Ansible自动化运维学习笔记2

#1.可定义单个变量或者多个变量（常规）
vars:
  tvar1: testfile
  tvar2: testfile


#2.使用YAML的块序列语法也可以定义变量
vars:
  - testvar1: testfile1
  - testvar2: testfile2


#3.能够以类似"属性"的方式定义变量 （推荐方法）
vars:
  nginx:
    conf80: /etc/nginx/conf.d/80.conf
    conf8080: /etc/nginx/conf.d/8080.conf

#示例1：上面1/2案例变量调用
"{{ tvar1 }}"
"{{ testvar1 }}"


#示例2. 上面3案例变量调用(由于是对象)
"{{nginx.conf80}}"  #方式1
"{{nginx['conf8080']}}" #方式2

path: /testdir/{{ testvar1 }}  #当 "不处于开头位置" 相当于是拼接路径可以不使用""包含
path: "{{nginx.conf80}}"  #变量被引用时如下，处于"开头的位置"必须使用双引号引起被引用的变量，否则会报语法错误。

file:
  path={{nginx.conf80}}
  path={{nginx['conf8080']}}

#语法一示例：
  testvar1: testfile
  testvar2: testfile2
#语法二示例：
  - testvar1: testfile
  - testvar2: testfile2
#语法三示例：
nginx:
  conf80: /etc/nginx/conf.d/80.conf
  conf8080: /etc/nginx/conf.d/8080.conf

#单个变量文件引入
vars_files:
  - /testdir/ansible/nginx.yml

#也可以引入多个变量文件，每个被引入的文件都需要以"- "开头，示例如下
vars_files:
  - /testdir/ansible/nginx_vars.yml
  - /testdir/ansible/other_vars.yml

#"vars"关键字和"vars_files"关键字可以同时使用
vars:
  - conf90: /etc/nginx/conf.d/90.conf
vars_files:
  - /testdir/ansible/nginx_vars.yml

#var.yml
create:
  directory: Love
  filename: Ansible.sh
  context: "insert file a talk about b t n"  #建议对于字符串一定要添加双引号，可使用转义字符;

#variable.yml
---
- hosts: local
  remote_user: root
  vars: #关键点1-直接在play文件中定义变量
    - dirRoot: /tmp/
  vars_files: #关键点2-包含外部设定的变量文件
    - /root/var.yml
  tasks:
    - name: Create directory
      file: 
        path: "{{dirRoot}}{{create.directory}}"  #关键点3
        state: directory
    - name: touch file
      file:
        path={{dirRoot}}{{create.directory}}/{{create['filename']}}  #关键点4 - 特殊字符可以直接拼接（实际使用时候不建议这样）
        state=touch
    - name: insert context
      lineinfile:
        path="{{dirRoot}}{{create.directory}}/{{create.filename}}"  #关键点5 - 推荐方法采用单双引号包含里面可拼接字符
        line={{create['context']}}

$ansible local -m setup | more
local | SUCCESS => {
    "ansible_facts": {
        "ansible_all_ipv4_addresses": [
            "10.10.107.222",
            "192.168.1.99"
        ],
        "ansible_all_ipv6_addresses": [
            "fe80::9738:2d26:820f:2d50",
            "fe80::dfc:592e:b4a4:9877"
        ],
        "ansible_apparmor": {
            "status": "disabled"
        },
        "ansible_architecture": "x86_64",
        "ansible_bios_date": "09/21/2015",
        "ansible_bios_version": "6.00",
        "ansible_cmdline": {
            "BOOT_IMAGE": "/vmlinuz-3.10.0-957.12.2.el7.x86_64",
            "LANG": "zh_CN.UTF-8",
            "crashkernel": "auto",
            "quiet": true,
            "rd.lvm.lv": "centos/swap",
            "rhgb": true,
            "ro": true,
            "root": "/dev/mapper/centos-root"
        },

#比如我只是想要查看远程主机的内存配置信息
ansible local -m setup -a 'filter=ansible_memory_mb'  #通过setup模块的filter参数可以指定需要过滤的关键字

#相对模糊的过滤
ansible local -m setup -a "filter=*mb*"

