ansible常用模塊和部署LNMP

来源:https://www.cnblogs.com/Their-own/archive/2022/10/24/16820142.html
-Advertisement-
Play Games

ansible常用模塊 一、ansible常用模塊使用詳解 ansible常用模塊有： ping yum template copy user group service raw command shell script ansible常用模塊raw、command、shell的區別： shell模 ...


ansible常用模塊

目錄

一、ansible常用模塊使用詳解

ansible常用模塊有：

  • ping
  • yum
  • template
  • copy
  • user
  • group
  • service
  • raw
  • command
  • shell
  • script

ansible常用模塊raw、command、shell的區別：

  • shell模塊調用的/bin/sh指令執行
  • command模塊不是調用的shell的指令，所以沒有bash的環境變數
  • raw很多地方和shell類似，更多的地方建議使用shell和command模塊。但是如果是使用老版本python，需要用到raw，又或者是客戶端是路由器，因為沒有安裝python模塊，那就需要使用raw模塊了

1.ansible常用模塊之ping

ping模塊用於檢查指定節點機器是否連通，用法很簡單，不涉及參數，主機如果線上，則回覆pong

[root@ansible ~]# ansible all -m ping
192.168.111.142 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}

2.ansible常用模塊之command

command模塊用於在遠程主機上執行命令，ansible預設就是使用command模塊。

command模塊有一個缺陷就是不能使用管道符和重定向功能。

//查看受控主機的/tmp目錄內容
[root@ansible ~]# ansible 192.168.111.142 -a 'ls /tmp'
192.168.111.142 | CHANGED | rc=0 >>
ansible_command_payload_z973ukjx
systemd-private-ac56c8c9ec59454cbb39a024c91beb72-chronyd.service-S24EYh
vmware-root_897-3979643105

//在受控主機的/tmp目錄下新建一個文件test
[root@ansible ~]# ansible 192.168.111.142 -a 'touch /tmp/test'
[WARNING]: Consider using the file module with state=touch rather than running 'touch'.  If you need to use command
because file is insufficient you can add 'warn: false' to this command task or set 'command_warnings=False' in
ansible.cfg to get rid of this message.
192.168.111.142 | CHANGED | rc=0 >>

//查看一下是否創建成功
[root@ansible ~]# ansible 192.168.111.142 -a 'ls /tmp'
192.168.111.142 | CHANGED | rc=0 >>
ansible_command_payload_62jkggxf
systemd-private-ac56c8c9ec59454cbb39a024c91beb72-chronyd.service-S24EYh
test
vmware-root_897-3979643105

//command模塊不支持管道符，不支持重定向
[root@ansible ~]# ansible 192.168.111.142 -a "echo 'hello world' > /tmp/test"
192.168.111.142 | CHANGED | rc=0 >>
hello world > /tmp/test

[root@ansible ~]# ansible 192.168.111.142 -a 'cat /tmp/test'
192.168.111.142 | CHANGED | rc=0 >>

[root@ansible ~]# ansible 192.168.111.142 -a 'ps -ef | grep httpd'
192.168.111.142 | FAILED | rc=1 >>
error: garbage option

Usage:
 ps [options]

 Try 'ps --help <simple|list|output|threads|misc|all>'
  or 'ps --help <s|l|o|t|m|a>'
 for additional help text.

For more details see ps(1).non-zero return code

3.ansible常用模塊之raw

raw模塊用於在遠程主機上執行命令，其支持管道符與重定向

//支持重定向
[root@ansible ~]# ansible 192.168.111.142 -m raw -a 'echo "hello world" > /tmp/test'
192.168.111.142 | CHANGED | rc=0 >>
Shared connection to 192.168.111.142 closed.

[root@ansible ~]# ansible 192.168.111.142 -a 'cat /tmp/test'
192.168.111.142 | CHANGED | rc=0 >>
hello world

//支持管道符
[root@ansible ~]# ansible 192.168.111.142 -m raw -a 'cat /tmp/test | grep -Eo hello'
192.168.111.142 | CHANGED | rc=0 >>
hello
Shared connection to 192.168.111.142 closed.

4.ansible常用模塊之shell

shell模塊用於在受控機上執行受控機上的腳本，亦可直接在受控機上執行命令。
shell模塊亦支持管道與重定向。

//查看受控機上的腳本
[root@localhost ~]# ll /scripts/
total 4
-rw-r--r-- 1 root root 43 Oct 23 19:00 test.sh

//使用shell模塊在受控機上執行受控機上的腳本
[root@ansible ~]# ansible 192.168.111.142 -m shell -a '/bin/bash /scripts/test.sh &> /tmp/test'
192.168.111.142 | CHANGED | rc=0 >>

[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'cat /tmp/test'
192.168.111.142 | CHANGED | rc=0 >>
123456
123
456

5.ansible常用模塊之script

script模塊用於在受控機上執行主控機上的腳本

[root@ansible ~]# ll /scripts/
total 4
-rw-r--r-- 1 root root 48 Oct 23 19:06 a.sh

