Ansible

mv /etc/yum.repos.d/CentOS-Linux-BaseOS.repo /etc/yum.repos.d/CentOS-Linux-BaseOS.repo.bak

curl -o /etc/yum.repos.d/CentOS-Linux-BaseOS.repo https://mirrors.aliyun.com/repo/Centos-8.repo

dnf install epel-release

dnf install -y ansible

ansible --version

mv /etc/ansible/hosts /etc/ansible/hosts.bak

vim /etc/ansible/hosts

[devserver]
192.168.88.130
[webserver]
192.168.88.139 

vim /etc/ansible/hosts

[devserver]
192.168.88.130
[webserver]
192.168.88.139

[all:vars]
ansible_user=root
ansible_password=123

ansible-inventory --graph

@all:
 |--@devserver:
 | |--192.168.88.130
 |--@ungrouped:
 |--@webserver:
 | |--192.168.88.139

vim /etc/ansible/ansible.cfg

71 host_key_checking = False           #关闭SSH协议的指纹验证
107 remote_user = root                 #默认执行剧本时所使用的管理员名称为root

ansible-doc -l

a10_server                          Manage A10 Netwo...
a10_server_axapi3                       Manage A10 Netwo...
a10_service_group                       Manage A10 Netwo...
a10_virtual_server                      Manage A10 Netwo...
aci_aaa_user                         Manage AAA users...
aci_aaa_user_certificate                   Manage AAA user ...
aci_access_port_block_to_access_port             Manage port bloc...
aci_access_port_to_interface_policy_leaf_profile       Manage Fabric in...
aci_access_sub_port_block_to_access_port           Manage sub port ...
aci_aep                            Manage attachabl...
aci_aep_to_domain                       Bind AEPs to Phy...
aci_ap                            Manage top level...
aci_bd                            Manage Bridge Do...
aci_bd_subnet                         Manage Subnets (...
aci_bd_to_l3out                        Bind Bridge Doma...
aci_config_rollback                      Provides rollbac...
…………

ansible-doc aci_domain

> ACI_DOMAIN  (/usr/lib/python3.6/site-packages/ansible/modules/network/aci/aci_>

​    Manage physical, virtual, bridged, routed or FC domain
​    profiles on Cisco ACI fabrics.

 * This module is maintained by an Ansible Partner

…………

ansible all -m ping

192.168.88.139 | SUCCESS => {
  "ansible_facts": {
​    "discovered_interpreter_python": "/usr/libexec/platform-python"
  },
  "changed": false,
  "ping": "pong"
}
192.168.88.130 | SUCCESS => {
  "ansible_facts": {
​    "discovered_interpreter_python": "/usr/libexec/platform-python"
  },
  "changed": false,
  "ping": "pong"
}

ansible-doc -l | grep yum

yum                              Manages packages with the `yum' package manager                  
yum_repository                        Add or remove YUM repositories

ansible-doc yum_repository

> YUM_REPOSITORY  (/usr/lib/python3.6/site-packages/ansible/modules/packaging/os/yum_repository.py)

     Add or remove YUM repositories in RPM-based Linux distributions. If you wish to update an existing repository
     definition use [ini_file] instead.
     
* This module is maintained by The Ansible Core Team

OPTIONS (= is mandatory):

EXAMPLES:

- name: Add repository
  yum_repository:
  name: epel
  description: EPEL YUM repo
  baseurl: https://download.fedoraproject.org/pub/epel/$releasever/$basearch/

- name: Add multiple repositories into the same file (1/2)
  yum_repository:
  name: epel
  description: EPEL YUM repo
  file: external_repos
  baseurl: https://download.fedoraproject.org/pub/epel/$releasever/$basearch/
  gpgcheck: no

- name: Add multiple repositories into the same file (2/2)
  yum_repository:
  name: rpmforge
  description: RPMforge YUM repo
  file: external_repos
  baseurl: http://apt.sw.be/redhat/el7/en/$basearch/rpmforge

ansible all -m yum_repository -a 'name="CentOS-8-Base-mirrors.aliyun.com" description="mirrors.163.com" baseurl="https://mirrors.aliyun.com/centos/$releasever/BaseOS/$basearch/os/ \n http://mirrors.aliyuncs.com/centos/$releasever/BaseOS/$basearch/os/ \n http://mirrors.cloud.aliyuncs.com/centos/$releasever/BaseOS/$basearch/os/" gpgcheck=yes enabled=1 gpgkey="https://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-Official"'