$cat testinfo.fact
#INI风格的内容我在"[testmsg]"配置段中配置了两条自定义信息，msg1与msg2。  
[testmsg]
msg1 = This is a demo1
msg2 = This is a demo2


#我们也可以使用json格式进行配置,只是书写格式不同 /tmp/info.fact  ansible_local
{
   "testmsg":{
       "msg1":"This is the first custom test message",
       "msg2":"This is the second custom test message"
   }
}

#获取本地自定义信息 (从默认目录)
ansible local -m setup -a "filter=ansible_local"

#假设我把".fact"文件放在了目标主机的"/tmp"目录下
ansible local -m setup -a "filter=ansible_local fact_path=/tmp"


#执行结果
local | SUCCESS => {
    "ansible_facts": {
        "ansible_local": {
            "testinfo": {
                "testmsg": {
                    "msg1": "This is a demo1",
                    "msg2": "This is a demo2"
                }
            }
        },
        "discovered_interpreter_python": "/usr/bin/python"
    },
    "changed": false
}

local | SUCCESS => {
    "ansible_facts": {
        "ansible_local": {
            "info": {
                "testmsg": {
                    "msg1": "This is the first custom test message",
                    "msg2": "This is the second custom test message"
                }
            }
        },
        "discovered_interpreter_python": "/usr/bin/python"
    },
    "changed": false
}

---
- hosts: local
  remote_user: root
  vars:
    testvar: value of test variable 1024   #关键1
  tasks:
  - name: touch testfile
    file:
      path: /tmp/testfile
      state: touch
  - name: debug demo
    debug:  #msg中的变量值需要使用引号引起，因为{{testvar}}变量前包含"冒号"，如果不使用引号会报语法错误
      msg: "this is debug info , {{testvar}} " #输出自定义debug字符串    #关键2
      #var: testvar  #通过debug的var参数输出了这个变量的内容              #关键3 (与msg不能同时使用)
``` 

play解析：我们先在local主机上touch了对应的文件,使用debug的msg参数时也可以引用变量的值并且输出，然后利用debug模块在控制台中输出变量的名称以及变量的值:
```bash
#执行结果(1) - msg
TASK [debug demo]
ok: [local] => {
    "msg": "this is debug info , value of test variable 1024 "
}

#执行结果(2)- var
TASK [debug demo] 
ok: [local] => {
    "testvar": "value of test variable 1024"
}

---
- hosts: local
  remote_user: root
  vars:
    test: "Test: "  #关键点
  tasks:
  - name: debug demo
    debug:
      msg: "{{test}} Remote host memory swap information: {{ansible_memory_mb['swap']}} n, ip addrs info: {{ansible_all_ipv4_addresses}}"  #关键点

TASK [debug demo] 
ok: [local] => {
    "msg": "Test: Remote host memory swap information: {u'cached': 0, u'total': 2047, u'free': 2047, u'used': 0} n, ip addrs info: [u'10.10.107.222', u'192.168.1.99']"
}

语法一示例：
debug:
     msg: "Remote host memory information : {{ansible_memory_mb.real}}"
语法二示例：
debug:
     msg: "Remote host memory information : {{ansible_memory_mb['real']}}"

#执行命令返回结果利用 debug 查看
---
- hosts: local
  remote_user: root
  vars:
    cmd1: whoami
    cmd2: hostname -I
  tasks:
  - name: execute whoami
    shell: "{{cmd1}}" 
    register: who
  - name: execute hostname
    shell: "{{cmd2}}"
    register: hostname
  - name: execute echo
    shell: "echo test > /tmp/testshellfile"
    register: echovar
  - name: Debug shell module return values
    debug: 
      var: who,hostname,echovar   #可以输出多个变量采用","号进行分割

TASK [Debug shell module return values] 
ok: [local] =>
{
    "who,hostname,echovar": "(
    {'stderr_lines': [],
     u'changed': True,    #操作标识!
     u'end': u'2019-07-30 11:31:13.821710',
     'failed': False,     #执行状态
     u'stdout': u'root',  #执行结果
     u'cmd': u'whoami',   #执行命令
     u'rc': 0, 
     u'start': 
     u'2019-07-30 11:31:13.818264',
     u'stderr': u'', 
     u'delta': u'0:00:00.003446', 'stdout_lines': [u'root']},

