Ansible使用playbook自动化编译安装Nginx（亲测），playbooknginx

文章由LinuxBoy分享于2019-07-11 06:07:27热评（490）

Ansible使用playbook自动化编译安装Nginx（亲测），playbooknginx

★安装：

# yum install ansible -y （epel仓库中）

★程序：

ansible

ansible-playbook //剧本

ansible-doc //获取帮助文档

★配置文件

/etc/ansible/ansible.cfg //核心配置文件

★主机清单：

/etc/ansible/hosts

★插件目录：

/usr/share/ansible_plugins/

1、设置ansble到各个主机的免密钥通讯：
[root@cml1~]# ssh-keygen
[root@cml1~]# ssh-copy-id 192.168.5.102

2、定义主机组：
[root@cml1~]# cd /etc/ansible/
[root@cml1ansible]# vim hosts
[webserver]
192.168.5.102
192.168.5.104

3、查看主机组内的主机：
[root@cml1ansible]# ansible webserver --list-hosts
hosts (2):
192.168.5.102
192.168.5.104
4、定义角色路径
[root@cml1~]# cat /etc/ansible/nginx.yaml
- hosts: 192.168.5.102
remote_user: root
roles:
-nginx_install ###roles目录下的nginx_install目录
-nginx_config ###roles目录下的nginx_config目录
5、查看目录结构：
[root@cml1 roles]# tree
.
├── nginx_config
│ ├── default
│ ├── files
│ ├── handlers
│ │ └── main.yml
│ ├── meta
│ ├── tasks
│ │ └── main.yml
│ ├── templates
│ │ └── temp_server.conf
│ └── vars
│ └── main.yml
└── nginx_install
├──default
├──files
│ └── nginx-1.12.0.tar.gz
├──handlers
│ └── main.yml
├──meta
├──tasks
│ └── main.yml
├──templates
│ └── nginx.conf.j2
└── vars

└── main.yml

[root@cml1roles]# cd nginx_install/
[root@cml1nginx_install]# ls
default files handlers meta tasks templates vars
6、task定义开始任务：
[root@cml1nginx_install]# cd tasks/
[root@cml1tasks]# cat main.yml
- name: copynginx package to remote host
copy: src=nginx-1.12.0.tar.gz dest=/tmp/nginx-1.12.0.tar.gz ##拉取nginx解压吧
tags: cppkg
- name: tarnginx
shell: cd /tmp;tar -xf nginx-1.12.0.tar.gz ##解压nginx包
- name: installpakger
yum: name={{ item }} state=latest ##安装依赖包
with_items:
- openssl-devel
- pcre-devel
- gcc
- name: installnginx
shell: cd /usr/local/nginx-1.12.0;./configure--user=nginx --group=nginx --prefix=/usr/local/nginx--with-http_stub_status_module --with-http_ssl_module --with-pcre;make&& make install ####编译安装
- name: copyconf file nginx.conf
template: src=nginx.conf.j2 dest=/usr/local/nginx-1.12.0/conf/nginx.conf ###复制在template目录下的配置文件
tags: ngxconf
- name: copyshell
copy: src=/opt/create_users.sh dest=/tmp/create_users.sh ##拉取创建用户的shell脚本
- name: createuser nginx
shell: /bin/bash /tmp/create_users.sh
tags: addnginx
notify: start nginx service

为什么要写这个脚本？因为加入有些主机创建的用户已存在就会报错
[root@cml1tasks]# cat /opt/create_users.sh
#!/bin/bash
a=`cat/etc/passwd | grep nginx | wc -l`
if [ $a == 0];then
useradd nginx
fi

6、第二行copy对应file目录：
[root@cml1nginx_install]# cd files/
[root@cml1files]# ls
nginx-1.12.0.tar.gz

7、template这一行对应的是template这个目录和主服务端定义的变量：
[root@cml1nginx_install]# cd templates/
[root@cml1templates]# ls
nginx.conf.j2
[root@cml1templates]# cat nginx.conf

user nginx;
worker_processes {{ ansible_processor_vcpus }};

#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;

#pid logs/nginx.pid;

events {
worker_connections {{ bingfa }};
}

http {


include mime.types;
default_type application/octet-stream;

#log_format main '$remote_addr - $remote_user[$time_local] "$request" '
# '$status $body_bytes_sent"$http_referer" '
# '"$http_user_agent""$http_x_forwarded_for"';
log_format xiaoluo '$remote_addr -$remote_user [$time_local] '
'"$request" $status$body_bytes_sent '
'"$http_referer" "$http_user_agent" ';
#access_log logs/access.log main;

sendfile on;
#tcp_nopush on;

#keepalive_timeout 0;
keepalive_timeout 65;

#gzip on;

server {
listen {{ ngxport }};
server_name wwwNaNl.com
access_log logs/wwwNaNl.com xiaoluo;
#location / {
# proxy_pass http://192.168.5.101;
#}

#error_page 404 /404.html;

