标签：数据 ssl 测试 nal roo libxml res ice 设置权限
环境：192.168.205.7： as ansible host
192.168.205.37: as mariadb server
192.168.205.27: as web server and rsyslog client
OS: centos 7 1810 with mini install
ansible: 2.8.1
mariadb-10.2.25-linux-x86_64.tar.gz
apr-1.7.0.tar.bz2
apr-util-1.6.1.tar.bz2
httpd-2.4.39.tar.bz2
php-7.3.7.tar.xz
loganalyzer-4.1.7.tar.gz
编译安装apache2.4.39, 编译安装php7.37， 二进制安装mariadb server10.2.25, 将192.168.205.27的日志记录发送到mariadb server中，并同时使用192.168.205.27做为LAMP server使用loganalyzer显示和分析日志
1. 通过ansible安装mariadb
2. 编译安装apache2.4.39
3. 通过ansible安装apache
4. 编译安装php
5. 通过ansible安装php
6. 在要把日志存到sql中的服务器安装rsyslog相关文件
7. 初始化数据库并安装rsyslog的数据库脚本
8. 修改改http.conf支持php-fpm
9. 安装loganalyzer
10. 测试 [root@centos7 ansible]#vi /etc/ansible/hosts
[servers]
192.168.205.27
192.168.205.37
192.168.205.17mkdir -p /data/ansible/roles/{apache,mysql,php}/{files,tasks}[root@centos7 files]#pwd
/data/ansible/roles/mysql/files
[root@centos7 files]#ls
mariadb-10.2.25-linux-x86_64.tar.gz my.cnf[root@centos7 tasks]#pwd
/data/ansible/roles/mysql/tasks
[root@centos7 tasks]#cat main.yml
- include: install.yml
[root@centos7 tasks]#cat install.yml
- name: adduser 在目标机器上创建用户mysql
user: name=mysql system=yes home=/data/mysql create_home=no shell=/sbin/nologin
- name: unarchive 解压缩mysql的二进制文件到目标计算机上
unarchive: src=mariadb-10.2.25-linux-x86_64.tar.gz dest=/usr/local/ owner=mysql group=mysql
- name: link 建立软链接文件
file: src=/usr/local/mariadb-10.2.25-linux-x86_64 dest=/usr/local/mysql state=link
- name: datadir 建立数据文件路径，并设置权限
file: path=/data/mysql state=directory owner=mysql group=mysql
- name: database 初始化安装脚本，生成系统数据库
shell: chdir=/usr/local/mysql/ scripts/mysql_install_db --datadir=/data/mysql --user=mysql
- name: path vars 将安装路径加入到PATH变量中
copy: content=‘PATH=/usr/local/mysql/bin:$PATH‘ dest=/etc/profile.d/mysql.sh
- name: config 复制配置文件模板到目标中
copy: src=my.cnf dest=/etc/my.cnf
- name: mycnf 修改配置文件的数据文件目录为/data/mysql
shell: sed -i ‘/\[mysqld\]/a datadir=/data/mysql‘ /etc/my.cnf
- name: service 复制启动脚本到启动目录中
shell: cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
- name: start service 启动服务
shell: /etc/init.d/mysqld start
[root@centos7 ansible]#pwd
/data/ansible
[root@centos7 ansible]#cat mysql_role.yml
- hosts: 192.168.205.37
roles:
- mysqlansible-playbook mysql_role.yml yum install gcc prce-devel openssl-devel expat-devel -y
下载相关包到目录/data/tmp中
apr-1.7.0.tar.bz2
apr-util-1.6.1.tar.bz2
httpd-2.4.39.tar.bz2for p in *.bz2 ;do tar xvf $p;done
mv apr-1.7.0 httpd-2.4.39/srclib/apr
mv apr-util-1.6.1 httpd-2.4.39/srclib/apr-util
cd httpd-2.4.39/
./configure --prefix=/app/httpd24 --enable-so --enable-ssl --enable-cgi --enable-rewrite --with-zlib --with-pcre --with-included-apr --enable-modules=most --enable-mpms-shared=all --with-mpm=prefork
make -j 4 && make installtar -Jcvf /data/ansible/roles/apache/files/http2.4.39.tar.xz /app/httpd[root@centos7 tasks]#pwd
/data/ansible/roles/apache/tasks
[root@centos7 tasks]#cat main.yml
- include: unarchive.yml
- include: vars.yml
- include: service.yml
[root@centos7 tasks]#cat unarchive.yml
- name: unarchive htppd
unarchive: src=httpd-bin-2.4.39.tar.xz dest=/
[root@centos7 tasks]#cat vars.yml
- name: vars
copy: content=‘PATH=/app/httpd24/bin:$PATH‘ dest=/etc/profile.d/httpd.sh
[root@centos7 tasks]#cat service.yml
- name: add user
user:
name: apache
system: yes
shell: /sbin/nologin
- name: modify conf
shell: sed -ri ‘s/^(.*) daemon$/\1 apache/‘ /app/httpd24/conf/httpd.conf