     {'stderr_lines': [], u'changed': True, u'end': u'2019-07-30 11:31:14.111808', 'failed': False, u'stdout': u'10.10.107.222 192.168.1.99 ', u'cmd': u'hostname -I', u'rc': 0, u'start': u'2019-07-30 11:31:14.108345', u'stderr': u'', u'delta': u'0:00:00.003463', 'stdout_lines': [u'10.10.107.222 192.168.1.99 ']}, 
     
     {'stderr_lines': [], u'changed': True, u'end': u'2019-07-30 11:31:14.367277', 'failed': False, u'stdout': u'', u'cmd': u'echo test > /tmp/testshellfile', u'rc': 0, u'start': u'2019-07-30 11:31:14.364389', u'stderr': u'', u'delta': u'0:00:00.002888', 'stdout_lines': []})"
}

#示例的返回信息为shell模块的返回值
#语法一
  - name: shell module return values
    debug:
      msg: "{{testvar.cmd}}"
#语法二
  - name: shell module return values
    debug:
      msg: "{{testvar['cmd']}}"

#输出可采用debug模块的msg进行过滤调用输出,更加的简洁方便;

---
- hosts: local
  remote_user: root
  vars_prompt: 
    - name: "Username"               #变量名称
      prompt: "What is your name"   #交互式输入提示
      private: no                     #是否隐秘：默认Yes(不显示输入)/no(显示输入))
    - name: "Password"
      prompt: "What is your password"
    - name: "Sex"                    #多选项选项
      prompt: "Choose the you Sex n
      m: Mann
      w: Womann
      o: othern"
      private: no
      default: o
    - name: "PayPass"               #加密输入以哈希密码输出 (可以直接创建linux系统用户和设置密码)
      prompt: "Enter Pay PassWord"
      private: no                    #可查看输入
      unsafe: yes                    #支持输入特殊字符 比如： { % 等ansbile含义符号 - 2.8 add
      encrypt: "sha512_crypt"        #关键点-encrypt关键字表示对用户输入的信息进行哈希
      confirm: yes   #关键点-通过"confirm"关键字就能实现需要输入两次完全相同的密码，才能够设置成功
  tasks:
   - name: output prompt vars   #任务名称
     debug:
      msg: "Username = {{Username}} , Password = {{Password}},  Sex = {{Sex}}, Pay Password = {{PayPass}}"
   - name: create user    #创建用户
     user:
       name: "{{Username}}"
       password: "{{PayPass}}"

#未安装passlib支持的 encrypt 加密方式  2.7 版本新增
bcrypt - BCrypt
md5_crypt - MD5 Crypt
sha256_crypt - SHA-256 Crypt
sha512_crypt - SHA-512 Crypt

$ansible-playbook prompt.yml
What is your name: Weiyegeek
What is your password:
Choose the you Sex:
 m: Man
 w: Woman
 o: other
 [o]: m
Enter Pay PassWord: Wei123456
confirm Enter Pay PassWord: Wei123456

PLAY [local] 
TASK [Gathering Facts]
ok: [local]

TASK [output prompt vars] 
ok: [local] => {
    "msg": "Username = Weiyegeek , Password = weiyegeek,  Sex = m, Pay Password = $6$WDmSQbaDomZyzbbm$MHXVXALnaZ4oKkptiFi/CYlQJWxrUD4xxHmvSjvZSKqr/4hvmaA/h/JKLIUZL.YZDQXx53EAOp.BgJLPltnxw1"
}

TASK [create user] 
changed: [local]
PLAY RECAP 
local : ok=3  changed=1  unreachable=0  failed=0  skipped=0  rescued=0  ignored=0

#cat extravars.yml
---
- hosts: local
  remote_user: root
  vars:
    verify: "123456"
  tasks:
  - name: "Passing Variables On The Command Line"
    debug:
      msg: "{{ip}} - {{Port}} - {{service}} , Verify: {{verify}}"  #

