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.12.15
/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.12.15's password:
Number of key(s) added: 1
Now try logging into the machine, with: "ssh 'root@192.168.12.15'"
and check to make sure that only the key(s) you wanted were added.
[root@wsn-ansible1 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.12.16
/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.12.16's password:
Number of key(s) added: 1
Now try logging into the machine, with: "ssh 'root@192.168.12.16'"
and check to make sure that only the key(s) you wanted were added.
[root@wsn-ansible1 ~]# ssh 192.168.12.15
Last failed login: Tue Nov 20 11:01:23 CST 2018 from 192.168.12.14 on ssh:notty
There was 1 failed login attempt since the last successful login.
Last login: Tue Nov 20 10:47:45 2018 from 192.168.12.14
[root@wsn-absible2 ~]# exit
logout
Connection to 192.168.12.15 closed.
[root@wsn-ansible1 ~]# ssh 192.168.12.16
Last login: Tue Nov 20 10:47:45 2018 from 192.168.12.14
[root@wsn-absilbe3 ~]# exit
logout
Connection to 192.168.12.16 closed.
