ansible的playbook配置及template模板的使用-阿里云开发者社区

前言：

学习下ansible的playbooks的状态配置管理，说来puppet saltstack都有类似的叫法，只是ansible的叫法更犀利，我当时一看playbook还以为是***的playboy。要使用ansible就要深入学习playbook配置及模板。

注:到底是playbook还是playbooks。。。。

请大家多关注下我的个人博客 , http://xiaorui.cc

先把官网的简单几个语法给说明下。

#这个是你选择的主机
- hosts: webservers
#这个是变量

  vars:

    http_port: 80

    max_clients: 200
#远端的执行权限

  remote_user: root

  tasks:
#利用yum模块来操作

  - name: ensure apache is at the latest version

    yum: pkg=httpd state=latest

  - name: write the apache config file

    template: src=/srv/httpd.j2 dest=/etc/httpd.conf
#触发重启服务器

    notify:

    - restart apache

  - name: ensure apache is running

    service: name=httpd state=started
#这里的restart apache 和上面的触发是配对的。这就是handlers的作用。相当于tag

  handlers:

    - name: restart apache

      service: name=httpd state=restarted

如果有些系统做了相关的sudo限制，需要在playbooks里面开启sodu，或者直接偷懒，权限直接为root ！

- hosts: web

  remote_user: xiaorui

  tasks:

    - service: name=nginx state=started

      sudo: yes

原文：http://rfyiamcool.blog.51cto.com/1030776/1413031

官网的基本完事了，这里就直接实战吧。先说一个简单的ansible playbook的例子。

- name: create user

  hosts: web

  user: root

  gather_facts: false

  vars:

  - user: "xiaorui"

  tasks:

  - name: create {{ user }}

    user: name="{{ user }}"

然后我们执行一下，Playbook 采用 YAML 语法结构，因此它们一般比较易于阅读并加以配置。上面的意思已经很简单明了了，就是创建一个xiaorui的用户，里面引用了一个user的变量，用jinja2模板给赋值进去了。

下面的还用我说么？　　多了一个service的调用，nginx的状态保持为启动。

- name: create user

  hosts: web

  user: root

  gather_facts: false

  vars:

  - user: "xiaorui"

  tasks:

  - name: create {{ user }}

    user: name="{{ user }}"

  tasks:

  - service: name=nginx state=started

使用copy传送文件的时候，经常出些问题，是ansible需要python-selinux包而已.

[root@67 ~]# ansible-playbook user.yaml
PLAY [create user] ************************************************************
TASK: [Copy file to client] ***************************************************

failed: [10.10.10.66] => {"failed": true, "md5sum": "1f18348f32c9a4694f16426798937ae2"}
msg: Aborting, target uses selinux but python bindings (libselinux-python) aren't installed!
FATAL: all hosts have already failed -- aborting
PLAY RECAP ********************************************************************

           to retry, use: --limit @/root/user.yaml.retry

10.10.10.66                : ok=0    changed=0    unreachable=0    failed=1

yum install -y libselinux-python 就可以行了

copy是传送文件用的。

- name: create user

  hosts: web

  user: root

  gather_facts: false

  remote_user: root

  vars:

  - user: "xiaorui"

  tasks:

  - name: create {{ user }}

    user: name="{{ user }}"

  tasks:

  - service: name=nginx state=started

  tasks:

  - name: Copy file to client

    copy: src=/root/rs.sh dest=/root/ccc

根据一些特殊的情况，可以做更多的模板，比如这样

  vars:

  - user: "xiaorui"

  - say: "xiaorui"

  tasks:

  - name: create {{ user }}

    user: name="{{ user }}"

  tasks:

  - service: name=nginx state=started

  tasks:

  - name: Copy file to client
#    copy: src=/root/rs.sh dest=/root/ccc

    template: src=/root/testfile dest=/root/{{ say }}

不只是这样，我可以把刚才那个say变量传到文件里面。爽吧? 其实和saltstack一样。。。。

再来一个和puppet exec一样执行外部命令的模块

tasks:

