Ansible Ad-Hoc 组件详解

  • 前言
  • 一、命令执行
    • 1、shell
    • 2、command
    • 3、remove
  • 二、包管理
    • 1、yum_repository
    • 2、yum
  • 三、服务管理模块
    • 1、service
  • 四、用户管理
    • 1、group
    • 2、user
  • 五、计划任务
    • 1、cron
  • 六、文件操作
    • 1、file
    • 2、copy
    • 3、fetch
    • 4、lineinfile
    • 5、synchronize
    • 6、unarchive
  • 七、防火墙管理
  • 八、网络工具
    • 1、get_url
  • 九、磁盘管理
    • 1、parted
    • 2、lvg
    • 3、lvol
    • 4、filesystem
    • 5、mount
  • 总结

前言

在 Ansible 中有 8 个主要的 Ansible 管理工具， 每个管理工具都是一系列的模块 、 参数支持。 随时可获取的帮助信息对了解掌握 Ansible 系统非常重要。 对于Ansible 每个工具， 都可以简单地在命令后面加上 -h 或-help 直接获取帮助。

提示：本篇文章所使用的环境为centos-8.2基于ansible-2.8.0 搭建
具体环境搭建，请参考：ansible-2.8.0 搭建链接

ansible是指令核心部分，其主要用于执行ad-hoc命令，即单条命令。默认后面需要跟主机和选项部分，默认不指定模块时，使用的是command模块。

注意， 如果使用 Ad-hoc 命令， Ansible 的一些插件功能就无法使用， 比如 loop、facts 功能等

一、命令执行

1、shell

shell 模块用法和command一样，不过的是其是通过/bin/sh进行执行，所以shell 模块可以执行任何命令，就像在本机执行一样，“ It is almost exactly like the command module but runs the command through a shell (/bin/sh) on the remote node.”
注解：shell模块调用的/bin/sh指令执行

#获取所有受控节点主机名
[student@ansible-server ansible]$ ansible all -m shell -a 'hostname' -o
node04 | CHANGED | rc=0 | (stdout) Ansible-node04
node03 | CHANGED | rc=0 | (stdout) Ansible-node03
node02 | CHANGED | rc=0 | (stdout) Ansible-node02
node01 | CHANGED | rc=0 | (stdout) Ansible-node01#查看所有受控节点交换分区的使用情况
[student@ansible-server ansible]$  ansible all -m shell -a 'free | grep Swap' -o
node04 | CHANGED | rc=0 | (stdout) Swap:       2097148           0     2097148
node02 | CHANGED | rc=0 | (stdout) Swap:       2097148           0     2097148
node03 | CHANGED | rc=0 | (stdout) Swap:       2097148           0     2097148
node01 | CHANGED | rc=0 | (stdout) Swap:       2097148           0     2097148#切换到指定目录，执行重定向操作
[student@ansible-server ansible]$  ansible all -m shell -a 'chdir=/opt date > data.txt' -o
node04 | CHANGED | rc=0 | (stdout)
node01 | CHANGED | rc=0 | (stdout)
node03 | CHANGED | rc=0 | (stdout)
node02 | CHANGED | rc=0 | (stdout)
[student@ansible-server ansible]$ ansible all -m shell -a 'cat  /opt/data.txt' -o
node04 | CHANGED | rc=0 | (stdout) Thu Sep 24 20:50:17 CST 2020
node02 | CHANGED | rc=0 | (stdout) Thu Sep 24 20:50:17 CST 2020
node03 | CHANGED | rc=0 | (stdout) Thu Sep 24 20:50:17 CST 2020
node01 | CHANGED | rc=0 | (stdout) Thu Sep 24 20:50:17 CST 2020
#creates
[student@ansible-server ansible]$ ansible all -m shell -a 'chdir=/tmp creates=/opt/data.txt pwd' -o
node04 | SUCCESS | rc=0 | (stdout) skipped, since /opt/data.txt exists
node03 | SUCCESS | rc=0 | (stdout) skipped, since /opt/data.txt exists
node02 | SUCCESS | rc=0 | (stdout) skipped, since /opt/data.txt exists
node01 | SUCCESS | rc=0 | (stdout) skipped, since /opt/data.txt exists
#remove
[student@ansible-server ansible]$ ansible all -m shell -a 'chdir=/tmp removes=/opt/data.txt pwd' -o
node02 | CHANGED | rc=0 | (stdout) /tmp
node03 | CHANGED | rc=0 | (stdout) /tmp
node04 | CHANGED | rc=0 | (stdout) /tmp
node01 | CHANGED | rc=0 | (stdout) /tmp

2、command

command 模块通过-a跟上要执行的命令可以直接执行，不过命令里如果有带有如下字符部分则执行不成功 “
so variables like $HOME and operations like “<”, “>”, “|”, and “&” will not work (use the shell module if you need these features).”