#三种方式效果相同
ansible-playbook extravars.yml --extra-vars 'ip="192.168.1.1" Port="8080" service="nginx" verify="888888"'
ansible-playbook extravars.yml -e 'ip="192.168.1.1" Port="8080" service="nginx" verify="888888"'
ansible-playbook extravars.yml -e '{"ip":"192.168.1.1","Port":"8080","service":"nginx","verify":"888888"}'

#执行结果：
ok: [local] => {
    "msg": "192.168.1.1 - 8080 - nginx , Verify: 888888"
}

# cat > filevars.yml <<end
testvar: testvarinfile
countlist:
- one
- two
- three
- four
end

#playbook的内容如下
#cat > filevariable.yml <<END
---
- hosts: local
  remote_user: root
  tasks:
  - name: "Passing Variables On The Command Line"
    debug:
      msg: "{{testvar}} {{countlist[0]}}"
END

#使用"@"符号加上变量文件的路径，即可在命令行中传入对应的变量文件，变量文件中的所有变量都可以在playbook中引用
ansible-playbook filevariable.yml -e "@/root/filevars.yml"

#执行结果
TASK [Passing Variables On The Command Line]
ok: [local] => {
    "msg": "testvarinfile one"
}

#/etc/ansible/hosts
#[ini] 格式
#示例1.只要在定义主机时将变量名和变量值写在主机配置的后面即可，可以为一个主机定义多个主机变量，用空格隔开即可
local ansible_host=10.1.1.70 testhostvar=test70_host_var testvar1=testvar1

#[yaml] 格式
all:
 hosts:
   test70:
     ansible_host: 10.1.1.70
     ansible_port: 22
     testhostvar: test70_host_var
     testhostvar1: test70_host_var1
     testhostvar2:
       thv1: demo1
       thv2: demo2

ansible local -m shell -a "echo -e Testhostvar = {{testhostvar}}, n Testhostvar1 = {{testhostvar1}} , testhostvar2.thv1 = {{testhostvar2['thv2']}}"

# local | CHANGED | rc=0 >>
# Testhostvar = testhostvar2048, n Testhostvar1 = testvar1024 , testhostvar2.thv1 = demo2

#[ini] 格式
[testB]
test70 ansible_host=10.1.1.70
test71 anisble_host=10.1.1.71
 
[testB:vars]
test_group_var1='group var test'
test_group_var2='group var test2'


#[YAML] 格式
all:
 children:
   testB:
     hosts:
       test70:
         ansible_host: 10.1.1.70
         ansible_port: 22
       test71:
         ansible_host: 10.1.1.71
         ansible_port: 22
     vars:
       test_group_var1: 'group var test1'
       test_group_var2: 'group var test2'

$ansible ops -m shell -a "echo -e test_group_var1= {{test_group_var1}}, n test_group_var2 = {{test_group_var2}}"
# 10.20.172.179 | CHANGED | rc=0 >>
# test_group_var1=group var test1, test_group_var2 =group var test2

# cat > setfact.yml<<end
---
- hosts: local
  remote_user: root
  vars:
    testvar1: tv1    #关键点-只能在当前主机中使用
  tasks:
  - name: "test shell return variable"
    shell: "echo setfact module"
    register: revar
  - name: setfact moudle setting
    set_fact:
      testvar2: tv2  #关键点-可以在随后的play中任意主机调用使用
      testvar3: "{{revar.cmd}}"  #关键点-变量给变量赋值
      cacheable: yes  #示例设置事实，以便它们将保留在事实缓存中
  - debug:
      msg: "Local host : {{testvar1}} - {{testvar2}} -  {{testvar3}} - {{revar.cmd}}"
 
- hosts: local
  remote_user: root
  tasks:
  - name: "other play get testvar2"
    debug:
      msg: "{{testvar2}}"  #有set_fact模块创建可以被第二个play引用
  # - name: "other play get testvar1"   
  #   debug:
  #     msg: "{{testvar1}}"   #不能被第二play引用会报错(所以这里注释一哈)
  - name: "other play get testvar3"
    debug:
      msg: "{{testvar3}}"
  - name: "show execute command"
    debug:
      msg: "{{revar.cmd}}"   #注册的变量也能在第二个play中使用
end