- name: "cmd"

  action: command touch /root/1111

还有一种shell模块的使用方法。

tasks:

- name: run this command and ignore the result

  shell: /usr/bin/somecommand || /bin/true

ansible在多任务下，推荐使用多进程模式的。其实就是用multiprocess做的多进程池！ -f 10 就是limit 10个任务并发。

ansible-playbook user.yml -f 10

顺便讲解下，在ansible下，类似puppet的facter，saltstack grains的自定义变量。 -m setup 模块

咱们可以在模板文件中，引用这些setup系统变量的

#xiaorui.cc
{{ ansible_devices.sda.model }}
{{ ansible_hostname }}
{{ ansible_machine }}

看看我测试机的setup是啥样子的。

[root@67 ~]# ansible web   -m setup

10.10.10.66 | success >> {

    "ansible_facts": {

        "ansible_all_ipv4_addresses": [

            "10.10.10.66"

        ],

        "ansible_all_ipv6_addresses": [

            "fe80::20c:29ff:fe06:f2dc"

        ],

        "ansible_architecture": "i386",

        "ansible_bios_date": "06/02/2011",

        "ansible_bios_version": "6.00",

        "ansible_cmdline": {

            "KEYBOARDTYPE": "pc",

            "KEYTABLE": "us",

            "LANG": "zh_CN.UTF-8",

            "quiet": true,

            "rd_LVM_LV": "vg_65/lv_swap",

            "rd_NO_DM": true,

            "rd_NO_LUKS": true,

            "rd_NO_MD": true,

            "rhgb": true,

            "ro": true,

            "root": "/dev/mapper/vg_65-lv_root"

        },

        "ansible_date_time": {

            "date": "2014-05-18",

            "day": "18",

            "epoch": "1400373954",

            "hour": "08",

            "iso8601": "2014-05-18T00:45:54Z",

            "iso8601_micro": "2014-05-18T00:45:54.840220Z",

            "minute": "45",

            "month": "05",

            "second": "54",

            "time": "08:45:54",

            "tz": "CST",

            "tz_offset": "+0800",

            "year": "2014"

        },

        "ansible_default_ipv4": {

            "address": "10.10.10.66",

            "alias": "eth0",

            "gateway": "10.10.10.1",

            "interface": "eth0",

            "macaddress": "00:0c:29:06:f2:dc",

            "mtu": 1500,

            "netmask": "255.255.255.0",

            "network": "10.10.10.0",

            "type": "ether"

        },

        "ansible_default_ipv6": {},

        "ansible_devices": {

            "sda": {

                "holders": [],

                "host": "SCSI storage controller: LSI Logic / Symbios Logic 53c1030 PCI-X Fusion-MPT Dual Ultra320 SCSI (rev 01)",

                "model": "VMware Virtual S",

                "partitions": {

                    "sda1": {

                        "sectors": "1024000",

                        "sectorsize": 512,

                        "size": "500.00 MB",

                        "start": "2048"

                    },

                    "sda2": {

                        "sectors": "418404352",

                        "sectorsize": 512,

                        "size": "199.51 GB",

                        "start": "1026048"

                    }

                },

                "removable": "0",

                "rotational": "1",

                "scheduler_mode": "cfq",

                "sectors": "419430400",

                "sectorsize": "512",

                "size": "200.00 GB",

                "support_discard": "0",

                "vendor": "VMware,"

            },

            "sr0": {

                "holders": [],

                "host": "IDE interface: Intel Corporation 82371AB/EB/MB PIIX4 IDE (rev 01)",

                "model": "VMware IDE CDR10",

                "partitions": {},

                "removable": "1",

                "rotational": "1",

                "scheduler_mode": "cfq",

                "sectors": "2097151",

                "sectorsize": "512",

                "size": "1024.00 MB",

                "support_discard": "0",

                "vendor": "NECVMWar"

