云野阁

cd /etc/yum.repos.d
mv CentOS-Base.repo CentOS-Base.repo.bak
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

yum install epel-release -y
yum install ansible -y
#查看版本
 ansible --version

yum install python3 python3-devel python3-pip -y
python3 -m pip install ansible
#查看版本
 ansible --version

ssh-keygen -t dsa -f ~/.ssh/id_dsa -P ""
ssh-copy-id -i ~/.ssh/id_dsa.pub root@受控主机ip

#添加test用户，并设置密码
useradd test
passwd test

ssh-keygen -t dsa -f ~/.ssh/id_dsa -P ""
ssh-copy-id -i ~/.ssh/id_dsa.pub test@受控主机ip

visudo
test    ALL=(ALL)       NOPASSWD: ALL

vi /etc/ansible/ansible.cfg
#将以下内容注释取消
[privilege_escalation]
become=True   #启用权限提升
become_method=sudo  #通过 sudo 提升到 root 用户的权限
become_user=root  #作为 root 用户执行任务
become_ask_pass=False  #禁用密码提示

ansible '组/IP' -m command -a '[参数] 命令'

ansible '组/IP/all' -m shell -a '[参数] 命令'

ansible < > -m copy -a 'src=   dest=   [owner= ] [mode=]   '

ansible < > -m file -a ''

ansible <组/IP/all> -m group -a ' '

ansible <组/IP/all> -m user -a ' '

ansible webservers -m user -a 'name=www uid=666 group=www shell=/sbin/nologin create home=no'

ansible webservers -m user -a 'name=db group=root groups=adm,sys append=yes shell=/bin/bash create_home=yes'

ansible localhost -m debug -a "msg={{ '123' | password_hash('sha512', 'salt123') }}"

ansible webservers -m user -a "name=ddd password=第一步获取的加密密码 shell=/bin/bash create_home=yes"

ansible webservers -m user -a 'name=dev generate_ssh_key=yes ssh_key_bits=2048 ssh_key_file=.ssh/id_rsa'

ansible <组/IP/all> -m cron -a ' '

vi nginx.yml

- hosts: webservers
  tasks:
    - name: 安装nignx
      yum:
        name: nginx
        state: present
    - name: 启动nignx
      systemd:
        name: nginx
        state: started
        enabled: yes

ansible-playbook --syntax nginx.yml
或
ansible-playbook --syntax-check nginx.yml

ansible-playbook -C nginx.yml

ansible-playbook nginx.yml

#创建目录存放该项目
mkdir nfs
#创建nfs配置文件，将以下内容写入
vi exports.j2

/ansible_test 192.168.1.0/24(rw,all_squash,anonuid=7777,anongid=7777)

vi nfs.yml

- hosts: webservers
  tasks:
    - name: download nfs
      yum:
        name: nfs-utils
        state: present
    - name: configure nfs
      copy:
        src: ./exports.j2
        dest: /etc/exports
      notify: restart nfs  #触发信息
    - name: init group
      group:
        name: bbb
        gid: 7777
    - name: init user
      user:
        name: bbb
        uid: 7777
        group: bbb
        shell: /sbin/nologin
        create_home: no
    - name: init directory
      file:
        path: /ansible_test
        state: directory
        owner: bbb
        group: bbb
        mode: "0755"
    - name: start nfs
      systemd:
        name: nfs
        state: started
        enabled: yes
  handlers:  #触发器
    - name: restart nfs
      systemd:
        name: nfs
        state: restarted

 ansible-playbook --syntax-check nfs.yml
 ansible-playbook -C nfs.yml
 ansible-playbook nfs.yml
 
 #查看nfs服务
 showmount -e 192.168.1.121
 showmount -e 192.168.1.122
 
 #挂载测试
 mount -t nfs 192.168.1.121:/ansible_test /data/test
 mount -t nfs 192.168.1.122:/ansible_test /data/test1