$ansible-playbook setfact.yml
# TASK [debug]
#     "msg": "Local host : tv1 - tv2 -  echo setfact module - echo setfact module"

# TASK [other play get testvar2] 
#     "msg": "tv2"

# TASK [other play get testvar3] 
#     "msg": "echo setfact module"

# ok: [local] 
#     "msg": "echo setfact modu

#示例1.直接采用ansible命令行输出内置变量

#-----ansible_version------
ansible local -m debug -a "msg='当前Ansible版本号: {{ansible_version}}'"
# local | SUCCESS => {
#     "msg": "Ansible Version :  {'major': 2, 'full': '2.8.1', 'string': '2.8.1', 'minor': 8, 'revision': 1}"
# }


#-----inventory_dir------
ansible local -m debug -a "msg='Current Hosts Configure: {{inventory_dir}}'"
# local | SUCCESS => {
#     "msg": "Current Hosts Configure: /etc/ansible"
# }


#-----inventory_hostname*------
$ansible local -m debug -a "msg={{inventory_hostname}}"   #主机清单中的长主机名称
# local | SUCCESS => {
#     "msg": "local"
# }
# local | SUCCESS => {
#     "msg": "local"
# }
#无论是IP还是别名，如果清单的主机名称中包含"."，inventory_hostname_short都会取得主机名中第一"."之前的字符作为主机的简短名称。
$ansible testA -m debug -a "msg={{inventory_hostname}}" 
# 10.10.107.221 | SUCCESS => {
#     "msg": "10.10.107.221"
# }
$ansible testA -m debug -a "msg={{inventory_hostname_short}}" #主机清单中的短主机名称
# 10.10.107.221 | SUCCESS => {
#     "msg": "10"
# }



#-----groups*------
ansible local -m debug -a "msg={{groups}}"
# local | SUCCESS => {
#     "msg": {
#         "all": [
#             "local",
#             "10.10.107.221",
#             "10.20.172.179"
#         ],
#         "ops": [
#             "10.10.107.221",
#             "10.20.172.179"
#         ],
#         "testA": [
#             "10.10.107.221"
#         ],
#         "testB": [
#             "10.20.172.179"
#         ],
#         "ungrouped": [
#             "local"
#         ]
#     }
# }
ansible local -m debug -a "msg={{groups.testA}}"
# local | SUCCESS => {
#     "msg": [
#         "10.10.107.221"
#     ]
ansible ops -m debug -a "msg={{groups['ungrouped']}}"
# 10.10.107.221 | SUCCESS => {
#     "msg": [
#         "local"
#     ]
# }
# 10.20.172.179 | SUCCESS => {
#     "msg": [
#         "local"
#     ]
# }


#-----group_names------
ansible local -m debug -a "msg={{group_names}}"
# local | SUCCESS => {
#     "msg": [
#         "ungrouped"
#     ]
# }

ansible testA -m debug -a "msg={{group_names}}"
# 10.10.107.221 | SUCCESS => {
#     "msg": [
#         "ops",
#         "testA"
#     ]
# }

# cat > gatherfcats.yml <<end
---
- name: "Play1 : Gather facts of local"
  hosts: local,testB
  remote_user: root
  tasks:
  - name: "show play hosts"
    debug:
      msg: "Play1 -> play include hosts : {{play_hosts}}"  #当前play包含的hosts

- name: "Play2: Gather facts"
  hosts: testA,testB
  remote_user: root
  tasks:
  - debug: 
     msg: "Play2 -> Local IP : {{hostvars['local'].ansible_default_ipv4}}"  #调用Gather中收集local主机中的IP地址信息
  - debug: 
     msg: "Play2 -> Local interface : {{hostvars['local'].ansible_default_ipv4.interface}}"
end

#关键点1
TASK [Gathering Facts] 
ok: [10.20.172.179]
ok: [local]

ok: [local] 
    "msg": "Play1 -> play include hosts : [u'local', u'10.20.172.179']"
ok: [10.20.172.179]
    "msg": "Play1 -> play include hosts : [u'local', u'10.20.172.179']"


TASK [Gathering Facts]
ok: [10.20.172.179]
ok: [10.10.107.221]

ok: [10.10.107.221] => {
    "msg": "Play2 -> Local IP : {u'macaddress': u'00:50:56:b3:dc:b4', u'network': u'10.10.107.0', u'mtu': 1500, u'broadcast': u'10.10.107.255', u'alias': u'ens192', u'netmask': u'255.255.255.0', u'address': u'10.10.107.222', u'interface': u'ens192', u'type': u'ether', u'gateway': u'10.10.107.1'}"
}
.....

ok: [10.20.172.179] => {
    "msg": "Play2 -> Local interface : ens192"
}
......