[student@ansible-server ansible]$ ansible all -a 'free' -o
node01 | CHANGED | rc=0 | (stdout)               total        used        free      shared  buff/cache   available\nMem:         810492      235692      326508        5756      248292      440280\nSwap:       2097148           0     2097148
node04 | CHANGED | rc=0 | (stdout)               total        used        free      shared  buff/cache   available\nMem:         810492      233220      323904        5756      253368      442568\nSwap:       2097148           0     2097148
node03 | CHANGED | rc=0 | (stdout)               total        used        free      shared  buff/cache   available\nMem:         810492      238436      323520        5764      248536      437580\nSwap:       2097148           0     2097148
node02 | CHANGED | rc=0 | (stdout)               total        used        free      shared  buff/cache   available\nMem:         810492      238860      329300        5756      242332      437112\nSwap:       2097148           0     2097148

3、remove

remove 模块用法和shell 模块一样 ，其也可以执行任意命令，就像在本机执行一样，“Executes a low-down and dirty SSH command, not going through the module subsystem. There is no change handler support for this module. This module does not require python on the remote system”

[student@ansible-server ansible]$ ansible all -m raw -a 'date' -o
node03 | CHANGED | rc=0 | (stdout) Thu Sep 24 21:21:13 CST 2020\r\n (stderr) Shared connection to node03 closed.\r\n
node02 | CHANGED | rc=0 | (stdout) Thu Sep 24 21:21:13 CST 2020\r\n (stderr) Shared connection to node02 closed.\r\n
node04 | CHANGED | rc=0 | (stdout) Thu Sep 24 21:21:13 CST 2020\r\n (stderr) Shared connection to node04 closed.\r\n
node01 | CHANGED | rc=0 | (stdout) Thu Sep 24 21:21:13 CST 2020\r\n (stderr) Shared connection to node01 closed.\r\n

注：" " 中接受shell命令

PS：三个模块的区别
shell：几乎支持Linux所有的命令
command：除了输入、输出、管道以及后台操作命令，和 shell 模块类似
raw：和 shell 模块类似，但这种模块带有的参数较少

二、包管理

1、yum_repository

#为受控节点主机配置yum源
[student@ansible-server ansible]$ ansible all -m yum_repository -a 'name=ansible-2.8.0 description=ansible-2.8.0 baseurl=http://192.168.5.3/ansible/Packages/ gpgcheck=no enabled=yes'
#检测配置的yum源
[student@ansible-server ansible]$ ansible all -m shell -a 'yum repolist'  -o
node02 | CHANGED | rc=0 | (stdout) repo id                              repo name\nAppStream                            CentOS-8 - AppStream\nBaseOS                               CentOS-8 - Base\nansible-2.8.0                        ansible-2.8.0\nextras                               CentOS-8 - Extras
node01 | CHANGED | rc=0 | (stdout) repo id                              repo name\nAppStream                            CentOS-8 - AppStream\nBaseOS                               CentOS-8 - Base\nansible-2.8.0                        ansible-2.8.0\nextras                               CentOS-8 - Extras
node03 | CHANGED | rc=0 | (stdout) repo id                              repo name\nAppStream                            CentOS-8 - AppStream\nBaseOS                               CentOS-8 - Base\nansible-2.8.0                        ansible-2.8.0\nextras                               CentOS-8 - Extras
node04 | CHANGED | rc=0 | (stdout) repo id                              repo name\nAppStream                            CentOS-8 - AppStream\nBaseOS                               CentOS-8 - Base\nansible-2.8.0                        ansible-2.8.0\nextras                               CentOS-8 - Extras#移除配置的yum源
[student@ansible-server ansible]$ ansible all -m yum_repository -a 'name=ansible-2.8.0 state=absent' -o
node04 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": false,"repo": "ansible-2.8.0","state": "absent"}
node02 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": false,"repo": "ansible-2.8.0","state": "absent"}
node03 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": false,"repo": "ansible-2.8.0","state": "absent"}
node01 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"},"changed": false,"repo": "ansible-2.8.0","state": "absent"}
#再次检测yum源
[student@ansible-server ansible]$ ansible all -m shell -a 'yum list  | grep ansible' -o
node02 | CHANGED | rc=0 | (stdout) ansible-freeipa.noarch                               0.1.8-3.el8                                      AppStream \ncentos-release-ansible-29.noarch                     1-2.el8                                          extras
node03 | CHANGED | rc=0 | (stdout) ansible-freeipa.noarch                               0.1.8-3.el8                                      AppStream \ncentos-release-ansible-29.noarch                     1-2.el8                                          extras
node04 | CHANGED | rc=0 | (stdout) ansible-freeipa.noarch                               0.1.8-3.el8                                      AppStream \ncentos-release-ansible-29.noarch                     1-2.el8                                          extras
node01 | CHANGED | rc=0 | (stdout) ansible-freeipa.noarch                               0.1.8-3.el8                                      AppStream \ncentos-release-ansible-29.noarch                     1-2.el8                                          extras

2、yum

yum、dnf 都是软连接，用法一致（仅掌握一种用法即可，此处介绍yum方式的用法）

[student@ansible-server ansible]$ ll `which yum`
lrwxrwxrwx. 1 root root 5 Apr 25 03:57 /usr/bin/yum -> dnf-3
[student@ansible-server ansible]$ ll `which dnf`
lrwxrwxrwx. 1 root root 5 Apr 25 03:57 /usr/bin/dnf -> dnf-3

