ansible 的常用模块操作

• 使用临时命令可以快速执行单个命令Ansible任务不需要保存，以后再运行
• 这是一个简单的在线操作，不需要编写playbook即可运行
• 临时命令对快速测试和改变非常有用

• shell模块调用/bin/sh指令执行
• command不调用模块shell所以没有指令bash的环境变量
• raw很多地方和shell类似地，建议使用更多的地方shell和command但是如果使用旧版本的话。python，需要用到raw，或者客户端是路由器，因为没有安装python需要使用模块raw模块了
• 没有幂等性

• 权力等性是指多次操作，结果是一致的
• 使用-o单行格式显示选项Ansible输出临时命令
• raw,command,shell 没有等性，其他模块大部分都是幂等的，可以自动进行更改跟踪

临时命令 ad-hoc

httpd 是创建的
[root@SYL2 ~]# cd /opt/httpd/
[root@SYL2 httpd]# vim inventory
[root@SYL2 httpd]# cat inventory 
[webservers]
SYL3 ansible_user=root ansible_password=run123456
[root@SYL2 httpd]# cat inventory |grep checking
[root@SYL2 httpd]# cat ansible.cfg |grep checking
# uncomment this to disable SSH key host checking
host_key_checking = False
# host key checking setting above.
[root@SYL2 httpd]# 
[root@SYL2 httpd]# vim ansible.cfg 
[root@SYL2 httpd]# cat ansible.cfg |grep /opt/httpd/inventory
inventory      =/opt/httpd/inventory
[root@SYL2 httpd]# 


识别域名
[root@SYL2 httpd]# vim /etc/hosts
[root@SYL2 httpd]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.232.128 SYL3
[root@SYL2 httpd]# 

控制节点（控制主机）
ip 192.168.232.129
域名 SYL2
版本 CentOS Stream release 8

受管节点（受管主机）
ip 192.168.232.128
域名 SYL3
版本 Red Hat Enterprise Linux release 8.5

[root@SYL2 httpd]# ansible-doc ping 

[root@SYL2 httpd]# ansible all -m ping
SYL3 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}
[root@SYL2 httpd]# 

1.查看版本
[root@SYL2 httpd]# ansible all -m command -a 'cat /etc/redhat-release'
SYL3 | CHANGED | rc=0 >>
Red Hat Enterprise Linux release 8.5 (Ootpa)

2.查看目录
[root@SYL2 httpd]# ansible all -m command -a 'ls /tmp'
SYL3 | CHANGED | rc=0 >>
ansible_command_payload_9silzmua
vmware-root_1004-2957649132
vmware-root_1010-2957124853
vmware-root_1014-2965448048
[root@SYL2 httpd]# 

[root@SYL2 httpd]# ansible all -m command -a 'ls /tmp' -o
SYL3 | CHANGED | rc=0 | (stdout) aaaa\nansible_command_payload_isdmq8ja\nmuc\nvmware-root_1004-2957649132\nvmware-root_1010-2957124853\nvmware-root_1014-2965448048
[root@SYL2 httpd]# 

3.创建文件
[root@SYL2 httpd]# ansible all -m command -a 'touch /tmp/aaaa'
[WARNING]: Consider using the file module with state=touch rather than running
'touch'.  If you need to use command because file is insufficient you can add
'warn: false' to this command task or set 'command_warnings=False' in
ansible.cfg to get rid of this message.
SYL3 | CHANGED | rc=0 >>

[root@SYL2 httpd]# 
在受管主机查看
[root@SYL3 ~]# ls /tmp/
aaaa                         vmware-root_1010-2957124853
vmware-root_1004-2957649132  vmware-root_1014-2965448048
[root@SYL3 ~]#         

重定向
[root@SYL2 httpd]# ansible all -m command -a 'echo aaa > /tmp/muc '
SYL3 | CHANGED | rc=0 >>
aaa > /tmp/muc
[root@SYL2 httpd]# 

[root@SYL3 ~]# ls /tmp/
aaaa                         vmware-root_1010-2957124853
vmware-root_1004-2957649132  vmware-root_1014-2965448048


管道符
[root@SYL2 httpd]# ansible all -m command -a 'ps -ef|grep sleep' 
SYL3 | FAILED | rc=1 >>
error: unsupported SysV option

Usage:
 ps [options]

 Try 'ps --help <simple|list|output|threads|misc|all>'
  or 'ps --help <s|l|o|t|m|a>'
 for additional help text.

