User Tools

Site Tools


wiki:ostatni:ansible:start

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
wiki:ostatni:ansible:start [2017/01/04 23:29]
root [Ansible]
wiki:ostatni:ansible:start [2019/12/10 11:07] (current)
root [Skoleni cz.nic]
Line 2: Line 2:
 ====== Ansible ====== ====== Ansible ======
  
 +
 +
 +
 +
 +
 +===== Základní konfigurace =====
 +
 +==== Vypnutí cowsay (kravičky): ====
  
 <code bash> <code bash>
-# Vypnutí "kraviček": 
 export ANSIBLE_NOCOWS=1 export ANSIBLE_NOCOWS=1
 +</code>
 +
 +nebo
 +
 +V souboru /etc/ansible/ansible.cfg odkomentovat: 
 +<code|bash>
 +nocows = 1
 +</code>
 +
 +==== Host key checking ====
 +
 +Vypnutí ověřování klíče ssh serveru/hosta. Typicky po reinstalaci se změní klíč a ssh hlásí chybu při připojení, že klíč se změnil.
 +
 +V souboru /etc/ansible/ansible.cfg:
 +<code>
 +[defaults]
 +host_key_checking = False
 +</code>
 +nebo
 +<code|bash>
 +export ANSIBLE_HOST_KEY_CHECKING=False
 +</code>
 +===== Inventory =====
 +
 +  * /etc/ansible/hosts
 +
 +
 +===== Ad-Hoc příkazy =====
 +Předpokladem je funkční SSH spojení se všemi prvky s ověřováním klíčem. Příkazy se spouští pod běžným uživatelským účtem (tedy ne pod rootem).
 +
 +<code|bash>
 +# test spojení na všechny prvky z inventory souboru
 +ansible all -m ping
 +
 +# Spuštění příkazu na všech prvcích jako sudo
 +(ansible all -u kaplan --sudo --ask-sudo-pass -a "/bin/echo hello") starsi zpusob
 +
 +ansible all -u kaplan -become -K -m ping
 +</code>
 +
 +===== Skoleni cz.nic =====
 +https://gist.github.com/HalisCz/42752c7f9761946f2187fab63a386706
 +
 +**ansible all --inventory "172.29.29.14,172.29.29.15" -a 'cat /etc/os-release'**
 +<code>
 +172.29.29.15 | SUCCESS | rc=0 >>
 +NAME="CentOS Linux"
 +VERSION="7 (Core)"
 +ID="centos"
 +ID_LIKE="rhel fedora"
 +VERSION_ID="7"
 +PRETTY_NAME="CentOS Linux 7 (Core)"
 +ANSI_COLOR="0;31"
 +CPE_NAME="cpe:/o:centos:centos:7"
 +HOME_URL="https://www.centos.org/"
 +BUG_REPORT_URL="https://bugs.centos.org/"
 +
 +CENTOS_MANTISBT_PROJECT="CentOS-7"
 +CENTOS_MANTISBT_PROJECT_VERSION="7"
 +REDHAT_SUPPORT_PRODUCT="centos"
 +REDHAT_SUPPORT_PRODUCT_VERSION="7"
 +
 +172.29.29.14 | SUCCESS | rc=0 >>
 +NAME="Ubuntu"
 +VERSION="18.04.3 LTS (Bionic Beaver)"
 +ID=ubuntu
 +ID_LIKE=debian
 +PRETTY_NAME="Ubuntu 18.04.3 LTS"
 +VERSION_ID="18.04"
 +HOME_URL="https://www.ubuntu.com/"
 +SUPPORT_URL="https://help.ubuntu.com/"
 +BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
 +PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
 +VERSION_CODENAME=bionic
 +UBUNTU_CODENAME=bionic
 +
 +</code>
 +
 +**ansible all --inventory "172.29.29.14,172.29.29.15" -m user -a 'name=bob shell=/bin/bash generate_ssh_key=yes'**
 +
