{"id":1156,"date":"2023-06-09T20:18:40","date_gmt":"2023-06-09T12:18:40","guid":{"rendered":"https:\/\/www.qiangzhenshuai.com\/?p=1156"},"modified":"2023-08-13T10:43:49","modified_gmt":"2023-08-13T02:43:49","slug":"ansible-ad-hoc","status":"publish","type":"post","link":"https:\/\/www.qiangzhenshuai.com\/?p=1156","title":{"rendered":"Ansible Ad-Hoc"},"content":{"rendered":"

1.\u4ec0\u4e48\u662fad-hoc\u547d\u4ee4<\/h1>\n

ad-hoc\u547d\u4ee4\u662f\u6307\u4f7f\u7528\/usr\/bin\/ansible\u547d\u4ee4\u884c\u5de5\u5177\u5728\u4e00\u4e2a\u6216\u591a\u4e2a\u7ba1\u7406\u8282\u70b9\u4e0a\u6267\u884c\u5355\u4e2a\u4efb\u52a1\u7684\u547d\u4ee4\u3002\u8fd9\u5176\u5b9e\u662f\u4e00\u4e2a\u6982\u5ff5\u6027\u7684\u540d\u5b57\uff0c\u662f\u76f8\u5bf9\u4e8e Ansible playbook \u6765\u8bf4\u7684\u3002\u5f53\u6211\u4eec\u9700\u8981\u5feb\u901f\u7684\u5b8c\u6210\u4e00\u4e9b\u4efb\u52a1\u800c\u4e0d\u9700\u8981\u5c06\u6267\u884c\u7684\u547d\u4ee4\u4fdd\u5b58\u4e0b\u6765\uff0c\u8fd9\u6837\u7684\u547d\u4ee4\u5c31\u79f0\u4e3aad-hoc\u547d\u4ee4\u3002<\/p>\n

Ansible\u63d0\u4f9b\u4e24\u79cd\u65b9\u5f0f\u53bb\u6267\u884c\u4efb\u52a1\uff1a\u4e00\u79cd\u662fad-hoc \u547d\u4ee4\uff0c\u53e6\u4e00\u79cd\u662f\u5199 Ansible playbook\u3002\u524d\u8005\u53ef\u4ee5\u5904\u7406\u4e00\u4e9b\u7b80\u5355\u7684\u4efb\u52a1\uff0c\u800c\u540e\u8005\u9700\u8981\u5904\u7406\u6bd4\u8f83\u590d\u6742\u7684\u4efb\u52a1\u3002ad-hoc\u547d\u4ee4\u4e0eplaybook\u7684\u5173\u7cfb\u7c7b\u4f3c\u4e8e\u5728\u547d\u4ee4\u884c\u6572\u5165\u7684shell\u547d\u4ee4\u548cshell scripts\u4e4b\u95f4\u7684\u5173\u7cfb\u3002<\/p>\n

ad-hoc\u547d\u4ee4\u867d\u7136\u7b80\u5355\uff0c\u4f46\u4e5f\u5c55\u793a\u51fa\u4e86Ansible\u7684\u5f3a\u5927\u529f\u80fd\uff0c\u5e76\u4e14\u4e5f\u6709\u5f88\u591a\u4f7f\u7528\u573a\u666f\uff0c\u6bd4\u5982\u5728\u591a\u4e2a\u8fdc\u7a0b\u4e3b\u673a\u4e0a\u5feb\u901f\u6267\u884c\u4e00\u6b21\u6027\u7684\u4efb\u52a1\uff0c\u6216\u8005\u60f3\u6d4b\u8bd5\u67d0\u4e2a\u6a21\u5757\u7684\u884c\u4e3a\u4ee5\u51b3\u5b9a\u662f\u5426\u8981\u52a0\u5165\u5230playbook\u4e2d\u7b49\u7b49<\/p>\n

\u6a21\u5757<\/a><\/h2>\n

2.ad-hoc\u6a21\u5f0f\u7684\u4f7f\u7528\u573a\u666f<\/h1>\n
\n

\u60c5\u666f1\uff1a\u8282\u5047\u65e5\u5c06\u81f3\uff0c \u6211\u4eec\u9700\u8981\u5173\u95ed\u6240\u6709\u4e0d\u5fc5\u8981\u7684\u670d\u52a1\u5668\uff0c \u5e76\u5bf9\u6240\u6709\u670d\u52a1\u5668\u8fdb\u884c\u8282\u524d\u5065\u5eb7\u68c0\u67e5\u3002<\/span><\/p>\n

\u60c5\u666f2\uff1a\u4e34\u65f6\u66f4\u65b0Apache &Nginx\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u4e14\u9700\u540c\u65f6\u5c06\u5176\u5206\u53d1\u81f3\u6240\u6709\u9700\u66f4\u65b0\u8be5\u914d\u7f6e\u7684Web\u670d\u52a1\u5668\u3002<\/span><\/p>\n

\"\"<\/a><\/p>\n

3.\u4f7f\u7528ad-hoc\u6267\u884c\u4e00\u6b21\u8fdc\u7a0b\u547d\u4ee4
\n\u6ce8\u610f\u89c2\u5bdf\u8fd4\u56de\u7ed3\u679c\u7684\u989c\u8272<\/h1>\n

\u7eff\u8272: <\/i>\u4ee3\u8868\u88ab\u7ba1\u7406\u7aef\u4e3b\u673a\u6ca1\u6709\u88ab\u4fee\u6539
\n\u9ec4\u8272: <\/i>\u4ee3\u8868\u88ab\u7ba1\u7406\u7aef\u4e3b\u673a\u53d1\u73b0\u53d8\u66f4
\n\u7ea2\u8272: <\/i>\u4ee3\u8868\u51fa\u73b0\u4e86\u6545\u969c\uff0c\u6ce8\u610f\u67e5\u770b\u63d0\u793a
\n\u7d2b\u8272(\u7c89\u8272): \u8b66\u544a\u4fe1\u606f<\/p>\n

