如何创建自己的ansible filter

2018/01/15 | python,运维 | Zhiming Zhang | 暂无评论 | 110 views

ansible提供给我们了很多常用的fitler，官方文档地址： http://docs.ansible.com/ansible/latest/playbooks_filters.html 例子： {{ list1 | min }} “{{ [‘a’,’b’,’c’]|random }}” {{ some_variable | defau……

如何使用with_item的同时使用notify功能

2017/12/05 | Ansible | Zhiming Zhang | 暂无评论 | 119 views

今天研究了一个东西，就是如何在使用with_item的同时根据每一个item的情况，选择是否调用notify 我们很多时候都需要使用with_item这个循环，例如检测文件是否更新，或者其它什么时候，例如我们有4个文件

- a.file
- b.file
- c.file
- d.file

1

2

3

4

- a.file

- b.file

- c.file

- d.file

例如，当a 更新的时候，我们重启a服务，……

ansibleplaybook 如何使用tag

2017/03/04 | Ansible,ansible实战 | Zhiming Zhang | 暂无评论 | 174 views

在日常的ansible-playbook中使用tags 来灵活控制我们向要执行的具体的task ，有时候能达到意想不到的效果看例子：

---
- hosts: all


  tasks:
  - name: My tagged task
    yum:
      name: httpd
      state: latest
    tags: production
  - name: Installs postfix
    yum:
     name: postfix
     state: latest

1

2

3

4

5

6

7

8

9

10

11

12

13

14

---

- hosts: all

tasks:

- name: My tagged task

yum:

name: httpd

state: latest

tags: production

- name: Installs postfix

yum:

name: postfix

state: latest

只执行第一个task:

ansible-playbook main.yml --tags 'production'

1	ansible-playbook main.yml --tags 'production'

只执行第二个task: [crayon-5c4……

如何创建自己的ansible module

2016/12/23 | 运维 | Zhiming Zhang | 3 条评论 | 1589 views

什么是 ansible module? Ansible modules 是一种使用python写成的一些功能块，可以在yaml文件中调用，也就是playbook中可以调用的模块，例如常见的模块 copy ， debug Ansible 本身就提供了很多很多的模块地址什么时候和什么情况下我们会需要自己写module? 绝大……

ansible中的 do until 循环

2016/12/22 | Ansible | Zhiming Zhang | 暂无评论 | 346 views

在我们日常的运维生活中，很多时候我们需要执行一些类似清理的工作：例如：当磁盘空间>90%的时候，我们找到存放网站的文件夹，随机挑选一个文件夹（或者挑选最大的），然后执行转移的命令，将这个文件夹转移到另外的服务器上，但是这个时候就有个问题：当这个文件夹被转移后，磁盘空间是否还是>90%? 当然，我们可以直接将清理脚本执行10……

ansible 模块 module git

2016/11/25 | Ansible | Zhiming Zhang | 暂无评论 | 320 views

官网地址： http://docs.ansible.com/ansible/git_module.html 有时候我们需要操作git相关操作看一下这个例子：

# Example git checkout from Ansible Playbooks
- git: repo=git://foosball.example.org/path/to/repo.git
       dest=/srv/checkout
       version=release-0.22

# Example read-write git checkout from github
- git: repo=ssh://git@github.com/mylogin/hello.git dest=/home/mylogin/hello

# Example just ensuring the repo checkout exists
- git: repo=git://foosball.example.org/path/to/repo.git dest=/srv/checkout update=no

# Example just get information about the repository whether or not it has
# already been cloned locally.
- git: repo=git://foosball.example.org/path/to/repo.git dest=/srv/checkout clone=no update=no

# Example checkout a github repo and use refspec to fetch all pull requests
- git: repo=https://github.com/ansible/ansible-examples.git dest=/src/ansible-examples refspec=+refs/pull/*:refs/heads/*

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

# Example git checkout from Ansible Playbooks

- git: repo=git://foosball.example.org/path/to/repo.git

dest=/srv/checkout

version=release-0.22

# Example read-write git checkout from github

- git: repo=ssh://git@github.com/mylogin/hello.git dest=/home/mylogin/hello

# Example just ensuring the repo checkout exists

- git: repo=git://foosball.example.org/path/to/repo.git dest=/srv/checkout update=no

# Example just get information about the repository whether or not it has

# already been cloned locally.

- git: repo=git://foosball.example.org/path/to/repo.git dest=/srv/checkout clone=no update=no

# Example checkout a github repo and use refspec to fetch all pull requests

- git: repo=https://github.com/ansible/ansible-examples.git dest=/src/ansible-examples refspec=+refs/pull/*:refs/heads/*

完整的参数列表 parameter required default choices comment……

ansible-playbook 为某特定的组创建特殊的用户

2016/11/05 | Ansible | Zhiming Zhang | 暂无评论 | 252 views

在系统创建的时候，我们可能需要为所有的服务器创建一个些管理员帐号

- zhang3
- li4
- wang5

1

2

3

- zhang3

- li4

- wang5

这些用户是所有的服务器都需要的，所以我们一般直接写一个Playbook 写上 – hosts: all 但是，有时候，我们不光需要创建通用的用户，我们还需要为某些特殊的服务器创建特有……

ansible 常用module lineinfile 文件单行正则替换

2016/11/04 | Ansible | Zhiming Zhang | 暂无评论 | 475 views

我们在日常的工作中经常会遇到需要修改配置文件中某个项的值的情况，什么apache啊，mysql啊，docker 啊，等等，当然我们可以使用template等其它方式来实现，但是今天我们要说一下这个lineinfile的正则替换，聚个例子来说，docker的配置文件