 +<code>
 +172.29.29.15 | SUCCESS => {
 +    "changed": true, 
 +    "comment": "", 
 +    "create_home": true, 
 +    "group": 1001, 
 +    "home": "/home/bob", 
 +    "name": "bob", 
 +    "shell": "/bin/bash", 
 +    "ssh_fingerprint": "2048 SHA256:CYAD6GRswrzm6L5wJZIvN9vDNp9tSmx7Uv0jv0i7H7g ansible-generated on centos (RSA)", 
 +    "ssh_key_file": "/home/bob/.ssh/id_rsa", 
 +    "ssh_public_key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsMWSIRw2NvfFvCV0cont5LNOP6vsqQoT8fLJYl7WWlwjwjPMRNckkF/XeF5D1M2Nt7GODLBXOCDZoFvIJQbQuXyxEE9G7oX/sxbObUOBi6cpDZX2BRKtLIlSMqC0o/rlCdQ7d3eYFTv4bcP6JgZyernjttPJZ+XqEYsuaot3nAdIJcRNxKSC4cVE2ibXIANA1dDxpHBGIlm682RXH1+n1QjXS2AYRehXL6QESk9fExWXvBKb2/bA/SAkHOUDmUgXOFY7G3uJWxm3NYmUq0Jew6j38dgzAS+3s7w9vQ1qsqpM+PI4IoHtvHZcebBW0RceJDFbVW1HjQKpCxaKPuzPR ansible-generated on centos", 
 +    "state": "present", 
 +    "system": false, 
 +    "uid": 1001
 +}
 +172.29.29.14 | SUCCESS => {
 +    "changed": true, 
 +    "comment": "", 
 +    "create_home": true, 
 +    "group": 1002, 
 +    "home": "/home/bob", 
 +    "name": "bob", 
 +    "shell": "/bin/bash", 
 +    "ssh_fingerprint": "2048 SHA256:+kSWr8AJLRu1/9Kj7gJzo29Xn9x2cHq6VXjdX4lH+P0 ansible-generated on ubuntu (RSA)", 
 +    "ssh_key_file": "/home/bob/.ssh/id_rsa", 
 +    "ssh_public_key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjbY0zkFkwv/xbzuoJYvOxkHiOJtQYG7RXlWT8ce/XlftoB5P3Vqoovj1g3ks1xWoHamG1lmbmdf+yPwTjJx3v2ZpPirrsXH5Y98GLjJ/8Xtf1XvKvsbfGH4CwC6577NOn4cDJ6+57rpHmYGHGOAVXI3DQTUnxIVCm98Dd3t2oA2KD1AhyU+PA4Yf+3YdpfY0rH0LhwbqGlHOtHYIr06hteJaMrDjujxix0vMBxlR9jH3erRNkSqSc2k6rSyRdaylWga7Uo4PoMBvhht3EE/38pDYEp7zlzx+MwSV/JzkTY0CP9pt4NaAJmqLcWZSKQQU65j8lHlatU1ynA8VVV1aZ ansible-generated on ubuntu", 
 +    "state": "present", 
 +    "system": false, 
 +    "uid": 1002
 +}
 +
 +</code>
 +
 +
 +<code>
 +root@ubuntu:/vagrant_data# ansible all --inventory "172.29.29.14" -m user -a 'name=bob shell=/bin/bash'
 + [WARNING]: Unable to parse /vagrant_data/172.29.29.14 as an inventory source
 +
 + [WARNING]: No inventory was parsed, only implicit localhost is available
 +
 + [WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost
 +does not match 'all'
 +</code>
 +<code>
 +root@ubuntu:/vagrant_data# ansible all --inventory "172.29.29.14," -m user -a 'name=bob shell=/bin/bash'
 +172.29.29.14 | SUCCESS => {
 +    "append": false, 
 +    "changed": false, 
 +    "comment": "", 
 +    "group": 1002, 
 +    "home": "/home/bob", 
 +    "move_home": false, 
 +    "name": "bob", 
 +    "shell": "/bin/bash", 
 +    "state": "present", 
 +    "uid": 1002
 +}
 +
 </code> </code>
wiki/ostatni/ansible/start.1483568987.txt.gz · Last modified: 2017/01/04 23:29 by root