4.ad-hoc\u6a21\u5f0f\u7684\u5e38\u7528\u6a21\u5757<\/h1>\n

command\uff1a\u6267\u884cshell\u547d\u4ee4(\u4e0d\u652f\u6301\u7ba1\u9053\u7b49\u7279\u6b8a\u5b57\u7b26) \u7ba1\u9053 * > . ..<\/p>\n

shell\uff1a\u6267\u884cshell\u547d\u4ee4 \u652f\u6301\u7279\u6b8a\u7b26\u53f7
\nscript\uff1a\u6267\u884cshell\u811a\u672c<\/p>\n

yum_repository\uff1a\u914d\u7f6eyum\u4ed3\u5e93 yum\u6e90
\nyum\uff1a\u5b89\u88c5\u8f6f\u4ef6<\/p>\n

copy\uff1a\u53d8\u66f4\u914d\u7f6e\u6587\u4ef6 \u00a0 \u8fdc\u7a0b\u590d\u5236
\nfile\uff1a\u5efa\u7acb\u76ee\u5f55\u6216\u6587\u4ef6<\/p>\n

service\uff1a\u542f\u52a8\u4e0e\u505c\u6b62\u670d\u52a1 \u00a0 \u8bbe\u7f6e\u5f00\u673a\u81ea\u542f\u52a8 systemctl
\nmount\uff1a\u6302\u8f7d\u8bbe\u5907 \u78c1\u76d8 \u5149\u76d8 nfs ….
\ncron\uff1a\u5b9a\u65f6\u4efb\u52a1 \u8bbe\u7f6e\/\u5220\u9664\u5b9a\u65f6\u4efb\u52a1<\/p>\n

firewalld\uff1a\u9632\u706b\u5899
\niptables\uff1a\u9632\u706b\u5899<\/p>\n

group\uff1a\u7ba1\u7406\u7ec4
\nuser\uff1a\u7ba1\u7406\u7528\u6237<\/p>\n

get_url\uff1a\u4e0b\u8f7d\u8f6f\u4ef6 wget<\/p>\n

archive\uff1a\u6253\u5305\u538b\u7f29\u4fdd\u5b58\u5728\u88ab\u7ba1\u7406\u8282\u70b9
\nunarchive\uff1a\u89e3\u5305\u89e3\u538b\u7f29 \u5b9e\u73b0\u6709\u4e24\u79cd\u7528\u6cd5\uff1a \u5c06ansible\u4e3b\u673a\u4e0a\u7684\u538b\u7f29\u5305\u4f20\u5230\u8fdc\u7a0b\u4e3b\u673a\u540e\u89e3\u538b\u7f29\u81f3\u7279\u5b9a\u76ee\u5f55\uff0c\u8bbe\u7f6eremote_src=no,\u6b64\u4e3a\u9ed8\u8ba4\u503c,\u53ef\u7701\u7565 \u5c06\u8fdc\u7a0b\u672c\u4e3b\u673a\u4e0a\u6216\u975eansible\u7684\u5176\u5b83\u4e3b\u673a\u7684\u67d0\u4e2a\u538b\u7f29\u5305\u89e3\u538b\u7f29\u5230\u8fdc\u7a0b\u4e3b\u673a\u672c\u673a\u7684\u6307\u5b9a\u8def\u5f84\u4e0b<\/p>\n

selinux\uff1a\u8be5\u6a21\u5757\u7ba1\u7406 SELInux \u7b56\u7565<\/p>\n

lineinfile\uff1a\u76f8\u5f53\u4e8esed\uff0c\u4e3b\u8981\u7528\u4e8e\u4fee\u6539\u4e00\u884c\u7684\u6587\u4ef6\u5185\u5bb9<\/p>\n

5.\u4f7f\u7528\u8fc7\u7a0b\u4e2d\u9700\u8981\u5148\u4e86\u89e3ansible-doc\u5e2e\u52a9\u624b\u518c<\/h1>\n

ansible-doc -l\uff1a\u67e5\u770b\u6240\u6709\u6a21\u5757\u8bf4\u660e<\/p>\n

ansible-doc copy\uff1a\u8868\u793a\u6307\u5b9a\u6a21\u5757\u65b9\u6cd5<\/p>\n

ansible-doc -s copy\uff1a\u8868\u793a\u6307\u5b9a\u6a21\u5757\u53c2\u6570<\/p>\n

6.\u6a21\u5757\u64cd\u4f5c<\/h1>\n

\u6267\u884c\u547d\u4ee4\u6a21\u5757<\/h2>\n

\u9ed8\u8ba4\u6a21\u5757, \u6267\u884c\u547d\u4ee4<\/h4>\n

chdir\uff1a\u6267\u884cAnsible\u65f6\uff0c\u5207\u6362\u5230\u6307\u5b9a\u7684\u76ee\u5f55
\ncreates\uff1a\u5982\u679c\u6587\u4ef6\u5b58\u5728\uff0c\u5219\u8df3\u8fc7\u6267\u884c
\nremoves\uff1a\u5982\u679c\u6587\u4ef6\u5b58\u5728\uff0c\u5219\u6267\u884c<\/p>\n

[root@ansible ~]$ ansible web -a “hostname”
\n172.16.1.145 | CHANGED | rc=0 >>
\nweb02
\n172.16.1.45 | CHANGED | rc=0 >>
\nweb01<\/p>\n

Ansible command \u6a21\u5757\u7684\u5b8c\u6574\u53c2\u6570\u5217\u8868\u548c\u8be6\u7ec6\u8bf4\u660e<\/h4>\n