[root@ansible ~]# ansible 192.168.111.142 -m script -a '/scripts/a.sh &> /tmp/a'
192.168.111.142 | CHANGED => {
    "changed": true,
    "rc": 0,
    "stderr": "Shared connection to 192.168.111.142 closed.\r\n",
    "stderr_lines": [
        "Shared connection to 192.168.111.142 closed."
    ],
    "stdout": "",
    "stdout_lines": []
}

//查看受控機上的/tmp/a文件內容
[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'cat /tmp/a'
192.168.111.142 | CHANGED | rc=0 >>
123
456
hello world

6.ansible常用模塊之template

template模塊用於生成一個模板，並可將其傳輸至遠程主機上。

[root@ansible ~]# ansible 192.168.111.142 -m template -a 'src=/etc/yum.repos.d/CentOS-Base.repo dest=/etc/yum.repos.d/centos.repo'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "checksum": "8bbf30b2d80c3b97292ca7b32f33ef494269a5b8",
    "dest": "/etc/yum.repos.d/centos.repo",
    "gid": 0,
    "group": "root",
    "md5sum": "ed031c350da2532e6a8d09a4d9b05278",
    "mode": "0644",
    "owner": "root",
    "size": 1653,
    "src": "/root/.ansible/tmp/ansible-tmp-1666530145.7581205-29420421110479/source",
    "state": "file",
    "uid": 0
}

//查看受控機上是否有163源
[root@localhost ~]# ls /etc/yum.repos.d/
centos.repo

7.ansible常用模塊之yum

yum模塊用於在指定節點機器上通過yum管理軟體，其支持的參數主要有兩個

  • name：要管理的包名
  • state：要進行的操作

state常用的值：

  • latest：安裝軟體
  • installed：安裝軟體
  • present：安裝軟體
  • removed：卸載軟體
  • absent：卸載軟體

若想使用yum來管理軟體，請確保受控機上的yum源無異常。

//在受控機上查詢看vsftpd軟體是否安裝
[root@localhost ~]# rpm -qa|grep httpd
[root@localhost ~]# 

//在ansible主機上使用yum模塊在受控機上安裝httpd
[root@ansible ~]# ansible 192.168.111.142 -m yum -a 'name=httpd state=present'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "msg": "",
    "rc": 0,
    "results": [
        "Installed: mailcap-2.1.48-3.el8.noarch",
        "Installed: httpd-2.4.37-43.module_el8.5.0+1022+b541f3b1.x86_64",
        "Installed: apr-1.6.3-12.el8.x86_64",
        "Installed: httpd-filesystem-2.4.37-43.module_el8.5.0+1022+b541f3b1.noarch",
        "Installed: apr-util-1.6.1-6.el8.x86_64",
        "Installed: apr-util-bdb-1.6.1-6.el8.x86_64",
        "Installed: httpd-tools-2.4.37-43.module_el8.5.0+1022+b541f3b1.x86_64",
        "Installed: centos-logos-httpd-85.8-2.el8.noarch",
        "Installed: mod_http2-1.15.7-3.module_el8.4.0+778+c970deab.x86_64",
        "Installed: apr-util-openssl-1.6.1-6.el8.x86_64"
    ]
}

//查看受控機上是否安裝了httpd
[root@localhost ~]# rpm -qa|grep httpd
httpd-filesystem-2.4.37-43.module_el8.5.0+1022+b541f3b1.noarch
centos-logos-httpd-85.8-2.el8.noarch
httpd-2.4.37-43.module_el8.5.0+1022+b541f3b1.x86_64
httpd-tools-2.4.37-43.module_el8.5.0+1022+b541f3b1.x86_64

8.ansible常用模塊之copy

copy模塊用於複製文件至遠程受控機。

[root@ansible ~]# ls /scripts/
a.sh
[root@ansible ~]# ansible 192.168.111.142 -m copy -a 'src=/scripts/a.sh dest=/scripts/a'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "checksum": "91bb6c7a9d3e47e330dd408c5209d8c36226e014",
    "dest": "/scripts/a/a.sh",
    "gid": 0,
    "group": "root",
    "md5sum": "d92a6bbb430fd85b35bfc1f0a8035bdc",
    "mode": "0644",
    "owner": "root",
    "size": 48,
    "src": "/root/.ansible/tmp/ansible-tmp-1666530391.1743026-219581542309073/source",
    "state": "file",
    "uid": 0
}

[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'ls /scripts/a'
192.168.111.142 | CHANGED | rc=0 >>
a.sh

9.ansible常用模塊之group

group模塊用於在受控機上添加或刪除組。

//在受控機上添加一個系統組，其gid為306，組名為mysql
[root@ansible ~]# ansible 192.168.111.142 -m group -a 'name=mysql gid=306 state=present'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "gid": 306,
    "name": "mysql",
    "state": "present",
    "system": false
}

[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'grep mysql /etc/group'
192.168.111.142 | CHANGED | rc=0 >>
mysql:x:306:

