Ansible

1、关于ansible

1)什么是ansible

Ansible是一个开源部署工具
开发语言：Python
特点：SSH协议通讯，全平台，无需编译，模块化部署管理
作用：推送Playbook进行远程节点快速部署

 

2)Ansible与Chef，Saltstack的不同

Chef

Ruby语言编写，C/S架构，配置需要Git依赖，Recipe脚本编写规范，需要编程经验；

 

Saltstack

Python语言编写，C/S架构，模块化配置管理，YAML脚本编写规范，适合大规模集群部署；

 

Ansible

Python语言编写，无Client(现在是openssh,以前是paramiko)，模块化配置管理，Playbook脚本编写规范，易于上手，适合中小规模快速部署；

 

3)Ansible的优势和应用场景

轻量级无客户端（Agentless）；
开源免费，学习成本低，快速上手；
使用Playbook作为核心配置架构，统一的脚本格式批量化部署；

完善的模块化扩展，支持目前主流的开发场景；
强大的稳定性和兼容性；
活跃的官方社区问题讨论，方便Trubleshooting与DEBUG问题；

 

2、Ansible配合virtualenv安装配置

Ansible的两种安装模式（CentOS7）
      1.Yum包管理安装
          #yum-y install ansible
      2.Git源代码安装[推荐]
          #git clone https://github.com/ansible/ansible.git

 

安装python3.5

tar xf Python-3.6.5.tar.xz 

cd Python-3.6.5

[root@ansible Python-3.6.5]# ./configure --prefix=/usr/local --with-ensurepip=install --enable-shared LDFLAGS="-Wl,-rpath /usr/local/lib"

[root@ansible Python-3.6.5]# make && make altinstall

[root@ansible Python-3.6.5]# which pip3.6
/usr/local/bin/pip3.6

[root@ansible Python-3.6.5]# ln -s /usr/local/bin/pip3.6 /usr/local/bin/pip

 

安装virtualenv和ansible：

[root@ansible Python-3.6.5]# pip install -i https://pypi.douban.com/simple virtualenv

[root@ansible Python-3.6.5]# yum -y install git nss curl

[root@ansible ~]# useradd deploy

[root@ansible ~]# su - deploy

[deploy@ansible ~]$ virtualenv -p /usr/local/bin/python3.6 .py3-a2.5-env

[deploy@ansible ~]$ cd .py3-a2.5-env/

[deploy@ansible .py3-a2.5-env]$ git clone https://github.com/ansible/ansible.git

[deploy@ansible .py3-a2.5-env]$ source /home/deploy/.py3-a2.5-env/bin/activate

 (.py3-a2.5-env) [deploy@ansible .py3-a2.5-env]$ pip install paramiko PyYAML jinja2

# 切换ansible版本到2.5
(.py3-a2.5-env) [deploy@ansible .py3-a2.5-env]$ cd ansible/
(.py3-a2.5-env) [deploy@ansible ansible]$ git checkout stable-2.5

上面这条命令如果报错了，就执行先下面两条命令，再执行git checkout：

(.py3-a2.5-env) [deploy@ansible ansible]$ git add .
(.py3-a2.5-env) [deploy@ansible ansible]$ git stash

# 在虚拟环境下加载ansible2.5

(.py3-a2.5-env) [deploy@ansible ansible]$ source /home/deploy/.py3-a2.5-env/ansible/hacking/env-setup -q

#验证是否加载完成

(.py3-a2.5-env) [deploy@ansible ansible]$ ansible --version

 

3、Ansible playbooks入门和编写规范

1)Playbooks框架与格式

 

详细目录testenv

 

主任务文件main.yml

 

任务入口文件deploy.yml

 

2)ssh免密认证

Ansible服务器端创建SSH本地秘钥
       #ssh-keygen-trsa
Ansible服务器端建立与目标部署机器的秘钥认证
       #ssh-copy-id-i/home/deploy/.ssh/id_rsa.pub root@test.example.com

 

3)执行Playbooks

 

4、编写Ansible playbooks

test_playbooks

(.py3-a2.5-env) [deploy@ansible ~]$ pwd
/home/deploy

#--
(.py3-a2.5-env) [deploy@ansible ~]$ mkdir test_playbooks
(.py3-a2.5-env) [deploy@ansible ~]$ cd test_playbooks/
(.py3-a2.5-env) [deploy@ansible test_playbooks]$ mkdir inventory
(.py3-a2.5-env) [deploy@ansible test_playbooks]$ mkdir roles
(.py3-a2.5-env) [deploy@ansible test_playbooks]$ cd inventory/

#--
(.py3-a2.5-env) [deploy@ansible inventory]$ vim testenv
[testservers]
test.example.com

[testservers:vars]
server_name=test.example.com
user=root
output=/root/test.txt

#--
(.py3-a2.5-env) [deploy@ansible inventory]$ cd ..
(.py3-a2.5-env) [deploy@ansible test_playbooks]$ cd roles/
(.py3-a2.5-env) [deploy@ansible roles]$ mkdir testbox
(.py3-a2.5-env) [deploy@ansible roles]$ cd testbox/
(.py3-a2.5-env) [deploy@ansible testbox]$ mkdir tasks
(.py3-a2.5-env) [deploy@ansible testbox]$ cd tasks/

#--
(.py3-a2.5-env) [deploy@ansible tasks]$ vim main.yml
- name: Print server name and user to remote testbox
  shell: "echo 'Currently {{ user }} is logining {{ server_name }}' > {{ output }}"

#--
(.py3-a2.5-env) [deploy@ansible test_playbooks]$ pwd
/home/deploy/test_playbooks

#--
(.py3-a2.5-env) [deploy@ansible test_playbooks]$ vim deploy.yml
- hosts: "testservers"
  gather_facts: true
  remote_user: root
  roles:
    - testbox

 

5、ssh免密认证

这里是又新开了一台虚拟机：192.168.3.250

ansible主机是：192.168.3.201

 

在ansible主机上：

[root@ansible ~]# vim /etc/hosts
192.168.3.250 test.example.com

 

(.py3-a2.5-env) [deploy@ansible ~]$ ssh-keygen -t rsa

(.py3-a2.5-env) [deploy@ansible ~]$ ssh-copy-id -i /home/deploy/.ssh/id_rsa.pub root@test.example.com

 

6、执行playbooks

(.py3-a2.5-env) [deploy@ansible test_playbooks]$ ansible-playbook -i inventory/testenv ./deploy.yml

# 去测试机上查看
[root@localhost ~]# ls
anaconda-ks.cfg  test.txt

[root@localhost ~]# cat test.txt 
Currently root is logining test.example.com