192.168.88.139 | CHANGED => {
  "ansible_facts": {
​    "discovered_interpreter_python": "/usr/libexec/platform-python"
  },
  "changed": true,
  "repo": "CentOS-8-Base-mirrors.aliyun.com",
  "state": "present"
}

192.168.88.130 | CHANGED => {
  "ansible_facts": {
​    "discovered_interpreter_python": "/usr/libexec/platform-python"
  },
  "changed": true,
  "repo": "CentOS-8-Base-mirrors.aliyun.com",
  "state": "present"
}

[root@play2 ~]# cat /etc/yum.repos.d/CentOS-8-Base-mirrors.aliyun.com.repo 
[CentOS-8-Base-mirrors.aliyun.com]
baseurl = https://mirrors.aliyun.com/centos/$releasever/BaseOS/$basearch/os/
          http://mirrors.aliyuncs.com/centos/$releasever/BaseOS/$basearch/os/
          http://mirrors.cloud.aliyuncs.com/centos/$releasever/BaseOS/$basearch/os/
enabled = 1
gpgcheck = 1
gpgkey = https://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-Official
name = mirrors.163.com

ansible-doc yum

> YUM  (/usr/lib/python3.6/site-packages/ansible/modules/packaging/os/yum.py)

​    Installs, upgrade, downgrades, removes, and lists packages and
​    groups with the `yum' package manager. This module only works
​    on Python 2. If you require Python 3 support see the [dnf]
​    module.

  * This module is maintained by The Ansible Core Team
  * note: This module has a corresponding action plugin.

EXAMPLES:

- name: install the latest version of Apache
  yum:
  name: httpd
  state: latest

- name: ensure a list of packages installed
  yum:
  name: "{{ packages }}"
  vars:
  packages:
  - httpd
  - httpd-tools

vim packages.yml

---
- name: 安装软件包
  hosts: devserver,webserver
  tasks:
          - name: sql
            yum:
                    name: mariadb
                    state: latest

[root@play1 ~]# ansible-playbook packages.yml 
PLAY [安装软件包] ***********************************************************************

TASK [Gathering Facts] *************************************************************
ok: [192.168.88.139]
ok: [192.168.88.130]

TASK [sql] *************************************************************************
changed: [192.168.88.130]
changed: [192.168.88.139]

PLAY RECAP *************************************************************************
192.168.88.130       : ok=2  changed=1  unreachable=0  failed=0  skipped=0  rescued=0  ignored=0  
192.168.88.139       : ok=2  changed=1  unreachable=0  failed=0  skipped=0  rescued=0  ignored=0 

[root@play2 ~]# dnf install mariadb
Last metadata expiration check: 1:12:15 ago on Wed 27 Oct 2021 06:28:24 PM CST.
Package mariadb-3:10.3.28-1.module_el8.3.0+757+d382997d.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!

dnf install -y rhel-system-roles

ansible-galaxy list

# /usr/share/ansible/roles
- linux-system-roles.certificate, (unknown version)
- linux-system-roles.crypto_policies, (unknown version)
- linux-system-roles.ha_cluster, (unknown version)
- linux-system-roles.kdump, (unknown version)
- linux-system-roles.kernel_settings, (unknown version)
- linux-system-roles.logging, (unknown version)
……

cp /usr/share/doc/rhel-system-roles/timesync/example-timesync-playbook.yml timesync.yml

vim timesync.yml

---
- hosts: all
  vars:
    timesync_ntp_servers:
      - hostname: ntp.aliyun.com
        iburst: yes
  roles:
    - rhel-system-roles.timesync

ansible-playbook timesync.yml

ansible-galaxy collection install nginxinc.nginx_core

ansible-galaxy list

# /etc/ansible/roles
- nginxinc.nginx, 0.19.1
# /usr/share/ansible/roles
- linux-system-roles.kdump, (unknown version)
- linux-system-roles.network, (unknown version)