            }

        },

        "ansible_distribution": "CentOS",

        "ansible_distribution_release": "Final",

        "ansible_distribution_version": "6.4",

        "ansible_domain": "ruifengyun.com",

        "ansible_env": {

            "CVS_RSH": "ssh",

            "G_BROKEN_FILENAMES": "1",

            "HOME": "/root",

            "LANG": "C",

            "LESSOPEN": "|/usr/bin/lesspipe.sh %s",

            "LOGNAME": "root",

            "MAIL": "/var/mail/root",

            "PATH": "/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin",

            "PWD": "/root",

            "SELINUX_LEVEL_REQUESTED": "",

            "SELINUX_ROLE_REQUESTED": "",

            "SELINUX_USE_CURRENT_RANGE": "",

            "SHELL": "/bin/bash",

            "SHLVL": "2",

            "SSH_CLIENT": "10.10.10.67 50278 22",

            "SSH_CONNECTION": "10.10.10.67 50278 10.10.10.66 22",

            "USER": "root",

            "_": "/usr/bin/python"

        },

        "ansible_eth0": {

            "active": true,

            "device": "eth0",

            "ipv4": {

                "address": "10.10.10.66",

                "netmask": "255.255.255.0",

                "network": "10.10.10.0"

            },

            "ipv6": [

                {

                    "address": "fe80::20c:29ff:fe06:f2dc",

                    "prefix": "64",

                    "scope": "link"

                }

            ],

            "macaddress": "00:0c:29:06:f2:dc",

            "module": "pcnet32",

            "mtu": 1500,

            "promisc": false,

            "type": "ether"

        },

        "ansible_form_factor": "Other",

        "ansible_fqdn": "66.ruifengyun.com",

        "ansible_hostname": "66",

        "ansible_interfaces": [

            "lo",

            "eth0"

        ],

        "ansible_kernel": "2.6.32-358.el6.i686",

        "ansible_lo": {

            "active": true,

            "device": "lo",

            "ipv4": {

                "address": "127.0.0.1",

                "netmask": "255.0.0.0",

                "network": "127.0.0.0"

            },

            "ipv6": [

                {

                    "address": "::1",

                    "prefix": "128",

                    "scope": "host"

                }

            ],

            "mtu": 16436,

            "promisc": false,

            "type": "loopback"

        },

        "ansible_machine": "i686",

        "ansible_memfree_mb": 694,

        "ansible_memtotal_mb": 1006,

        "ansible_mounts": [

            {

                "device": "/dev/mapper/vg_65-lv_root",

                "fstype": "ext4",

                "mount": "/",

                "options": "rw",

                "size_available": 47512358912,

                "size_total": 52844687360

            },

            {

                "device": "/dev/sda1",

                "fstype": "ext4",

                "mount": "/boot",

                "options": "rw",

                "size_available": 449800192,

                "size_total": 507744256

            },

            {

                "device": "/dev/mapper/vg_65-lv_home",

                "fstype": "ext4",

                "mount": "/home",

                "options": "rw",

                "size_available": 145807802368,

                "size_total": 153817976832

            }

        ],

        "ansible_os_family": "RedHat",

        "ansible_pkg_mgr": "yum",

        "ansible_processor": [

            "Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz"

        ],

        "ansible_processor_cores": 1,

        "ansible_processor_count": 1,

        "ansible_processor_threads_per_core": 1,

        "ansible_processor_vcpus": 1,

        "ansible_product_name": "VMware Virtual Platform",

        "ansible_product_serial": "VMware-56 4d bf 2f b7 6c f2 9d-bb f1 a6 0b 1a 06 f2 dc",

        "ansible_product_uuid": "564DBF2F-B76C-F29D-BBF1-A60B1A06F2DC",

        "ansible_product_version": "None",

        "ansible_python_version": "2.6.6",

        "ansible_selinux": {

            "config_mode": "enforcing",

            "mode": "permissive",

            "policyvers": 24,

            "status": "enabled",

            "type": "targeted"