#为所有节点安装软件包
[student@ansible-server ansible]$ ansible all -m yum -a 'name=nginx state=present'
#为所有节点安装最新的软件包
[student@ansible-server ansible]$ ansible all -m yum -a 'name=nginx state=latest'
#为所有节点卸载软件包
[student@ansible-server ansible]$ ansible all -m yum -a 'name=nginx state=absent'
#升级test组主机所有到软件到最新版本
[student@Ansible-Server ansible]$ ansible test -m yum -a 'name=* state=latest'
#安装本地或者外部提供的软件包
[student@Ansible-Server ansible]$ ansible all -m yum -a 'name=http://rpmfind.net/linux/epel/8/Everything/x86_64/Packages/s/sl-5.02-1.el8.x86_64.rpm'

三、服务管理模块

1、service

#启动所有受控节点nginx服务
[student@Ansible-Server ansible]$ ansible all -m service -a 'name=nginx state=started'
#检查受控节点服务运行状况
[student@Ansible-Server ansible]$ ansible all -m shell -a 'systemctl is-active nginx' -o
node03 | CHANGED | rc=0 | (stdout) active
node01 | CHANGED | rc=0 | (stdout) active
node02 | CHANGED | rc=0 | (stdout) active
node04 | CHANGED | rc=0 | (stdout) active
#设置nginx服务开机自启
[student@Ansible-Server ansible]$ ansible all -m service -a 'name=nginx enabled=yes'
#查看nginx服务是否开机自启
[student@Ansible-Server ansible]$ ansible all -m shell -a 'systemctl is-enabled nginx'  -o
#关闭nginx服务开机自启、停止服务的运行
[student@Ansible-Server ansible]$ ansible all -m service -a 'name=nginx enabled=no state=stopped'

四、用户管理

1、group

#创建一个uid 666的组
[student@Ansible-Server ansible]$ ansible all -m group -a 'name=it gid=666 system=yes state=present'
#查看所创建的组
[student@Ansible-Server ansible]$ ansible all -m shell -a 'grep ^it /etc/group' -o
node01 | CHANGED | rc=0 | (stdout) it:x:666:
node02 | CHANGED | rc=0 | (stdout) it:x:666:
node03 | CHANGED | rc=0 | (stdout) it:x:666:
node04 | CHANGED | rc=0 | (stdout) it:x:666:

注：state 可以不用写，默认state的值是present，即若不存在则创建

2、user

  • 使用python 环境生成用户登录密码
[root@Ansible-Server ~]# python3
Python 3.8.0 (default, May  7 2020, 02:49:39)
[GCC 8.3.1 20191121 (Red Hat 8.3.1-5)] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import crypt
>>> crypt.crypt('123')
'$6$6V5NpO.zFaFQgygP$fE/lkbdXCGnv2TgtoO9Q66KqheRtnFRYIPoQnYC.KKpzJ8Yyle.KKjxedmIs0hqrnKybpO3jMOKu4q5PiyMHR0'
  • 用户管理操作
#在所有被控节点主机上常见tom用户，所属组-it，
[student@Ansible-Server ansible]$ ansible all -m user -a "name=tom group=it password='$6$6V5NpO.zFaFQgygP$fE/lkbdXCGnv2TgtoO9Q66KqheRtnFRYIPoQnYC.KKpzJ8Yyle.KKjxedmIs0hqrnKybpO3jMOKu4q5PiyMHR0'"
#查看创建的tom 用户
[student@Ansible-Server ansible]$ ansible all -m shell -a 'tail -1 /etc/passwd' -o
node03 | CHANGED | rc=0 | (stdout) tom:x:1002:666::/home/tom:/bin/bash
node01 | CHANGED | rc=0 | (stdout) tom:x:1002:666::/home/tom:/bin/bash
node04 | CHANGED | rc=0 | (stdout) tom:x:1002:666::/home/tom:/bin/bash
node02 | CHANGED | rc=0 | (stdout) tom:x:1002:666::/home/tom:/bin/bash#创建bob用户，添加所属附加组-it
[student@Ansible-Server ansible]$ ansible all -m user -a 'name=bob groups=it'
#查看创建结果
[student@Ansible-Server ansible]$ ansible all -m shell -a 'groupmems -g it -l' -o
node01 | CHANGED | rc=0 | (stdout) bob
node03 | CHANGED | rc=0 | (stdout) bob
node02 | CHANGED | rc=0 | (stdout) bob
node04 | CHANGED | rc=0 | (stdout) bob
#为bob用户生成秘钥对
[student@ansible-server ansible]$ ansible all -m user -a 'name=bob generate_ssh_key=yes ssh_key_bits=2048 ssh_key_file=./ssh/id_rsa'
#查看所生产的秘钥对
[student@ansible-server ansible]$ ansible all -m shell -a 'ls -la  ~bob/ssh'
node02 | CHANGED | rc=0 >>
total 8
drwx------. 2 bob bob   38 Sep 25 22:55 .
drwx------. 3 bob bob   87 Sep 25 22:55 ..
-rw-------. 1 bob bob 1843 Sep 25 22:55 id_rsa
-rw-r--r--. 1 bob bob  409 Sep 25 22:55 id_rsa.pubnode04 | CHANGED | rc=0 >>
total 8
drwx------. 2 bob bob   38 Sep 25 22:55 .
drwx------. 3 bob bob   87 Sep 25 22:55 ..
-rw-------. 1 bob bob 1856 Sep 25 22:55 id_rsa
-rw-r--r--. 1 bob bob  417 Sep 25 22:55 id_rsa.pubnode01 | CHANGED | rc=0 >>
total 8
drwx------. 2 bob bob   38 Sep 25 22:55 .
drwx------. 3 bob bob   87 Sep 25 22:55 ..
-rw-------. 1 bob bob 1856 Sep 25 22:55 id_rsa
-rw-r--r--. 1 bob bob  417 Sep 25 22:55 id_rsa.pubnode03 | CHANGED | rc=0 >>
total 8
drwx------. 2 bob bob   38 Sep 25 22:55 .
drwx------. 3 bob bob   87 Sep 25 22:55 ..
-rw-------. 1 bob bob 1843 Sep 25 22:55 id_rsa
-rw-r--r--. 1 bob bob  417 Sep 25 22:55 id_rsa.pub