vim nginx.yml

---
- src: https://www.linuxprobe.com/Software/nginxinc-nginx_core-0.3.0.tar.gz
  name: nginx-core

ansible-galaxy install -r nginx.yml

ansible-galaxy list

# /root/.ansible/roles
- nginx-core, (unknown version)
# /usr/share/ansible/roles
- linux-system-roles.certificate, (unknown version)
- linux-system-roles.crypto_policies, (unknown version)
- linux-system-roles.ha_cluster, (unknown version)
- linux-system-roles.kdump, (unknown version)
- linux-system-roles.kernel_settings, (unknown version)
- linux-system-roles.logging, (unknown version)

vim /etc/ansible/ansible.cfg

 67 # additional paths to search for roles in, colon separated
 68 # roles_path  = /etc/ansible/roles

cd /etc/ansible/roles/

ansible-galaxy init apache
- Role apache was created successfully

ls apache/
defaults files handlers meta README.md tasks templates tests vars

vim /etc/ansible/roles/apache/tasks/main.yml
  
---
# tasks file for apache
- name: install
  yum:
          name: httpd
          state: latest

ansible-doc service

> SERVICE  (/usr/lib/python3.6/site-packages/ansible/modules/system/service.py)
    Controls services on remote hosts. Supported init systems
    include BSD init, OpenRC, SysV, Solaris SMF, systemd, upstart.
    For Windows targets, use the [win_service] module instead.

 * This module is maintained by The Ansible Core Team
 * note: This module has a corresponding action plugin.
 
XAMPLES:

- name: Start service httpd, if not started
  service:
  name: httpd
  state: started

- name: Stop service httpd, if started
  service:
  name: httpd
  state: stopped

- name: Restart service httpd, in all cases
  service:
  name: httpd
  state: restarted
  
- name: Reload service httpd, in all cases
  service:
  name: httpd
  state: reloaded
  
- name: Enable service httpd, and not touch the state
  service:
  name: httpd
  enabled: yes

vim /etc/ansible/roles/apache/tasks/main.yml

---
# tasks file for apache
- name: install
  yum:
          name: httpd
          state: latest
- name: start
  service:
          name: httpd
          state: started
          enabled: yes

ansible-doc firewalld
> FIREWALLD    (/usr/lib/python3.6/site-packages/ansible/modules/system/firewalld.py)

        This module allows for addition or deletion of services and ports (either TCP or UDP) in either running or
        permanent firewalld rules.

  * This module is maintained by The Ansible Community
  
EXAMPLES:

- firewalld:
    service: https
    permanent: yes
    state: enabled

- firewalld:
    port: 8081/tcp
    permanent: yes
    state: disabled

- firewalld:
    port: 161-162/udp
    permanent: yes
    state: enabled

- firewalld:
    zone: dmz
    service: http
    permanent: yes
    state: enabled
    
- firewalld:
    rich_rule: rule service name="ftp" audit limit value="1/m" accept
    permanent: yes
    state: enabled

vim /etc/ansible/roles/apache/tasks/main.yml

---
# tasks file for apache
- name: install
  yum:
          name: httpd
          state: latest
- name: start
  service:
          name: httpd
          state: started
          enabled: yes
- name: firewall
  firewalld:
          service: http
          permanent: yes
          state: enabled
          immediate: yes

ansible-doc template

> TEMPLATE  (/usr/lib/python3.6/site-packages/ansible/modules/files/template.py)
     Templates are processed by the L(Jinja2 templating
     language,http://jinja.pocoo.org/docs/). Documentation on the
     template formatting can be found in the L(Template Designer
     Documentation,http://jinja.pocoo.org/docs/templates/).
     Additional variables listed below can be used in templates.
     `ansible_managed' (configurable via the `defaults' section of
     `ansible.cfg') contains a string which can be used to describe
     the template name, host, modification time of the template
     file and the owner uid. `template_host' contains the node name
     of the template's machine. `template_uid' is the numeric user
     id of the owner. `template_path' is the path of the template.
     `template_fullpath' is the absolute path of the template.
     `template_destpath' is the path of the template on the remote
     system (added in 2.8). `template_run_date' is the date that
     the template was rendered.
     
