ansible和apache练习
2020-04-15 本文已影响0人
jamas
使用ansible的playbook实现自动化安装httpd
实验环境：
| 主机 | os | 软件 | ip |
|---|---|---|---|
| ansible节点 | centos7.6 | 安装ansible | 172.16.2.132 |
| ansible-host节点1 | centos7.6 | 172.16.2.137 | |
| ansible-host节点2 | centos7.6 | 172.16.2.138 |
*在所有节点实现相互之间ssh key验证
实验设想
通过ansible 自动部署httpd服务，达到以下效果：
- ansible-host节点1：172.16.2.137
建立httpd服务器，要求提供两个基于名称的虚拟主机:
(1)www.X.com，页面文件目录为/web/vhosts/x;错误日志为/var/log/httpd/x.err，访问日志为/var/log/httpd/x.access
(2)www.Y.com，页面文件目录为/web/vhosts/y;错误日志为 /var/log/httpd/www2.err，访问日志为/var/log/httpd/y.access
(3)为两个虚拟主机建立各自的主页文件index.html，内容分别为其对应的主机名
- ansible-host节点2：172.16.2.138
建立httpd服务器，要求提供两个基于名称的虚拟主机:
(1)www.a.com，页面文件目录为/web/vhosts/a;错误日志为/var/log/httpd/a.err，访问日志为/var/log/httpd/a.access
(2)www.b.com，页面文件目录为/web/vhosts/b;错误日志为 /var/log/httpd/bwww2.err，访问日志为/var/log/httpd/b.access
(3)为两个虚拟主机建立各自的主页文件index.html，内容分别为其对应的主机名
实现步骤
1.使用epel源 安装ansible
[root@node2 ~]# yum install ansible -y
2.修改主机hosts文件
vim /etc/ansible/hosts
[httpdservers]
172.16.2.137
172.16.2.138
3.基于role创建如下目录及文件
[root@node2 playbook]# tree
.
├── host_vars
│ ├── 172.16.2.137
│ └── 172.16.2.138
├── http_role.yml
└── roles
└── httpd
├── files
├── handlers
│ ├── main.yml
│ └── restart.yml
├── tasks
│ ├── config.yml
│ ├── index1.yml
│ ├── index2.yml
│ ├── install.yml
│ ├── main.yml
│ ├── service.yml
│ └── webdir.yml
├── templates
│ ├── index1.html.j2
│ ├── index2.html.j2
│ └── test.conf.j2
└── vars
4.准备需要的templates文件：
配置httpd模板
[root@node2 templates]# vim test.conf.j2
<virtualhost *:80>
documentroot /web/vhosts/{{ webdir1 }} //配置文件个性化之处使用变量处理
servername {{ vhost1 }}
<Directory "/web/vhosts/{{ webdir1 }}">
Require all granted
</Directory>
CustomLog "/var/log/httpd/{{ accesslog1 }}" combined
ErrorLog "/var/log/httpd/{{ errorlog1 }}"
</virtualhost>
<virtualhost *:80>
documentroot /web/vhosts/{{ webdir2 }}
servername {{ vhost2 }}
<Directory "/web/vhosts/{{ webdir2 }}">
Require all granted
</Directory>
CustomLog "/var/log/httpd/{{ accesslog2 }}" combined
ErrorLog "/var/log/httpd/{{ errorlog2 }}"
</virtualhost>
配置index.html模板
vim index1.html.j2
{{ vhost1 }}
vim index2.html.j2
{{ vhost2 }}
5.编辑task
[root@node2 tasks]# vim install.yml
- name: install //安装服务
yum: name=httpd
[root@node2 tasks]# vim config.yml
- name: config //复制conf到目标主机
template: src=test.conf.j2 dest=/etc/httpd/conf.d/test.conf
notify: restart //关联handles
[root@node2 tasks]# vim webdir.yml
- name: webdir1 //创建网站目录
file: path=//web/vhosts/{{webdir1}} state=directory
- name: webdir2
file: path=//web/vhosts/{{webdir2}} state=directory
[root@node2 tasks]# vim index1.yml
- name: index1 //复制index文件
template: src=index1.html.j2 dest=/web/vhosts/{{webdir1}}/index.html
[root@node2 tasks]# vim index2.yml
- name: index2
template: src=index2.html.j2 dest=/web/vhosts/{{webdir2}}/index.html
[root@node2 tasks]# vim service.yml
- name: service //启动服务
service: name=httpd state=started enabled=yes
[root@node2 tasks]# vim main.yml
- include: install.yml
- include: config.yml
- include: webdir.yml
- include: index1.yml
- include: index2.yml
- include: service.yml
6.编辑handles
[root@node2 handlers]# vim restart.yml
- name: restart
service: name=httpd state=restarted
[root@node2 handlers]# vim main.yml
- include: restart.yml
7.编辑基于各主机host_vars
*注意host_vars目录的位置
[root@node2 host_vars]# vim 172.16.2.137
webdir1: x
webdir2: y
errorlog1: "e.err"
errorlog2: "www2.err"
accesslog1: "x.access"
accesslog2: "y.access"
vhost1: "www.X.com"
vhost2: "www.Y.com"
[root@node2 host_vars]# vim 172.16.2.138
webdir1: a
webdir2: b
errorlog1: "ae.err"
errorlog2: "bwww2.err"
accesslog1: "a.access"
accesslog2: "b.access"
vhost1: "www.A.com"
vhost2: "www.B.com"
8.编辑基于role的yml
[root@node2 playbook]# cat http_role.yml
- hosts: httpdservers