argv\uff1a\u4e00\u4e2a\u5217\u8868\uff0c\u5305\u542b\u8981\u6267\u884c\u7684\u547d\u4ee4\u53ca\u5176\u53c2\u6570
\nchdir\uff1a\u6307\u5b9a\u8981\u5728\u8fdc\u7a0b\u4e3b\u673a\u4e0a\u6267\u884c\u547d\u4ee4\u7684\u5de5\u4f5c\u76ee\u5f55
\ncreates\uff1a\u6307\u5b9a\u4e00\u4e2a\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u8be5\u6587\u4ef6\u5df2\u5b58\u5728\uff0c\u5219\u547d\u4ee4\u4e0d\u4f1a\u6267\u884c
\nexecutable\uff1a\u6307\u5b9a\u8981\u5728\u8fdc\u7a0b\u4e3b\u673a\u4e0a\u6267\u884c\u547d\u4ee4\u7684\u53ef\u6267\u884c\u6587\u4ef6\u8def\u5f84
\nremoves\uff1a\u6307\u5b9a\u4e00\u4e2a\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u8be5\u6587\u4ef6\u4e0d\u5b58\u5728\uff0c\u5219\u547d\u4ee4\u4e0d\u4f1a\u6267\u884c
\nstdin\uff1a\u5c06\u6807\u51c6\u8f93\u5165\u6d41\u4f20\u9012\u7ed9\u547d\u4ee4
\nwarn\uff1a\u6307\u5b9a\u662f\u5426\u5728\u547d\u4ee4\u6267\u884c\u5931\u8d25\u65f6\u53d1\u51fa\u8b66\u544a\uff0c\u9ed8\u8ba4\u4e3a true
\nstdin_add_newline\uff1a\u6307\u5b9a\u662f\u5426\u5728\u6807\u51c6\u8f93\u5165\u7684\u672b\u5c3e\u6dfb\u52a0\u6362\u884c\u7b26\uff0c\u9ed8\u8ba4\u4e3a true
\ncreates_time\uff1a\u6307\u5b9a\u4e00\u4e2a\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u8be5\u6587\u4ef6\u5b58\u5728\u5e76\u4e14\u6700\u540e\u4fee\u6539\u65f6\u95f4\u5728\u6307\u5b9a\u65f6\u95f4\u8303\u56f4\u5185\uff0c\u5219\u547d\u4ee4\u4e0d\u4f1a\u6267\u884c
\ncreates_file\uff1a\u6307\u5b9a\u4e00\u4e2a\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u8be5\u6587\u4ef6\u5b58\u5728\u5e76\u4e14\u662f\u4e00\u4e2a\u6587\u4ef6\uff08\u4e0d\u662f\u76ee\u5f55\uff09\uff0c\u5219\u547d\u4ee4\u4e0d\u4f1a\u6267\u884c
\ncmd\uff1a\u8981\u6267\u884c\u7684\u547d\u4ee4\u5b57\u7b26\u4e32\uff08\u4e0e argv \u53c2\u6570\u4e92\u65a5\uff09
\nfree_form\uff1a\u8981\u6267\u884c\u7684\u547d\u4ee4\u5b57\u7b26\u4e32\uff08\u4e0e argv \u53c2\u6570\u4e92\u65a5\uff09
\ncmd_timeout\uff1a\u547d\u4ee4\u8d85\u65f6\u65f6\u95f4\uff08\u4ee5\u79d2\u4e3a\u5355\u4f4d\uff09
\ncmd_warnings\uff1a\u6307\u5b9a\u662f\u5426\u663e\u793a\u547d\u4ee4\u6267\u884c\u7684\u8b66\u544a\u4fe1\u606f\uff0c\u9ed8\u8ba4\u4e3a true
\ncmd_creates\uff1a\u6307\u5b9a\u4e00\u4e2a\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u8be5\u6587\u4ef6\u5df2\u5b58\u5728\uff0c\u5219\u547d\u4ee4\u4e0d\u4f1a\u6267\uff08\u4e0e creates \u53c2\u6570\u4e92\u65a5\uff09
\ncmd_removes\uff1a\u6307\u5b9a\u4e00\u4e2a\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u8be5\u6587\u4ef6\u4e0d\u5b58\u5728\uff0c\u5219\u547d\u4ee4\u4e0d\u4f1a\u6267\uff08\u4e0e removes \u53c2\u6570\u4e92\u65a5\uff09
\nstdin_lines\uff1a\u4f20\u9012\u7ed9\u547d\u4ee4\u7684\u591a\u884c\u6807\u51c6\u8f93\u5165
\ncmd_cwd\uff1a\u6307\u5b9a\u8981\u5728\u8fdc\u7a0b\u4e3b\u673a\u4e0a\u6267\u884c\u547d\u4ee4\u7684\u5de5\u4f5c\u76ee\u5f55\uff08\u4e0e chdir \u53c2\u6570\u4e92\u65a5\uff09
\ncmd_umask\uff1a\u6307\u5b9a\u8981\u5728\u8fdc\u7a0b\u4e3b\u673a\u4e0a\u6267\u884c\u547d\u4ee4\u65f6\u7684 umask \u503c
\ncmd_executable\uff1a\u6307\u5b9a\u8981\u5728\u8fdc\u7a0b\u4e3b\u673a\u4e0a\u6267\u884c\u547d\u4ee4\u7684\u53ef\u6267\u884c\u6587\u4ef6\u8def\u5f84\uff08\u4e0e executable \u53c2\u6570\u4e92\u65a5\uff09
\ncmd_creates_time\uff1a\u6307\u5b9a\u4e00\u4e2a\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u8be5\u6587\u4ef6\u5b58\u5728\u5e76\u4e14\u6700\u540e\u4fee\u6539\u65f6\u95f4\u5728\u6307\u5b9a\u65f6\u95f4\u8303\u56f4\u5185\uff0c\u5219\u547d\u4ee4\u4e0d\u4f1a\u6267\u884c\uff08\u4e0e creates_time \u53c2\u6570\u4e92\u65a5\uff09
\ncmd_creates_file\uff1a\u6307\u5b9a\u4e00\u4e2a\u6587\u4ef6\u8def\u5f84\uff0c\u5982\u679c\u8be5\u6587\u4ef6\u5b58\u5728\u5e76\u4e14\u662f\u4e00\u4e2a\u6587\u4ef6\uff08\u4e0d\u662f\u76ee\u5f55\uff09\uff0c\u5219\u547d\u4ee4\u4e0d\u4f1a\u6267\u884c\uff08\u4e0e creates_file \u53c2\u6570\u4e92\u65a5\uff09
\ncmd_wait_for\uff1a\u6307\u5b9a\u4e00\u4e2a\u6761\u4ef6\uff0c\u5982\u679c\u6ee1\u8db3\u8be5\u6761\u4ef6\uff0c\u5219\u7b49\u5f85\u4e00\u6bb5\u65f6\u95f4\u540e\u518d\u6267\u884c\u547d\u4ee4
\ncmd_wait_for_timeout\uff1a\u7b49\u5f85\u547d\u4ee4\u6267\u884c\u7684\u8d85\u65f6\u65f6\u95f4\uff08\u4ee5\u79d2\u4e3a\u5355\u4f4d\uff09\uff0c\u9ed8\u8ba4\u4e3a 300 \u79d2
\ncmd_wait_for_interval\uff1a\u7b49\u5f85\u547d\u4ee4\u6267\u884c\u7684\u95f4\u9694\u65f6\u95f4\uff08\u4ee5\u79d2\u4e3a\u5355\u4f4d\uff09\uff0c\u9ed8\u8ba4\u4e3a 1 \u79d2
\nignore_errors\uff1a\u53c2\u6570\u6765\u5ffd\u7565\u547d\u4ee4\u6267\u884c\u7684\u9519\u8bef<\/p>\n

\u8bf7\u6ce8\u610f\uff0ccmd\u00a0\u53c2\u6570\u548c\u00a0free_form\u00a0\u53c2\u6570\u662f\u4e92\u65a5\u7684\uff0c\u53ea\u80fd\u4f7f\u7528\u5176\u4e2d\u4e4b\u4e00\u3002<\/p>\n

shell\u6a21\u5757\uff0c\u5982\u679c\u9700\u8981\u4e00\u4e9b\u7ba1\u9053\u64cd\u4f5c\uff0c\u5219\u4f7f\u7528shell<\/h2>\n