For more details see ps(1).non-zero return code
[root@SYL2 httpd]# 

重定向

[root@SYL2 httpd]# ansible all -m raw -a 'echo 1223 > /tmp/muc'SYL3 | CHANGED | rc=0 >>
Shared connection to syl3 closed.

[root@SYL2 httpd]# ansible all -m raw -a 'echo 666 >> /tmp/muc'
SYL3 | CHANGED | rc=0 >>
Shared connection to syl3 closed.

[root@SYL2 httpd]# 

[root@SYL3 ~]# ls /tmp/
aaaa  vmware-root_1004-2957649132  vmware-root_1014-2965448048
muc   vmware-root_1010-2957124853
[root@SYL3 ~]# ls /tmp/muc 
/tmp/muc
[root@SYL3 ~]# cat /tmp/muc 
1223
[root@SYL3 ~]# cat /tmp/muc 
1223
666
[root@SYL3 ~]# 


管道符
[root@SYL2 httpd]# ansible all -m raw -a 'ps -ef|grep sleep'SYL3 | CHANGED | rc=0 >>
root      724913    1670  0 15:16 pts/0    00:00:00 sleep 500
root      724940    1669  0 15:16 ?        00:00:00 bash -c export LANG="en_US";export LANGUAGE="en_US";export LC_ALL="en_US";free;echo finalshell_separator;uptime;echo finalshell_separator;cat /proc/net/dev;echo finalshell_separator;df;echo finalshell_separator;sleep 1;free;echo finalshell_separator;uptime;echo finalshell_separator;cat /proc/net/dev;echo finalshell_separator;df;echo finalshell_separator;
root      724957  724940  0 15:16 ?        00:00:00 sleep 1
root      724999  720210  0 15:16 pts/2    00:00:00 bash -c ps -ef|grep sleep
root      725019  724999  0 15:16 pts/2    00:00:00 grep sleep
Shared connection to syl3 closed.

[root@SYL2 httpd]#

[root@SYL3 ~]# sleep 500

[root@SYL2 httpd]# ansible all -m shell -a 'set'

创建简单脚本，受管
[root@SYL3 ~]# mkdir /scripts
[root@SYL3 ~]# vim /scripts/test.sh
[root@SYL3 ~]# cat /scripts/test.sh
#!/bin/bash

nohup sleep 7000 &
[root@SYL3 ~]# 

主控
[root@SYL2 httpd]# ansible all -m shell -a '/bin/bash /scripts/test.sh'
SYL3 | CHANGED | rc=0 >>

[root@SYL2 httpd]# ansible all -m shell -a 'ps -ef|grep sleep
'SYL3 | CHANGED | rc=0 >>
root      899244       1  0 16:40 ?        00:00:00 sleep 7000
root      899927    1669  0 16:41 ?        00:00:00 bash -c export LANG="en_US";export LANGUAGE="en_US";export LC_ALL="en_US";free;echo finalshell_separator;uptime;echo finalshell_separator;cat /proc/net/dev;echo finalshell_separator;df;echo finalshell_separator;sleep 1;free;echo finalshell_separator;uptime;echo finalshell_separator;cat /proc/net/dev;echo finalshell_separator;df;echo finalshell_separator;
root      899944  899927  0 16:41 ?        00:00:00 sleep 1
root      900033  899134  0 16:41 pts/2    00:00:00 /bin/sh -c /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1653468077.5401285-1002951-32489098133078/AnsiballZ_command.py && sleep 0
root      900053  900052  0 16:41 pts/2    00:00:00 /bin/sh -c ps -ef|grep sleep
root      900055  900053  0 16:41 pts/2    00:00:00 grep sleep
[root@SYL2 httpd]# 