//刪除受控機上的mysql組
[root@ansible ~]# ansible 192.168.111.142 -m group -a 'name=mysql state=absent'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "name": "mysql",
    "state": "absent"
}

[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'grep mysql /etc/group'
192.168.111.142 | FAILED | rc=1 >>
non-zero return code

10.ansible常用模塊之user

user模塊用於管理受控機的用戶帳號。

//在受控機上添加一個系統用戶，用戶名為mysql，uid為306，設置其shell為/sbin/nologin，無家目錄
[root@ansible ~]# ansible 192.168.111.142 -m user -a 'name=mysql uid=306 system=yes create_home=no shell=/sbin/nologin state=present'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "comment": "",
    "create_home": false,
    "group": 306,
    "home": "/home/mysql",
    "name": "mysql",
    "shell": "/sbin/nologin",
    "state": "present",
    "system": true,
    "uid": 306
}

[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'grep mysql /etc/passwd'
192.168.111.142 | CHANGED | rc=0 >>
mysql:x:306:306::/home/mysql:/sbin/nologin

[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'ls /home'
192.168.111.142 | CHANGED | rc=0 >>

//修改mysql用戶的uid為366
[root@ansible ~]# ansible 192.168.111.142 -m user -a 'name=mysql uid=366'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "append": false,
    "changed": true,
    "comment": "",
    "group": 306,
    "home": "/home/mysql",
    "move_home": false,
    "name": "mysql",
    "shell": "/sbin/nologin",
    "state": "present",
    "uid": 366
}

[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'grep mysql /etc/passwd'
192.168.111.142 | CHANGED | rc=0 >>
mysql:x:366:306::/home/mysql:/sbin/nologin

//刪除受控機上的mysql用戶
[root@ansible ~]# ansible 192.168.111.142 -m user -a 'name=mysql state=absent'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "force": false,
    "name": "mysql",
    "remove": false,
    "state": "absent"
}
[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'grep mysql /etc/passwd'
192.168.111.142 | FAILED | rc=1 >>
non-zero return code

11.ansible常用模塊之service

service模塊用於管理受控機上的服務。

//查看受控機上的httpd服務是否啟動
[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'systemctl is-active httpd'
192.168.111.142 | FAILED | rc=3 >>
inactivenon-zero return code

//啟動受控機上的httpd服務
[root@ansible ~]# ansible 192.168.111.142 -m service -a 'name=httpd state=started'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "name": "httpd",
    "state": "started",
    "status": {
        "ActiveEnterTimestampMonotonic": "0",
        "ActiveExitTimestampMonotonic": "0",
        "ActiveState": "inactive",
        ...............
}

//查看受控機上的httpd服務是否啟動
[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'systemctl is-active httpd'
192.168.111.142 | CHANGED | rc=0 >>
active

//查看受控機上的httpd服務是否開機自動啟動
[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'systemctl is-enabled httpd'
192.168.111.142 | FAILED | rc=1 >>
disablednon-zero return code

//設置受控機上的httpd服務開機自動啟動
[root@ansible ~]# ansible 192.168.111.142 -m service -a 'name=httpd enabled=yes'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "enabled": true,
    "name": "httpd",
..................
}

//查看受控機上的httpd服務是否開機自動啟動
[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'systemctl is-enabled httpd'
192.168.111.142 | CHANGED | rc=0 >>
enabled


//停止受控機上的httpd服務
[root@ansible ~]# ansible 192.168.111.142 -m service -a 'name=httpd state=stopped'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "name": "httpd",
    "state": "stopped",
    "status": {
        "ActiveEnterTimestamp": "Sun 2022-10-23 21:17:04 CST",
..............
}

[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'systemctl is-active httpd'
192.168.111.142 | FAILED | rc=3 >>
inactivenon-zero return code

[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'ss -anlt'
192.168.111.142 | CHANGED | rc=0 >>
State  Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
LISTEN 0      128          0.0.0.0:22        0.0.0.0:*          
LISTEN 0      128             [::]:22           [::]:*

12.ansible常用模塊之file

file 模塊可以幫助我們完成一些對文件的基本操作。比如，創建文件或目錄、刪除文件或目錄、修改文件許可權等

force：需要在兩種情況下強制創建軟鏈接，一種是源文件不存在，但之後會建立的情況下；另一種是目標軟
鏈接已存在，需要先取消之前的軟鏈，然後創建新的軟鏈，有兩個選項：yes|no
group：定義文件/目錄的屬組
mode：定義文件/目錄的許可權
owner：定義文件/目錄的屬主
path：必選項，定義文件/目錄的路徑
recurse：遞歸的設置文件的屬性，只對目錄有效
src：要被鏈接的源文件的路徑，只應用於state=link的情況
dest：被鏈接到的路徑，只應用於state=link的情況
state：
=directory：如果目錄不存在，創建目錄
=file：即使文件不存在，也不會被創建
=link：創建軟鏈接
=hard：創建硬鏈接
=touch：如果文件不存在，則會創建一個新的文件，如果文件或目錄已存在，則更新其最後修改時間
=absent：刪除目錄、文件或者取消鏈接文件

