Ansible部署rsync、nfs及sersync

角色            外网IP(NAT)     内网IP(LAN)       主机名
Rsync服务端     eth0:10.0.1.51  eth1:172.16.1.51  backup 
NFS&Sers服务端  eth0:10.0.1.41  eth1:172.16.1.41  nfs
JUMP SERVER    eth0:10.0.1.71  eth1:172.16.1.71  m01
Rsy&NFS客户端   eth0:10.0.1.7   eth1:172.16.1.7   web01
Rsy&NFS客户端   eth0:10.0.1.8   eth1:172.16.1.8   web02

cat /etc/ansible/hosts
[backup]
172.16.1.51
[nfs]
172.16.1.41
[web]
172.16.1.7
172.16.1.8
[all:children]
backup
nfs
web

1)firewalld selinux
2)ssh密钥生成以及公钥推送
ssh-keygen -t rsa -P ‘‘ -f ~/.ssh/id_rsa -C root
ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.7
ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.8
ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.41
ssh-copy-id -i ~/.ssh/id_rsa root@172.16.1.51
3)epel源部署
wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
yum clean all
yum makecache
4)安装软件包rsync,nfs-utils
ansible all -m yum -a "name=rsync,nfs-utils state=installed"
ansible all -m service -a "name=rpcbind state=started enabled=yes"
ansible all -m service -a "name=nfs state=started enabled=yes"
5)创建用户,组
ansible all -m group -a "name=www gid=666"
ansible all -m user -a "name=www uid=666 group=666 create_home=no shell=/sbin/nologin"
6)创建目录,并修改所属和权限
ansible all -m file -a "path=/data owner=www group=www state=directory"
ansible all -m file -a "path=/backup owner=www group=www state=directory"
ansible all -m file -a "path=/server/scripts state=directory"
7)创建rsync客户端密码文件
ansible all -m copy -a "content=1 dest=/etc/rsync.pass mode=600"
ansible backup -m copy -a "content=‘rsync_backup:1‘ dest=/etc/rsync.passwd mode=600"
8)推送脚本
mkdir -p /server/scripts
vim /server/scripts/rsync_backup.sh
vim /server/scripts/rsync_check.sh
ansible all -m copy -a "src=/server/scripts/rsync_backup.sh dest=/server/scripts/rsync_backup.sh"
ansible backup -m copy -a "src=/server/scripts/rsync_check.sh dest=/server/scripts/rsync_check.sh"
9)计划任务
ansible all -m cron -a "name=‘Rsync backup‘ minute=0 hour=1 job=‘/bin/sh /server/scripts/rsync_backup.sh &> /dev/null‘"
ansible backup -m cron -a "name=‘Rsync check‘ minute=0 hour=5 job=‘/bin/sh /server/scripts/rsync_check.sh &> /dev/null‘"

1)安装
在基础配置已实现
2)配置
mkdir -p /server/conf
vim /server/conf/rsyncd.conf
ansible backup -m copy -a "src=/server/conf/rsyncd.conf dest=/etc/rsyncd.conf"
3)启动
ansible all -m service -a "name=rsyncd state=started enabled=yes"
ansible backup -m yum -a "name=mailx state=installed"
//验证
ansible all -m script -a "/server/scripts/rsync_backup.sh"
ansible backup -m script -a "/server/scripts/rsync_check.sh"

1)安装
2)配置
方法1：建议使用
echo ‘/data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)‘ > /server/conf/exports
ansible nfs -m copy -a ‘src=/server/conf/exports dest=/etc/‘
方法2:
ansible nfs -m copy -a ‘content="/data 172.16.1.0/24(rw,sync,all_squash,anonuid=666,anongid=666)" dest=/etc/exports‘ 
3)启动
在基础环境已经启动过了,这里重载下配置信息
ansible nfs -m shell -a "exportfs -arv"

1)安装
ansible web -m yum -a "name=httpd state=installed"
2)配置
3)启动
ansible web -m service -a "name=httpd state=started"
4)挂载NFS共享存储
ansible web -m mount -a "src=172.16.1.41:/data path=/var/www/html state=mounted fstype=nfs"

1)安装
#sersync需要依赖inotify和rsync,所以需要安装对应软件
ansible nfs -m yum -a "name=inotify-tools state=installed"
#安装sersync
ssh root@172.16.1.41
mkdir /server/tools -p 
cd /server/tools/
wget https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/sersync/sersync2.5.4_64bit_binary_stable_final.tar.gz
tar xf sersync2.5.4_64bit_binary_stable_final.tar.gz 
mv GNU-Linux-x86/ /usr/local/sersync
cd /usr/local/sersync/
2)配置
vim confxml.xml 
...
<fileSystem xfs="true"/> #监控对象 false改成true
<inotify> #监控信息
        <delete start="true"/>
        <createFolder start="true"/>
        <createFile start="true"/>
        <closeWrite start="true"/>
        <moveFrom start="true"/>
        <moveTo start="true"/>
        <attrib start="true"/>
        <modify start="true"/>
<localpath watch="/data">
        <remote ip="172.16.1.51" name="data"/>    #发送给rsync服务端的data模块
<rsync>
        <commonParams params="-az"/>  #命令选项
        <auth start="true" users="rsync_backup" passwordfile="/etc/rsync.pass"/> #rsync的认证信息        
...
3)启动
ln -s /usr/local/sersync/sersync2 /usr/bin/
sersync2 -dro /usr/local/sersync/confxml.xml