Ansible一键部署实例（二）

阅读量

Ansible一键部署实例（二）

基本环境准备
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# 免密钥分发
[root@ansible ~/roles]#cat ssh.sh
#!/bin/bash
key="/root/.ssh/id_rsa.pub"
pass="密码"
nodeip="ipfile"

while read ip
do
    sshpass -p $pass ssh-copy-id -i $key $ip -o StrictHostKeyChecking=no &> /dev/null && echo "${ip} sshkey is success."
done < $nodeip

# ipfile
[root@ansible ~/roles]#cat ipfile
172.16.1.5
172.16.1.6
172.16.1.7
172.16.1.8
172.16.1.9
172.16.1.51
172.16.1.31
172.16.1.32
172.16.1.41

# hosts
[root@ansible ~/roles]#cat hosts
[web]
172.16.1.7
172.16.1.8
172.16.1.9
[nfs]
172.16.1.31
172.16.1.32
[db]
172.16.1.51
[lb]
172.16.1.5
172.16.1.6
[backup]
172.16.1.41
全局部署文件
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
[root@ansible ~/roles]#cat site.yml
---
- hosts: all
  name: The configuration of this script is as follows
  roles:
    - role: basic
      tags: basic
    - role: local_repo
      tags: local_repo
    - role: rsync
      tags: rsync
    - role: nfs
      tags: nfs
      when: (ansible_hostname is match "web") or (ansible_hostname is match "nfs")
    - role: php
      tags: php
      when: ansible_hostname is match "web"
    - role: mysql
      tags: mysql
      when: ansible_hostname is match "db"
    - role: sersync
      tags: sersync
      when: ansible_hostname is match "nfs"
    - role: global_nginx
      tags: global_nginx
      when: (ansible_hostname is match "lb") or (ansible_hostname is match "web")
    - role: wordpress
      tags: wordpress
    - role: kod
      tags: kod
    - role: tomcat
      tags: tomcat
      when: ansible_hostname is match "web"
    - role: zrlog
      tags: zrlog
    - role: phpadmin
      tags: phpadmin
      when: ansible_hostname is match "web"
    - role: lb_nginx
      tags: lb_nginx
      when: ansible_hostname is match "lb"
    - role: keepalived
      tags: keepalived
      when: ansible_hostname is match "lb"
    - role: backup
      tags: backup
    - role: https
      tags: https
      when: (ansible_hostname is match "lb") or (ansible_hostname is match "web")
    - role: iptables
      tags: iptables
      when: ansible_hostname is match "lb"
    - role: access_net
      tags: access_net
    - role: ntpdate
      tags: ntpdate
...
基础优化项
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
# 为各项服务统一用户准备
[root@ansible ~/roles/basic]#cat tasks/main.yml
---
- name: nified Users create www group
  group:
    name: www
    gid: 666

- name: create www user
  user:
    name: www
    uid: 666
    group: www
    create_home: false
...
服务环境搭建
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
# 配置本地YUM仓库
[root@ansible ~/roles/local_repo]#tree
.
├── files
│   └── soft.repo
└── tasks
    └── main.yml

2 directories, 2 files
[root@ansible ~/roles/local_repo]#cat tasks/main.yml
---
# tasks file for local_repo

- name: Create repo dir for backup
  file:
    path: /repo
    state: directory

- name: Mv repo to backupdir /repo
  shell: mv /etc/yum.repos.d/* /repo warn=false

- name: Configure local yum repo
  copy:
    src: soft.repo
    dest: /etc/yum.repos.d

#- name: Install yum-plugin-priorities
#  yum:
#    name: yum-plugin-priorities
#    state: present

#- name: Mv repo to backupdir /repo
#  shell: mv /repo/* /etc/yum.repos.d warn=false

...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
# 安装配置rsync服务
[root@ansible ~/roles/rsync]#tree
.
├── files
│   └── rsyncd.conf
├── handlers
│   └── main.yml
├── tasks
│   └── main.yml
├── templates
└── vars
    └── main.yml

5 directories, 4 files
[root@ansible ~/roles/rsync]#cat tasks/main.yml
---
# tasks file for rsync
# backup为服务端，其余全部为客户端
- name: install rsync service
  yum:
    name: rsync
    state: present

