1.看官方文档

2.帮助文档

3.别人写好的，注意甄别

4.不要自己发明创造

5.尽量少使用shell模块，当想使用shell模块的时候，停下来，想一想有没有专有的模块干这个事

6.遇到报错做好记录，截图或复制文本，方便排查

7.尽量使用专有的模块去干专业的事

yum install ansible –y //--- 需要依赖epel的yum源

# vim /server/scripts/ip_list.txt

192.168.81.162:linux@123:22
192.168.81.163:linux@123:22
192.168.81.164:linux@123:22
192.168.81.165:linux@123:22

# vim /server/scripts/distribute_public_key.sh

#!/bin/bash

      for host in $(cat /server/scripts/ip_list.txt)
      do
        host_ip=$(echo $host|awk -F ":" ‘{print $1}‘)
        host_pass=$(echo $host|awk -F ":" ‘{print $2}‘)
        host_port=$(echo $host|awk -F ":" ‘{print $3}‘)
        sshpass -p$host_pass ssh-copy-id -i /root/.ssh/id_dsa.pub $host_ip -o StrictHostKeyChecking=no -p$host_port  &>/dev/null
        if [ $? -eq 0 ]
        then
           echo  "to $host_ip distribute_key "
           echo  "public key distribute sucess"
           echo  ""
        else
           echo  "to $host_ip distribute_key"
           echo  "public key distribute failed"
           echo  ""
        fi
      done

[root@m01 ~]# cat /etc/ansible/hosts
#主机组
[web]
192.168.81.163
192.168.81.164

[nfs]
192.168.81.165

#针对某个组的变量
[web:vars]
ansible_port=222

#针对所有组的变量
[all:vars]
ansible_password=‘123456‘

ansible webserver -m ping

[root@m01:~]# ansible 192.168.81.162 -m command -a "hostname"
192.168.81.162 | SUCCESS | rc=0 >>
m02

ansible 192.168.81.162 -m command -a "chdir=/tmp touch 1.txt"

#如果远端有/tmp目录下有hosts这个文件。就不会执行touch1.txt这个操作

ansible 192.168.81.162 -m command -a "creates=/tmp/hosts touch 1.txt"

#如果远端存在/tmp/hosts这个文件，才会执行chdir=/tmp touch 1.txt这个操作

ansible 192.168.81.162 -m command -a "removes=/tmp/hosts chdir=/tmp touch 1.txt"

[root@m01 ~]# ansible web -m command -a ‘hostname‘

192.168.81.164 | CHANGED | rc=0 >>
web02

192.168.81.163 | CHANGED | rc=0 >>
web01

[root@m01 ~]# ansible web -m command -a "ifconfig eth0|grep 10"

192.168.81.163 | FAILED | rc=255 >>

SIOCSIFADDR: 没有那个设备

eth0|grep: ERROR while getting interface flags: 没有那个设备non-zero return code

192.168.81.164 | FAILED | rc=255 >> SIOCSIFADDR: 没有那个设备

eth0|grep: ERROR while getting interface flags: 没有那个设备non-zero return code

[root@m01 ~]# cat echo.sh

#!/bin/bash

echo $(hostname)

执行命令：

[root@m01 ~]# ansible all -m script -a "/root/echo.sh"

ansible all -m copy -a "src=/etc/hostname dest=/opt"

ansible all -m shell -a "ls -lh /opt"

ansible all -m copy -a "src=/etc/hostname dest=/opt owner=user1 group=group1"

ansible all -m copy -a "src=/etc/hostname dest=/opt owner=root group=root mode=‘666‘"

ansible all -m copy -a "content=‘rsync_backup:123456‘ dest=/opt/rsyncd.pwd owner=user1 group=group1 mode=600"

等价于
echo "rsync_backup:123456" > /opt/rsyncd.pwd
chown user1:group1 /opt/rsyncd.pwd
chmod 600 /opt/rsyncd.pwd

