ansible host详解

男娘i 2022-07-12 12:52 358阅读 0赞

1、看看安装了那些  
\[root@elb ~\]\# rpm -ql ansible |more     
/etc/ansible                           
/etc/ansible/ansible.cfg   配置文件  
/etc/ansible/hosts         主机清单  
/etc/ansible/roles  
/usr/bin/ansible  
/usr/bin/ansible-console  
/usr/bin/ansible-doc  
/usr/bin/ansible-galaxy  
/usr/bin/ansible-playbook  
/usr/bin/ansible-pull  
/usr/bin/ansible-vault  
/usr/lib/python2.6/site-packages/ansible  
/usr/lib/python2.6/site-packages/ansible-2.2.1.0-py2.6.egg-info  
/usr/lib/python2.6/site-packages/ansible-2.2.1.0-py2.6.egg-info/PKG-INFO  
/usr/lib/python2.6/site-packages/ansible-2.2.1.0-py2.6.egg-info/SOURCES.txt  
/usr/lib/python2.6/site-packages/ansible-2.2.1.0-py2.6.egg-info/dependency\_links  
.txt  
/usr/lib/python2.6/site-packages/ansible-2.2.1.0-py2.6.egg-info/requires.txt  
/usr/lib/python2.6/site-packages/ansible-2.2.1.0-py2.6.egg-info/top\_level.txt  
/usr/lib/python2.6/site-packages/ansible/\_\_init\_\_.py  
/usr/lib/python2.6/site-packages/ansible/\_\_init\_\_.pyc  
/usr/lib/python2.6/site-packages/ansible/\_\_init\_\_.pyo  
/usr/lib/python2.6/site-packages/ansible/cli  
。。。。。。。。。。。  
  
  
2、命令详解  
\[root@elb ~\]\# ansible  
Usage: ansible <host-pattern> \[options\]  
  
  
Options:  
  -a MODULE\_ARGS, --args=MODULE\_ARGS                       -a指定模块  
                        module arguments  
  --ask-vault-pass      ask for vault password  
  -B SECONDS, --background=SECONDS  
                        run asynchronously, failing after X seconds  
                        (default=N/A)  
  -C, --check           don't make any changes; instead, try to predict some  
                        of the changes that may occur  
  -D, --diff            when changing (small) files and templates, show the  
                        differences in those files; works great with --check  
  -e EXTRA\_VARS, --extra-vars=EXTRA\_VARS  
                        set additional variables as key=value or YAML/JSON  
  -f FORKS, --forks=FORKS  
                        specify number of parallel processes to use  
                        (default=5)  
  -h, --help            show this help message and exit  
  -i INVENTORY, --inventory-file=INVENTORY                                指定主机，默认读主机列表  
                        specify inventory host path  
                        (default=/etc/ansible/hosts) or comma separated host  
                        list.  
  -l SUBSET, --limit=SUBSET  
                        further limit selected hosts to an additional pattern  
  --list-hosts          outputs a list of matching hosts; does not execute  
                        anything else  
  -m MODULE\_NAME, --module-name=MODULE\_NAME                               模块，默认为command  
                        module name to execute (default=command)  
  -M MODULE\_PATH, --module-path=MODULE\_PATH  
                        specify path(s) to module library (default=None)  
  --new-vault-password-file=NEW\_VAULT\_PASSWORD\_FILE  
                        new vault password file for rekey  
  -o, --one-line        condense output  
  --output=OUTPUT\_FILE  output file name for encrypt or decrypt; use - for  
                        stdout  
  -P POLL\_INTERVAL, --poll=POLL\_INTERVAL  
                        set the poll interval if using -B (default=15)  
  --syntax-check        perform a syntax check on the playbook, but do not  
                        execute it  
  -t TREE, --tree=TREE  log output to this directory  
  --vault-password-file=VAULT\_PASSWORD\_FILE  
                        vault password file  
  -v, --verbose         verbose mode (-vvv for more, -vvvv to enable  
                        connection debugging)  
  --version             show program's version number and exit  
  
  
  Connection Options:  
    control as whom and how to connect to hosts  
  
  
    -k, --ask-pass      ask for connection password  
    --private-key=PRIVATE\_KEY\_FILE, --key-file=PRIVATE\_KEY\_FILE  
                        use this file to authenticate the connection  
    -u REMOTE\_USER, --user=REMOTE\_USER  指定一个远程用户（远程主机上必须有，默认为root）                                    
                        connect as this user (default=None)  
    -c CONNECTION, --connection=CONNECTION  
                        connection type to use (default=smart)  
    -T TIMEOUT, --timeout=TIMEOUT  
                        override the connection timeout in seconds  
                        (default=10)  
    --ssh-common-args=SSH\_COMMON\_ARGS  
                        specify common arguments to pass to sftp/scp/ssh (e.g.  
                        ProxyCommand)  
    --sftp-extra-args=SFTP\_EXTRA\_ARGS  
                        specify extra arguments to pass to sftp only (e.g. -f,  
                        -l)  
    --scp-extra-args=SCP\_EXTRA\_ARGS  
                        specify extra arguments to pass to scp only (e.g. -l)  
    --ssh-extra-args=SSH\_EXTRA\_ARGS  
                        specify extra arguments to pass to ssh only (e.g. -R)  
  
