Ansible
Architecture
Push mechanism
Advantages of ansible
[Link]
[Link] need to install nodes on remote servers
3. totally relies on SSH
4. Apple, NASA, JUNIPER uses ansible
Diff b/w ansible and other config tool
[Link] and chef uses ruby-DSL but ansible uses YAML(python)
2. ansible uses push mechanism where as puppet,chef uses pull mechanism
Installation
RHEL-7
cd /tmp
wget [Link]
To install [Link], type:
# yum install [Link]
# yum repolist
# yum install ansible -y
Centos-7
#yum update -y
#yum install epel-release –y
#yum install ansible -y
Verify Ansible
#ansible --version
#ansible localhost -m ping
Set etc/hosts on host machine and node machines
set hosts name in etc/hosts
[Link] [Link] [Link]
[Link] [Link] [Link]
Set etc/ansible/hosts on host machine and node machines
[hosts]
[Link]
[Link]
Ad-hoc method of ansible commands
(from control machine check the following command whether able ping using
ansible)
For Ping module
#ansible node-name(IP) –m ping –u root -k
For setup module
# ansible node-name(IP) –m setup –u root -k
Configure Password less ssh
Host #ssh-keygen
#ssh-copy-id –i root@node_IP
#ssh-add
Ad-hoc for ‘file’ related module
# ansible node-name(IP) –m file –a ‘path=/etc/fstab’ --gives file info
# ansible node-name(IP) –m file –a ‘path=/tmp/hello state=directory
mode=0700 owner=root’ ---create a file
#ansible node-name(IP) –m copy –a ‘src=/etc/hosts dest=/tmp’
# ansible node-name(IP) –m file –a ‘path=/tmp/hello state=absent’
#ansible-doc –l ---list of all module
Playbooks
Like modules in puppet and cookbooks in chef
Used to perform actions on host machines
Written in YAML
Playbooks are devided into 3 sections
[Link] section – Define on which host machines the playbook would run. Its like
[Link] in puppet and run-list in chef
2. variable section – defines variables which can be used in playbooks
[Link]- List all modules intend to run in order.
Writing sample playbooks
Create a file on host---playbook
#vi [Link]
---
- hosts: [Link]
user: root
vars:
welcome_msg: 'welcome to capital info'
tasks:
- name: copy_task
copy:
dest: /etc/motd
content: "{{welcome_msg}}"
running a playbook----- #ansible-playbook [Link]
Install a service—playbook
#vi [Link]
---
- hosts: [Link]
user: root
tasks:
- name: install_http
action: yum name=http state=installed
- name: copy_index.html
copy: src=files/[Link] dest=/var/www/html/[Link]
- name: start_httpd
service:
name: httpd
state: restarted
Ansible playbook Testing
-When ever playbook has been executed ansible checks the syntax, if there is any
error the playbook won’t be executed.
1. - - syntax-check
- To check syntax errors manually the command is
#ansible-playbook <[Link]> --syntax-check
2.- - check
-its dry run of the playbook, like ‘noop’ in puppet.
#ansible-playbook <[Link]> --check
Ansible Tags
-if you want execute a particular portion of the playbook
#vi [Link]
---
- hosts: [Link]
user: root
tasks:
- name: install_httpd
action: yum name=httpd state=installed
tags:
install
- name: start_httpd
service:
name: httpd
state: restarted
tags:
start
- name: stop_service
service:
name: httpd
state: stopped
tags:
stop
#ansible-playbook <playbook-yml> --tags start
If you want to skip any tags, the command is
#ansible-playbook <[Link]> --skip-tags start,stop
Handlers
Tasks which are based on some actions
Ex: if [Link] file changes the httpd service should be restarted
#vi [Link]
---
- hosts: [Link]
vars:
http_port: 80
max_clients: 200
remote_user: root
tasks:
- name: ensure apache is at the latest version
yum: name=httpd state=latest
- name: write the apache [Link] file
copy: src=files/[Link] dest=/var/www/[Link]
notify:
- restart apache
- name: ensure apache is running (and enable it at boot)
service: name=httpd state=started enabled=yes
handlers:
- name: restart apache
service: name=httpd state=restarted
Multiple plays
#vi [Link]
---
- hosts: test-env
remote_user: root
tasks:
- name: mysql-server
action: yum name=mysql-server state=installed
- name: Create database
mysql_db: db=bobdata state=present
- hosts: dev-env
remote_user: root
tasks:
- name: Create database user
mysql_user: db=bobdata user=bob password=12345 state=present
- name: Ensure no user named 'sally' exists and delete if found.
mysql_user: db=bobdata user=sally state=absent
#vi [Link]
---
- - name: Create a new database with name 'bobdata'
- mysql_db:
- name: bobdata
- state: present
-
- # Copy database dump file to remote host and restore it to database
'my_db'
- - name: Copy database dump file
- copy:
- src: [Link].bz2
- dest: /tmp
- - name: Restore database
- mysql_db:
- name: my_db
- state: import
- target: /tmp/[Link].bz2
-
- - name: Dump all databases to [Link]
- mysql_db:
- state: dump
- name: all
- target: /tmp/{{ inventory_hostname }}.sql
-
- - name: Import [Link] similar to mysql -u <username> -p <password> <
[Link]
- mysql_db:
- state: import
- name: all
- target: /tmp/{{ inventory_hostname }}.sql
-
Ansible Roles
Simply put, roles are a further level of abstraction that can be useful for organizing
playbooks. As you add more and more functionality and flexibility to your
playbooks, they can become unwieldy and difficult to maintain as a single file. Roles
allow you to create very minimal playbooks that then look to a directory structure
to determine the actual configuration steps they need to perform.
Creating a role
#mkdir /etc/ansible/roles
Then generate a role
#Ansible-galaxy init role-name
Directories in ‘roles’
1. Defaults- Variables re defined
2. files- maintain static files to be copied to remote machine
3. Handlers- tasks which are based on some actions
4. Meta- information about the roles like author, supported platforms etc.
5. tasks- actual actions or core logic
6. template – similar to files except templates support dynamic files
[Link] – both ‘vars’ and ‘default’ stores variables but variables stored under ‘vars’
got priority and cannot override.
