Linux自动化安装

- playbook.yml        # 主剧本，也可自己配置剧本，导入所需模块
- inventory.yml       # 资产清单配置文件，配置服务器ip密码
- ansible.cfg         # 通用配置
- roles               # 中放各种模块
  - common            # 通用任务
  - init-env          # 初始化环境，创建目录等
  - ...               # 其他模块

cd ansible-install && bash install_ansible.sh

# 包管理工具源配置
repo_source:
  hosts:
    # CentOS 的x86架构机器，名称不能改
    yumsource_x86:
      ansible_host: 172.38.160.13
      ansible_password: "xxx"
      # 工具源 httpd端口自定义
      repo_port: 80
      # 工具源 存放httpd路径
      repo_path: centos
    # arm 架构机器，没有可以不配
    yumsource_arm:
      ansible_host: 172.38.160.13
      ansible_password: "xxx"
    # Ubuntu 的x86机器
    aptsource_x86:
      ansible_host: 172.38.160.13
      ansible_user: "ubuntu"
      ansible_password: "xxx"
      # sudo密码要配置
      ansible_sudo_pass: "xxx"
      # 工具源 httpd端口自定义
      repo_port: 80
      # 工具源 存放httpd路径
      repo_path: repo
    aptsource_arm:
      ansible_host: 172.38.160.13
      ansible_password: "xxx"

echo "Your own password" > ~/my-ansible-vault-pw-file

ansible-vault encrypt_string --vault-id my_user@~/my-ansible-vault-pw-file 'Your_SSH_password' --name 'ansible_password'

ansible_password: !vault |
          $ANSIBLE_VAULT;1.2;AES256;my_user
          32623763356265356663316661366136353464386134616130353639346232356632376561613538
          6532343838666330363661376464393763616535326337380a323035363164666235646135396237
          64646662306337373636316339626130393939633264383930363466316430323766313831336435
          3566663161393938360a353039303832653964353464626333636361633838383031656336616536
          33373437323239353133663864336331303837316261653735646166643532613337

# ad-hoc
ansible all -i inventory.yml --vault-id root@~/my-ansible-vault-pw-file -m yum -a "name=docker-ce state=removed"

# playbook
ansible-playbook -i inventory --vault-id my_user@~/my-ansible-vault-pw-file first_playbook.yml

ansible-playbook -i inventory.yml playbook.yml 

ansible-playbook -i inventory.yml playbook.yml  --skip-tag=yumsource

╰─$ python command.py --help 
usage: command.py [-h]
                  {change-hosts,distribute-file,download-file,firewall-whitelist,install-chrony,install-docker,install-firewalld,install-common-tools,install-yumrepo,install-mydumper,install-ntpdate,config-yumrepo,test,sync-time}
                  ...

自动化安装Linux软件

positional arguments:
  {change-hosts,distribute-file,download-file,firewall-whitelist,install-chrony,install-docker,install-firewalld,install-common-tools,install-yumrepo,install-mydumper,install-ntpdate,config-yumrepo,test,sync-time}
                        可用模块
    change-hosts        添加主机hosts模块，默认格式为 域名前缀+IP匹配+域名后缀
    distribute-file     上传文件到远程主机
    download-file       从远程主机下载文件到本地，默认下载history操作日志
    firewall-whitelist  防火墙白名单互信模块
    install-chrony      安装chrony模块
    install-docker      安装Docker模块
    install-firewalld   安装防火墙firewalld模块
    install-common-tools
                        安装常用模块
    install-yumrepo     安装yum源模块
    install-mydumper    安装MyDumper模块
    install-ntpdate     安装ntpdate模块
    config-yumrepo      配置yum源模块
    test                test测试模块
    sync-time           同步服务器时间模块

options:
  -h, --help            show this help message and exit

╰─$ python command.py change-hosts --help                       
usage: command.py change-hosts [-h] [--hostname_prefix HOSTNAME_PREFIX] [--hostname_suffix HOSTNAME_SUFFIX]
                               [--hostsname_matching_rule HOSTSNAME_MATCHING_RULE]
                               hosts

positional arguments:
  hosts                 资产主机组-资产清单中维护

options:
  -h, --help            show this help message and exit
  --hostname_prefix HOSTNAME_PREFIX
                        修改通用域名前缀
  --hostname_suffix HOSTNAME_SUFFIX
                        修改通用域名后缀
  --hostsname_matching_rule HOSTSNAME_MATCHING_RULE
                        修改通用IP匹配规则

╰─$ python command.py test jdk-server --alias_hosts_domain=111
[WARNING]: Invalid characters were found in group names but not replaced, use -vvvv to see details
[DEPRECATION WARNING]: Specifying a list of dictionaries for vars is deprecated in favor of specifying a dictionary. This 
feature will be removed in version 2.18. Deprecation warnings can be disabled by setting deprecation_warnings=False in 
ansible.cfg.

PLAY [jdk-server] ************************************************************************************************************

TASK [test : Add hostnames and IPs to /etc/hosts] ****************************************************************************
ok: [jdk-server01] => {
    "msg": "  111"
}

PLAY RECAP *******************************************************************************************************************
jdk-server01               : ok=1    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0