# /etc/sysconfig/docker

# Modify these options if you want to change the way the docker daemon runs
OPTIONS='--selinux-enabled'

DOCKER_CERT_PATH=/etc/docker

# If you want to add your own registry to be used for docker search and docker
# pull use the ADD_REGISTRY option to list a set of registries, each prepended
# with --add-registry flag. The first registry added will be the first registry
# searched.
ADD_REGISTRY='--add-registry registry.access.redhat.com'

# If you want to block registries from being used, uncomment the BLOCK_REGISTRY
# option and give it a set of registries, each prepended with --block-registry
# flag. For example adding docker.io will stop users from downloading images
# from docker.io
# BLOCK_REGISTRY='--block-registry'

# If you have a registry secured with https but do not have proper certs
# distributed, you can tell docker to not look for full authorization by
# adding the registry to the INSECURE_REGISTRY line and uncommenting it.
# INSECURE_REGISTRY='--insecure-registry'

# On an SELinux system, if you remove the --selinux-enabled option, you
# also need to turn on the docker_transition_unconfined boolean.
# setsebool -P docker_transition_unconfined 1

# Location used for temporary files, such as those created by
# docker load and build operations. Default is /var/lib/docker/tmp
# Can be overriden by setting the following environment variable.
# DOCKER_TMPDIR=/var/tmp

# Controls the /etc/cron.daily/docker-logrotate cron job status.
# To disable, uncomment the line below.
# LOGROTATE=false

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

# /etc/sysconfig/docker

# Modify these options if you want to change the way the docker daemon runs

OPTIONS='--selinux-enabled'

DOCKER_CERT_PATH=/etc/docker

# If you want to add your own registry to be used for docker search and docker

# pull use the ADD_REGISTRY option to list a set of registries, each prepended

# with --add-registry flag. The first registry added will be the first registry

# searched.

ADD_REGISTRY='--add-registry registry.access.redhat.com'

# If you want to block registries from being used, uncomment the BLOCK_REGISTRY

# option and give it a set of registries, each prepended with --block-registry

# flag. For example adding docker.io will stop users from downloading images

# from docker.io

# BLOCK_REGISTRY='--block-registry'

# If you have a registry secured with https but do not have proper certs

# distributed, you can tell docker to not look for full authorization by

# adding the registry to the INSECURE_REGISTRY line and uncommenting it.

# INSECURE_REGISTRY='--insecure-registry'

# On an SELinux system, if you remove the --selinux-enabled option, you

# also need to turn on the docker_transition_unconfined boolean.

# setsebool -P docker_transition_unconfined 1

# Location used for temporary files, such as those created by

# docker load and build operations. Default is /var/lib/docker/tmp

# Can be overriden by setting the following environment variable.

# DOCKER_TMPDIR=/var/tmp

# Controls the /etc/cron.daily/docker-logrotate cron job status.

# To disable, uncomment the line below.

# LOGROTATE=false

其中……

ansible-playbook常用模块(module) copy

2016/11/01 | Ansible | Zhiming Zhang | 暂无评论 | 440 views

先上官网文档地址：http://docs.ansible.com/ansible/copy_module.html copy模块的坐拥其实就是将某个文件拷贝到远程主机上，比如，我们本机有个脚本需要在远程主机执行一下，第一步肯定是拷贝过去例子：

# Example from Ansible Playbooks
- copy: src=/srv/myfiles/foo.conf dest=/etc/foo.conf owner=foo group=foo mode=0644

# The same example as above, but using a symbolic mode equivalent to 0644
- copy: src=/srv/myfiles/foo.conf dest=/etc/foo.conf owner=foo group=foo mode="u=rw,g=r,o=r"

# Another symbolic mode example, adding some permissions and removing others
- copy: src=/srv/myfiles/foo.conf dest=/etc/foo.conf owner=foo group=foo mode="u+rw,g-wx,o-rwx"

# Copy a new "ntp.conf file into place, backing up the original if it differs from the copied version
- copy: src=/mine/ntp.conf dest=/etc/ntp.conf owner=root group=root mode=644 backup=yes

# Copy a new "sudoers" file into place, after passing validation with visudo
- copy: src=/mine/sudoers dest=/etc/sudoers validate='visudo -cf %s'

1

2

3

4

5

6

7

8

9

10

11

12

13

14

# Example from Ansible Playbooks

- copy: src=/srv/myfiles/foo.conf dest=/etc/foo.conf owner=foo group=foo mode=0644

# The same example as above, but using a symbolic mode equivalent to 0644

- copy: src=/srv/myfiles/foo.conf dest=/etc/foo.conf owner=foo group=foo mode="u=rw,g=r,o=r"

# Another symbolic mode example, adding some permissions and removing others

- copy: src=/srv/myfiles/foo.conf dest=/etc/foo.conf owner=foo group=foo mode="u+rw,g-wx,o-rwx"

# Copy a new "ntp.conf file into place, backing up the original if it differs from the copied version

- copy: src=/mine/ntp.conf dest=/etc/ntp.conf owner=root group=root mode=644 backup=yes

# Copy a new "sudoers" file into place, after passing validation with visudo

- copy: src=/mine/sudoers dest=/etc/sudoers validate='visudo -cf %s'

当然，正如官方文档上介绍，……

ansible roles 在被引用时如何传递变量

2016/10/31 | Ansible | Zhiming Zhang | 2 条评论 | 798 views

ansible很亮的功能之一就是role，我们可以将不同分类的task 归类之后放到一个相同的role中，方便管理，方便重用一个简单的role:

roles/
`-- test
    `-- tasks
        `-- main.yml

1

2

3

4

roles/

`-- test

`-- tasks

`-- main.yml

是的，有一个role 名字叫 test ,test这个role下只有一个文件夹，tasks，只有一个yml文……

张志明的个人博客志明与春娇de志明，一个奔跑在运维界的胖子

标签目录：ansible