//創建文件
[root@ansible ~]# ansible 192.168.111.142 -m file -a 'path=/tmp/abc state=touch owner=root group=root'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "dest": "/tmp/abc",
    "gid": 0,
    "group": "root",
    "mode": "0644",
    "owner": "root",
    "size": 0,
    "state": "file",
    "uid": 0
}

//創建目錄
[root@ansible ~]# ansible 192.168.111.142 -m file -a 'path=/tmp/CBA state=directory mode=0755'
192.168.111.142 | CHANGED => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "0755",
    "owner": "root",
    "path": "/tmp/CBA",
    "size": 6,
    "state": "directory",
    "uid": 0
}

//查看
[root@ansible ~]# ansible 192.168.111.142 -m shell -a 'ls -l /tmp/'
192.168.111.142 | CHANGED | rc=0 >>
total 0
drwxr-xr-x  2 root root  6 Oct 23 21:25 CBA
-rw-r--r--  1 root root  0 Oct 23 21:24 abc
drwx------  2 root root 41 Oct 23 21:26 ansible_command_payload_8kzca8ed
drwx------  3 root root 17 Oct 23 21:02 systemd-private-bf7fe2a05a0f43fdab39626e122a4453-chronyd.service-tvBXFi
drwx------  2 root root  6 Oct 23 21:02 vmware-root_894-2730693566
drwx------. 2 root root  6 Oct 23 21:00 vmware-root_903-3979774182

ansible分離部署LNMP

環境說明：

系統 主機名 IP 服務
centos8 ansible 192.168.111.141 ansible主控機
centos8 nginx 192.168.111.142 nginx受控機
centos8 mysql 192.168.111.143 mysql受控機
centos8 php 192.168.111.144 php受控機

1.準備工作

修改預設清單文件位置，構建清單

[root@ansible ~]# vim /etc/ansible/ansible.cfg 
inventory = /etc/ansible/inventory
[root@ansible ~]# cd /etc/ansible/
[root@ansible ansible]# touch inventory
[root@ansible ansible]# vim inventory 
[lnmp]
nginx ansible_user=root ansible_password=123456
mysql ansible_user=root ansible_password=123456
php ansible_user=root ansible_password=123456

[root@ansible ~]# vim /etc/hosts 
192.168.111.142 nginx
192.168.111.143 mysql
192.168.111.144 php

//列出主機
[root@ansible ~]# ansible lnmp --list-hosts
  hosts (3):
    nginx
    mysql
    php

//設置密鑰連接
[root@ansible ~]# ssh nginx
[root@nginx ~]# exit
logout
[root@ansible ~]# ssh mysql
[root@mysql ~]# exit
logout
[root@ansible ~]# ssh php
[root@php ~]# exit
logout
[root@ansible ~]# 

//測試連通性
[root@ansible ~]# ansible lnmp -m ping
nginx | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}
php | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}
mysql | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/libexec/platform-python"
    },
    "changed": false,
    "ping": "pong"
}

2.部署nginx

//關閉selinux和防火牆
[root@ansible ~]# ansible nginx -m service -a 'name=firewalld state=stopped enabled=no'
[root@ansible ~]# ansible nginx -a 'setenforce 0'
[root@ansible ~]# ansible nginx -a "sed -ri 's/^(SELINUX=).*/\1disabled/g'/etc/selinux/config"

//創建用戶
[root@ansible ~]# ansible nginx -m user -a 'name=nginx system=yes create_home=no shell=/sbin/nologin state=present'

//安裝依賴包
[root@ansible ~]# ansible nginx -m yum -a 'name=pcre-devel,openssl,openssl-devel,gd-devel,gcc,gcc-c++,make state=present'

//下載軟體包並解壓
[root@ansible ~]# ansible nginx -a 'wget http://nginx.org/download/nginx-1.20.2.tar.gz'
[root@ansible ~]# ansible nginx -a 'tar -xf nginx-1.20.2.tar.gz'

//進入目錄編譯安裝
[root@ansible ~]# mkdir -p /etc/ansible/scripts/
[root@ansible ~]# cd /etc/ansible/scripts/
[root@ansible scripts]# vim configure.sh
#!/bin/bash

cd nginx-1.20.2

./configure \
--prefix=/usr/local/nginx \
--user=nginx \
--group=nginx \
--with-debug \
--with-http_ssl_module \
--with-http_realip_module \
--with-http_image_filter_module \
--with-http_gunzip_module \
--with-http_gzip_static_module \
--with-http_stub_status_module && \

make -j $(grep 'processor' /proc/cpuinfo | wc -l) && make install

root@ansible scripts]# ll
total 4
-rw-r--r-- 1 root root 470 Oct 23 22:04 configure.sh
[root@ansible scripts]# ansible nginx -m script -a '/etc/ansible/scripts/configure.sh'

//安裝完成
[root@ansible ~]# ansible nginx -a 'ls /usr/local/nginx'
nginx | CHANGED | rc=0 >>
conf
html
logs
sbin