\u4f7f\u7528\u8d77\u6765\u4e0ecommand\u4e00\u81f4, shell\u6a21\u5757\u652f\u6301\u7ba1\u9053 \u7279\u6b8a\u7b26\u53f7<\/p>\n

[root@ansible ~]$ ansible web -i hosts -m shell -a ‘ip a | grep eth0’
\n172.16.1.145 | CHANGED | rc=0 >>
\n2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
\ninet 10.0.0.145\/24 brd 10.0.0.255 scope global eth0
\n172.16.1.45 | CHANGED | rc=0 >>
\n2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
\ninet 10.0.0.45\/24 brd 10.0.0.255 scope global eth0<\/p>\n

script\u811a\u672c\u6a21\u5757<\/h2>\n

[root@ansible ~]$ mkdir -p \/server\/scripts
\n[root@ansible ~]$ cat \/server\/scripts\/yum.sh
\n#!\/usr\/bin\/bash
\nyum install -y cowsay<\/p>\n

[root@ansible ~]$ ansible web -m script -a ‘\/server\/scripts\/yum.sh’<\/p>\n

\u8f6f\u4ef6\u7ba1\u7406\u6a21\u5757<\/h2>\n

name\uff1a\u8f6f\u4ef6\u5305\u540d\u79f0
\nstate\uff1a\u72b6\u6001installed\uff0cpresent\u5b89\u88c5 absent\u6216removed\u5220\u9664 latest \u6700\u65b0\u7248
\nlist=ansible:\u5217\u51fa\u5f53\u524d\u4ed3\u5e93\u53ef\u7528\u7684\u8f6f\u4ef6\u5305 yum list ansible \u67e5\u627e\u8f6f\u4ef6\u5305
\nenablerepo\uff1a \u901a\u8fc7\u54ea\u4e2a\u4ed3\u5e93\u83b7\u53d6
\ndisablerepo\uff1a \u4e0d\u4f7f\u7528\u54ea\u4e9b\u4ed3\u5e93\u7684\u5305
\ndownload_only=true\uff1a\u4ec5\u4e0b\u8f7d,\u4e0d\u5b89\u88c5
\nexclude\uff1akernel\u6392\u9664exclude=kernel<\/p>\n

[root@ansible ~]$ ansible web -m yum -a “name=httpd state=present”<\/p>\n

\u901a\u8fc7epel\u4ed3\u5e93\u5b89\u88c5<\/h4>\n

[root@ansible ~]$ ansible web -m yum -a “name=httpd state=present<\/p>\n

enablerepo=epel”<\/p>\n

\u5b89\u88c5\u591a\u4e2a\u8f6f\u4ef6\u5305<\/h4>\n

[root@ansible ~]$ ansible web -m yum -a “name=httpd,tree,cowsay,lrzsz state=present”<\/p>\n

yum_repository\u6b64\u6a21\u5757\u5b9e\u73b0yum\u7684\u4ed3\u5e93\u914d\u7f6e\u7ba1\u7406\uff08\u6e90\uff09<\/h3>\n<\/div>\n

name\uff1a\u4ed3\u5e93id
\ndescription\uff1a\u4ed3\u5e93\u63cf\u8ff0\u540d\u79f0,\u5bf9\u5e94\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684name=
\nbaseurl\uff1a\u4ed3\u5e93\u7684\u5730\u5740
\ngpgcheck\uff1a\u9a8c\u8bc1\u5f00\u542f
\ngpgkey\uff1a\u4ed3\u5e93\u516c\u94a5\u8def\u5f84
\nstate\uff1aabsent(\u5220\u9664)\/present(\u914d\u7f6e \u5b89\u88c5 \u8fd9\u4e2a\u662f\u9ed8\u8ba4\u7684)
\nfile\uff1a\u6307\u5b9ayum\u914d\u7f6e\u6587\u4ef6\u7684\u8def\u5f84\u548c\u540d\u79f0 \u6ce8\u610f\u4e0d\u9700\u8981\u4ee5.repo\u7ed3\u5c3e \u9ed8\u8ba4\u4f7f\u7528 name\u7684\u5185\u5bb9\u4f5c\u4e3a\u6587\u4ef6\u540d
\nenabled yes\/no\uff1a\u662f\u5426\u5f00\u542fyum\u6e90 \u9ed8\u8ba4\u662f yes \u5f00\u542f<\/p>\n

[root@ansible ~]$ ansible web -m yum_repository -a ‘name=php description=”php repo” baseurl=”http:\/\/us-east.repo.webtatic.com\/yum\/el7\/x86_64\/” enabled=no state=present ‘<\/p>\n

\n

\u6587\u4ef6\u7ba1\u7406\u6a21\u5757<\/h2>\n

ansible\u6587\u4ef6\u7ba1\u7406\u6a21\u5757\uff0c\u4e3b\u8981\u6d89\u53cacopy\u6587\u4ef6\u62f7\u8d1d\u3001file\u6587\u4ef6\u521b\u5efa\u3001get_url\u6587\u4ef6\u4e0b\u8f7d<\/p>\n

copy\u6587\u4ef6\u62f7\u8d1d\u6a21\u5757<\/h3>\n

src\uff1a\u63a7\u5236\u7aef\u7684\u6e90\u6587\u4ef6\u8def\u5f84
\ndest\uff1a\u88ab\u63a7\u7aef\u7684\u6587\u4ef6\u8def\u5f84
\nowner\uff1a\u5c5e\u4e3b
\ngroup\uff1a\u5c5e\u7ec4
\nmode\uff1a\u6743\u9650
\nbackup\uff1a\u662f\u5426\u5f00\u542f\u5907\u4efd\u529f\u80fd,\u5982\u679c\u76ee\u6807\u5b58\u5728,\u8986\u76d6\u4e4b\u524d\u8fdb\u884c\u5907\u4efd
\nvalidate\uff1a\u9a8c\u8bc1
\ncontent\uff1a\u65b0\u5efa\u6587\u4ef6\u5e76\u7ed9\u6587\u4ef6\u6dfb\u52a0\u5185\u5bb9<\/p>\n

\u62f7\u8d1d\u6587\u4ef6\u6587\u4ef6\u81f3\u88ab\u63a7\u8282\u70b9<\/h4>\n

[root@ansible ~]$ ansible web -m copy -a ‘src=\/etc\/hosts dest=\/tmp’<\/p>\n

\u5bf9\u8fdc\u7aef\u5df2\u6709\u6587\u4ef6\u8fdb\u884c\u5907\u4efd\uff0c\u6309\u7167\u65f6\u95f4\u4fe1\u606f\u5907\u4efd<\/h4>\n