        },

        "ansible_ssh_host_key_dsa_public": "AAAAB3NzaC1kc3MAAACBAOjq8+laDLF6/ly/BezPQONwHrIhRmAwYIDysQEIWvvZ4eq/2MJO6GNleSqHd/e6VH1T3SWO4wbPcgTXVRqoQLlT46RQ3hxCCIQ1Q3vThB+QPstMslYFVrtupzSqrRDbtwakEsdp1VlW5RSyBJ7JgzlQn8yQgQwmuS7IXSl2yX5LAAAAFQD+tvRyt+h7lJngeQc0AXWnN/Ij4QAAAIEAtD9SU4ZGmRSX5Ms8W8oqaTED5b/0VqLgT7ear6NkH0zHi0pRGs2kgf0KLqRjuBKqwlYdBj309Oc+Rip23cqb725BWHlrI4mEvVl2FLSOnTi8zd4esYeRga5od26g9VDjIbE0MGB/hUukH5od4dXjnK1zowADyz7jJkrkT+dFpkcAAACAH/0s0vagsSWR4EsXyR0lQsc/lBT1xSCiRFZbPtqMXxmq/3cqM1bbmyK7puQiJDy3ay/vrV/fmLk5RlgbFJB7n/ZVJnEoGfwXSoHJLRC+7tBJIKUm2jskZ1rl3o3ZxWQsSHPGy3sBDE9R1czKf8p1T8gM/EQrHDtTOqmDgrc287M=",

        "ansible_ssh_host_key_rsa_public": "AAAAB3NzaC1yc2EAAAABIwAAAQEAltE2aPOjHIF9Jh79LAm5Dc31VylZk15CqXwnwlQTOqAmFRoPwqnMn+F1oKOTVZ52BAQvitMF4XvNyE0sveSb5hFQkKBsJpEfBPNkQjty1Hgk03HpwHgspu9sk7HmwoPht+qTTm2764YYXiIbDJXva458eWBZsMTPX8frIeNzz1XbwveGbQt+jTYPdqzywp1UEJ4+EwGx9l3zR1WFDqA4Kz3clJJgtoGWasMmNXybr3tHn/csYllWdG0+03fxBM6d4QuR0WmgR7kIxxXnQcvWk0ZNUC3x9dVMeuGPsIvUh2bQOIv1rGWfB24mzIZIjV17RgNXrM8qy2FBZ96Mrvkd3w==",

        "ansible_swapfree_mb": 4063,

        "ansible_swaptotal_mb": 4063,

        "ansible_system": "Linux",

        "ansible_system_vendor": "VMware, Inc.",

        "ansible_user_id": "root",

        "ansible_userspace_architecture": "i386",

        "ansible_userspace_bits": "32",

        "ansible_virtualization_role": "guest",

        "ansible_virtualization_type": "VMware"

    },

    "changed": false
}

如果觉得信息太多，有些乱，可以用filter过滤下

[root@67 ~]# ansible web   -m setup -a "filter=ansible_mounts"

10.10.10.66 | success >> {

    "ansible_facts": {

        "ansible_mounts": [

            {

                "device": "/dev/mapper/vg_65-lv_root",

                "fstype": "ext4",

                "mount": "/",

                "options": "rw",

                "size_available": 47511494656,

                "size_total": 52844687360

            },

            {

                "device": "/dev/sda1",

                "fstype": "ext4",

                "mount": "/boot",

                "options": "rw",

                "size_available": 449800192,

                "size_total": 507744256

            },

            {

                "device": "/dev/mapper/vg_65-lv_home",

                "fstype": "ext4",

                "mount": "/home",

                "options": "rw",

                "size_available": 145807802368,

                "size_total": 153817976832

            }

        ]