//配置環境變數
[root@ansible ~]# ansible nginx -m shell -a 'echo "export PATH=$PATH:/usr/local/nginx/sbin" > /etc/profile.d/nginx.sh'
[root@ansible ~]# ansible nginx -a 'which nginx'
nginx | CHANGED | rc=0 >>
/usr/local/nginx/sbin/nginx

//啟動服務
[root@ansible ~]# vim /etc/ansible/scripts/nginx_service.sh 
#!/bin/bash

cat > /usr/lib/systemd/system/nginx.service << EOF
[Unit]
Description=nginx server daemon
After=network.target

[Service]
Type=forking
ExecStart=/usr/local/nginx/sbin/nginx
ExecStop=/usr/local/nginx/sbin/nginx -s stop
ExecReload=/bin/kill -HUP \$MAINPID

[Install]
WantedBy=multi-user.target
EOF

systemctl daemon-reload
systemctl enable --now nginx

[root@ansible ~]# ansible nginx -m script -a '/etc/ansible/scripts/nginx_service.sh'
[root@ansible ~]# ansible nginx -a 'ss -antl'
nginx | CHANGED | rc=0 >>
State  Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
LISTEN 0      128          0.0.0.0:80        0.0.0.0:*          
LISTEN 0      128          0.0.0.0:22        0.0.0.0:*          
LISTEN 0      128             [::]:22           [::]:*

3.部署mysql

//關閉防火牆和selinux
[root@ansible ~]# ansible mysql -m service -a 'name=firewalld state=stopped enabled=no'
[root@ansible ~]# ansible mysql -a 'setenforce 0'
[root@ansible ~]# ansible mysql -a "sed -ri 's/^(SELINUX=).*/\1disabled/g' /etc/selinux/config"

//創建用戶
[root@ansible ~]# ansible mysql -m user -a 'name=mysql system=yes create_home=no shell=/sbin/nologin state=present'

//安裝依賴包
[root@ansible ~]# ansible mysql -m yum -a 'name=ncurses-devel,openssl-devel,openssl,cmake,mariadb-devel,ncurses-compat-libs state=present'

//下載軟體包解壓重命名
[root@ansible ~]# ansible mysql -a 'wget https://downloads.mysql.com/archives/get/p/23/file/mysql-5.7.38-linux-glibc2.12-x86_64.tar.gz'
[root@ansible ~]# ansible mysql -a 'tar xf mysql-5.7.38-linux-glibc2.12-x86_64.tar.gz -C /usr/local/'
[root@ansible ~]# ansible mysql -a 'mv /usr/local/mysql-5.7.38-linux-glibc2.12-x86_64 /usr/local/mysql'

//修改屬主屬組
[root@ansible ~]# ansible mysql -a 'chown -R mysql.mysql /usr/local/mysql'

//配置環境
[root@ansible ~]# ansible mysql -a 'ln -s /usr/local/mysql/include /usr/include/mysql'
[root@ansible ~]# ansible mysql -m shell -a "echo '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.conf"
[root@ansible ~]# ansible mysql -a "sed -i '22a MANDATORY_MANPATH    /usr/local/mysql/man' /etc/man_db.conf"
[root@ansible ~]# ansible mysql -m shell -a "echo 'export PATH=/usr/local/mysql/bin:$PATH' > /etc/profile.d/mysql.sh"
[root@ansible ~]# ansible mysql -a 'which mysql'
[root@ansible ~]# ansible mysql -a 'which mysql'
mysql | CHANGED | rc=0 >>
/usr/local/mysql/bin/mysql

//建立數據存放目錄
[root@ansible ~]# ansible mysql -a 'mkdir /opt/data'
[root@ansible ~]# ansible mysql -a 'chown -R mysql.mysql /opt/data'

//初始化資料庫
[root@ansible ~]# ansible mysql -a 'mysqld --initialize --user mysql --datadir /opt/data'
mysql | CHANGED | rc=0 >>
2022-10-23T14:24:07.127784Z 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
2022-10-23T14:24:07.286100Z 0 [Warning] InnoDB: New log files created, LSN=45790
2022-10-23T14:24:07.314541Z 0 [Warning] InnoDB: Creating foreign key constraint system tables.
2022-10-23T14:24:07.383098Z 0 [Warning] No existing UUID has been found, so we assume that this is the first time that this server has been started. Generating a new UUID: 5a8e11ea-52de-11ed-b270-000c29c34b3e.
2022-10-23T14:24:07.383794Z 0 [Warning] Gtid table is not ready to be used. Table 'mysql.gtid_executed' cannot be opened.
2022-10-23T14:24:07.600947Z 0 [Warning] A deprecated TLS version TLSv1 is enabled. Please use TLSv1.2 or higher.
2022-10-23T14:24:07.600960Z 0 [Warning] A deprecated TLS version TLSv1.1 is enabled. Please use TLSv1.2 or higher.
2022-10-23T14:24:07.601238Z 0 [Warning] CA certificate ca.pem is self signed.
2022-10-23T14:24:07.640229Z 1 [Note] A temporary password is generated for root@localhost: y*rou<U9Om.c
[root@ansible ~]# ansible mysql -m shell -a "echo 'y*rou<U9Om.c' > pass"