- name: service
shell: echo ‘/app/httpd24/bin/apachectl start‘ >> /etc/rc.d/rc.local
- name: execute right
file:
path: /etc/rc.d/rc.local
mode: u+x,g+x,o+x
- name: start service
shell: apachectl start
[root@centos7 ansible]#cat apache2.4.39-bin-install.yml
- hosts: 192.168.205.27
roles:
- apacheansible-playbook apache2.4.39-bin-install.yml yum install libxml2-devel bzip2-devel libmcrypt-devel
tar xvf php-7.3.7.tar.xz
cd php-7.3.7/
./configure --prefix=/app/php --enable-mysqlnd --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd --with-openssl --with-freetype-dir --with-jpeg-dir --with-png-dir --with-zlib --with-libxml-dir=/usr --with-config-file-path=/etc --with-config-file-scan-dir=/etc/php.d --enable-mbstring --enable-xml --enable-sockets --enable-fpm --enable-maintainer-zts --disable-fileinfo --with-gd
make && make installtar -Jcvf /data/ansible/roles/php/files/php-bin.7.3.7.tar.xz /app/php/
cp php.ini-production /data/ansible/roles/php/roles/php/files
cp sapi/fpm/init.d.php-fpm /data/ansible/roles/php/roles/php/files
[root@centos7 files]#pwd
/data/ansible/roles/php/files
[root@centos7 files]#ls
init.d.php-fpm php-bin.7.3.7.tar.xz php.ini-production
[root@centos7 tasks]#pwd
/data/ansible/roles/php/tasks
[root@centos7 tasks]#ls
install.yml main.yml
[root@centos7 tasks]#cat main.yml
- include: install.yml
[root@centos7 tasks]#cat install.yml
- name: unarchive
unarchive:
src: php-bin.7.3.7.tar.xz
dest: /
- name: copy php.ini
copy:
src: php.ini-production
dest: /etc/php.ini
- name: copy php-fpm service
copy:
src: init.d.php-fpm
dest: /etc/init.d/php-fpm
mode: u+x,g+x,o+x
- name: add hph-fpm service
shell: chkconfig --add php-fpm
- name: copy php-fpm.conf
copy:
src: /app/php/etc/php-fpm.conf.default
dest: /app/php/etc/php-fpm.conf
remote_src: yes
- name: copy www.conf
copy:
src: /app/php/etc/php-fpm.d/www.conf.default
dest: /app/php/etc/php-fpm.d/www.conf
remote_src: yes
- name: modify config
shell: sed -ri ‘s@(^.*) = nobody@\1 = apache@‘ /app/php/etc/php-fpm.d/www.conf
- name: start service
shell: service php-fpm start
[root@centos7 ansible]#pwd
/data/ansible
[root@centos7 ansible]#cat php-bin.7.3.7.yml
---
- hosts: 192.168.205.27
remote_user: root
roles:
- phpansible-playbook php-bin.7.3.7.yml yum install rsyslog-mysql[root@centos7 etc]#rpm -ql rsyslog-mysql
/usr/lib64/rsyslog/ommysql.so
/usr/share/doc/rsyslog-8.24.0/mysql-createDB.sqlscp /usr/share/doc/rsyslog-8.24.0/mysql-createDB.sql 192.168.205.37:datavi /etc/rsyslog.conf
$ModLoad ommysql
*.info;mail.none;authpriv.none;cron.none :ommysql:192.168.205.37,Syslog,rsyslog,centos/user/local/mysql/bin/mysql_secure_installationgrant all on rsyslog.* to rsyslog@‘192.168.205.%‘ identified by ‘centos‘;mysql < /data/mysql-createDB.sql 此文件来自于第17步vi /app/http2.4/conf/httpd.conf
user apache
group apache
<IfModule dir_module>
DirectoryIndex index.php index.html
</IfModule>
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
ProxyRequests Off
ProxyPassMatch "^/.*\.php(/.*)?$" "fcgi://localhost:9000/app/httpd24/htdocs/"tar xf loganalyzer-4.1.5.tar.gz
cp -a loganalyzer-4.1.5/src /app/http24/htdoc/loganalyzer
cd /app/http24/htdoc/loganalyzer
touch config.php
chmod 666 config.phpsystemctl restart httpd.service
cd /var/www/html/loganalyzer
chmod 644 config.php通过ansible安装mysql,apache,php,并实现rsyslog日志记录于MySQL中
标签：数据 ssl 测试 nal roo libxml res ice 设置权限
原文地址：https://blog.51cto.com/127601/2424277