五、计划任务

1、cron

#ansible 配置计划任务--凌晨每天2:30 备份nginx网页文件
[student@ansible-server ansible]$ ansible all -m cron -a "name=backup-web minute=30 hour=2 job='[ -d /bak ] || mkdir /bak; tar czf /bak/web.tar.gz  /usr/share/nginx/html'"
#查看计划任务是否生效
[student@ansible-server ansible]$ ansible all -m shell -a 'crontab -l' -o
node02 | CHANGED | rc=0 | (stdout) #Ansible: backup-web\n30 2 * * * [ -d /bak ] || mkdir /bak; tar czf /bak/web.tar.gz  /usr/share/nginx/html
node03 | CHANGED | rc=0 | (stdout) #Ansible: backup-web\n30 2 * * * [ -d /bak ] || mkdir /bak; tar czf /bak/web.tar.gz  /usr/share/nginx/html
node04 | CHANGED | rc=0 | (stdout) #Ansible: backup-web\n30 2 * * * [ -d /bak ] || mkdir /bak; tar czf /bak/web.tar.gz  /usr/share/nginx/html
node01 | CHANGED | rc=0 | (stdout) #Ansible: backup-web\n30 2 * * * [ -d /bak ] || mkdir /bak; tar czf /bak/web.tar.gz  /usr/share/nginx/html
#任意节点主机查看备份数据
[root@node04 ~]# ll /bak/
total 8
-rw-r--r--. 1 root root 6629 Sep 25 02:30 web.tar.gz
#删除计划任务
[student@ansible-server ansible]$ ansible all -m cron -a 'name=backup-web state=absent'
查看计划任务列表
[student@ansible-server ansible]$ ansible all -m shell -a 'crontab -l' -o
node04 | CHANGED | rc=0 | (stdout)
node02 | CHANGED | rc=0 | (stdout)
node01 | CHANGED | rc=0 | (stdout)
node03 | CHANGED | rc=0 | (stdout)

六、文件操作

1、file

  • 普通文件
创建普通文件text_file1（若该文件已经存在，则会更新文件的时间戳）
[student@Ansible-Server ansible]$ ansible prod -m file -a 'path=/tmp/text_file1 state=touch'
查看所创建的文件
[student@Ansible-Server ansible]$ ansible prod -m shell -a 'ls -l /tmp'
node03 | CHANGED | rc=0 >>
total 0
drwx------. 3 root root 79 Sep 25 23:55 ansible_command_payload_tp7jw4l1
drwx------. 3 root root 79 Sep 26 05:50 ansible_command_payload_xt0pfnid
drwx------. 3 root root 17 Sep 25 22:34 systemd-private-3a7c95ba85514ef5b133d601540a5b4f-chronyd.service-rHr9Vg
-rw-r--r--. 1 root root  0 Sep 26 05:49 text_file1node04 | CHANGED | rc=0 >>
total 0
drwx------. 3 root root 79 Sep 25 08:56 ansible_command_payload_8n6tgcwg
drwx------. 3 root root 79 Sep 25 03:02 ansible_command_payload_9wf6y6y2
drwx------. 3 root root 17 Sep 25 07:25 systemd-private-637d5b5606b54349b7082a8048554080-chronyd.service-eEQNbp
-rw-r--r--. 1 root root  0 Sep 25 08:55 text_file1
#为text_file1创建软链接文件
[student@Ansible-Server ansible]$ ansible prod -m file -a 'src=/tmp/text_file1 path=/tmp/soft_link_text_file1 state=link'
#三、四号节点主机查看链接文件
[root@Ansible-node03 ~]# ll /tmp/soft_link_text_file1
lrwxrwxrwx. 1 root root 15 Sep 26 05:58 /tmp/soft_link_text_file1 -> /tmp/text_file1
[root@Ansible-node04 ~]# ll /tmp/soft_link_text_file1
lrwxrwxrwx. 1 root root 15 Sep 25 09:04 /tmp/soft_link_text_file1 -> /tmp/text_file1
#删除软连接
[student@Ansible-Server ansible]$ ansible prod -m file -a 'path=/tmp/soft_link_text_file1 state=link state=absent'
#查看结果
[root@Ansible-node03 ~]# ll /tmp/soft_link_text_file1
ls: cannot access '/tmp/soft_link_text_file1': No such file or directory
[root@Ansible-node04 ~]# ll /tmp/soft_link_text_file1
ls: cannot access '/tmp/soft_link_text_file1': No such file or directory
  • 目录文件
#创建目录文件（若该文件存在，则不做任何操作）
[student@Ansible-Server ansible]$ ansible node04 -m file -a 'path=/opt/dir1 state=directory'
#递归创建目录文件
[student@Ansible-Server ansible]$ ansible node04 -m file -a 'path=/opt/dir2/dir22 state=directory recurse=yes'
#查看创建结果
[root@Ansible-node04 ~]# tree /opt/
/opt/
├── dir1
└── dir2└── dir22
#删除目录文件
[student@Ansible-Server ansible]$ ansible node04 -m file -a 'path=/opt/dir2/dir22 state=absent '
[student@Ansible-Server ansible]$ ansible node04 -m file -a 'path=/opt/dir2/ state=absent '
#查看结果
[root@Ansible-node04 ~]# tree /opt/
/opt/
└── dir1

