ansible:   yum -y install ansible 模块化：调用特定的模块，完成特定的任务基于python语言实现，由paramiko,PyYAMAL和Jinja2三个关键模块：部署简单，agentless支持主从模式支持自定义模块支持Playbook幂等性：  同一个配置文件中执行的操作允许多少次结果都是一样

    配置文件：/etc/ansible/ansible.cfg/etc/ansible/hosts  主机清单

ssh-keygen -t rsa -P ''   -P密码为空
ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.31.5
ssh-copy-id -i ~/.ssh/id_rsa.pub root@192.168.31.17
执行命令测试：ssh 192.168.31.5 'ifconfig'
问题：
ansible 192.168.31.5 -m command -a 'ifconfig'[WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit
localhost does not match 'all'[WARNING]: Could not match supplied host pattern, ignoring: 192.168.31.5
解决：需要将主机写入/etc/ansible/hosts文件里面

ansible-doc -s  command|user..... 查看文档说明

ansible all -m command -a 'ifconfig'ansible websrvs  -m command -a 'wget -O /tm/文件名 http://路径/文件'  给websrvs组内的主机下载文件

ansible wesrvs -m user -a "name=hacluster state=present" 创建一个非系统用户
ansible wesrvs -m user -a "name=hacluster state=absent"   删除这个用户

[root@centos7 ansible]# ansible all -m cron -a 'name="sync time form ntpserver" minute="*/10" job="/sbin/ntpdate us.pool.ntp.org &> /dev/null"'
192.168.31.5 | SUCCESS => {"changed": true, "envs": [], "jobs": ["sync time form ntpserver"]
}
192.168.31.17 | SUCCESS => {"changed": true, "envs": [], "jobs": ["sync time form ntpserver"]
}
[root@centos7 ansible]# crontab -l
#Ansible: sync time form ntpserver
*/10 * * * * /sbin/ntpdate us.pool.ntp.org &> /dev/null删除计划任务：ansible all -m cron -a 'name="sync time form ntpserver" state=absent' 指明name加上absent

ansible wesrvs -m copy -a 'src=/etc/fstab dest=/tmp/fstab.tmp mode=600' 复制文件，设置文件权限

ansible all -m file -a 'path=/tmp/testdir state=directory'   创建一个目录
ansible all -m file -a 'path=/tmp/fstab.symlink state=link src=/tmp/fstab.tmp' 创建一个链接文件

ansible all -m ping

ansible all  -m yum -a 'name=nginx state=latest' 安装包
ansible all  -m yum -a 'name=nginx state=absent' 卸载

ansible wesrvs -m service -a 'name=nginx state=started enabled=yes' 设置nginx启动，并开机自启动

ansible all -m shell -a 'echo 123456 | passwd --stdin limi' 给用户创建密码，此用户必须先存在
使用 command模块会报错，需要放入一个子shell中所以使用shell模块

[root@centos7 ansible]# cat /tmp/test.sh
#!/bin/sh
#echo "$(hostname) ansible is good." >/tmp/ansible.txt[root@centos7 ansible]# ll /tmp/test.sh   不给执行权限，远程主机执行 了
-rw-r--r-- 1 root root 67 Sep 18 12:22 /tmp/test.sh
[root@centos7 ansible]# ansible all -m script -a '/tmp/test.sh'

ansible all -m setup

核心元素有：tasks:任务
variables:变量
templates:模板
handlers:处理器
roles:角色其中一个特点：中途发送错误，所有已经执行的任务都将回滚，需要更正之后重新执行一次

- hosts: allremote_user: roottasks:- name: add a group    // 加上 - 就是一个单独的模块以及处理命令：group: gid=1008 name=testgroup system=no- name: excute a commandcommand: /bin/date运行结果
[root@centos7 ~]# ansible-playbook test.yamlPLAY [all] ***********************************************************************************TASK [Gathering Facts] ***********************************************************************
ok: [192.168.31.17]
ok: [192.168.31.5]TASK [add a group] ***************************************************************************
changed: [192.168.31.5]
changed: [192.168.31.17]TASK [excute a command] **********************************************************************
changed: [192.168.31.17]
changed: [192.168.31.5]PLAY RECAP ***********************************************************************************
192.168.31.17              : ok=3    changed=2    unreachable=0    failed=0
192.168.31.5               : ok=3    changed=2    unreachable=0    failed=0   

tasks:- name:  run this command and ignore the resultcommand:  /usr/bin/somecommand || /bin/true

tasks:- name:  run this command and ignore the resultcommand:  /usr/bin/somecommand ignore_errors: True

   - hosts: allremote_user: roottasks:- name:  ensuse apache laster versionyum:  state=latest name=httpd- name:  apache configure filecopy: src=/root/httpd.conf  dest=/etc/httpd/conf/httpd.conf  force=yesnotify:  #激活handlers中的name相同名称的服务- restart apachehandlers:- name:  restart apacheservice: name=apache state=restarted