- name: configure rsync server
  copy:
    src: rsyncd.conf
    dest: /etc
  when: ansible_hostname is match "backup"

- name: create backup dir
  file:
    path: "{{ item }}"
    state: directory
    owner: www
    group: www
  loop:
    - /backup/lb
    - /backup/web
    - /backup/nfs
    - /backup/msq
  when: ansible_hostname is match "backup"

- name: create passwd file
  copy:
    content: rsync_backup:nanxi
    dest: /etc/rsync.passwd
    mode: 0600
  notify: restart rsync service
  when: ansible_hostname is match "backup"

- name: start rsync service
  systemd:
    name: rsyncd
    state: started
    enabled: yes
  when: ansible_hostname is match "backup"

- name: configure rsync client
  copy:
    content: nanxi
    dest: /etc/rsync.pass
    mode: 0600
  when: ansible_hostname is not match "backup"
# nfs2为服务端，nfs1为客户端
- name: nfs2 configure rsync server
  copy:
    src: rsyncd.conf
    dest: /etc
  when: ansible_hostname is match "nfs2"

- name: nfs2 create backup dir
  file:
    path: /backup/nfs
    state: directory
    owner: www
    group: www
  when: ansible_hostname is match "nfs2"

- name: nfs2 create passwd file
  copy:
    content: rsync_backup:nanxi
    dest: /etc/rsync.passwd
    mode: 0600
  when: ansible_hostname is match "nfs2"

- name: restart rsync service
  systemd:
    name: rsyncd
    state: restarted
  when: ansible_hostname is match "nfs2"

- name: nfs2 start rsync service
  systemd:
    name: rsyncd
    state: started
    enabled: yes
  when: ansible_hostname is match "nfs2"

...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
# 安装nfs服务
[root@ansible ~/roles/nfs]#tree
.
├── files
├── handlers
│   └── main.yml
├── tasks
│   └── main.yml
├── templates
│   └── exports.j2
└── vars
    └── main.yml

5 directories, 4 files
[root@ansible ~/roles/nfs]#cat tasks/main.yml
---
# tasks file for nfs

- name: install nfs service
  yum:
    name: nfs-utils
    state: present

- name: create nfs share dir
  file:
    path: /data/{{ item }}
    owner: www
    group: www
    state: directory
  loop:
    - wordpress
    - kod
    - zrlog
    - phpadmin
  when: ansible_hostname is match "nfs"

- name: configure nfs servser
  template:
    src: exports.j2
    dest: /etc/exports
  notify: restart nfs server
  when: ansible_hostname is match "nfs"

- name: start nfs server
  systemd:
    name: "{{ item }}"
    state: started
    enabled: yes
  loop:
    - rpcbind
    - nfs-server
  when: ansible_hostname is match "nfs"
  
...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
# 安装配置PHP服务
[root@ansible ~/roles/php]#tree
.
├── files
│   └── php.tar.gz
├── handlers
│   └── main.yml
├── tasks
│   └── main.yml
├── templates
└── vars
    └── main.yml

5 directories, 4 files
[root@ansible ~/roles/php]#cat tasks/main.yml
---
# tasks file for php

- name: Extract php.tar.gz into web /tmp
  unarchive:
    src: php.tar.gz
    dest: /tmp

- name: install php into web
  shell: yum -y localinstall /tmp/*.rpm warn=false

- name: remove php.*.rpm in web
  shell: rm -rf /tmp/*.rpm warn=false

- name: configure php start user and prepare for redis
  lineinfile:
    path: /etc/php-fpm.d/www.conf
    regexp: "{{ item.regex }}"
    line: "{{ item.line }}"
  notify: restart php-fpm
  loop:
    - { regex: '^user',line: user = www }
    - { regex: '^group',line: group = www }
    - { regex: '^php_value\[session.save_handler\]',line: ";php_value[session.save_handler] = files" }
    - { regex: '^php_value\[session.save_path\]',line: ";php_value[session.save_path] = /var/lib/php/session" }

