弄了近一個(gè)月的Ansible腳本部署工作，做了一些整理扬跋，列出了我常用的一些指令，與模塊用法凌节。Ansible 是個(gè)好東西钦听，就是相關(guān)資料不多，列出這些基本模塊用法可以覆蓋大部分工作了倍奢。
安裝
推薦包管理器（yum）
yum install -y ansible
# 在被控節(jié)點(diǎn)需要安裝朴上，（文件傳輸）
yum install -y libselinux-python
指令
Ad-Hoc
# 在所有主機(jī)上Do shell
ansible -i hosts all -m shell -a "systemctl restart docker"
# 信息采集+條件過(guò)濾
ansible nodes -m setup -a "filter=ansible_local"
# 限制主機(jī)執(zhí)行+外部參數(shù)
ansible nodes -l 192.168.1.211 -m setup -a "filter=ansible_local" --extra-vars "ansible_sshpass=666"
常用模塊
文件操作
# copy
- name: Write docker daemon.conf file
copy: src=daemon.json dest=/etc/docker/daemon.json mode=0440
# file
- name: Create config file directory
file: path={{ flannel_config_dir }} state=directory
- name: Verify docker config files exists
file: path={{ docker_config_dir }}/{{ item }} state=touch
- name: Clean up the flannel config file
file: path=/tmp/flannel-config.json state=absent
# 以下兩個(gè)常組合使用
run_once: true
delegate_to: "{{ groups['etcd'][0] }}"
# template
- name: replace repo
template:
src: offline.repo.j2
dest: /etc/yum.repos.d/offline.repo
# lineinfile 用于配置文件修改
- name: Install http_proxy into docker(-network)
lineinfile: dest={{ docker_config_net }} regexp="^{{ docker_env_export }}http_proxy=" line="{{docker_env_export}}http_proxy={{ http_proxy }}"
when: http_proxy is defined
notify:
- restart docker
tags: configure
命令
# shell
- name: Create CA cert
shell: "cfssl gencert -initca ca-csr.json | cfssljson -bare ca -"
args:
chdir: "{{ etcd_cert_tempdir }}/"
# 當(dāng)下面路徑存在時(shí)不執(zhí)行shell
creates: "{{ etcd_ca_file }}"
when: inventory_hostname == groups['masters'][0]
# command
- name: reload systemd
command: systemctl --system daemon-reload
# script
- name: Detect docker version
script: detect-docker-version.sh
register: docker_version
System
# debug
- name: Detected version
debug:
msg: "{{ docker_version.stdout | regex_replace('(\\r\\n)','') }}"
# service
- name: stop docker
service: name=docker state=stopped
# yum_repository
- name: Setup base repo
yum_repository:
name: offline
description: offline
baseurl: http://{{ offline_yum_repo }}/base
enabled: yes
gpgcheck: no
