1
2
3
4

# Redhat/CentOS Linuxの場合, epolリポジトリをインストールする必要がある。
# Fedoraの場合、デフォルトのリポジトリにAnsibleを含まれているため，直接インストールできる
sudo yum install epel-release
sudo yum install ansible -y

1
2
3
4
5
6

# ssh key を生成
ssh-keygen
# リモートノードにssh keyをコピー
ssh-copy-id remoteuser@remoteserver
# リモートノードをknows_hostsに追加（ssh Keyの保存確認がなくなる）
ssh-keyscan remote_servers >> ~/.ssh/known_hosts

1

ssh remoteuser@remoteserver

1
2
3

192.168.1.50
aserver.example.org
bserver.example.org

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

mail.example.com

[webservers]
foo.example.com
bar.example.com

[dbservers]
one.example.com
two.example.com
three.example.com

1

ansible <host-pattern> [options]

1

ansible all -m ping -u bruce

1

ansible all -a "/bin/echo hello"

1

ansible web -m copy -a "src=/etc/hosts dest=/tmp/hosts"

1

ansible web -m yum -a "name=acme state=present"

1

ansible all -m user -a "name=foo password=<crypted password here>"

1

ansible web -m git -a "repo=git://foo.example.org/repo.git dest=/srv/myapp version=HEAD"

1

ansible web -m service -a "name=httpd state=started"

1

ansible lb -a "/sbin/reboot" -f 10

1

ansible all -m setup

1

ansible-playbook deploy.yml

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

---
- hosts: web
  vars:
    http_port: 80
    max_clients: 200
  remote_user: root
  tasks:
  - name: ensure apache is at the latest version
    yum: pkg=httpd state=latest

  - name: Write the configuration file
    template: src=templates/httpd.conf.j2 dest=/etc/httpd/conf/httpd.conf
    notify:
    - restart apache

  - name: Write the default index.html file
    template: src=templates/index.html.j2 dest=/var/www/html/index.html

  - name: ensure apache is running
    service: name=httpd state=started
  handlers:
    - name: restart apache
      service: name=httpd state=restarted

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

[
  {
    "hosts": "web",
    "vars": {
      "http_port": 80,
      "max_clients": 200
    },
    "remote_user": "root",
    "tasks": [
      {
        "name": "ensure apache is at the latest version",
        "yum": "pkg=httpd state=latest"
      },
      {
        "name": "Write the configuration file",
        "template": "src=templates/httpd.conf.j2 dest=/etc/httpd/conf/httpd.conf",
        "notify": [
          "restart apache"
        ]
      },
      {
        "name": "Write the default index.html file",
        "template": "src=templates/index.html.j2 dest=/var/www/html/index.html"
      },
      {
        "name": "ensure apache is running",
        "service": "name=httpd state=started"
      }
    ],
    "handlers": [
      {
        "name": "restart apache",
        "service": "name=httpd state=restarted"
      }
    ]
  }
]

1
2
3
4
5
6

---
- hosts: web
  remote_user: root
  tasks:
  - name: ensure apache is at the latest version
    yum: pkg=httpd state=latest

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

---
# apache をインストールのplay
- hosts: web
  remote_user: root
  tasks:
  - name: ensure apache is at the latest version
    yum: pkg=httpd state=latest

# mysql をインストールのplay
- hosts: lb
  remote_user: root
  tasks:
  - name: ensure mysqld is at the latest version
    yum: pkg=mariadb state=latest

1
2
3

  -m <モジュール名>

  -a モジュールのパラメータ

1
2
3
4

# module copyを利用し、管理者ノードの/etc/hostsをリモートノードの/tmp/hostsにコピー
ansible all -m copy -a "src=/etc/hosts dest=/tmp/hosts"
# module yumを利用しリモートノードweb上にhttpdパッケージをインストール
ansible web -m yum -a "name=httpd state=present"

1
2
3
4
5
6
7
8

---
  tasks:
  - name: ensure apache is at the latest version
    yum: pkg=httpd state=latest
  - name: write the apache config file
    template: src=templates/httpd.conf.j2 dest=/etc/httpd/conf/httpd.conf
  - name: ensure apache is running
    service: name=httpd state=started

1

ansible servers -m ping

1
2

- debug:
    msg: "System \{\{ inventory_hostname \}\} has gateway \{\{ ansible_default_ipv4.gateway \}\}"

1
2
3
4

TASK [debug] *******************************************************************
ok: [localhost] => {
    "msg": "System localhost has gateway 192.168.50.1"
}

1
2
3

  - name: Display all variables/facts known for a host
    debug:
      var: hostvars[inventory_hostname]["ansible_default_ipv4"]["gateway"]

1
2
3
4

  TASK [Display part of variables/facts known for a host] ************************
  ok: [localhost] => {
      "hostvars[inventory_hostname][\"ansible_default_ipv4\"][\"gateway\"]": "192.168.50.1"
  }

1
2
3
4
5

  - shell: /usr/bin/uptime
    register: result

  - debug:
      var: result

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

  TASK [command] *****************************************************************
  changed: [localhost]

  TASK [debug] *******************************************************************
  ok: [localhost] => {
      "result": {
          "changed": true,

          "cmd": "/usr/bin/uptime",
          "delta": "0:00:00.003212",
          "end": "2017-01-01 21:30:02.817443",
          "rc": 0,
          "start": "2017-01-01 21:30:02.814231",
          "stderr": "",
          "stdout": " 21:30:02 up 12:38,  8 users,  load average: 1.13, 1.31, 1.14",
          "stdout_lines": [
              " 21:30:02 up 12:38,  8 users,  load average: 1.13, 1.31, 1.14"
          ],
          "warnings": []
      }
  }