- name: configure php for redis
  lineinfile:
    path: /etc/php.ini
    regexp: "{{ item.regex }}"
    line: "{{ item.line }}"
  notify: restart php-fpm
  loop:
    - { regex: '^session\.save_handler',line: session.save_handler = redis }
    - { regex: '^session\.save_path',line: 'session.save_path = "tcp://172.16.1.51:6379"' }

- name: restart php-fpm web
  systemd:
    name: php-fpm
    state: restarted
    enabled: yes

...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# 安装数据库、redis及依赖
[root@ansible ~/roles/mysql]#tree
.
├── files
├── handlers
│   └── main.yml
├── tasks
│   └── main.yml
├── templates
└── vars
    └── main.yml

5 directories, 3 files
[root@ansible ~/roles/mysql]#cat tasks/main.yml
---
# tasks file for mysql

- name: Install mariadb Server redis and dependent
  yum:
    name: "{{ item }}"
    state: present
  loop:
    - mariadb-server
    - MySQL-python
    - redis

- name: configure /etc/redis.conf
  lineinfile:
    path: /etc/redis.conf
    regexp: '^bind'
    line: bind 127.0.0.1 172.16.1.51

- name: Start mysql and redis
  systemd:
    name: "{{ item }}"
    state: started
    enabled: yes
  loop:
    - mariadb
    - redis

...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
# 为nfs配置sersync服务
[root@ansible ~/roles/sersync]#tree
.
├── files
│   ├── confxml.xml
│   └── sersync2
├── tasks
│   └── main.yml
└── templates

3 directories, 3 files
[root@ansible ~/roles/sersync]#cat tasks/main.yml
---
# tasks file for sersync

- name: Cteate sersync dir in nfs1
  file:
    path: /etc/sersync
    state: directory
  when: ansible_hostname is match "nfs1"

- name: Sent sersync to nfs1
  copy:
    src: "{{ item }}"
    dest: /etc/sersync
    mode: '0755'
  loop:
    - confxml.xml
    - sersync2
  when: ansible_hostname is match "nfs1"

- name: Modify backup module in nfs2
  lineinfile:
    path: /etc/rsyncd.conf
    regexp: "{{ item.regex }}"
    line: "{{ item.line }}"
  loop:
    - { regex: '^\[backup\]',line: "[data]" }
    - { regex: '^path',line: path = /data }
  when: ansible_hostname is match "nfs2"

- name: Restart rsync service
  systemd:
    name: rsyncd
    state: restarted
  when: ansible_hostname is match "nfs2"

- name: Start sersync service
  shell:
    cmd: /etc/sersync/sersync2 -dro /etc/sersync/confxml.xml
  ignore_errors: yes
  when: ansible_hostname is match "nfs1"

...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
# 配置官方nginx服务
[root@ansible ~/roles/global_nginx]#tree
.
├── files
├── handlers
│   └── main.yml
├── tasks
│   └── main.yml
├── templates
└── vars
    └── main.yml

5 directories, 3 files
[root@ansible ~/roles/global_nginx]#cat tasks/main.yml
---
# tasks file for nginx

- name: Configure nginx official yum
  yum_repository:
    name: nginx-stable
    description: nginx yum repo
    baseurl: http://nginx.org/packages/centos/$releasever/$basearch/
    gpgcheck: no

- name: Install official nginx
  yum:
    name: nginx
    state: present

- name: Configure unified users by www
  lineinfile:
    path: /etc/nginx/nginx.conf
    regexp: '^user'
    line: user www;
  notify: restart nginx

- name: Start nginx
  systemd:
    name: nginx
    state: started
    enabled: yes

...
赏

谢谢你请我吃糖果

支付宝
微信

tag:

    缺失模块。
    1、请确保node版本大于6.2
    2、在博客根目录（注意不是yilia根目录）执行以下命令：
    npm i hexo-generator-json-content --save

    3、在根目录_config.yml里添加配置： 

      jsonContent:
    meta: false
    pages: false
    posts:
      title: true
      date: true
      path: true
      text: false
      raw: false
      content: false
      slug: false
      updated: false
      comments: false
      link: false
      permalink: false
      excerpt: false
      categories: false
      tags: true

努力做一只<br>会发光的萤火虫<br><br><br>希望我的分享<br>可以给大家带来帮助和乐趣...