RHCE 作业七（ansible基础配置详解）

目录

1、准备三台机器，并分别修改主机名（重启生效）

2、配置静态IP

3、在/etc/hosts文件中配置主机名映射关系，确保多台主机能够通过主机名互访

4、然后去配置server在受控主机的免密登录

5、要确保控制主机与受控主机上都有python和ssh服务（一般系统都会自带）

6、配置yum源使用Centos-stream.repo

7、安装ansible

8、使用ansible --version验证ansible是否安装成功

9、配置清单指定受控主机 ：/etc/ansible/hosts

10、使用ansible node -m ping验证配置是否成功

11、配置ansible.cfg文件

1、准备三台机器，并分别修改主机名（重启生效）

server

[[email protected] ~]# hostnamectl set-hostname server

client_1

[[email protected] ~]# hostnamectl set-hostname client_1

client_2

[[email protected] ~]# hostnamectl set-hostname client_2

2、配置静态IP

[[email protected] ~]# nmcli connection modify ens160 ipv4.addresses 192.168.5.128/24 ipv4.gateway 192.168.5.2 ipv4.dns 8.8.8.8 ipv4.method manual connection.autoconnect yes
[[email protected] ~]# nmcli connection up ens160

[[email protected]_1 ~]# nmcli connection modify ens160 ipv4.addresses 192.168.5.129/24 ipv4.gateway 192.168.5.2 ipv4.dns 8.8.8.8 ipv4.method manual connection.autoconnect yes
[[email protected]_1 ~]# nmcli connection up ens160

[[email protected]_2 ~]# nmcli connection modify ens160 ipv4.addresses 192.168.5.130/24 ipv4.gateway 192.168.5.2 ipv4.dns 8.8.8.8 ipv4.method manual connection.autoconnect yes
[[email protected]_2 ~]# nmcli connection up ens160

3、在/etc/hosts文件中配置主机名映射关系，确保多台主机能够通过主机名互访

可利用xshell撰写栏同步撰写

[[email protected] ~]# vim /etc/hosts
[[email protected]_1 ~]# vim /etc/hosts
[[email protected]_2 ~]# vim /etc/hosts
#配置内容
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4 
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.5.128 server
192.168.5.129 client_1
192.168.5.130 client_2

"/etc/hosts" 6L, 226C                                      6,0-1         All

4、然后去配置server在受控主机的免密登录

#生成密钥
[[email protected] ~]# ssh-keygen -t rsa -P '' -q -f ~/.ssh/id_rsa
#rsa加密，密码为空，静默执行，存放文件为 ~/.ssh/id_rsa

#转发公钥给两个受控主机
[[email protected] ~]# ssh-copy-id [email protected]_1
[[email protected] ~]# ssh-copy-id [email protected]_2

5、要确保控制主机与受控主机上都有python和ssh服务（一般系统都会自带）

受控主机配置完成

继续在控制主机上配置以下内容

6、配置yum源使用Centos-stream.repo

将Centos-stream.repo文件放在/etc/yum.repo.d目录下

[[email protected] ~]# ls /etc/yum.repos.d/
CentOS-Stream.repo

7、安装ansible

[[email protected] yum.repos.d]# yum install ansible -y
Complete!

8、使用ansible --version验证ansible是否安装成功

[[email protected] ~]# ansible --version
ansible [core 2.12.7]        #安装成功
  config file = /etc/ansible/ansible.cfg
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python3.8/site-packages/ansible
  ansible collection location = /root/.ansible/collections:/usr/share/ansible/collections
  executable location = /usr/bin/ansible
  python version = 3.8.8 (default, Aug  2 2021, 14:57:02) [GCC 8.5.0 20210514 (Red Hat 8.5.0-3)]
  jinja version = 2.11.3
  libyaml = True

9、配置清单指定受控主机 ：/etc/ansible/hosts

[[email protected] ~]# vim /etc/ansible/hosts 
……
## db-[99:101]-node.example.com
[client]
client_1
client_2

10、使用ansible node -m ping验证配置是否成功

[[email protected] ~]# ansible client -m ping
client_2 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}
client_1 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}

11、配置ansible.cfg文件

[[email protected] ~]# vim /etc/ansible/ansible.cfg 
[defaults]
inventory = /etc/ansible/hosts
sudo_user = root
ask_sudo_pass = True
ask_pass = False
remote_user = student

[privilege_escalation]
become = True
become_method = sudo
become_user = root
become_ask_pass = False