  * This module is maintained by The Ansible Core Team
  * note: This module has a corresponding action plugin.

EXAMPLES:

- name: Template a file to /etc/files.conf
  template:
  src: /mytemplates/foo.j2
  dest: /etc/file.conf
  owner: bin
  group: wheel
  mode: '0644'

- name: Template a file, using symbolic modes (equivalent to 0644)
  template:
  src: /mytemplates/foo.j2
  dest: /etc/file.conf
  owner: bin
  group: wheel
  mode: u=rw,g=r,o=r

- name: Copy a version of named.conf that is dependent on the OS. setype obtained >
  template:
  src: named.conf_{{ ansible_os_family }}.j2
  dest: /etc/named.conf
  group: named
  setype: named_conf_t
  mode: 0640

vim /etc/ansible/roles/apache/tasks/main.yml

---
# tasks file for apache
- name: install
  yum:
          name: httpd
          state: latest
- name: start
  service:
          name: httpd
          state: started
          enabled: yes
- name: firewall
  firewalld:
          service: http
          permanent: yes
          state: enabled
          immediate: yes
- name: index
  template:
          src: index.html.j2
          dest: /var/www/html/index.html

ansible-doc setup

> SETUP  (/usr/lib/python3.6/site-packages/ansible/modules/system/setup.py)

     This module is automatically called by playbooks to gather
     useful variables about remote hosts that can be used in
     playbooks. It can also be executed directly by
     `/usr/bin/ansible' to check what variables are available to a
     host. Ansible provides many `facts' about the system,
     automatically. This module is also supported for Windows
     targets.

 * This module is maintained by The Ansible Core Team

[root@play1 ~]# ansible all -m setup -a 'filter="*fqdn"'

192.168.88.139 | SUCCESS => {
  "ansible_facts": {
     "ansible_fqdn": "play3",
     "discovered_interpreter_python": "/usr/libexec/platform-python"
  },
  "changed": false
}
192.168.88.130 | SUCCESS => {
  "ansible_facts": {
     "ansible_fqdn": "play2",
     "discovered_interpreter_python": "/usr/libexec/platform-python"
  },
  "changed": false
}

[root@play1 ~]# ansible all -m setup -a 'filter="*ip*"'

192.168.88.139 | SUCCESS => {

  "ansible_facts": {

     "ansible_all_ipv4_addresses": [
       "192.168.88.139"
     ],
     "ansible_all_ipv6_addresses": [],
     "ansible_default_ipv4": {
       "address": "192.168.88.139",
       "alias": "ens33",
       "broadcast": "192.168.88.255",
       "gateway": "192.168.88.2",
       "interface": "ens33",
       "macaddress": "00:0c:29:84:d1:6f",
       "mtu": 1500,
       "netmask": "255.255.255.0",
       "network": "192.168.88.0",
       "type": "ether"
     },
     "ansible_default_ipv6": {},
     "ansible_fips": false,
     "discovered_interpreter_python": "/usr/libexec/platform-python"
  },
  "changed": false
}

192.168.88.130 | SUCCESS => {
  "ansible_facts": {
     "ansible_all_ipv4_addresses": [
       "192.168.88.130",
       "192.168.122.1"
     ],
     "ansible_all_ipv6_addresses": [
       "fe80::20c:29ff:fe7c:18d7"
     ],
     "ansible_default_ipv4": {
       "address": "192.168.88.130",
       "alias": "ens33",
       "broadcast": "192.168.88.255",
       "gateway": "192.168.88.2",
       "interface": "ens33",
       "macaddress": "00:0c:29:7c:18:d7",
       "mtu": 1500,
       "netmask": "255.255.255.0",
       "network": "192.168.88.0",
       "type": "ether"
     },
     "ansible_default_ipv6": {},
     "ansible_fips": false,
     "discovered_interpreter_python": "/usr/libexec/platform-python"
  },
  "changed": false
}

cd /etc/ansible/roles/apache/

vim templates/index.html.j2 
Welcome to {{ ansible_fqdn }} on {{ ansible_all_ipv4_addresses }}

cd ~/

vim roles.yml

---
- name: 调用自建角色
  hosts: all
  roles:
          - apache 

[root@play1 ~]# ansible-playbook roles.yml 

PLAY [调用自建角色] ****************************************************************************************************************************************