roles:
- httpd
9.检查配置
[root@node2 playbook]# ansible-playbook -C http_role.yml
PLAY [httpdservers] *****************************************************************************************
TASK [Gathering Facts] **************************************************************************************
ok: [172.16.2.137]
ok: [172.16.2.138]
TASK [httpd : install] **************************************************************************************
changed: [172.16.2.137]
changed: [172.16.2.138]
TASK [httpd : config] ***************************************************************************************
changed: [172.16.2.137]
changed: [172.16.2.138]
TASK [httpd : webdir1] **************************************************************************************
changed: [172.16.2.137]
changed: [172.16.2.138]
TASK [httpd : webdir2] **************************************************************************************
changed: [172.16.2.137]
changed: [172.16.2.138]
TASK [httpd : index1] ***************************************************************************************
changed: [172.16.2.137]
changed: [172.16.2.138]
TASK [httpd : index2] ***************************************************************************************
changed: [172.16.2.137]
changed: [172.16.2.138]
TASK [httpd : service] **************************************************************************************
changed: [172.16.2.138]
changed: [172.16.2.137]
RUNNING HANDLER [httpd : restart] ***************************************************************************
changed: [172.16.2.137]
changed: [172.16.2.138]
PLAY RECAP **************************************************************************************************
172.16.2.137 : ok=9 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
172.16.2.138 : ok=9 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
10.正式部署
[root@node2 playbook]# ansible-playbook http_role.yml
11.验证
[root@node2 templates]# cat /etc/hosts //查看管理主机的hosts文件
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
172.16.2.137 www.X.com www.Y.com //同一个ip对应两个不同的虚拟主机地址
172.16.2.138 www.a.com www.b.com
[root@node2 templates]# curl www.X.com 使用curl访问
www.X.com
[root@node2 templates]# curl www.Y.com
www.Y.com
[root@node2 templates]# curl www.a.com
www.A.com
[root@node2 templates]# curl www.b.com
www.B.com
建立httpd服务器，要求提供两个基于名称的虚拟主机
实验环境：
服务器端： centos7.6 ip：172.16.2.137 安装httpd
客户端： centos7.6 ip：172.16.2.132 修改hosts文件增加两个虚拟主机ip
实验设想
建立httpd服务器，要求提供两个基于名称的虚拟主机:
(1)www.X.com，页面文件目录为/web/vhosts/x;错误日志为/var/log/httpd/x.err，访问日志为/var/log/httpd/x.access
(2)www.Y.com，页面文件目录为/web/vhosts/y;错误日志为 /var/log/httpd/www2.err，访问日志为/var/log/httpd/y.access
(3)为两个虚拟主机建立各自的主页文件index.html，内容分别为其对应的主机名
实验步骤
1.安装服务
yum install -y httpd
2.编译配置文档
[root@node3 etc]# vim /etc/httpd/conf.d/test.conf
<virtualhost *:80>
documentroot /web/vhosts/x //网站主目录
servername www.X.com //设置域名
<Directory "/web/vhosts/x">
Require all granted //权限
</Directory>
CustomLog "/var/log/httpd/x.access" combined //设置log
ErrorLog "/var/log/httpd/e.err"
</virtualhost>
<virtualhost *:80>
documentroot /web/vhosts/y
servername www.Y.com
<Directory "/web/vhosts/y">
Require all granted
</Directory>
CustomLog "/var/log/httpd/y.access" combined
ErrorLog "/var/log/httpd/www2.err"
</virtualhost>
3.创建目录：
[root@node3 etc]# mkdir /web/vhosts/{x,y}
4.创建主页文件：
[root@node3 etc]# cat /web/vhosts/x/index.html
www.X.com
[root@node3 etc]# cat /web/vhosts/y/index.html
www.Y.com
5.启动服务：
systemctl start httpd
6.验证：
[root@node2 templates]# cat /etc/hosts //查看客户端host是文件
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
172.16.2.137 www.X.com www.Y.com //同一个ip对应两个不同的虚拟主机地址
[root@node2 templates]# curl www.X.com
www.X.com
[root@node2 templates]# curl www.Y.com
www.Y.com