# redirect server error pages to thestatic page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}

# proxy the PHP scripts to Apachelistening on 127.0.0.1:80
#
#location ~ \.php$ {
# proxy_pass http://127.0.0.1;
#}

# pass the PHP scripts to FastCGIserver listening on 127.0.0.1:9000
#
location ~ \.php$ {
root /web;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME$document_root$fastcgi_script_name;
include fastcgi_params;
}

# deny access to .htaccess files, ifApache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
}
include vhosts/*.conf;
}##需要注意的就是模板变量（客户端自动采集）、和在服务端定义的变量{{ngx_port}}
8、在vars定义变量：
[root@cml1nginx_install]# cd vars/
[root@cml1vars]# cat main.yml
ngxport:"8080"

bingfa: 10000

9、定义触发器：
[root@cml1nginx_install]# cd handlers/
[root@cml1handlers]# cat main.yml
- name: startnginx service
shell: /usr/loal/nginx/sbin/nginx

10、在nginx_config目录加入我们经常要增加nginx站点，直接写好模板推送到vhos目录：(下面没有测试，感兴趣的可以测试一下)
[root@cml1roles]# cd nginx_config/
[root@cml1nginx_config]# ls
default files handlers meta tasks templates vars
[root@cml1nginx_config]# cd templates/
[root@cml1templates]# ls
temp_server.conf
[root@cml1templates]# cat temp_server.conf
server
{
listen 80;
server_name {{server_name }};
index index.phpindex.html;
root {{root_dir }};
}

###在var定义变量：
[root@cml1templates]# cd ../vars/
[root@cml1vars]# cat main.yml
server_name: "www.xiaoluo.com"
root_dir:"/web"

11、写配置nginx的tasks步骤：
[root@cml1nginx_config]# cd tasks/
[root@cml1tasks]# ls
main.yml
[root@cml1tasks]# cat main.yml
- name: createvhosts
shell: mkdir -p /usr/local/nginx/conf/vhosts/
tags: create_dir
- name: copyconf file nginx.conf # 调用templates模块
template: src=temp_server.confdest=/usr/local/nginx/conf/vhosts/{{ server_name }}.conf
tags: ngxconf
notify: reload nginx service
###定义重启触发器：
[root@cml1tasks]# cd ../handlers/
You have newmail in /var/spool/mail/root
[root@cml1handlers]# cat main.yml
- name: reloadnginx service
shell: /usr/local/nginx/sbin/nginx-t;/usr/local/nginx/sbin/nginx -s reload

测试：
[root@cml1ansible]# ansible-playbook -C nginx.yaml

PLAY[192.168.5.104] **********************************************************

GATHERING FACTS***************************************************************
ok:[192.168.5.104]

TASK:[nginx_install | copy nginx package to remote host] *********************
changed:[192.168.5.104]

TASK:[nginx_install | tar nginx] *********************************************
skipping:[192.168.5.104]
ok:[192.168.5.104]

TASK:[nginx_install | install pakger] ****************************************
changed: [192.168.5.104]=> (item=openssl-devel,pcre-devel,gcc)

TASK:[nginx_install | install nginx] *****************************************
skipping:[192.168.5.104]
ok:[192.168.5.104]

TASK:[nginx_install | copy conf file nginx.conf] *****************************
changed:[192.168.5.104]

TASK:[nginx_install | copy shell] ********************************************
changed:[192.168.5.104]

TASK:[nginx_install | create user nginx] *************************************
skipping:[192.168.5.104]
ok: [192.168.5.104]

TASK:[nginx_config | create vhosts] ******************************************
skipping:[192.168.5.104]
ok:[192.168.5.104]

TASK:[nginx_config | copy conf file nginx.conf] ******************************
changed:[192.168.5.104]

NOTIFIED:[nginx_config | reload nginx service] *******************************
skipping:[192.168.5.104]
ok:[192.168.5.104]

PLAY RECAP********************************************************************
192.168.5.104 : ok=6 changed=5 unreachable=0 failed=0[root@cml1 ansible]# ansible-playbook nginx.yaml
PLAY [192.168.5.104] **********************************************************
GATHERING FACTS ***************************************************************
ok: [192.168.5.104]
TASK: [nginx_install | copy nginx package to remote host] *********************
ok: [192.168.5.104]
TASK: [nginx_install | tar nginx] *********************************************
changed: [192.168.5.104]
TASK: [nginx_install | install pakger] ****************************************
ok: [192.168.5.104] => (item=openssl-devel,pcre-devel,gcc)
TASK: [nginx_install | install nginx] *****************************************
changed: [192.168.5.104]
TASK: [nginx_install | copy conf file nginx.conf] *****************************
ok: [192.168.5.104]
TASK: [nginx_install | copy shell] ********************************************
ok: [192.168.5.104]
TASK: [nginx_install | create user nginx] *************************************
changed: [192.168.5.104]
TASK: [nginx_config | create vhosts] ******************************************
changed: [192.168.5.104]
TASK: [nginx_config | copy conf file nginx.conf] ******************************
ok: [192.168.5.104]
NOTIFIED: [nginx_install | start nginx service] *******************************
changed: [192.168.5.104]
PLAY RECAP ********************************************************************
192.168.5.104 : ok=11 changed=5 unreachable=0 failed=0[root@cml3 ~]# ifconfig
ens34: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.5.104 netmask 255.255.255.0 broadcast 192.168.5.255

