Ansible 是一个配置管理和应用部署工具，功能类似于目前业界的配置管理工具 Chef,Puppet,Saltstack。Ansible 是通过 Python 语言开发。Ansible 平台由 Michael DeHaan 创建，他同时也是知名软件 Cobbler 与 Func 的作者。Ansible 的第一个版本发布于 2012 年 2 月。Ansible 默认通过 SSH 协议管理机器，所以 Ansible 不需要安装客户端程序在服务器上。您只需要将 Ansible 安装在一台服务器，在 Ansible 安装完后，您就可以去管理控制其它服务器。不需要为它配置数据库，Ansible 不会以 daemons 方式来启动或保持运行状态。Ansible 可以实现以下目标：
自动化部署应用
自动化管理配置
自动化的持续交付
自动化的（AWS）云服务管理。
根据 Ansible 官方提供的信息，当前使用 Ansible 的用户有：evernote、rackspace、NASA、Atlassian、twitter 等。
1、分别配置各自主机名，并配置hosts文件（能互相解析）
8.20、8.39、8.40
#vim /etc/hosts
# hostname node1.chinasoft.com
vim /etc/hosts
192.168.8.20 node1.chinasoft.com node1
192.168.8.39 node2.chinasoft.com node2
2、在ansible服务器8.40上配置ssh免密码访问
# ssh-keygen
# ssh-copy-id -i .ssh/id_rsa.pub root@node1.chinasoft.com
# ssh-copy-id -i .ssh/id_rsa.pub root@node2.chinasoft.com
测试是否成功
# ssh node1.chinasoft.com 'date';date
# ssh node2.chinasoft.com 'date';date
3、安装ansible服务
# yum install -y epel-relase
# yum install -y ansible1.9
配置服务器组
# vim /etc/ansible/hosts
[webservers]
node1.chinasoft.com
node2.chinasoft.com
[dbserver2]
node1.chinasoft.com
node2.chinasoft.com
4、常用服务及模块的使用
查看命令的帮助文档，如copy
# ansible-doc -s copy
简单的命令测试：
①ping响应
# ansible all -m ping
node2.chinasoft.com | success >> {
"changed": false,
"ping": "pong"
}
node1.chinasoft.com | success >> {
"changed": false,
"ping": "pong"
}
②各服务器时间
# ansible all -a 'date'
node2.chinasoft.com | success | rc=0 >>
Mon Apr 18 20:43:48 CST 2016
node1.chinasoft.com | success | rc=0 >>
Mon Apr 18 20:43:48 CST 2016
③文件拷贝
# ansible dbservers -m copy -a "src=/etc/fstab dest=/root/fstab"
验证拷贝是否成功
# ansible dbservers -a "ls /root"
node1.chinasoft.com | success | rc=0 >>
anaconda-ks.cfg
fstab
install.log
install.log.syslog
node2.chinasoft.com | success | rc=0 >>
anaconda-ks.cfg
fstab
install.log
install.log.syslog
④添加计划任务
# ansible all -m cron -a 'name="custom job" minute=*/3 hour=* day=* month=* weekday=* job="/usr/sbin/ntpdate 192.168.8.102"'
node2.chinasoft.com | success >> {
"changed": false,
"jobs": [
"customjob",
"custom job"
]
}
node1.chinasoft.com | success >> {
"changed": true,
"jobs": [
"custom job"
]
}
# ansible all -a "crontab -l"
node1.chinasoft.com | success | rc=0 >>
#Ansible: custom job
*/3 * * * * /usr/sbin/ntpdate 192.168.8.102
node2.chinasoft.com | success | rc=0 >>
#Ansible: customjob
*/3 * * * * /usr/sbin/ntpdate 192.168.8.102
④在节点中添加组
# ansible-doc -s group
action: group
gid # Optional `GID' to set for the group.
name= # Name of the group to manage.
state # Whether the group should be present or not on the remote host.
system # If `yes', indicates that the group created is a system group.