//生成配置文件啟動服務
[root@ansible ~]# vim /etc/ansible/scripts/mysql_service.sh 
#!/bin/bash

cat >> /etc/my.cnf <<EOF
[mysqld]
basedir = /usr/local/mysql
datadir = /opt/data
socket = /tmp/mysql.sock
port = 3306
pid-file = /opt/data/mysql.pid
user = mysql
skip-name-resolve
EOF

cp -a /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
sed -ri 's#^(basedir=).*#\1/usr/local/mysql#g' /etc/init.d/mysqld
sed -ri 's#^(datadir=).*#\1/opt/data#g' /etc/init.d/mysqld
chmod +x /etc/init.d/mysqld

cat > /usr/lib/systemd/system/mysqld.service <<EOF
[Unit]
Description=mysqld server daemon
After=network.target

[Service]
Type=forking
ExecStart=/etc/init.d/mysqld start
ExecStop=/etc/init.d/mysqld stop
ExecReload=/bin/kill -HUP \$MAINPID

[Install]
WantedBy=multi-user.target
EOF

systemctl daemon-reload
systemctl enable --now mysqld

[root@ansible ~]# ansible mysql -m script -a '/etc/ansible/scripts/mysql_service.sh'
[root@ansible ~]# ansible mysql -a 'ss -antl'
mysql | CHANGED | rc=0 >>
State  Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
LISTEN 0      128          0.0.0.0:22        0.0.0.0:*          
LISTEN 0      80                 *:3306            *:*          
LISTEN 0      128             [::]:22           [::]:*

4.部署php

//安裝依賴包
[root@ansible ~]# ansible php -m yum -a 'name=epel-release state=present'
[root@ansible ~]# ansible php -m yum -a 'name=libxml2,libxml2-devel,openssl,openssl-devel,bzip2,bzip2-devel,libcurl,libcurl-devel,libicu-devel,libjpeg,libjpeg-devel,libpng,libpng-devel,openldap-devel,pcre-devel,freetype,freetype-devel,gmp,gmp-devel,libmcrypt,libmcrypt-devel,readline,readline-devel,libxslt,libxslt-devel,mhash,mhash-devel,php-mysqlnd,libsqlite3x-devel,libzip-devel,wget,gcc,gcc-c++,make state=present'
[root@ansible ~]# ansible php -a 'yum -y install http://mirror.centos.org/centos/8-stream/PowerTools/x86_64/os/Packages/oniguruma-devel-6.8.2-2.el8.x86_64.rpm'

//下載PHP並解壓
[root@ansible ~]# ansible php -a 'wget https://www.php.net/distributions/php-8.1.11.tar.gz'
[root@ansible ~]# ansible php -a 'tar xf php-8.1.11.tar.gz -C /usr/src'

//編譯安裝php
[root@ansible ~]# vim /etc/ansible/scripts/php.sh
#!/bin/bash

cd /usr/src/php-8.1.11/
./configure --prefix=/usr/local/php \
--with-config-file-path=/etc \
--enable-fpm \
--disable-debug \
--disable-rpath \
--enable-shared \
--enable-soap \
--with-openssl \
--enable-bcmath \
--with-iconv \
--with-bz2 \
--enable-calendar \
--with-curl \
--enable-exif  \
--enable-ftp \
--enable-gd \
--with-jpeg \
--with-zlib-dir \
--with-freetype \
--with-gettext \
--enable-mbstring \
--enable-pdo \
--with-mysqli=mysqlnd \
--with-pdo-mysql=mysqlnd \
--with-readline \
--enable-shmop \
--enable-simplexml \
--enable-sockets \
--with-zip \
--enable-mysqlnd-compression-support \
--with-pear \
--enable-pcntl \
--enable-posix

[root@ansible ~]# ansible php -m script -a '/etc/ansible/scripts/php.sh'
[root@ansible ~]# ansible php -m shell -a 'cd /usr/src/php-8.1.11/ && make && make install'

//配置文件
[root@ansible ~]# ansible php -a 'cp /usr/local/php/etc/php-fpm.conf.default  /usr/local/php/etc/php-fpm.conf'
[root@ansible ~]# ansible php -a 'cp /usr/local/php/etc/php-fpm.d/www.conf.default /usr/local/php/etc/php-fpm.d/www.conf'

//頭文件
[root@ansible ~]# ansible php -a 'ln -sv /usr/local/php /usr/include/php'

//編寫service文件
[root@ansible ~]# vim /etc/ansible/scripts/php_service.sh
#!/bin/bash

cat > /usr/lib/systemd/system/php.service << EOF
[Unit]
Description=php server daemon
After=network.target 

[Service]
Type=forking
ExecStart=/usr/local/php/sbin/php-fpm
ExecStop=ps -ef |grep php |grep -v grep|awk '{print$2}'|xargs kill
ExecReload=/bin/kill -HUP $MAINPID

