Rhce ansible

1)Installation et configurationansibleEtansibleNoeud de contrôleserver.example.comComme suit：

2)Créer un nom/home/student/ansible/inventoryLe fichier d'inventaire statique pour：

2.1)node1 - Oui.devMembres du Groupe hôte

2.2)node2- Oui.testMembres du Groupe hôte

2.3)node1Etnode2- Oui.prodMembres du Groupe hôte

2.4)node1- Oui.balancersUn membre de l'équipe principale

2.5)prodLe Groupe estwebserversMembres du Groupe hôte

3).Créer un nom/home/student/ansible/ansible.cfgProfil pour,Comme suit：

3.1Fichier d'inventaire de l'hôte/home/student/ansible/inventory

3.2La position du personnage dans le scénario est définie comme/home/student/ansible/roles

4）Connexion dans l'hôte de contrôlestudentUtilisateurs,remote_user = devops,Activer la mise à jour des privilèges

InServerInstallation de l'hôteansible,Et écrithostDocumentation
（La présence depythonModule）

[root@server ztx]# yum install ansible 

server

node1

node2

Ajouter un utilisateur au contrôle student

[root@server ztx]# useradd student
[student@server ~]$ mkdir ansible
[student@server ~]$ cd ansible/
[student@server ansible]$ vim inventory

[student@server ansible]$ vim ansible.cfg 

Voir si vous pouvez voir le profil

[student@server ansible]$ ansible --version

Modifier les informations

Ajouter un utilisateurdevops

[root@node1 admin]# [root@node1 admin]# passwd devops
Changing password for user devops.
New password: 
Retype new password: 
passwd: all authentication tokens updated successfully.
useradd devops

[root@node2 ztx]# useradd devops
[root@node2 ztx]# passwd devops
Changing password for user devops.
New password: 
Retype new password: 
passwd: all authentication tokens updated successfully.

Implémenter une connexion sans mot de passe

[student@server ansible]$ ssh-keygen  -t rsa -f  ~/.ssh/id_rsa -P "" -q
[student@server ansible]$ ssh-copy-id  -i ~/.ssh/id_rsa.pub  devops@node1
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/student/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
devops@node1's password: Number of key(s) added: 1 Now try logging into the machine, with: "ssh 'devops@node1'" and check to make sure that only the key(s) you wanted were added. [student@server ansible]$ ssh-copy-id -i ~/.ssh/id_rsa.pub devops@node2 /usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/student/.ssh/id_rsa.pub" The authenticity of host 'node2 (172.25.250.12)' can't be established.
ECDSA key fingerprint is SHA256:Kl2g1gJ/9cWTXV1FmBR/dPdcCIcd+GVoFLxMuNxGQ7Y.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
devops@node2's password: Number of key(s) added: 1 Now try logging into the machine, with: "ssh 'devops@node2'"
and check to make sure that only the key(s) you wanted were added.

Test d'ouverture de session sans secret