2、copy

#复制文件 a.txt 到远端节点主机
[student@Ansible-Server ansible]$ ansible node04 -m copy -a 'src=/home/student/ansible/a.txt dest=/opt mode=755'
#查看复制结果
[root@Ansible-node04 ~]# ll /opt/
total 0
-rwxr-xr-x. 1 root root 0 Sep 25 10:41 a.txt
drwxr-xr-x. 2 root root 6 Sep 25 09:21 dir1
#更改nginx服务网页文件内容为 "hello wlecome to nginx_web_server"
[student@Ansible-Server ansible]$ ansible node01 -m copy -a "content='hello wlecome to nginx_web_server\n' dest=/usr/share/nginx/html/index.html"
#测试结果
[root@Ansible-node01 html]# curl http://192.168.5.4
hello wlecome to nginx_web_server

3、fetch

#复制被控节点主机文件到控制端主机，主机名/IP以目录的形式作为层级结构拷贝
[student@Ansible-Server ansible]$ ansible all -m fetch -a 'src=/etc/hosts dest=.'
#查看复制结果
[student@Ansible-Server ansible]$ ll
total 8
-rw-rw-r--. 1 student student 188 Sep 24 16:21 ansible.cfg
-rw-rw-r--. 1 student student   0 Sep 26 07:22 a.txt
-rw-rw-r--. 1 student student  93 Sep 24 15:46 inventory
drwxrwxr-x. 3 student student  17 Sep 26 08:16 node01
drwxrwxr-x. 3 student student  17 Sep 26 08:16 node02
drwxrwxr-x. 3 student student  17 Sep 26 08:16 node03
drwxrwxr-x. 3 student student  17 Sep 26 08:16 node04
drwxrwxr-x. 2 student student   6 Sep 24 15:56 roles
[student@Ansible-Server ansible]$ more node01/etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.5.3 ansible-server
192.168.5.4 node01
192.168.5.5 node02
192.168.5.6 node03
192.168.5.7 node04

4、lineinfile

#修改selinux配置文件中参数SELINUX为disable
[student@Ansible-Server ansible]$ ansible node01 -m lineinfile -a 'path=/etc/selinux/config regexp="^SELINUX=" line=SELINUX=disabled'
#查看修改结果
[root@Ansible-node01 html]# grep ^SELINUX= /etc/selinux/config
SELINUX=disabled
#执行删除操作
[student@Ansible-Server ansible]$ ansible node01 -m lineinfile -a 'path=/etc/selinux/config regexp="^#" state=absent'
#查看执行结果
[root@Ansible-node01 html]# more /etc/selinux/config SELINUX=disabled
SELINUXTYPE=targeted#在特定位置插入字符
[student@Ansible-Server ansible]$ ansible node01 -m lineinfile -a 'path=/root/anaconda-ks.cfg regexp="^#ver" insertbefore="^ver" line="###"'
#查看修改结果
[root@Ansible-node01 ~]# head -1 anaconda-ks.cfg
###
#在特定行前插入字符
[student@Ansible-Server ansible]$ ansible node01 -m lineinfile -a 'path=/root/file insertbefore="^=" line=hello'
#在特定行后插入字符
[student@Ansible-Server ansible]$ ansible node01 -m lineinfile -a 'path=/root/file insertafter="^=" line=hi'
查看修改结果
[root@Ansible-node01 ~]# more file
hello
=
hi
#删除指定的行
[student@Ansible-Server ansible]$ ansible node01 -m lineinfile -a 'path=/root/file regexp="=" state=absent'
#查看修改结果
[root@Ansible-node01 ~]# more file
hello
hi