杀掉进程
[root@SYL2 httpd]# ansible all -m shell -a 'kill -9 899244'SYL3 | CHANGED | rc=0 >>

[root@SYL2 httpd]# ansible all -m shell -a 'ps -ef|grep sleep'
SYL3 | CHANGED | rc=0 >>
root      904415    1669  0 16:43 ?        00:00:00 bash -c export LANG="en_US";export LANGUAGE="en_US";export LC_ALL="en_US";free;echo finalshell_separator;uptime;echo finalshell_separator;cat /proc/net/dev;echo finalshell_separator;df;echo finalshell_separator;sleep 1;free;echo finalshell_separator;uptime;echo finalshell_separator;cat /proc/net/dev;echo finalshell_separator;df;echo finalshell_separator;
root      904432  904415  0 16:43 ?        00:00:00 sleep 1
root      904521  903987  0 16:43 pts/2    00:00:00 /bin/sh -c /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1653468201.1694856-1007768-108871760899245/AnsiballZ_command.py && sleep 0
root      904541  904540  0 16:43 pts/2    00:00:00 /bin/sh -c ps -ef|grep sleep
root      904543  904541  0 16:43 pts/2    00:00:00 grep sleep
[root@SYL2 httpd]# 

删除文件
[root@SYL2 httpd]# ansible all -m shell -a 'rm -rf /etc/yum.repos.d/*'
SYL3 | CHANGED | rc=0 >>

[root@SYL2 httpd]# 

[root@SYL3 ~]# cd /etc/yum.repos.d/
[root@SYL3 yum.repos.d]# ls
redhat.repo
[root@SYL3 yum.repos.d]# ls
[root@SYL3 yum.repos.d]# 

[root@ansible ~]# ll /etc/ansible/scripts/
总用量 4
-rw-r--r--. 1 root root 61 9月   8 18:59 a.sh
[root@ansible ~]# ansible 172.16.103.129 -m script -a '/etc/ansible/scripts/a.sh &>/tmp/a'
172.16.103.129 | SUCCESS => {
    "changed": true,
    "rc": 0,
    "stderr": "Shared connection to 172.16.103.129 closed.\r\n",
    "stderr_lines": [
        "Shared connection to 172.16.103.129 closed."
    ],
    "stdout": "",
    "stdout_lines": []
}


//查看受控机上的/tmp/a文件内容
[root@ansible ~]# ansible 172.16.103.129 -m shell -a 'cat /tmp/a'
172.16.103.129 | SUCCESS | rc=0 >>
root:x:0:0:root:/root:/bin/bash
....此处省略N行
jerry:x:1000:1000::/home/jerry:/bin/bash

//由此可见确是在受控机上执行了主控机上的脚本，且输出记录到了受控机上。因为此处 \
//的jerry用户是在受控机上才有的用户

[root@SYL2 httpd]# cd /etc/yum.repos.d/
[root@SYL2 yum.repos.d]# ls
CentOS-Base.repo  CentOS-SIG-ansible-29.repo
[root@SYL2 yum.repos.d]# cd /opt/httpd/
[root@SYL2 httpd]# ls
 ansible.cfg   inventory 
[root@SYL2 httpd]# vim ansible.cfg 
[root@SYL2 httpd]# cat ansible.cfg |grep command_warnings
command_warnings = False //将注释取消，会把警告取消
[root@SYL2 httpd]# 

[root@SYL2 httpd]# ansible all -m template -a 'src=/etc/yum.repos.d/CentOS-Base.repo dest=/etc/yum.repos.d/CentOS-Base.repo owner=root group=root mode=0644'
SYL3 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "checksum": "8bbf30b2d80c3b97292ca7b32f33ef494269a5b8",
    "dest": "/etc/yum.repos.d/CentOS-Base.repo",
    "gid": 0,
    "group": "root",
    "md5sum": "ed031c350da2532e6a8d09a4d9b05278",
    "mode": "0644",
    "owner": "root",
    "secontext": "system_u:object_r:system_conf_t:s0",
    "size": 1653,
    "src": "/root/.ansible/tmp/ansible-tmp-1653470010.8950334-1083231-220201675160083/source",
    "state": "file",
    "uid": 0
}
[root@SYL2 httpd]# 

src=源地址
dest=目标地址
owner=所有者
group=组
mode=权限

[root@SYL3 yum.repos.d]# ls
[root@SYL3 yum.repos.d]# ls
CentOS-Base.repo
[root@SYL3 yum.repos.d]# 