[root@ansible ~]$ ansible web -m copy -a ‘src=\/etc\/hosts dest=\/tmp\/hostname backup=yes’<\/p>\n

\u590d\u5236\u76ee\u5f55\u5e76\u4fee\u6539\u6240\u6709\u8005\u4e0e\u6743\u9650<\/h4>\n

[root@ansible ~]$ ansible web -m copy -a ‘src=\/etc\/hosts dest=\/tmp\/hostqx owner=nginx group=nginx mode=755’<\/p>\n

file\u6587\u4ef6\u521b\u5efa\u6a21\u5757<\/h3>\n

path\uff1a\u5728\u88ab\u63a7\u7aef\u521b\u5efa\u7684\u8def\u5f84
\nowner\uff1a\u5c5e\u4e3b
\ngroup\uff1a\u5c5e\u7ec4
\nmode\uff1a\u6743\u9650
\nstate\uff1a\u72b6\u6001 touch\u521b\u5efa\u6587\u4ef6 directory\u521b\u5efa\u76ee\u5f55 link\u8f6f\u94fe\u63a5 hard\u786c\u94fe\u63a5
\nrecurse\uff1ayes\u8868\u793a\u9012\u5f52\u6388\u6743<\/p>\n

\u521b\u5efa\u76ee\u5f55<\/h4>\n

[root@ansible ~]$ ansible web -m file -a ‘path=\/cs\/ state=directory ‘<\/p>\n

\u521b\u5efa\u6587\u4ef6<\/h4>\n

[root@ansible ~]$ ansible web -m file -a ‘path=\/cs\/cs.txt state=touch’<\/p>\n

\u9012\u5f52\u4fee\u6539\u6743\u9650\u6240\u6709\u8005<\/h4>\n

[root@ansible ~]$ ansible web -m file -a ‘path=\/cs\/ state=directory owner=nginx group=nginx mode=755 recurse=yes’<\/p>\n

get_url\u6587\u4ef6\u4e0b\u8f7d\u6a21\u5757<\/h3>\n

url\uff1a\u4e0b\u8f7d\u6587\u4ef6\u7684URL,\u652f\u6301HTTP\uff0cHTTPS\u6216FTP\u534f\u8bae
\ndest\uff1a\u4e0b\u8f7d\u5230\u76ee\u6807\u8def\u5f84\uff08\u7edd\u5bf9\u8def\u5f84\uff09\uff0c\u5982\u679c\u76ee\u6807\u662f\u4e00\u4e2a\u76ee\u5f55\uff0c\u5c31\u7528\u539f\u6587\u4ef6\u540d\uff0c\u5982\u679c\u76ee\u6807\u8bbe\u7f6e\u4e86\u540d\u79f0\u5c31\u7528\u76ee\u6807\u8bbe\u7f6e\u7684\u540d\u79f0
\nowner\uff1a\u6307\u5b9a\u5c5e\u4e3b
\ngroup\uff1a\u6307\u5b9a\u5c5e\u7ec4
\nmode\uff1a\u6307\u5b9a\u6743\u9650
\nforce\uff1a\u5982\u679cyes\uff0cdest\u4e0d\u662f\u76ee\u5f55\uff0c\u5c06\u6bcf\u6b21\u4e0b\u8f7d\u6587\u4ef6\uff0c\u5982\u679c\u5185\u5bb9\u6539\u53d8\u66ff\u6362\u6587\u4ef6\u3002\u5982\u679cno\uff0c\u5219\u53ea\u6709\u5728\u76ee\u6807\u4e0d\u5728\u65f6\u624d\u4f1a\u4e0b\u8f7d
\nchecksum\uff1a\u5bf9\u76ee\u6807\u6587\u4ef6\u5728\u4e0b\u8f7d\u540e\u8ba1\u7b97\u6458\u8981\uff0c\u4ee5\u786e\u4fdd\u5176\u5b8c\u6574\u6027<\/p>\n

\u901a\u8fc7get_url\u4e0b\u8f7d\u6587\u4ef6\u6216\u8005\u8f6f\u4ef6<\/h4>\n

[root@ansible ~]$ ansible web -m get_url -a ‘url=https:\/\/mirrors.tuna.tsinghua.edu.cn\/zabbix\/zabbix\/5.0\/rhel\/7\/x86_64\/zabbix-get-5.0.0-1.el7.x86_64.rpm dest=\/tmp\/’<\/p>\n

\u5982\u679c\u5931\u8d25\u628ahttps\u4fee\u6539\u6210http\u5c31\u6210\u529f\u4e86<\/p>\n

\u670d\u52a1\u7ba1\u7406\u6a21\u5757<\/h2>\n

service\u6b64\u6a21\u5757\u548csytemd\u529f\u80fd\u76f8\u4f3c,\u9009\u9879\u5f88\u591a\u76f8\u540c<\/h4>\n

name\uff1a\u670d\u52a1\u540d\u79f0
\nstate\uff1a\u670d\u52a1\u72b6\u6001 started\u542f\u52a8 stopped\u505c\u6b62 restarted\u91cd\u542f reloaded\u91cd\u8f7d
\nenabled\uff1a\u5f00\u542f\u81ea\u542f\u52a8
\ndaemon_reload\uff1a\u52a0\u8f7d\u65b0\u7684\u914d\u7f6e\u6587\u4ef6,\u9002\u7528\u4e8esystemd\u6a21\u5757<\/p>\n

\u542f\u52a8\u670d\u52a1\uff0c\u5e76\u52a0\u5165\u5f00\u673a\u81ea\u542f\u52a8<\/h4>\n

[root@ansible ~]$ ansible web -m service -a ‘name=crond state=started enabled=yes’<\/p>\n

\u505c\u6b62\u670d\u52a1\uff0c\u5e76\u5220\u9664\u5f00\u673a\u81ea\u542f<\/h4>\n

[root@ansible ~]$ ansible web -m service -a ‘name=crond state=stopped enabled=on’<\/p>\n