TASK [Gathering Facts] *******************************************************************************************************************************
ok: [192.168.88.139]
ok: [192.168.88.130]

TASK [apache : install] ******************************************************************************************************************************
ok: [192.168.88.139]
ok: [192.168.88.130]

TASK [apache : start] ********************************************************************************************************************************
ok: [192.168.88.139]
ok: [192.168.88.130]

TASK [apache : firewall] *****************************************************************************************************************************
ok: [192.168.88.139]
ok: [192.168.88.130]

TASK [apache : index] ********************************************************************************************************************************
changed: [192.168.88.139]
changed: [192.168.88.130]

 
PLAY RECAP *******************************************************************************************************************************************
192.168.88.130       : ok=5  changed=1  unreachable=0  failed=0  skipped=0  rescued=0  ignored=0  
192.168.88.139       : ok=5  changed=1  unreachable=0  failed=0  skipped=0  rescued=0  ignored=0  

ansible-doc lvg

> LVG  (/usr/lib/python3.6/site-packages/ansible/modules/system/lvg.py)
    * This module creates, removes or resizes volume groups.
    * This module is maintained by The Ansible Community

EXAMPLES:

- name: Create a volume group on top of /dev/sda1 with physical extent size = 32MB
  lvg:
  vg: vg.services
  pvs: /dev/sda1
  pesize: 32

- name: Create a volume group on top of /dev/sdb with physical extent size = 128KiB
  lvg:
  vg: vg.services
  pvs: /dev/sdb
  pesize: 128K
  
# If, for example, we already have VG vg.services on top of /dev/sdb1,
# this VG will be extended by /dev/sdc5. Or if vg.services was created on
# top of /dev/sda5, we first extend it with /dev/sdb1 and /dev/sdc5,
# and then reduce by /dev/sda5.

- name: Create or resize a volume group on top of /dev/sdb1 and /dev/sdc5.
  lvg:
  vg: vg.services
  pvs: /dev/sdb1,/dev/sdc5

- name: Remove a volume group with name vg.services
  lvg:
  vg: vg.services
  state: absent

vim lv.yml
---
- name: 创建和使用逻辑卷
  hosts: dev
  tasks:
        - name: create pv vg
          lvg:
          vg: new
          pvs: /dev/sdb
          pesize: 150M

ansible-doc lvol

> LVOL  (/usr/lib/python3.6/site-packages/ansible/modules/system/lvol.py)
 * This module creates, removes or resizes logical volumes.
 * This module is maintained by The Ansible Community
 
EXAMPLES:

- name: Create a logical volume of 512m
  lvol:
  vg: firefly
  lv: test
  size: 512

- name: Create a logical volume of 512m with disks /dev/sda and /dev/sdb
  lvol:
  vg: firefly
  lv: test
  size: 512
  pvs: /dev/sda,/dev/sdb

- name: Create cache pool logical volume
  lvol:
  vg: firefly
  lv: lvcache
  size: 512m
  opts: --type cache-pool

- name: Create a logical volume of 512g.
  lvol:
  vg: firefly
  lv: test
  size: 512g

vim lv.yml
---
- name: 创建和使用逻辑卷
  hosts: dev
  tasks:
         - name: create pv vg
           lvg:
           vg: new
           pvs: /dev/sdb
           pesize: 150M
           
         - name: create lv
           lvol:
           vg: new
           lv: data
           size: 150M

ansible-doc filesystem

> FILESYSTEM  (/usr/lib/python3.6/site-packages/ansible/modules/system/filesyste>
 * This module creates a filesystem.
 * This module is maintained by The Ansible Community

EXAMPLES:

- name: Create a ext2 filesystem on /dev/sdb1
  filesystem:
  fstype: ext2
  dev: /dev/sdb1