    },

    "changed": false
}

[root@67 ~]#

如果想把这些 facts加入到template模板中，中途可能会遇到几处让人困扰的地方。

这边需要开启facts变量功能， gather_facts: no 或者是false是关闭，gather_facts:yes 或者是true都是开启。当时没注意，找到了官方的实例，直接就干，结果sx了。咋都不行，总是提示define为定义。。。原来facts没有开。。

{% for v in hostvars.iteritems() %}

 {{ v['ansible_hostname'] }}
{% endfor %}

咱们在看看对端服务器的文件渲染情况。

用过puppet saltstack的朋友，知道Variables最后可以扩展什么东西，可以高度的定义每个配置文件。可以根据ip地址，推送配置文件所需要的绑定的ip地址，根据内存大小，定义nginx缓存的内容大小，根据你的cpu核数，做nginx cpu的绑定，根据你的系统，我需要文件路径的判断等等。。。。。

虽然这些facts够多了，貌似很全，但是如果还不够你用，还不足以让你标识定位一台服务器，咋办？　赞一个　ansible不愧是比saltstack在国外更受欢迎的集群配置工具（据说。。。。看了youtube的视频，几个老外说，他们热衷于去各种系统框架大会，ansible要比saltstack用的多点，其实我在有一篇文章说过，ansible为啥多？有兴趣翻翻看看）。说回来，saltstack的框架确实相当的优秀，但由于更新太频繁，自己不幸又是那是yum epel的人，结果中枪了。。。。

nima，扯远了，继续聊刚才的话题。如何自定义ansible facts变量，官方说的很明白，在控制机创建一个文件就行了。。。

看懂了吧。我刚才测试的时候，方法有些土，直接创建的，你可以参照一个例子，copy文件。

- hosts: web

  tasks:

    - name: create directory for ansible custom facts

      file: state=directory recurse=yes path=/etc/ansible/facts.d

    - name: install custom impi fact

      copy: src=ipmi.fact dest=/etc/ansible/facts.d

    - name: re-read facts after adding custom fact

      setup: filter=ansible_local

ansbile还有一个有意思的功能，可以判断上个tasks的值，根据这个值在做判断。

里面的when ， foot_result。。。。懂了吧

tasks:

   - shell: /usr/bin/foo

     register: foo_result

     ignore_errors: True

   - name: "cmd"

     action: command touch /root/kkkkk

     when: foo_result.rc == 127

这个是测试的过程

#http://xiaorui.cc

[root@67 facts.d]# ansible web -m shell -a "ls /root/"

10.10.10.66 | success | rc=0 >>
anaconda-ks.cfg
date
install.log
install.log.syslog
l.py
nnn

qpid-python-0.20

qpid-python-0.20.tar.gz
testfile
urllib-post.py

[root@67 facts.d]# ansible-playbook  cmd.yaml
PLAY [web] ********************************************************************
GATHERING FACTS ***************************************************************

ok: [10.10.10.66]
TASK: [shell /usr/bin/foo] ****************************************************

failed: [10.10.10.66] => {"changed": true, "cmd": "/usr/bin/foo ", "delta": "0:00:00.002429", "end": "2014-05-18 10:25:12.544151", "rc": 127, "start": "2014-05-18 10:25:12.541722"}
stderr: /bin/sh: /usr/bin/foo: No such file or directory
...ignoring
TASK: [cmd] *******************************************************************

changed: [10.10.10.66]
PLAY RECAP ********************************************************************

10.10.10.66                : ok=3    changed=2    unreachable=0    failed=0

[root@67 facts.d]# ansible web -m shell -a "ls /root/"

10.10.10.66 | success | rc=0 >>
anaconda-ks.cfg
date
install.log
install.log.syslog
kkkkk
l.py
nnn

qpid-python-0.20

qpid-python-0.20.tar.gz
testfile
urllib-post.py

[root@67 facts.d]#