\u7528\u6237\u7ba1\u7406\u6a21\u5757<\/h2>\n

user\u7ba1\u7406\u7528\u6237<\/h3>\n<\/div>\n

name\uff1a\u521b\u5efa\u7684\u540d\u79f0
\nuid\uff1a\u6307\u5b9auid
\ngroup\uff1a\u6307\u5b9a\u57fa\u672c\u7ec4
\nshell\uff1a\u767b\u5f55shell\u7c7b\u578b\u9ed8\u8ba4\/bin\/bash\uff0c\/sbin\/nologin\u7cfb\u7edf\u8d26\u53f7\u7684shell\u4f7f\u7528 \uff0c\u6b64\u65f6\u65e0\u6cd5\u767b\u9646\u7cfb\u7edf\uff0c\u5373\u4f7f\u7ed9\u4e86\u5bc6\u7801\u4e5f\u4e0d\u884c
\ncreate_home\uff1a\u662f\u5426\u521b\u5efa\u5bb6\u76ee\u5f55,\u9ed8\u8ba4\u4f1a\u521b\u5efa\u5bb6\u76ee\u5f55,no\u4e0d\u521b\u5efa
\npassword\uff1a\u8bbe\u5b9a\u5bf9\u5e94\u7684\u5bc6\u7801\uff0c\u5fc5\u987b\u662f\u52a0\u5bc6\u540e\u7684\u5b57\u7b26\u4e32\u624d\u884c\uff0c\u5426\u5219\u4e0d\u751f\u6548
\nsystem\uff1ayes\u8868\u793a\u7cfb\u7edf\u7528\u6237
\ngroups\uff1a\u9644\u52a0\u7ec4
\nappend\uff1a\u8ffd\u52a0\u9644\u52a0\u7ec4\u4f7f\u7528,yes\u8868\u793a\u589e\u52a0\u65b0\u7684\u9644\u52a0\u7ec4
\nstate\uff1aabsen\u5220\u9664
\nremove\uff1ayes\u8868\u793a\u5220\u9664\u7528\u6237\u65f6\u5c06\u5bb6\u76ee\u5f55\u4e00\u8d77\u5220\u9664
\ngenerate_ssh_key\uff1a\u521b\u5efa\u79c1\u94a5
\nssh_keyu_bits\uff1a\u79c1\u94a5\u4f4d\u6570
\nssh_key_file\uff1a\u79c1\u94a5\u6587\u4ef6\u8def\u5f84<\/p>\n

\u521b\u5efa\u7528\u6237<\/h4>\n

[root@ansible ~]$ ansible web -m user -a ‘name=dmxsp uid=567 group=dmxsp shell=\/sbin\/nologin create_home=no ‘<\/p>\n

\u5220\u9664\u7528\u6237<\/h4>\n

ansible web -m user -a “name=xxx state=absent”<\/p>\n

\u67e5\u770b<\/h4>\n

[root@ansible ~]$ ansible web -a ‘id dmxsp’
\n172.16.1.145 | CHANGED | rc=0 >>
\nuid=567(dmxsp) gid=567(dmxsp) groups=567(dmxsp)
\n172.16.1.45 | CHANGED | rc=0 >>
\nuid=567(dmxsp) gid=567(dmxsp) groups=567(dmxsp)<\/p>\n

\u5bc6\u94a5\u5bf9<\/h4>\n

generate_ssh_key=yes
\nssh_key_bits=2048
\nssh_key_file=.ssh\/id_rsa \u00a0#\u79c1\u94a5<\/p>\n

\u5c06\u660e\u6587\u5bc6\u7801\u8fdb\u884chash\u52a0\u5bc6\uff0c\u7136\u540e\u8fdb\u884c\u7528\u6237\u521b\u5efa<\/h4>\n

[root@ansible ~]$ ansible localhost -m debug -a “msg={{ ‘123’ | password_hash(‘sha512′,’salt’) }} ”<\/p>\n

localhost | SUCCESS => {
\n“msg”: “$6$salt$jkHSO0tOjmLW0S1NFlw5veSIDRAVsiQQMTrkOKy4xdCCLPNIsHhZkIRlzfzIvKyXeGdOfCBoW1wJZPLyQ9Qx\/1”
\n}<\/p>\n

[root@ansible ~]$ ansible web -m user -a ‘name=xx password=$6$salt$jkHSO0tOjmLW0S1NFlw5veSIDRAVsiQQMTrkOKy4xdCCLPNIsHhZkIRlzfzIvKyXeGdOfCBoW1wJZPLyQ9Qx\/1 ‘<\/p>\n

\n

group\u7ba1\u7406\u7ec4<\/h3>\n

name\uff1a\u6307\u5b9a\u7ec4\u540d\u79f0
\ngid\uff1a\u6307\u5b9agid
\nstate\uff1apresent\u521b\u5efa,\u9ed8\u8ba4absent\u5220\u9664
\nsystem\uff1a\u662f\u5426\u662f\u7cfb\u7edf\u7ec4<\/p>\n

\u521b\u5efa\u7ec4<\/h4>\n

[root@ansible ~]$ ansible web -m group -a ‘name=dmxsp gid=567’<\/p>\n

debug<\/h2>\n

\u6b64\u6a21\u5757\u53ef\u4ee5\u7528\u4e8e\u8f93\u51fa\u4fe1\u606f,\u5e76\u4e14\u901a\u8fc7 msg \u5b9a\u5236\u8f93\u51fa\u7684\u4fe1\u606f\u5185\u5bb9,\u529f\u80fd\u7c7b\u4f3c\u4e8eecho\u547d\u4ee4 \u6ce8\u610f: msg\u540e\u9762\u7684\u53d8\u91cf\u6709\u65f6\u9700\u8981\u52a0 ” ” \u5f15\u8d77\u6765 \u5e38\u89c1\u9009\u9879<\/p>\n

msg\uff1a\u6307\u5b9a\u547d\u4ee4\u8f93\u51fa\u7684\u4fe1\u606f
\nvar\uff1a\u6307\u5b9a\u53d8\u91cf\u540d,\u548cmsg\u4e92\u65a5
\nverbosity\uff1a\u8be6\u7ec6\u5ea6<\/p>\n

[root@ansible ~]$ ansible localhost -m debug -a “msg={{ ‘123’ | password_hash(‘sha512′,’salt’) }} ”<\/p>\n

localhost | SUCCESS => {
\n“msg”: “$6$salt$jkHSO0tOjmLW0S1NFlw5veSIDRAVsiQQMTrkOKy4xdCCLPNIsHhZkIRlzfzIvKyXeGdOfCBoW1wJZPLyQ9Qx\/1”
\n}<\/p>\n

\u5b9a\u65f6\u4efb\u52a1\u6a21\u5757<\/h2>\n

cron\u8ba1\u5212\u4efb\u52a1 \u652f\u6301\u65f6\u95f4\uff1aminute\uff0chour\uff0cday\uff0cmonth\uff0cweekda<\/h3>\n

name\uff1a\u63cf\u8ff0\u811a\u672c\u7684\u4f5c\u7528
\nminute\uff1a\u5206\u949f
\nhour\uff1a\u5c0f\u65f6
\nweekday\uff1a\u5468
\nuser\uff1a\u4efb\u52a1\u7531\u54ea\u4e2a\u7528\u6237\u8fd0\u884c\uff1b\u9ed8\u8ba4root
\njob\uff1a\u4efb\u52a1
\nstate\uff1a\u9ed8\u8ba4present\u521b\u5efaabsent\u5220\u9664<\/p>\n