5、synchronize

#所有主机安装rsync软件
[student@Ansible-Server ansible]$ ansible all -m yum -a 'name=rsync state=present'
[student@Ansible-Server ansible]$ sudo dnf install rsync -y
#将本地file文件推向被控节点主机
[student@Ansible-Server ansible]$ ansible node03 -m synchronize -a 'src=file dest=/tmp'
#查看结果
[root@Ansible-node03 ~]# ll /tmp/file
-rw-rw-r--. 1 student student 15 Sep 26 09:29 /tmp/file
#将远端主机文件拉取主控节点
[student@Ansible-Server ansible]$ ansible node03 -m synchronize -a 'src=/tmp/file dest=/tmp mode=pull'
#查看拉取的文件
[student@Ansible-Server ansible]$ ll /tmp/file
-rw-rw-r--. 1 student student 25 Sep 26 10:46 /tmp/file

6、unarchive

  • unarchive模块用来解压文件

    • 选项：

      • copy：在解压文件之前，是否先将文件复制到远程主机，默认为yes。>若为no，则要求目标主机上压缩包必须存在
      • creates：指定一个文件名，当该文件存在时，则解压指令不执行
      • dest：远程主机上的一个路径，即文件解压的绝对路径。
      • group：解压后的目录或文件的属组
      • mode：解压后文件的权限
      • src：如果copy为yes，则需要指定压缩文件的源路径
      • owner：解压后文件或目录的属主
#将Ansible管理主机上的nginx包解压至被管理机器/opt目录
[student@Ansible-Server ansible]$ ansible all -m unarchive -a 'src=/tmp/nginx-1.16.1-2.fc32.x86_64.rpm.tar.gz dest=/opt copy=yes'
#查看压缩结果
[student@Ansible-Server ansible]$ ansible all -m shell -a 'ls -l /opt' -o
node01 | CHANGED | rc=0 | (stdout) total 568\n-rw-r--r--. 1 root root 581238 Jan 30  2020 nginx-1.16.1-2.fc32.x86_64.rpm
node02 | CHANGED | rc=0 | (stdout) total 568\n-rw-r--r--. 1 root root 581238 Jan 30  2020 nginx-1.16.1-2.fc32.x86_64.rpm
node04 | CHANGED | rc=0 | (stdout) total 568\n-rw-r--r--. 1 root root 581238 Jan 30  2020 nginx-1.16.1-2.fc32.x86_64.rpm
node03 | CHANGED | rc=0 | (stdout) total 568\n-rw-r--r--. 1 root root 581238 Jan 30  2020 nginx-1.16.1-2.fc32.x86_64.rpm

七、防火墙管理

用途：用于将文件或软件通过http、https或者ftp下载到本地节点上

#开启防火墙
[student@Ansible-Server ansible]$ ansible node04 -m service -a 'name=firewalld state=started enabled=true'
#允许http服务--基于服务
[student@Ansible-Server ansible]$ ansible node04 -m firewalld -a 'service=http permanent=true immediate=true state=enabled'
#允许http服务--基于端口
[student@Ansible-Server ansible]$ ansible node04 -m firewalld -a 'port=443/tcp permanent=true immediate=true state=enabled'
#查看防火墙规则列表
[root@Ansible-node04 ~]# firewall-cmd --list-all
public (active)target: defaulticmp-block-inversion: nointerfaces: ens33sources: services: cockpit dhcpv6-client http sshports: 443/tcpprotocols: masquerade: noforward-ports: source-ports: icmp-blocks: rich rules:
#添加添加富规则
[student@Ansible-Server ansible]$ ansible node04 -m firewalld -a 'rich_rule="rule family=ipv4 source address=192.168.5.0/24 service name=http accept" permanent=true immediate=true state=enabled'
#配置端口转发
[student@Ansible-Server ansible]$ ansible node04 -m firewalld -a 'rich_rule="rule family=ipv4 forward-port port=443 protocol=tcp to-port=888" permanent=true immediate=true state=enabled'
#配置地址伪装
[student@Ansible-Server ansible]$ ansible node04 -m firewalld -a 'masquerade=yes state=enabled permanent=yes immediate=yes'
#查看防火墙规则列表--（拨号上网）
[root@Ansible-node04 ~]# firewall-cmd --list-all
public (active)target: defaulticmp-block-inversion: nointerfaces: ens33sources: services: cockpit dhcpv6-client http sshports: 443/tcpprotocols: masquerade: yesforward-ports: source-ports: icmp-blocks: rich rules: rule family="ipv4" source address="192.168.5.0/24" service name="http" acceptrule family="ipv4" forward-port port="443" protocol="tcp" to-port="888"

八、网络工具

1、get_url

#下载本地passwd文件到/opt目录下
[student@Ansible-Server ansible]$ ansible node04 -m get_url -a 'url=file:///etc/passwd dest=/opt'
#查看结果
[student@Ansible-Server ansible]$ ansible node04 -m shell -a 'ls -l /opt'
node04 | CHANGED | rc=0 >>
total 4
-rwxr-xr-x. 1 root root    0 Sep 25 10:41 a.txt
drwxr-xr-x. 2 root root    6 Sep 25 09:21 dir1
-rw-r--r--. 1 root root 1681 Sep 25 15:46 passwd
#下载互联网上的ls软件到指定目录下
[student@Ansible-Server ansible]$ ansible node04 -m get_url -a 'url=http://rpmfind.net/linux/epel/8/Everything/x86_64/Packages/s/sl-5.02-1.el8.x86_64.rpm dest=/opt'
#查看结果
[student@Ansible-Server ansible]$ ansible node04 -m shell -a 'ls -l /opt'
node04 | CHANGED | rc=0 >>
total 24
-rwxr-xr-x. 1 root root     0 Sep 25 10:41 a.txt
drwxr-xr-x. 2 root root     6 Sep 25 09:21 dir1
-rw-r--r--. 1 root root  1681 Sep 25 15:46 passwd
-rw-r--r--. 1 root root 16564 Sep 25 15:52 sl-5.02-1.el8.x86_64.rpm