添加mysql组
# ansible all -m group -a "gid=306 system=yes name=mysql"
node1.chinasoft.com | success >> {
"changed": true,
"gid": 306,
"name": "mysql",
"state": "present",
"system": true
}
node2.chinasoft.com | success >> {
"changed": true,
"gid": 306,
"name": "mysql",
"state": "present",
"system": true
}
# ansible all -a "tail -1 /etc/group"
node2.chinasoft.com | success | rc=0 >>
mysql:x:306:
node1.chinasoft.com | success | rc=0 >>
mysql:x:306:
⑥yum命令的使用
# ansible-doc -s yum
action: yum
conf_file # The remote yum configuration file to use for the transaction.
disable_gpg_check # Whether to disable the GPG checking of signatures of packages being installed. Has an effect only if state is `present' or `latest'.
disablerepo # `Repoid' of repositories to disable for the install/update operation. These repos will not persist beyond the transaction. When specifying multiple repos, separ
enablerepo # `Repoid' of repositories to enable for the install/update operation. These repos will not persist beyond the transaction. When specifying multiple repos, separa
list # Various (non-idempotent) commands for usage with `/usr/bin/ansible' and `not' playbooks. See examples.
name= # Package name, or package specifier with version, like `name-1.0'. When using state=latest, this can be '*' which means run: yum -y update. You can also pass a u
state # Whether to install (`present', `latest'), or remove (`absent') a package.
update_cache # Force updating the cache. Has an effect only if state is `present' or `latest'.
安装httpd软件
# ansible all -m yum -a "name=httpd state=present"
查看是否安装了httpd
# ansible all -a "rpm -q httpd"
node1.chinasoft.com | success | rc=0 >>
httpd-2.2.15-47.el6.centos.4.x86_64
node2.chinasoft.com | success | rc=0 >>
httpd-2.2.15-47.el6.centos.4.x86_64
⑦查看服务状态
# ansible all -a "service httpd status"
node2.chinasoft.com | FAILED | rc=3 >>
httpd 已停
node1.chinasoft.com | FAILED | rc=3 >>
httpd 已停
启动httpd服务，并设置开机自启动
# ansible all -m service -a "state=started enabled=yes name=httpd"
node1.chinasoft.com | success >> {
"changed": true,
"enabled": true,
"name": "httpd",
"state": "started"
}
node2.chinasoft.com | success >> {
"changed": true,
"enabled": true,
"name": "httpd",
"state": "started"
}
# ansible all -a "service httpd status"
node1.chinasoft.com | success | rc=0 >>
httpd (pid 2575) 正在运行...
node2.chinasoft.com | success | rc=0 >>
httpd (pid 2371) 正在运行...
校验是否开机自启动
# ansible all -a "chkconfig --list httpd"
node1.chinasoft.com | success | rc=0 >>
httpd 0:off1:off2:on3:on4:on5:on6:off
node2.chinasoft.com | success | rc=0 >>
httpd 0:off1:off2:on3:on4:on5:on6:off
5、剧本的简单使用
①通过脚本添加组
# vim test.yaml
- hosts: all
remote_user: root
tasks:
- name: add a group
group: gid=1000 name=testgroup1 system=no
- name: execute a commond
command: /bin/date
执行剧本
# ansible-playbook test.yaml
PLAY [all] ********************************************************************
GATHERING FACTS ***************************************************************
ok: [node2.chinasoft.com]
ok: [node1.chinasoft.com]
TASK: [add a group] ***********************************************************
changed: [node2.chinasoft.com]
changed: [node1.chinasoft.com]
TASK: [execute a commond] *****************************************************
changed: [node2.chinasoft.com]
changed: [node1.chinasoft.com]
PLAY RECAP ********************************************************************
node1.chinasoft.com : ok=3 changed=2 unreachable=0 failed=0
node2.chinasoft.com : ok=3 changed=2 unreachable=0 failed=0
②通过脚本修改httpd配置文件，修改端口为8080
# vim web.yaml
- hosts: all
remote_user: root
tasks:
- name: ensure apache latest version
yum: state=latest name=httpd
- name: apache configure file
copy: src=/root/httpd.conf dest=/etc/httpd/conf/httpd.conf force=yes
notify:
- restart httpd
handlers:
- name: restart httpd
service: name=httpd state=restarted
执行剧本
# ansible-playbook web.yaml