[root@m01 ~]# mkdir -p /data/{a,b,c}/{1,2,3}
[root@m01 ~]# tree /data/
/data/
├── a
│   ├── 1
│   ├── 2
│   └── 3
├── b
│   ├── 1
│   ├── 2
│   └── 3
└── c
    ├── 1
    ├── 2
    └── 3

src后面目录没有/: 将目录本身以及目录下面的内容都进行远程传输复制:
ansible all -m copy -a "src=/data dest=/opt"

src后面目录有/,只将目录下面的内容都进行远程传输复制:
ansible all -m copy -a "src=/data/ dest=/opt"

ansible all -m copy -a "src=/etc/hostname dest=/opt backup=yes"

ansible all -m copy -a "src=/etc/hostname dest=/opt remote_src=yes"

src: 源文件
dest: 目标路径
backup: 文件如果有更改，复制之前先备份一下
content: 往文件里追加内容
group: 定义文件用户组
owner: 定义文件用户
mode: 定义文件权限
remote_src: 在目标主机本机执行复制命令

ansible 192.168.81.162 –m fetch –a “src=/tmp/1.txt dest=/tmp”

[root@m01:~]# tree /tmp/
/tmp/
├── 192.168.81.162
│   └── tmp
│       └── fetch.txt

ansible all -m file -a "path=/opt/redis state=directory"

ansible all -m file -a "path=/opt/redis state=directory"

ansible all -m file -a "src=/opt/nsthink dest=/opt/michaelni state=link"
ansible all -m file -a "src=/opt/1.txt dest=/opt/redis/1.hard.txt state=hard"

ansible all -m file -a "path=/opt/1.txt state=absent"

ansible all -m file -a "path=/opt/data owner=user1 group=group1 recurse=yes"

[root@m01 ~/script]# cat echo_hostname.sh
#!/bin/bash
echo "$(date +%M:%S) $(hostname)" >>/tmp/hostname.txt

* * * * * /bin/bash /opt/echo_hostname.sh

ansible all -m cron -a ‘name="echo_hostname" job="/bin/bash /opt/echo_hostname.sh"‘

ansible all -m cron -a "name=‘time sync‘ minute=0 hour=2 job=‘/usr/sbin/ntpdate ntp1.aliyun.com >/dev/null 2>&1‘"

ansible all -m cron -a ‘name="echo_hostname" minute="*/5" job="/bin/bash /opt/echo_hostname.sh"‘

ansible all -m cron -a ‘name="echo_hostname" minute="*/5" job="/bin/bash /opt/echo_hostname.sh" disabled=yes‘

ansible all -m cron -a ‘name="echo_hostname" minute="*/5" job="/bin/bash /opt/echo_hostname.sh" disabled=no‘

ansible all -m cron -a ‘name="echo_hostname" state=absent‘

ansible all -m group -a "name=www gid=‘666‘"

name: 组名   
gid: 指定
gid state:

- absent 删除组

- present 创建组

ansible all -m user -a "name=user1"

ansible all -m user -a "name=www uid=‘666‘ group=www"

ansible 172.16.1.31 -m user -a "name=rsync create_home=no  shell=/sbin/nologin"

https://docs.ansible.com/ansible/latest/reference_appendices/faq.html#how-do-i-generate-encrypted-passwords-for-the-user-module

[root@m01 ~]# cat user.yaml

- hosts: all

  tasks:

  - name: create_user

     user:

        name: cookzhang

        password: ‘$6$123456$37mxvJGRzjWxgD3HYl.bKq4aUXrcYV8mk0pxmqg8ARv3t9ke5ZM/NBbwTkx1FDcnLhrOX3jQc6L/NKAohhQJn/‘

uid #指定用户的 uid
group #指定用户组名称
groups #指定附加组名称
password #给用户添加密码
shell #指定用户登录 shell
create_home #是否创建家目录

ansible all -m yum -a "name=iftop state=latest"

ansible all -m yum -a "name=iftop state=removed"

yum install nginx -y
sed -i ‘38,87d‘ /etc/nginx/nginx.conf
cat >/etc/nginx/conf.d/yum.conf <<EOF
server {
   listen 80;
   server_name localhost;
   location / {
        root /data/yum;
        charset utf-8,gbk;
        autoindex on;
        autoindex_localtime on;
        autoindex_exact_size off;
    }

}

EOF
mkdir /data/yum
chown -R nginx:nginx /data/yum
cd /data/yum
wget http://nginx.org/packages/centos/7/x86_64/RPMS/nginx-1.10.0-1.el7.ngx.x86_64.rpm
nginx -t
systemctl restart nginx
curl 127.0.0.1

ansible all -m yum -a "name=http://192.168.81.161/nginx-1.10.0-1.el7.ngx.x86_64.rpm state=latest"

name 软件包名称

state 状态:
- latest 安装最新版
- present
- installed

- removed 卸载软件
- absent 卸载软件