九、磁盘管理

1、parted

#新添加一块10G的磁盘
[root@Ansible-node02 ~]# lsblk  | grep sdb
sdb           8:16   0   10G  0 disk
#添加第一块分区
[student@Ansible-Server ansible]$ ansible node02 -m parted -a 'device=/dev/sdb number=1 part_end=1GiB state=present'
#查看创建分区
[root@Ansible-node02 ~]# parted /dev/sdb
GNU Parted 3.2
Using /dev/sdb
Welcome to GNU Parted! Type 'help' to view a list of commands.
(parted) p
Model: VMware, VMware Virtual S (scsi)
Disk /dev/sdb: 10.7GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos
Disk Flags: Number  Start   End     Size    Type     File system  Flags1      1049kB  1074MB  1073MB  primary#删除分区
[student@Ansible-Server ansible]$ ansible node02 -m parted -a 'device=/dev/sdb number=1 state=absent'
#添加大下3G的lvm分区
[student@Ansible-Server ansible]$ ansible node02 -m parted -a 'device=/dev/sdb number=1 flags=lvm part_end=3GiB state=present'#查看分区
[root@Ansible-node02 ~]# parted /dev/sdb
GNU Parted 3.2
Using /dev/sdb
Welcome to GNU Parted! Type 'help' to view a list of commands.
(parted) p
Model: VMware, VMware Virtual S (scsi)
Disk /dev/sdb: 10.7GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos
Disk Flags: Number  Start   End     Size    Type     File system  Flags1      1049kB  3221MB  3220MB  primary               lvm

2、lvg

#添加vg
[student@Ansible-Server ansible]$ ansible node02 -m lvg -a 'pvs=/dev/sdb1 vg=my_vg'
注：此步骤，直接通过分区创建vg，对应的分区会自动被加入到对应的pv组中
#查看结果
[root@Ansible-node02 ~]# vgsVG    #PV #LV #SN Attr   VSize   VFree cl      1   2   0 wz--n- <19.00g     0 my_vg   1   0   0 wz--n-  <3.00g <3.00g
#添加两个分区，sdb1，sdb2，为my_vg扩容
[root@Ansible-node02 ~]# lsblk | grep sdb
sdb           8:16   0   10G  0 disk
├─sdb1        8:17   0    3G  0 part
├─sdb2        8:18   0    2G  0 part
└─sdb3        8:19   0    1G  0 part
[root@Ansible-node02 ~]# vgsVG    #PV #LV #SN Attr   VSize   VFree cl      1   2   0 wz--n- <19.00g     0 my_vg   1   0   0 wz--n-  <3.00g <3.00g#扩容操作
[student@Ansible-Server ansible]$ ansible node02 -m lvg -a 'pvs=/dev/sdb1,/dev/sdb2,/dev/sdb3 vg=my_vg'
#查看结果
[root@Ansible-node02 ~]# vgsVG    #PV #LV #SN Attr   VSize   VFree cl      1   2   0 wz--n- <19.00g     0 my_vg   3   0   0 wz--n-  <5.99g <5.99g

3、lvol

#创建5000M的lv
[student@Ansible-Server ansible]$ ansible node02 -m lvol -a 'vg=my_vg lv=lv1 size=5000'
#查看结果
[root@Ansible-node02 ~]# lvsLV   VG    Attr       LSize   Pool Origin Data%  Meta%  Move Log Cpy%Sync Convertroot cl    -wi-ao---- <17.00g                                                    swap cl    -wi-ao----   2.00g                                                    lv1  my_vg -wi-a-----   4.88g

4、filesystem

#格式化lv1
[student@Ansible-Server ansible]$ ansible node02 -m filesystem -a 'dev=/dev/my_vg/lv1 fstype=xfs'

5、mount

#创建挂载点目录
[student@Ansible-Server ansible]$ ansible node02 -m file -a 'path=/dir1 state=directory'#配置挂载
--重启后生效，并且永久性生效
[student@Ansible-Server ansible]$ ansible node02 -m mount -a 'src=/dev/my_vg/lv1 path=/dir1 fstype=xfs state=present'
--当前生效，并永久生效
[student@Ansible-Server ansible]$ ansible node02 -m mount -a 'src=/dev/my_vg/lv1 path=/dir1 fstype=xfs state=mounted'
#查看挂载
[root@Ansible-node02 ~]# df -h
Filesystem             Size  Used Avail Use% Mounted on
devtmpfs               380M     0  380M   0% /dev
tmpfs                  396M     0  396M   0% /dev/shm
tmpfs                  396M  5.7M  391M   2% /run
tmpfs                  396M     0  396M   0% /sys/fs/cgroup
/dev/mapper/cl-root     17G  2.0G   16G  12% /
/dev/sda1              976M  185M  724M  21% /boot
tmpfs                   80M     0   80M   0% /run/user/0
/dev/mapper/my_vg-lv1  4.9G   68M  4.9G   2% /dir1#取消挂载
[student@Ansible-Server ansible]$ ansible node02 -m mount -a 'path=/dir1 state=unmounted'

后续内容正在更新… …

总结

学完 Ansible Ad-Hoc 组件的内容，能够熟练掌握相关模块基础操作 接下来，我们可以结合剧本的方式，将ansible指令，通过yml格式编写，再次执行...