- name: Create a ext4 filesystem on /dev/sdb1 and check disk blocks
  filesystem:
  fstype: ext4
  dev: /dev/sdb1
  opts: -cc

vim lv.yml
---
- name: 创建和使用逻辑卷
  hosts: dev
  tasks:
         - name: create pv vg
           lvg:
           vg: new
           pvs: /dev/sdb
           pesize: 150M
           
         - name: create lv
           lvol:
           vg: new
           lv: data
           size: 150M 
           
         - name: format lv
           filesystem:
           fstype: xfs
           dev: /dev/new/data

vim lv.yml
---
- name: 创建和使用逻辑卷
  hosts: all
  tasks:
          - block:
                  - name: create pv vg
                    lvg:
                            vg: new
                            pvs: /dev/sdb
                            pesize: 150M
                  - name: create lv
                    lvol:
                            vg: new
                            lv: data
                            size: 150M
                  - name: format lv
                    filesystem:
                            fstype: xfs
                            dev: /dev/new/data
            rescue:
                    - debug:
                            msg: "Could not create logical volume of that size(无法创建那样大小的逻辑卷)"

[root@play1 ~]# ansible-playbook lv.yml 

PLAY [创建和使用逻辑卷] ***********************************************************************************************************************************************************

TASK [Gathering Facts] ****************************************************************************************************************************************************
ok: [192.168.88.139]
ok: [192.168.88.130]

TASK [create pv vg] *******************************************************************************************************************************************************
changed: [192.168.88.130]
changed: [192.168.88.139]

TASK [create lv] **********************************************************************************************************************************************************
changed: [192.168.88.139]
changed: [192.168.88.130]

TASK [format lv] **********************************************************************************************************************************************************
changed: [192.168.88.139]
changed: [192.168.88.130]

PLAY RECAP ****************************************************************************************************************************************************************
192.168.88.130       : ok=4  changed=3  unreachable=0  failed=0  skipped=0  rescued=0  ignored=0 
192.168.88.139       : ok=4  changed=3  unreachable=0  failed=0  skipped=0  rescued=0  ignored=0 

[root@localhost ~]# lvdisplay 
 --- Logical volume ---
 LV Path        /dev/new/data
 LV Name        data
 VG Name        new
 LV UUID        oHVRhH-K017-riVa-VRvp-DEuY-FY8t-jNIng4
 LV Write Access    read/write
 LV Creation host, time localhost.localdomain, 2021-10-29 00:34:22 +0800
 LV Status       available
 # open         0
 LV Size        150.00 MiB
 Current LE       1
 Segments        1
 Allocation       inherit
 Read ahead sectors   auto
 \- currently set to   8192
 Block device      253:2

ansible-doc copy

> COPY  (/usr/lib/python3.6/site-packages/ansible/modules/files/copy.py)

​    The `copy' module copies a file from the local or remote
​    machine to a location on the remote machine. Use the [fetch]
​    module to copy files from remote locations to the local box.
​    If you need variable interpolation in copied files, use the
​    [template] module. Using a variable in the `content' field
​    will result in unpredictable output. For Windows targets, use
​    the [win_copy] module instead.

 * This module is maintained by The Ansible Core Team
 * note: This module has a corresponding action plugin.

EXAMPLES:

- name: Copy file with owner and permissions
  copy:
  src: /srv/myfiles/foo.conf
  dest: /etc/foo.conf
  owner: foo
  group: foo
  mode: '0644'

- name: Copy file with owner and permission, using symbolic representation
  copy:
  src: /srv/myfiles/foo.conf
  dest: /etc/foo.conf
  owner: foo
  group: foo
  mode: u=rw,g=r,o=r

- name: Another symbolic mode example, adding some permissions and removing others
  copy:
  src: /srv/myfiles/foo.conf
  dest: /etc/foo.conf
  owner: foo
  group: foo
  mode: u+rw,g-wx,o-rwx

