Both sides previous revision
Previous revision
Next revision
|
Previous revision
|
wiki:ostatni:ansible:start [2017/01/18 22:34] root [Ad-Hoc příkazy] |
wiki:ostatni:ansible:start [2019/12/10 11:07] (current) root [Skoleni cz.nic] |
{{ :wiki:ostatni:ansible:ansible.png?nolink&150|}} | {{ :wiki:ostatni:ansible:ansible.png?nolink&150|}} |
====== Ansible ====== | ====== Ansible ====== |
| |
| |
| |
| |
| |
| |
===== Základní konfigurace ===== | ===== Základní konfigurace ===== |
| |
V souboru /etc/ansible/ansible.cfg odkomentovat: | V souboru /etc/ansible/ansible.cfg odkomentovat: |
<code> | <code|bash> |
nocows = 1 | nocows = 1 |
</code> | </code> |
| |
| ==== Host key checking ==== |
| |
| Vypnutí ověřování klíče ssh serveru/hosta. Typicky po reinstalaci se změní klíč a ssh hlásí chybu při připojení, že klíč se změnil. |
| |
| V souboru /etc/ansible/ansible.cfg: |
| <code> |
| [defaults] |
| host_key_checking = False |
| </code> |
| nebo |
| <code|bash> |
| export ANSIBLE_HOST_KEY_CHECKING=False |
| </code> |
===== Inventory ===== | ===== Inventory ===== |
| |
| |
# Spuštění příkazu na všech prvcích jako sudo | # Spuštění příkazu na všech prvcích jako sudo |
ansible all -u kaplan --sudo --ask-sudo-pass -a "/bin/echo hello" | (ansible all -u kaplan --sudo --ask-sudo-pass -a "/bin/echo hello") starsi zpusob |
| |
| ansible all -u kaplan -become -K -m ping |
| </code> |
| |
| ===== Skoleni cz.nic ===== |
| https://gist.github.com/HalisCz/42752c7f9761946f2187fab63a386706 |
| |
| **ansible all --inventory "172.29.29.14,172.29.29.15" -a 'cat /etc/os-release'** |
| <code> |
| 172.29.29.15 | SUCCESS | rc=0 >> |
| NAME="CentOS Linux" |
| VERSION="7 (Core)" |
| ID="centos" |
| ID_LIKE="rhel fedora" |
| VERSION_ID="7" |
| PRETTY_NAME="CentOS Linux 7 (Core)" |
| ANSI_COLOR="0;31" |
| CPE_NAME="cpe:/o:centos:centos:7" |
| HOME_URL="https://www.centos.org/" |
| BUG_REPORT_URL="https://bugs.centos.org/" |
| |
| CENTOS_MANTISBT_PROJECT="CentOS-7" |
| CENTOS_MANTISBT_PROJECT_VERSION="7" |
| REDHAT_SUPPORT_PRODUCT="centos" |
| REDHAT_SUPPORT_PRODUCT_VERSION="7" |
| |
| 172.29.29.14 | SUCCESS | rc=0 >> |
| NAME="Ubuntu" |
| VERSION="18.04.3 LTS (Bionic Beaver)" |
| ID=ubuntu |
| ID_LIKE=debian |
| PRETTY_NAME="Ubuntu 18.04.3 LTS" |
| VERSION_ID="18.04" |
| HOME_URL="https://www.ubuntu.com/" |
| SUPPORT_URL="https://help.ubuntu.com/" |
| BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" |
| PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" |
| VERSION_CODENAME=bionic |
| UBUNTU_CODENAME=bionic |
| |
| </code> |
| |
| **ansible all --inventory "172.29.29.14,172.29.29.15" -m user -a 'name=bob shell=/bin/bash generate_ssh_key=yes'** |
| |
| <code> |
| 172.29.29.15 | SUCCESS => { |
| "changed": true, |
| "comment": "", |
| "create_home": true, |
| "group": 1001, |
| "home": "/home/bob", |
| "name": "bob", |
| "shell": "/bin/bash", |
| "ssh_fingerprint": "2048 SHA256:CYAD6GRswrzm6L5wJZIvN9vDNp9tSmx7Uv0jv0i7H7g ansible-generated on centos (RSA)", |
| "ssh_key_file": "/home/bob/.ssh/id_rsa", |
| "ssh_public_key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsMWSIRw2NvfFvCV0cont5LNOP6vsqQoT8fLJYl7WWlwjwjPMRNckkF/XeF5D1M2Nt7GODLBXOCDZoFvIJQbQuXyxEE9G7oX/sxbObUOBi6cpDZX2BRKtLIlSMqC0o/rlCdQ7d3eYFTv4bcP6JgZyernjttPJZ+XqEYsuaot3nAdIJcRNxKSC4cVE2ibXIANA1dDxpHBGIlm682RXH1+n1QjXS2AYRehXL6QESk9fExWXvBKb2/bA/SAkHOUDmUgXOFY7G3uJWxm3NYmUq0Jew6j38dgzAS+3s7w9vQ1qsqpM+PI4IoHtvHZcebBW0RceJDFbVW1HjQKpCxaKPuzPR ansible-generated on centos", |
| "state": "present", |
| "system": false, |
| "uid": 1001 |
| } |
| 172.29.29.14 | SUCCESS => { |
| "changed": true, |
| "comment": "", |
| "create_home": true, |
| "group": 1002, |
| "home": "/home/bob", |
| "name": "bob", |
| "shell": "/bin/bash", |
| "ssh_fingerprint": "2048 SHA256:+kSWr8AJLRu1/9Kj7gJzo29Xn9x2cHq6VXjdX4lH+P0 ansible-generated on ubuntu (RSA)", |
| "ssh_key_file": "/home/bob/.ssh/id_rsa", |
| "ssh_public_key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjbY0zkFkwv/xbzuoJYvOxkHiOJtQYG7RXlWT8ce/XlftoB5P3Vqoovj1g3ks1xWoHamG1lmbmdf+yPwTjJx3v2ZpPirrsXH5Y98GLjJ/8Xtf1XvKvsbfGH4CwC6577NOn4cDJ6+57rpHmYGHGOAVXI3DQTUnxIVCm98Dd3t2oA2KD1AhyU+PA4Yf+3YdpfY0rH0LhwbqGlHOtHYIr06hteJaMrDjujxix0vMBxlR9jH3erRNkSqSc2k6rSyRdaylWga7Uo4PoMBvhht3EE/38pDYEp7zlzx+MwSV/JzkTY0CP9pt4NaAJmqLcWZSKQQU65j8lHlatU1ynA8VVV1aZ ansible-generated on ubuntu", |
| "state": "present", |
| "system": false, |
| "uid": 1002 |
| } |
| |
| </code> |
| |
| |
| <code> |
| root@ubuntu:/vagrant_data# ansible all --inventory "172.29.29.14" -m user -a 'name=bob shell=/bin/bash' |
| [WARNING]: Unable to parse /vagrant_data/172.29.29.14 as an inventory source |
| |
| [WARNING]: No inventory was parsed, only implicit localhost is available |
| |
| [WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost |
| does not match 'all' |
| </code> |
| <code> |
| root@ubuntu:/vagrant_data# ansible all --inventory "172.29.29.14," -m user -a 'name=bob shell=/bin/bash' |
| 172.29.29.14 | SUCCESS => { |
| "append": false, |
| "changed": false, |
| "comment": "", |
| "group": 1002, |
| "home": "/home/bob", |
| "move_home": false, |
| "name": "bob", |
| "shell": "/bin/bash", |
| "state": "present", |
| "uid": 1002 |
| } |
| |
</code> | </code> |