Ansible 实战案例--Ansible Ad-Hoc 组件详解相关推荐

  1. 视频教程-2020年软考网络规划设计师案例分析历年真题详解软考视频教程-软考

    2020年软考网络规划设计师案例分析历年真题详解软考视频教程 10年以上软考培训经验,线下培训学员过万人.培训过的课程有:网络规划设计师.网络工程师.信 息系统项目管理师.系统集成项目管理师.信息安全 ...

  2. UE4移动组件详解（三）——RootMotion与特殊移动模式的实现思路

    更多相关内容参考 UE4移动组件详解(一)--移动框架与实现原理 UE4移动组件详解(二)--移动同步机制 五．特殊移动模式的实现思路 这一章节不是详细的实现教程,只是给大家提供常见游戏玩法的一些设计 ...

  3. WeX5数据组件详解

    [分享]WeX5的正确打开方式(7)--数据组件详解 本文是[WeX5的正确打开方式]系列的第7篇文章,详细介绍WeX5中数据组件的增删改查以及数据定位方法. 前言 上一篇 数据组件初探 我们简单介绍 ...

  4. Android笔记——四大组件详解与总结

    android四大组件分别为activity.service.content provider.broadcast receiver. -------------------------------- ...

  5. ReactNative ViewPageAndroid组件详解

    源码传送门 在我们开发Android的时候,ViewPage这个控件的使用频率还是很高的,最简单的就是制作引导页,应用程序的主界面等,在ReactNative开发中实现该功能的组件是ViewPageA ...

  6. JDBC学习笔记02【ResultSet类详解、JDBC登录案例练习、PreparedStatement类详解】

    黑马程序员-JDBC文档(腾讯微云)JDBC笔记.pdf:https://share.weiyun.com/Kxy7LmRm JDBC学习笔记01[JDBC快速入门.JDBC各个类详解.JDBC之CR ...

  7. Android Lifecycle 生命周期组件详解

    转载请标明出处:https://blog.csdn.net/zhaoyanjun6/article/details/99695779 本文出自[赵彦军的博客] 一.Lifecycle简介 为什么要引进 ...

  8. Cinder 组件详解 - 每天5分钟玩转 OpenStack（47）

    Cinder 组件详解 - 每天5分钟玩转 OpenStack(47) 本节我们将详细讲解 Cinder 的各个子服务. cinder-api cinder-api 是整个 Cinder 组件的门户, ...

  9. [python opencv 计算机视觉零基础到实战] 四、了解色彩空间及其详解

    一.学习目标 了解什么是色彩空间 了解opencv中色彩空间的转换 目录 [python opencv 计算机视觉零基础到实战] 一.opencv的helloworld [[python opencv ...

最新文章

  1. hdfs日志上传脚本(三)
  2. 如何设置多个图层层叠关系_凉山车载式叠螺污泥脱水机_山东领旗环保科技
  3. openStack使用宿主机监控
  4. RequestQueue
  5. python apply函数_8 个 Python 高效数据分析的技巧
  6. Kubernetes 小白学习笔记（1）--基本概念1
  7. 记一次 Win 10 下的用户文件夹迁移
  8. JavaScript——利用正则表达式实现二代身份证号码的验证
  9. 如何用电脑录制GIF动态图
  10. 工业互联网（十三）——工业相机相关知识（初学者必备）
  11. Linux——文件管理（文件系统、目录管理、文件操作）
  12. pip install 使用豆瓣源
  13. python3强智教务系统个人课表爬虫
  14. 如何一步一步成为一个领域专家
  15. IOS - rangeOfString、NSNotFound
  16. 智能卡系统设计之文件系统
  17. STM32-深入理解GPIO的8种工作模式
  18. imx6芯片通过EIM总线外扩多路sja1000 CAN控制器
  19. 怎么提取图片中的数字？快速识别方式分享
  20. JavaScript学习（六）数据类型

热门文章

  1. 一辈子的尽头，原来就是毕业。
  2. MSE H265 支持调查
  3. ABAP 供应商主数据批量导入
  4. 初中数学分几个模块_初中数学有几部分
  5. 云原生分布式监控系统？看鹅厂 T11 架构师如何整活儿
  6. #874358#基于django/neo4j的电视剧浏览数据推荐系统
  7. 3d打印驱动开启uart有什么用TMC2208如何在Ramps1.4开启uart
  8. !!! JUnit version 3.8 or later expected
  9. Esxi6.7-7.0设置自动启动无效原因
  10. nico和niconiconi dp详解