  
  Privilege Escalation Options:  
    control how and which user you become as on target hosts  
  
  
    -s, --sudo          run operations with sudo (nopasswd) (deprecated, use  
                        become)  
    -U SUDO\_USER, --sudo-user=SUDO\_USER  
                        desired sudo user (default=root) (deprecated, use  
                        become)  
    -S, --su            run operations with su (deprecated, use become)  
    -R SU\_USER, --su-user=SU\_USER  
                        run operations with su as this user (default=root)  
                        (deprecated, use become)  
    -b, --become        run operations with become (does not imply password  
                        prompting)  
    --become-method=BECOME\_METHOD  
                        privilege escalation method to use (default=sudo),  
                        valid choices: \[ sudo | su | pbrun | pfexec | doas |  
                        dzdo | ksu \]  
    --become-user=BECOME\_USER  
                        run operations as this user (default=root)  
    --ask-sudo-pass     ask for sudo password (deprecated, use become)  
    --ask-su-pass       ask for su password (deprecated, use become)  
    -K, --ask-become-pass  
                        ask for privilege escalation password  
  
  
3、host列表讲解  
\[root@elb ~\]\# cat /etc/ansible/hosts   
\# This is the default ansible 'hosts' file.  
\#  
\# It should live in /etc/ansible/hosts  
\#  
\#   - Comments begin with the '\#' character  
\#   - Blank lines are ignored  
\#   - Groups of hosts are delimited by \[header\] elements  
\#   - You can enter hostnames or ip addresses  
\#   - A hostname/ip can be a member of multiple groups  
\[webservers\]  
192.168.3.49  
\[dbservers\]  
192.168.3.62  
  
  
\[root@elb ~\]\# ansible -i /etc/ansible/hosts webservers -u root -m command -a ’ls /home‘ -k   （-k输入密码）  
\[root@elb ~\]\# ansible -i /etc/ansible/hosts webservers -u root -m command -a 'ls /home'  
192.168.3.49 | SUCCESS | rc=0 >>  
wolf  
  
  
默认的可以省略掉  
ansible webservers -a 'ls /home'  
\[root@elb ~\]\# ansible webservers -a 'ls /home'  
192.168.3.49 | SUCCESS | rc=0 >>  
wolf  
  
  
定义连续  
\[webservers\]  
192.168.3.49  
\[dbservers\]  
192.168.3.62  
192.168.3.\[1:10\]     (表示1到10)  
  
ansible模式是用ssh key的方式来进行连接，也可以-k输入密码方式  
  
ansible all -m ping     ping是一个模块，没有任何参数  
\[root@elb ~\]\# ansible all -m ping  
192.168.3.49 | SUCCESS => \{  
    "changed": false,   
    "ping": "pong"  
\}  
192.168.3.62 | SUCCESS => \{  
    "changed": false,   
    "ping": "pong"  
\}  
\[root@elb ~\]\# ansible webservers -m ping     
192.168.3.49 | SUCCESS => \{  
    "changed": false,   
    "ping": "pong"  
\}  
\[root@elb ~\]\# ansible dbservers -m ping              
192.168.3.62 | SUCCESS => \{  
    "changed": false,   
    "ping": "pong"  
\}  
  
  
不直接用root用户  
ansible all -m ping --sudo  
  
  
嵌套  
\[webservers\]  
192.168.3.49  
\[dbservers\]  
192.168.3.62  
\[wolf:children\]  
webservers  
dbservers  
  
  
"/etc/ansible/hosts" 7L, 88C written  
\[root@elb ~\]\# ansible wolf -m ping  
192.168.3.49 | SUCCESS => \{  
    "changed": false,   
    "ping": "pong"  
\}  
192.168.3.62 | SUCCESS => \{  
    "changed": false,   
    "ping": "pong"  
\}  
\[root@elb ~\]\# ansible webservers -m ping      
192.168.3.49 | SUCCESS => \{  
    "changed": false,   
    "ping": "pong"  
\}  
\[root@elb ~\]\# ansible dbservers -m ping     
192.168.3.62 | SUCCESS => \{  
    "changed": false,   
    "ping": "pong"  
\}