\u6dfb\u52a0\u5b9a\u65f6\u4efb\u52a1<\/h4>\n

[root@ansible ~]$ ansible web -m cron -a ‘name=”script” minute=”*\/2″ job=”sh \/server\/scripts\/yum.sh &>>\/dev\/null” ‘<\/p>\n

\u67e5\u770b<\/h4>\n

[root@ansible ~]$ ansible web -a ‘crontab -l’<\/p>\n

\u5220\u9664<\/h4>\n

[root@ansible ~]$ ansible web -m cron -a ‘name=”script” state=absent ‘<\/p>\n

\u78c1\u76d8\u6302\u8f7d\u6a21\u5757<\/h2>\n

mount\u6302\u8f7d\u548c\u5378\u8f7d\u6587\u4ef6\u7cfb\u7edf<\/h3>\n

src\uff1a\u6e90\u8bbe\u5907\u8def\u5f84\uff0c\u6216\u7f51\u7edc\u5730\u5740
\npath\uff1a\u6302\u8f7d\u81f3\u672c\u5730\u54ea\u4e2a\u8def\u5f84\u4e0b
\nfstype\uff1a\u8bbe\u5907\u7c7b\u578b\uff1b nfs
\nopts\uff1a\u6302\u8f7d\u7684\u9009\u9879
\nstate\uff1a\u6302\u8f7d\u8fd8\u662f\u5378\u8f7dpresent\u6c38\u4e45\u6302\u8f7d\uff0c\u4f46\u6ca1\u6709\u7acb\u5373\u751f\u6548\uff08\u4ec5\u4fee\u6539\u914d\u7f6e \u00a0 \u00a0 \u5f00\u673a\u6302\u8f7d\uff0c\u4ec5\u5c06\u6302\u8f7d\u914d\u7f6e\u5199\u5165\/etc\/fstab\uff09absent\u5378\u8f7d\u4e34\u65f6\u6302\u8f7d,\u5e76\u5220\u9664\u6c38\u4e45\u6302\u8f7d\uff08\u5378\u8f7d\u8bbe\u5907\uff0c\u4f1a\u6e05\u7406\/etc\/fstab\u5199\u5165\u7684\u914d\u7f6e\uff09 mounted\u6c38\u4e45\u548c\u4e34\u65f6\u6302\u8f7d\uff08\u6302\u8f7d+\u4fee\u6539\u914d\u7f6e \u00a0 \u6302\u8f7d\u8bbe\u5907\uff0c\u5e76\u5c06\u914d\u7f6e\u5199\u5165\/etc\/fstab\uff09 unmounted\u4e34\u65f6\u5378\u8f7d\uff08\u5378\u8f7d\u8bbe\u5907\uff0c\u4e0d\u4f1a\u6e05\u9664\/etc\/fstab\u5199\u5165\u7684\u914d\u7f6e\uff09remounted\u91cd\u65b0\u6302\u8f7d<\/p>\n

\u5728backup\u670d\u52a1\u5668\u4e0a\u5b89\u88c5nfs<\/h4>\n

[root@ansible ~]$ ansible backup -m yum -a ‘name=nfs-utils state=present’<\/p>\n

\u914d\u7f6e\u6587\u4ef6<\/h4>\n

[root@ansible ~]$ ansible backup -m copy -a ‘content=”\/data-dmxsp\/ 172.16.1.0\/24(rw,all_squash)” dest=\/etc\/exports ‘<\/p>\n

\u521b\u5efa\u76ee\u5f55\u4fee\u6539\u6240\u6709\u8005<\/h4>\n<\/div>\n

[root@ansible ~]$ ansible backup -m file -a ‘path=\/data-dmxsp owner=nfsnobody group=nfsnobody state=directory ‘<\/p>\n

\u542f\u52a8\u670d\u52a1\u5e76\u5f00\u673a\u81ea\u542f\u52a8<\/h4>\n

[root@ansible ~]$ ansible backup -m service -a ‘name=rpcbind state=started enabled=yes’<\/p>\n

[root@ansible ~]$ ansible backup -m service -a ‘name=nfs state=started enabled=yes’<\/p>\n

backup\u4e0a\u9762\u8fdb\u884c\u6302\u8f7d(\u672c\u5730\u6d4b\u8bd5)<\/h4>\n

[root@ansible ~]$ ansible backup -m mount -a ‘src=172.16.1.116:\/data-dmxsp path=\/tmp\/ fstype=nfs state=mounted’<\/p>\n

web\u670d\u52a1\u5668\u8fdb\u884c\u6302\u8f7d<\/h4>\n

[root@ansible ~]$ ansible web -m mount -a ‘src=172.16.1.116:\/data-dmxsp path=\/code\/backup fstype=nfs state=mounted’<\/p>\n

\u9632\u706b\u5899\u7ba1\u7406\u6a21\u5757<\/h2>\n

Linux\u4e0b\u9632\u706b\u5899\u4e3b\u8981\u5206\u4e3aSelinux\u4e0eFirewalld\u3001iptables<\/h4>\n

Selinux\u9632\u706b\u5899<\/h4>\n

policy\uff1a\u6307\u5b9aSELINUXTYPE=targeted
\nstate\uff1a\u6307\u5b9aSELINUX=disabled<\/p>\n

ansible web -m selinux -a “state=disabled”<\/p>\n

firewalld\u9632\u706b\u5899<\/h4>\n

zone\uff1a\u8981\u64cd\u4f5c\u7684\u533a\u57df \u9ed8\u8ba4public
\nsource\uff1a\u6765\u6e90\u5730\u5740
\nservice\uff1a\u670d\u52a1\u540d\u79f0 http,https,sshd,……
\nport\uff1a\u7aef\u53e3
\npermanent\uff1a\u6c38\u4e45\u751f\u6548\uff0c\u4f46\u4e0d\u4f1a\u7acb\u5373\u751f\u6548
\nimmediate\uff1a\u4e34\u65f6\u751f\u6548
\nstate: \u6307\u5b9a\u89c4\u5219\u7684\u72b6\u6001\u3002\u53ef\u4ee5\u662fenabled\uff08\u542f\u7528\u89c4\u5219\uff09\u3001disabled\uff08\u7981\u7528\u89c4\u5219\uff09\u6216persistent\uff08\u6301\u4e45\u5316\u89c4\u5219\uff09
\nmasquerade\uff1a\u6307\u5b9a\u662f\u5426\u542f\u7528SNAT\uff08\u6e90\u5730\u5740\u8f6c\u6362\uff09
\nrich_rules\uff1a\u6307\u5b9a\u4f7f\u7528rich\u89c4\u5219\u914d\u7f6e\u9632\u706b\u5899
\nforward_ports\uff1a\u6307\u5b9a\u8981\u8f6c\u53d1\u7684\u7aef\u53e3
\nicmp_block\uff1a\u6307\u5b9a\u8981\u963b\u6b62\u7684ICMP\u7c7b\u578b
\ndestination\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u76ee\u6807IP\u5730\u5740\u6216\u7f51\u7edc\u3002\u53ef\u4ee5\u662f\u5355\u4e2aIP\u5730\u5740\u3001CIDR\u5730\u5740\u6216IP\u8303\u56f4<\/p>\n