# cat > gatherfcats1.yml <<end
---
- name: "Play 1 - local"
  hosts: local
  remote_user: root
  gather_facts: no  #由于不进行信息收集其他play无法调用该主机的facts信息，执行速度有所提升;
  vars:
    testvar: "通过vars关键字定义的变量方法是无法被跨主机引用的"
  tasks:
  - name: "setfact module settting"
    set_fact:  #但是可以通过set_fact模块与hostvars来进行跨主机引用(重要)(与gather_facts关键字无关)
      var1: "gather_facts settting no"
  - name: "show set_fact"
    shell: "echo {{var1}}"
    register: shellrst #注册变量也能进行hostvars跨主机调用(与gather_facts关键字无关)

- name: "Play 2 - testA "
  hosts: testA
  remote_user: root
  gather_facts: no
  tasks:
  - debug:
      msg: "Play 1 hostvars : {{hostvars.local.var1}} , Play 1 register shell command: {{hostvars.local.shellrst['cmd']}}"  #但是可以采用hostvars来进行跨主机引用set_fact模块设置的变量
      #msg: "play 1 中的 {hostvars['local'].ansible_default_ipv4 不能被调用由于根本没有进行gathering facts主机信息收集"
      #msg: "play 1 中的 testvar 变量不能被引用 {{testvar}} "
end

TASK [debug]
ok: [10.10.107.221] => {
    "msg": "Play 1 hostvars : gather_facts settting no , Play 1 register shell command: echo gather_facts settting no"
}

#两种语法方式(模块参数介绍请参考Ansible模块介绍)
- include_vars:
    file: /testdir/ansible/testfile
- include_vars: "/testdir/ansible/testfile"

# cat > include_vars_demo.yml<<END
---
- hosts: local
  remote_user: root
  gather_facts: no
  vars_files:
  - /tmp/ansible/demo1/var.yml
  tasks:
  - debug:
      msg: "{{test1}} {{test2}}"  #由于testvar2已经加入到了变量文件中,所有显示OK
  - lineinfile:
      path: /tmp/ansible/demo1/var.yml #修改添加变量文件
      line: "testvar4: add"
  - include_vars: 
      file: /tmp/ansible/demo1/var.yml
      name: trans_var  #关键点将变量文件中变量全部赋值给另外trans_var变量
  #'include_vars'模块重新加载了变量文件
  - debug:
      msg: "include_vars - {{trans_var.testvar4}}"  # 成功调用了trans_var.testvar4变量
  - include_vars: 
      dir: /tmp/ansible/demo2/   #夹杂这个文件中为.yaml / yml / json 
      files_matching: "^var.*" #加载指定目录中以"var_"开头的变量文件
      ignore_files: ["^var_.*",varintest.yaml] #明确指定需要忽略的变量文件名称的列表
      extensions: [yaml,yml,json,varfile] #允许的扩展
      depth: 1 #递归深度
      name: var  #关键点将变量文件中变量全部赋值给另外
    register: returnval
  - debug:
      msg: "{{var}} -> {{returnval.ansible_included_var_files}}"  # 调用var重新赋值的变量;
END

#TASK [debug]
ok: [local] => {"msg": "qixi happy"}

#TASK [lineinfile]
changed: [local]
#TASK [include_vars] 
ok: [local]

#TASK [debug]
ok: [local] => {"msg": "include_vars - add"}

#TASK [include_vars] 
ok: [local]
#TASK [debug]
ok: [local] => { "msg": "{u'test3': u'include_varDemo', u'test4': u'WeiyiGeek'} -> [u'/tmp/ansible/demo2/var.yml']"}

#PLAY RECAP 
local                      : ok=6    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0