- name: Copy a new "ntp.conf file into place, backing up the original if it differ>
  copy:
  src: /mine/ntp.conf
  dest: /etc/ntp.conf
  owner: root
  group: root
  mode: '0644'
  backup: yes

vim issue.yml

---
- name: 修改文件内容
  hosts: all
  tasks:
          - name: 定义内容dev
            copy:
                    content: 'Development'
                    dest: /etc/issue
          - name: 定义内容web
            copy:
                    content: 'Web'
                    dest: /etc/issue

vim issue.yml

---
- name: 修改文件内容
  hosts: all
  tasks:
          - name: 定义内容dev
            copy:
                    content: 'Development'
                    dest: /etc/issue
            when: "inventory_hostname in groups.devserver"
          - name: 定义内容web
            copy:
                    content: 'Web'
                    dest: /etc/issue
            when: "inventory_hostname in groups.webserver"

[root@play1 ~]# ansible-playbook issue.yml 

PLAY [修改文件内容] **********************************************************************

TASK [Gathering Facts] *************************************************************
ok: [192.168.88.139]
ok: [192.168.88.130]

TASK [定义内容dev] *********************************************************************
skipping: [192.168.88.139]
changed: [192.168.88.130]

TASK [定义内容web] *********************************************************************
skipping: [192.168.88.130]
changed: [192.168.88.139]


PLAY RECAP *************************************************************************
192.168.88.130       : ok=2  changed=1  unreachable=0  failed=0  skipped=1  rescued=0  ignored=0  
192.168.88.139       : ok=2  changed=1  unreachable=0  failed=0  skipped=1  rescued=0  ignored=0 

cat /etc/issue

Development

cat /etc/issue

Web

ansible-doc file

> FILE  (/usr/lib/python3.6/site-packages/ansible/modules/files/file.py)

​    Set attributes of files, symlinks or directories.
​    Alternatively, remove files, symlinks or directories. Many
​    other modules support the same options as the `file' module -
​    including [copy], [template], and [assemble]. For Windows
​    targets, use the [win_file] module instead.

  * This module is maintained by The Ansible Core Team

EXAMPLES:

- name: Change file ownership, group and permissions
  file:
  path: /etc/foo.conf
  owner: foo
  group: foo
  mode: '0644'

- name: Give insecure permissions to an existing file
  file:
  path: /work
  owner: root
  group: root
  mode: '1777'

- name: Create a symbolic link
  file:
  src: /file/to/link/to
  dest: /path/to/symlink
  owner: foo
  group: foo
  state: link

vim chmod.yml

---
- name: 管理文件属性
  hosts: devserver
  tasks:
          - name: chmod
            file:
                    path: /ftproot
                    state: directory
                    owner: root
                    group: root
                    mode: '2775'
          - name: ln
            file:
                    src: /ftproot
                    dest: /ftp
                    state: link

ll -d /ftp
lrwxrwxrwx 1 root root 8 Oct 29 01:10 /ftp -> /ftproot

ll -d /ftproot/
drwxrwsr-x 2 root root 6 Oct 29 01:10 /ftproot/

vim locker.yml

---

pw_developer: Imadev
pw_manager: Imamgr

vim secret.txt

whenyouwishuponastar

chmod 600 secret.txt

vim /etc/ansible/ansible.cfg

140 vault_password_file = /root/secret.txt

ansible-vault encrypt locker.yml 

Encryption successful

cat locker.yml 

$ANSIBLE_VAULT;1.1;AES256
66363866396439333330303937326263646231386131333233346237366232333631636636653730
3262633761366532353165366465643132343861386464330a326265386265656630393263613333
65343065643332653637363730626365663830636462306239653537376231326539386666383631
3461396566633734620a643639663465616664663938326464393333336562343631373666663431
35373062363831306562653630373066613462343335303235646165623738306331663637386534
6330346432386439333966333261383165376235393534613339

ansible-vault rekey --ask-vault-pass locker.yml 
Vault password: 
New Vault password: 
Confirm New Vault password: 
Rekey successful

ansible-vault edit locker.yml 

---
pw_developer: Imadev
pw_manager: Imamgr
pw_production: Imaprod

ansible-vault view locker.yml 

---
pw_developer: Imadev
pw_manager: Imamgr
pw_production: Imaprod