[Install]
WantedBy=multi-user.target
EOF
[root@ansible ~]# ansible php -m script -a '/etc/ansible/scripts/php_service.sh'
[root@ansible ~]# ansible php -a 'systemctl daemon-reload'

//開啟服務並開機自啟
[root@ansible ~]# ansible php -m service -a 'name=php state=started enabled=yes'
[root@ansible ~]# ansible php -a 'ss -antl'
php | CHANGED | rc=0 >>
State  Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
LISTEN 0      128        127.0.0.1:9000      0.0.0.0:*          
LISTEN 0      128          0.0.0.0:22        0.0.0.0:*          
LISTEN 0      128             [::]:22           [::]:*

5.配置LNMP界面

//修改nginx配置文件
[root@ansible ~]# vim /etc/ansible/scripts/nginxconf.sh
#!/bin/bash

sed -i "45c                   index  index.php index.html index.htm;" /usr/local/nginx/conf/nginx.conf
sed -i "65c     location ~ \.php$ {" /usr/local/nginx/conf/nginx.conf
sed -i "66c     root      /var/www/html;" /usr/local/nginx/conf/nginx.conf
sed -i "67c     fastcgi_pass   192.168.111.144:9000;" /usr/local/nginx/conf/nginx.conf
sed -i "68c     fastcgi_index  index.php;" /usr/local/nginx/conf/nginx.conf
sed -i "69c     fastcgi_param  SCRIPT_FILENAME  \$document_root\$fastcgi_script_name;" /usr/local/nginx/conf/nginx.conf
sed -i "70c      include        fastcgi_params;" /usr/local/nginx/conf/nginx.conf
sed -i "71c      }" /usr/local/nginx/conf/nginx.conf

[root@ansible ~]# ansible nginx -m script -a '/etc/ansible/scripts/nginxconf.sh'
[root@ansible ~]# ansible nginx -a 'touch /usr/local/nginx/html/index.php'

//在php端上配置網站
[root@ansible ~]# vim /etc/ansible/scripts/phpindex.sh
#!/bin/bash

mkdir -p /var/www/html
cat > /var/www/html/index.php << EOF
<?php
    phpinfo();
?>
EOF
[root@ansible ~]# ansible php -m script -a '/etc/ansible/scripts/phpindex.sh'

//修改php配置文件
[root@ansible ~]# ansible php -a 'sed -i "36c listen = 192.168.111.144:9000" /usr/local/php/etc/php-fpm.d/www.conf'
[root@ansible ~]# ansible php -a 'sed -i "63c listen.allowed_clients = 192.168.111.142" /usr/local/php/etc/php-fpm.d/www.conf'


//重啟nginx服務和php服務
[root@ansible ~]# ansible nginx -m service -a 'name=nginx state=restarted'
[root@ansible ~]# ansible php -m service -a 'name=php state=restarted'

image


您的分享是我們最大的動力!