1
2
3
4
5
6

- copy:
    src: /srv/myfiles/foo.conf
    dest: /etc/foo.conf
    owner: foo
    group: foo
    mode: 0644

1
2
3
4

- copy:
    src: sudoers
    dest: /tmp
    backup: yes

1
2
3
4

- copy:
    src: /mine/sudoers
    dest: /etc/sudoers
    validate: 'visudo -cf %s'

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

<html>
<title>Demo</title>
<body>
<div class="block" style="height: 99%;">
    <div class="centered">
        <h1>#46 Demo</h1>
        <p>Served by \{\{ ansible_hostname \}\} (\{\{ ansible_default_ipv4.address \}\}).</p>
    </div>
</div>
</body>
</html>

1
2

- name: Write the default index.html file
  template: src=templates/index.html.j2 dest=/var/www/html/index.html

1
2
3
4

ServerRoot "/etc/httpd"
...
Listen \{\{ http_port \}\}
...

1
2
3
4
5
6
7
8

- hosts: localhost
  vars:
    http_port: 8080
  remote_user: root
  tasks:

  - name: Write the configuration file
    template: src=templates/httpd.conf.j2 dest=/etc/httpd/conf/httpd.conf

1
2
3
4
5
6
7
8

- template:
    src: etc/ssh/sshd_config.j2
    dest: /etc/ssh/sshd_config.j2
    owner: root
    group: root
    mode: '0600'
    validate: /usr/sbin/sshd -t %s
    backup: yes

1
2
3
4
5
6
7

- file:
    path: /etc/foo.conf
    owner: foo
    group: foo
    mode: 0644
    #mode: "u=rw,g=r,o=r"
    #mode: "u+rw,g-wx,o-rwx"

1
2
3
4
5
6

- file:
    src: /file/to/link/to
    dest: /path/to/symlink
    owner: foo
    group: foo
    state: link

1
2
3
4

- file:
    path: /etc/foo.conf
    state: touch
    mode: "u=rw,g=r,o=r"

1
2
3
4
5

# create a directory if it doesn't exist
- file:
    path: /etc/some_directory
    state: directory
    mode: 0755

1
2
3
4
5

  - user:
      name: johnd
      comment: "John Doe"
      uid: 1040
      group: admin

1
2
3
4
5

  - user:
      name: james
      shell: /bin/bash
      groups: admins,developers
      append: yes

1
2
3
4

- user:
    name: johnd
    state: absent
    remove: yes

1
2
3
4
5

  - user:
      name: jsmith
      generate_ssh_key: yes
      ssh_key_bits: 2048
      ssh_key_file: .ssh/id_rsa

1
2
3
4
5

  - user:
      name: james18
      shell: /bin/zsh
      groups: developers
      expires: 1422403387

1
2
3
4

  - name: install the latest version of Apache
    yum:
      name: httpd
      state: latest

1
2
3
4

  - name: install one specific version of Apache
    yum:
      name: httpd-2.2.29-1.4.amzn1
      state: present

1
2
3
4

  - name: remove the Apache package
    yum:
      name: httpd
      state: absent

1
2
3
4
5

  - name: install the latest version of Apache from the testing repo
    yum:
      name: httpd
      enablerepo: testing
      state: present

1
2
3
4
5
6
7
8
9

- name: install the 'Development tools' package group
  yum:
    name: "@Development tools"
    state: present

- name: install the 'Gnome desktop' environment group
  yum:
    name: "@^gnome-desktop-environment"
    state: present

1
2
3
4

- name: install nginx rpm from a local file
  yum:
    name: /usr/local/src/nginx-release-centos-6-0.el6.ngx.noarch.rpm
    state: present

1
2
3
4

- name: install the nginx rpm from a remote repo
  yum:
    name: http://nginx.org/packages/centos/6/noarch/RPMS/nginx-release-centos-6-0.el6.ngx.noarch.rpm
    state: present

1
2
3

  - service:
      name: httpd
      state: started

1
2
3

  - service:
      name: httpd
      state: stopped

1
2
3

  - service:
      name: httpd
      state: restarted

1
2
3

  - service:
      name: httpd
      state: reloaded

1
2
3

- service:
    name: httpd
    enabled: yes

1
2
3
4

- service:
    name: network
    state: restarted
    args: eth0

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

- firewalld:
    service: https
    permanent: true
    state: enabled

- firewalld:
    zone: dmz
    service: http
    permanent: true
    state: enabled

1
2
3
4
5
6
7
8
9

- firewalld:
    port: 8081/tcp
    permanent: true
    state: disabled

- firewalld:
    port: 161-162/udp
    permanent: true
    state: enabled

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

- firewalld:
    rich_rule: 'rule service name="ftp" audit limit value="1/m" accept'
    permanent: true
    state: enabled

- firewalld:
    source: 192.0.2.0/24
    zone: internal
    state: enabled

- firewalld:
    zone: trusted
    interface: eth2
    permanent: true
    state: enabled

- firewalld:
    masquerade: yes
    state: enabled
    permanent: true
    zone: dmz

1

  - shell: somescript.sh >> somelog.txt

1
2
3

  - shell: somescript.sh >> somelog.txt
    args:
      chdir: somedir/

1
2
3
4

  - shell: somescript.sh >> somelog.txt
    args:
      chdir: somedir/
      creates: somelog.txt

1
2
3

  - shell: cat < /tmp/\*txt
    args:
      executable: /bin/bash

1
2

  - name: test $home
    command: echo "test3" > ~/tmp/test3 && echo "test4" > ~/tmp/test4