[root@cml3 ~]# netstat -ntlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 29264/nginx: master
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 29264/nginx: master

四、定义日志文件
下面是介绍如何定义日志：（在ansible1.9.1版本之后有个bug所以定义不了日志文件只能降版本到1.9.1了）
1、ansible倒回去版本：1.9.1
需要安装gcc、python-devel
[root@cml1 ~]#yum install python-pip
[root@cml1 ~]#pip install ansible==1.9.1

2、callback插件：
[root@cml1tasks]# vim /etc/ansible/ansible.cfg
callback_plugins = /usr/share/ansible/plugins/callback
bin_ansible_callbacks= True

3、在callback目录下创建日志处理文件：
[root@cml1tasks]# cd /usr/share/ansible/plugins/callback
[root@cml1callback]# ls
log.py log.pyc
[root@cml1callback]# cat log.py
import os
import time
import json

TIME_FORMAT="%b%d %Y %H:%M:%S"
MSG_FORMAT="%(now)s- %(category)s - %(data)s\n\n"

if notos.path.exists("/var/log/ansible/hosts"):
os.makedirs("/var/log/ansible/hosts")

def log(host,category, data):
if type(data) == dict:
if 'verbose_override' in data:
# avoid logging extraneous datafrom facts
data = 'omitted'
else:
data = data.copy()
invocation = data.pop('invocation',None)
data = json.dumps(data)
if invocation is not None:
data = json.dumps(invocation) +" => %s " % data

path =os.path.join("/var/log/ansible/hosts", host)
now = time.strftime(TIME_FORMAT,time.localtime())
fd =open(path, "a")
fd.write(MSG_FORMAT % dict(now=now,category=category, data=data))
fd.close()

classCallbackModule(object):
"""
logs playbook results, per host, in/var/log/ansible/hosts
"""

def on_any(self, *args, **kwargs):
pass

def runner_on_failed(self, host, res,ignore_errors=False):
log(host, 'FAILED', res)

def runner_on_ok(self, host, res):
log(host, 'OK', res)

def runner_on_skipped(self, host,item=None):
log(host, 'SKIPPED', '...')

def runner_on_unreachable(self, host, res):
log(host, 'UNREACHABLE', res)

def runner_on_no_hosts(self):
pass

def runner_on_async_poll(self, host, res,jid, clock):
pass

def runner_on_async_ok(self, host, res,jid):
pass

def runner_on_async_failed(self, host, res,jid):
log(host, 'ASYNC_FAILED', res)

def playbook_on_start(self):
pass

def playbook_on_notify(self, host,handler):
pass

def playbook_on_no_hosts_matched(self):
pass

def playbook_on_no_hosts_remaining(self):
pass

def playbook_on_task_start(self, name,is_conditional):
pass

def playbook_on_vars_prompt(self, varname,private=True, prompt=None, encrypt=None, confirm=False, salt_size=None,salt=None, default=None):
pass

def playbook_on_setup(self):
pass

def playbook_on_import_for_host(self, host,imported_file):
log(host, 'IMPORTED', imported_file)

def playbook_on_not_import_for_host(self,host, missing_file):
log(host, 'NOTIMPORTED', missing_file)

def playbook_on_play_start(self, name):
pass

def playbook_on_stats(self, stats):
pass

下面关于Ansible的文章您也可能喜欢，不妨参考下：

CentOS下部署Ansible自动化工具 http://www.linuxboy.net/Linux/2017-06/144430.htm

在 CentOS 7 中安装并使用自动化工具 Ansible http://www.linuxboy.net/Linux/2015-10/123801.htm

CentOS 7上搭建Jenkins+Ansible服务 http://www.linuxboy.net/Linux/2016-12/138737.htm

Linux下源码编译安装Ansible及排错记录 http://www.linuxboy.net/Linux/2017-03/141427.htm

Ansible基础—安装与常用模块 http://www.linuxboy.net/Linux/2017-02/140216.htm

Ansible配置及使用 http://www.linuxboy.net/Linux/2017-03/142121.htm

自动化运维工具之 Ansible 介绍及安装使用 http://www.linuxboy.net/Linux/2016-12/138104.htm

自动化运维之Ansible详解 http://www.linuxboy.net/Linux/2017-03/142191.htm

Ansible入门notify和handlers http://www.linuxboy.net/Linux/2017-02/140871.htm

CentOS 6.5安装自动化工具Ansible和图形化工具Tower http://www.linuxboy.net/Linux/2017-03/141422.htm

Ansible 的详细介绍：请点这里
Ansible 的下载地址：请点这里

推荐文章：

Ansible使用playbook自动化编译安装Nginx（亲测），playbooknginx