-Advertisement-
Play Games
更多相關文章
  • C語言實現staque結構
    C語言實現staque結構 1. 使用說明 staque結構以單鏈表方式實現，結合了stack與queue結構：pop_front+push_front使用方式為stack；pop_front+push_back使用方式是queue。 首尾插入和頂部彈出是運行效率最高的，此外還實現了任意位置的插入、 ...
  • Java實現7種常見密碼演算法
    原創：扣釘日記（微信公眾號ID：codelogs），歡迎分享，轉載請保留出處。 簡介 前面在密碼學入門一文中講解了各種常見的密碼學概念、演算法與運用場景，但沒有介紹過代碼，因此，為作補充，這一篇將會介紹使用Java語言如何實現使用這些演算法，並介紹一下使用過程中可能遇到的坑。 Java加密體系JCA J ...
  • SpringMVC（六）：攔截器
    之前在學習servlet和jsp時學習了過濾器Filter，使用過濾器需要實現Filter介面，它能夠在請求到servlet之前攔截請求，並且根據需求對請求進行相應的處理。 攔截器跟過濾器非常相似，SpringMVC攔截器是通過實現HandlerInterceptor介面實現的，它其實是AOP的一種 ...
  • SpringBoot中如何集成Servlet呢？
    本文主要概述 Logstash 的一些最受歡迎的輸入插件，以大致瞭解 Logstash 的用途；相關的環境及軟體信息如下：CentOS 7.9、Logstash 8.2.2。 1、什麼是 Logstash input 插件 Logstash 用作日誌管道，用於偵聽已配置日誌源（例如，應用程式，資料庫 ...
  • .Net 線程與鎖
    1、如何在Asp.Net Core中激活Session功能 首先添加Session包，其次在ConfigService方法中添加Session，然後在ConfigService中調用useSession。 2、什麼是中間件 指註入到應用中處理請求和響應的組件，是通過多個嵌套形成的 3、Applica ...
  • Ansible常用模塊
    Ansible常用模塊 Ansible常用模塊詳解 ansible常用模塊有： ping yum template copy user group service raw command shell script file ansible常用模塊raw、command、shell的區別： shell ...
  • Ansible部署LNMP
    Ansible部署LNMP 環境介紹: | 系統|ip|主機名|服務| | : : | : : | : : | : : | |centos8|192.168.222.250|ansible| ansinle| |ceotos8|192.168.222.137|nginx|nginx| |centos ...
  • Linux性能監控（二）-top
    top命令可以用來監控伺服器CPU、記憶體的運行情況，是Linux一個經常使用到的命令。 基本用法 第一行 顯示當前系統運行信息，系統當前時間是23:23:21，運行了315days，當前有2個用戶登錄（2 users），系統平均負載壓力情況（load average）為0.08（1min的平均負載壓 ...
一周排行
    -Advertisement-
    Play Games
  • 移動開發（一）：使用.NET MAUI開發第一個安卓APP
    移動開發（一）：使用.NET MAUI開發第一個安卓APP 對於工作多年的C#程式員來說，近來想嘗試開發一款安卓APP，考慮了很久最終選擇使用.NET MAUI這個微軟官方的框架來嘗試體驗開發安卓APP，畢竟是使用Visual Studio開發工具，使用起來也比較的順手，結合微軟官方的教程進行了安卓 ...
  • wpf ToggleButton選中效果和一個登錄界面
    前言 QuestPDF 是一個開源 .NET 庫，用於生成 PDF 文檔。使用了C# Fluent API方式可簡化開發、減少錯誤並提高工作效率。利用它可以輕鬆生成 PDF 報告、發票、導出文件等。 項目介紹 QuestPDF 是一個革命性的開源 .NET 庫，它徹底改變了我們生成 PDF 文檔的方 ...
  • 彈幕樹洞項目功能新增篇
    項目地址 項目後端地址： https://github.com/ZyPLJ/ZYTteeHole 項目前端頁面地址： ZyPLJ/TreeHoleVue (github.com) https://github.com/ZyPLJ/TreeHoleVue 目前項目測試訪問地址： http://tree ...
  • 第27篇 sqlserver2022詳細安裝步驟
    話不多說，直接開乾 一.下載 1.官方鏈接下載： https://www.microsoft.com/zh-cn/sql-server/sql-server-downloads 2.在下載目錄中找到下麵這個小的安裝包 SQL2022-SSEI-Dev.exe，運行開始下載SQL server； 二. ...
  • .NET 開源高性能 MQTT 類庫
    前言 隨著物聯網（IoT）技術的迅猛發展，MQTT（消息隊列遙測傳輸）協議憑藉其輕量級和高效性，已成為眾多物聯網應用的首選通信標準。 MQTTnet 作為一個高性能的 .NET 開源庫，為 .NET 平臺上的 MQTT 客戶端與伺服器開發提供了強大的支持。 本文將全面介紹 MQTTnet 的核心功能 ...
  • Serilog文檔翻譯系列（六） - 可用的接收器、增強器、格式化輸出
    Serilog支持多種接收器用於日誌存儲，增強器用於添加屬性，LogContext管理動態屬性，支持多種輸出格式包括純文本、JSON及ExpressionTemplate。還提供了自定義格式化選項，適用於不同需求。 ...
  • 警惕 Visual Studio 屬性求值副作用導致邏輯不符合預期
    目錄簡介獲取 HTML 文檔解析 HTML 文檔測試參考文章 簡介 動態內容網站使用 JavaScript 腳本動態檢索和渲染數據，爬取信息時需要模擬瀏覽器行為，否則獲取到的源碼基本是空的。 本文使用的爬取步驟如下： 使用 Selenium 獲取渲染後的 HTML 文檔 使用 HtmlAgility ...
  • [使用目前最新版]HybridCLR6.9.0+YooAsset2.2.4實現純C# Unity熱更新方案 (一)
    1.前言 什麼是熱更新 游戲或者軟體更新時，無需重新下載客戶端進行安裝，而是在應用程式啟動的情況下，在內部進行資源或者代碼更新 Unity目前常用熱更新解決方案 HybridCLR，Xlua，ILRuntime等 Unity目前常用資源管理解決方案 AssetBundles，Addressable， ...
  • 在 ASP.NET Core Web API 中使用操作篩選器統一處理通用操作
    本文章主要是在C# ASP.NET Core Web API框架實現向手機發送驗證碼簡訊功能。這裡我選擇是一個互億無線簡訊驗證碼平臺，其實像阿裡雲，騰訊雲上面也可以。 首先我們先去 互億無線 https://www.ihuyi.com/api/sms.html 去註冊一個賬號 註冊完成賬號後，它會送 ...
  • 第28篇 如何.net中實現高效可靠數據同步api
    通過以下方式可以高效，並保證數據同步的可靠性 1.API設計 使用RESTful設計，確保API端點明確，並使用適當的HTTP方法（如POST用於創建，PUT用於更新）。 設計清晰的請求和響應模型，以確保客戶端能夠理解預期格式。 2.數據驗證 在伺服器端進行嚴格的數據驗證，確保接收到的數據符合預期格 ...
所有分類