• name：要管理的包名
• state：要进行的操作

• latest：安装软件
• installed：安装软件
• present：安装软件
• removed：卸载软件
• absent：卸载软件

在受控机上查询看vsftpd软件是否安装
[root@SYL3 ~]# rpm -qa|grep vsftpd
[root@SYL3 ~]# 

在主控主机上使用yum模块在受控机上安装vsftp
[root@SYL2 httpd]# ansible all -m dnf -a 'name=vsftpd state=present'
SYL3 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "msg": "",
    "rc": 0,
    "results": [
        "Installed: vsftpd-3.0.3-34.el8.x86_64"
    ]
}
[root@SYL2 httpd]# 

查看受控机上是否安装了vsftpd
[root@SYL3 ~]# rpm -qa|grep vsftpd
vsftpd-3.0.3-34.el8.x86_64
[root@SYL3 ~]# 

卸载
[root@SYL2 httpd]# ansible all -m dnf -a 'name=vsftpd state=absent'
SYL3 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "msg": "",
    "rc": 0,
    "results": [
        "Removed: vsftpd-3.0.3-34.el8.x86_64"
    ]
}
[root@SYL2 httpd]# 

[root@SYL3 ~]# rpm -qa|grep vsftpd
vsftpd-3.0.3-34.el8.x86_64
[root@SYL3 ~]# rpm -qa|grep vsftpd
[root@SYL3 ~]# 

[root@SYL2 httpd]# ansible all -m copy -a 'content="xixi\nhello 123\n888\n" dest=/tmp/mu'
SYL3 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "checksum": "c08e2c0d13a0b9fece8ce4a88669dd3db3d9f9e0",
    "dest": "/tmp/mu",
    "gid": 0,
    "group": "root",
    "md5sum": "56c91232eeacaa96c53eca66dbd095ba",
    "mode": "0644",
    "owner": "root",
    "secontext": "unconfined_u:object_r:admin_home_t:s0",
    "size": 19,
    "src": "/root/.ansible/tmp/ansible-tmp-1653470766.7468681-1112136-157273447777451/source",
    "state": "file",
    "uid": 0
}
[root@SYL2 httpd]# 

[root@SYL3 ~]# cd /tmp/
[root@SYL3 tmp]# ls
aaaa  muc                          vmware-root_1010-2957124853
mu    vmware-root_1004-2957649132  vmware-root_1014-2965448048
[root@SYL3 tmp]# cat mu
xixi
hello 123
888
[root@SYL3 tmp]# 

[root@SYL2 httpd]# ansible all -m copy -a 'src=inventory dest=/tmp/abc owner=root group=root mode=0644'
SYL3 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "checksum": "0dbc13c68f309ce2dfc62b3d4fd55684f0a6d5c3",
    "dest": "/tmp/abc/inventory",
    "gid": 0,
    "group": "root",
    "md5sum": "4b525f0fa149d62259f8b527dc4f2da2",
    "mode": "0644",
    "owner": "root",
    "secontext": "unconfined_u:object_r:admin_home_t:s0",
    "size": 63,
    "src": "/root/.ansible/tmp/ansible-tmp-1653470998.063784-1120985-158802732964238/source",
    "state": "file",
    "uid": 0
}
[root@SYL2 httpd]#

[root@SYL3 ~]# cd /tmp/abc
[root@SYL3 abc]# ls
[root@SYL3 abc]# ls
inventory
[root@SYL3 abc]# ll
total 4
-rw-r--r--. 1 root root 63 May 25 17:29 inventory
[root@SYL3 abc]#