[root@ansible ~]$ ansible webs -m systemd -a “name=firewalld state=started”<\/p>\n

[root@ansible ~]$ ansible web -m firewalld -a “service=http immediate=yes state=enabled”<\/p>\n

[root@ansible ~]$ ansible web -m firewalld -a “port=80\/tcp immediate=yes state=enabled”<\/p>\n

iptables<\/h4>\n

chain\uff1a\u6307\u5b9a\u89c4\u5219\u6240\u5c5e\u7684\u94fe\u3002\u53ef\u4ee5\u662f\u9884\u5b9a\u4e49\u7684\u94fe\uff08\u5982INPUT\u3001OUTPUT\u3001FORWARD\u7b49\uff09\uff0c\u4e5f\u53ef\u4ee5\u662f\u81ea\u5b9a\u4e49\u7684\u94fe
\ntable\uff1a\u6307\u5b9a\u89c4\u5219\u6240\u5c5e\u7684\u8868\u3002\u53ef\u4ee5\u662f\u9884\u5b9a\u4e49\u7684\u8868\uff08\u5982filter\u3001nat\u3001mangle\u7b49\uff09\uff0c\u4e5f\u53ef\u4ee5\u662f\u81ea\u5b9a\u4e49\u7684\u8868
\nprotocol\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u534f\u8bae\u3002\u53ef\u4ee5\u662f\u9884\u5b9a\u4e49\u7684\u534f\u8bae\uff08\u5982tcp\u3001udp\u3001icmp\u7b49\uff09\uff0c\u4e5f\u53ef\u4ee5\u662f\u81ea\u5b9a\u4e49\u7684\u534f\u8bae
\nsource\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u6e90IP\u5730\u5740\u6216\u7f51\u7edc\u3002\u53ef\u4ee5\u662f\u5355\u4e2aIP\u5730\u5740\u3001CIDR\u5730\u5740\u6216IP\u8303\u56f4destination\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u76ee\u6807IP\u5730\u5740\u6216\u7f51\u7edc\u3002\u53ef\u4ee5\u662f\u5355\u4e2aIP\u5730\u5740\u3001CIDR\u5730\u5740\u6216IP\u8303\u56f4
\nin_interface\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u5165\u63a5\u53e3
\nout_interface\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u51fa\u63a5\u53e3
\nsource_port\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u6e90\u7aef\u53e3
\ndestination_port\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u76ee\u6807\u7aef\u53e3
\njump\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u76ee\u6807\u52a8\u4f5c\u3002\u53ef\u4ee5\u662f\u9884\u5b9a\u4e49\u7684\u52a8\u4f5c\uff08\u5982ACCEPT\u3001DROP\u3001REJECT\u7b49\uff09\uff0c\u4e5f\u53ef\u4ee5\u662f\u81ea\u5b9a\u4e49\u7684\u52a8\u4f5c
\nstate\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u72b6\u6001\u3002\u53ef\u4ee5\u662fpresent\uff08\u9ed8\u8ba4,\u6dfb\u52a0\u89c4\u5219\uff09\u3001absent\uff08\u5220\u9664\uff09\u6216disabled\uff08\u7981\u7528\u89c4\u5219\uff09
\ncomment\uff1a\u6307\u5b9a\u89c4\u5219\u7684\u6ce8\u91ca
\naction\uff1a\u5982\u4f55\u6dfb\u52a0\u89c4\u5219 insert\u63d2\u5165 append\u8ffd\u52a0<\/p>\n

[root@ansible ~]$ ansible 172.16.1.163 -m iptables -a “table=filter action=insert chain=INPUT source=10.0.0.0\/24 protocol=tcp destination_port=3306 jump=DROP ”<\/p>\n

7.\u4f7f\u7528\u6a21\u5757\u7b80\u5355\u642d\u5efa<\/h1>\n

\u5b89\u88c5nginx\u670d\u52a1
\n\u7f16\u5199\u7b80\u5355\u7f51\u9875\u6d4b\u8bd5\u5185\u5bb9
\n\u542f\u52a8\u670d\u52a1\u4e0d\u52a0\u5165\u5f00\u673a\u81ea\u542f
\n\u653e\u884c\u5bf9\u5e94\u7684\u7aef\u53e3<\/h4>\n

[root@ansible ~]$ ansible 172.16.1.163 -m yum_repository -a “name=nginx description=”nginx repo” baseurl=http:\/\/nginx.org\/packages\/centos\/7\/x86_64\/ enabled=yes gpgcheck=no state=present ”<\/p>\n

[root@ansible ~]$ ansible 172.16.1.163 -m yum -a ‘name=nginx state=installed’<\/p>\n

[root@ansible ~]$ ansible 172.16.1.163 -m copy -a ‘content=”backup.123.com” dest=\/usr\/share\/nginx\/html\/index.html ‘<\/p>\n

[root@ansible ~]$ ansible 172.16.1.163 -m systemd -a ‘name=nginx state=started enabled=yes’<\/p>\n

[root@ansible ~]$ ansible 172.16.1.163 -m iptables -a ‘table=filter action=append chain=INPUT protocol=tcp destination_port=80 jump=ACCEPT ‘<\/p>\n","protected":false},"excerpt":{"rendered":"

1.\u4ec0\u4e48\u662fad-hoc\u547d\u4ee4 ad-hoc\u547d\u4ee4\u662f\u6307\u4f7f\u7528\/usr\/bin\/ansible\u547d\u4ee4\u884c\u5de5\u5177\u5728\u4e00\u4e2a\u6216\u591a\u4e2a\u7ba1\u7406 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":""},"categories":[24],"tags":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=\/wp\/v2\/posts\/1156"}],"collection":[{"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1156"}],"version-history":[{"count":12,"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=\/wp\/v2\/posts\/1156\/revisions"}],"predecessor-version":[{"id":1159,"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=\/wp\/v2\/posts\/1156\/revisions\/1159"}],"wp:attachment":[{"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1156"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1156"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.qiangzhenshuai.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1156"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}