#创建目录存放该项目
mkdir rsync
#复制rsync配置文件rsyncd.conf并修改（可先手动下载rsync，拷贝配置文件后再卸载，也可直接使用以下内容）

uid = ansible_www
gid = ansible_www
port = 873
fake super = yes
use chroot = yes
max connections = 4
timeout = 900
read only = false
list = false
auth users = rsync_backup
secrets file = /etc/rsync.passwd
log file = /var/log/rsyncd.log
[backup]
path = /backup

vi rsync.yml

- hosts: webservers
  tasks:
    - name: download rsync
      yum:
        name: rsync
        state: present
    - name: configure rsync
      copy:
        src: ./rsyncd.conf
        dest: /etc/rsyncd.conf
        owner: root
        group: root
        mode: "0644"
      notify: restart rsync
    - name: init group
      group:
        name: ansible_www
        gid: 8888
    - name: init user
      user:
        name: ansible_www
        uid: 8888
        group: ansible_www
        shell: /sbin/nologin
        create_home: no
    - name: init directory
      file:
        path: /backup
        state: directory
        owner: ansible_www
        group: ansible_www
        mode: "0755"
        recurse: yes
    - name: init rsync user passwd
      copy:
        content: "rsync_backup:123456"
        dest: /etc/rsync.passwd
        owner: root
        group: root
        mode: 0600
      notify: restart rsync
    - name: start rsync
      systemd:
        name: rsyncd
        state: started
        enabled: yes
  handlers:
    - name: restart rsync
      systemd:
        name: rsyncd
        state: restarted

ansible-playbook --syntax-check rsync.yml 
ansible-playbook -C rsync.yml 
ansible-playbook rsync.yml  

#验证
rsync -avz host_group [email protected]::backup

vi rsync-client.yml

- hosts: localhost
  tasks:
    - name: create scripts path
      file:
        path: /scripts
        owner: root
        group: root
        state: directory
        mode: 0755
    - name: push scripts
      copy:
        src: test.sh
        dest: /scripts/test.sh
        owner: root
        group: root
        mode: 0755
    - name: contable job
      cron:
        name: "push backup data"
        minute: "*/1"
        job: "/bin/bash /scripts/test.sh &>/dev/null"

#!/bin/bash
RSYNC_PASSWORD="123456"  rsync -avz /backup/ [email protected]::backup

crontab -l

#创建存放项目文件目录
mkdir /data/phpmyadmin
#将ansible的配置文件`ansible.cfg`和`hosts`，复制到该phpmyadmin目录下，并修改配置
cp /etc/ansible/ansible.cfg /data/phpmyadmin/ansible.cfg
#修改配置文件中的路径，并取消注释
inventory      = /data/phpmyadmin/host_group

cp /etc/ansible/hosts /data/phpmyadmin/host_group
#修改主机组
[webservers]
192.168.1.121
192.168.1.122

[dbservers]
192.168.1.125

[lbservers]
192.168.1.123
192.168.1.124

mkdir /data/phpmyadmin/files
# 若无redis.conf文件可先在控制节点上使用命令yum -y install redis下载后再拷贝
cp /etc/redis.conf /data/phpmyadmin/files
#修改配置文件,将要安装redis的主机ip加入
bind 127.0.0.1 192.168.1.125

vi redis.yml

- hosts: dbservers
  tasks:
    - name: download redis
      yum:
        name: redis
        state: present
    - name: configure redis
      copy:
        src: ./files/redis.conf
        dest: /etc/redis.conf
        owner: redis
        group: root
        mode: 0640
      notify: restart redis
    - name: start redis
      systemd:
        name: redis
        state: started
        enabled: yes
  handlers:
    - name: restart redis
      systemd:
        name: redis
        state: restarted

ansible-playbook --syntax-check redis.yml
ansible-playbook -C redis.yml
ansible-playbook redis.yml
#测试，之前控制节点121安装了redis，可直接在121上测试
#注意防火墙端口
redis-cli -h 192.168.1.125

 yum -y install mariadb-server
 systemctl start mariadb
 systemctl enable mariadb
 #设置root用户密码
 mysqladmin -uroot password '123456'
 #登录创建用户
 mysql -uroot -p123456
 #创建数据库
 create database php_db;
 #创建数据库用户
 grant all on php_db.* to php_user@'%' identified by '123456';

rpm -Uvh https://mirror.webtatic.com/yum/el7/epel-release.rpm
rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm

#nginx配置文件
cp /etc/nginx/nginx.conf /data/phpmyadmin/files
#php配置文件
cp /etc/php.ini /data/phpmyadmin/files
cp /etc/php-fpm.d/www.conf /data/phpmyadmin/files

vi nginx.conf
user www;

vi phpmyadmin.conf

server {
    listen 80;
    server_name ansible.phpmyadmin.local;

    # 确保此路径与phpMyAdmin实际路径完全一致
    root /code/phpmyadmin;
    index index.php;

    location / {
        try_files $uri $uri/ /index.php$is_args$args;
    }

    location ~ \.php$ {
        # 绝对路径必须完整正确
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        include fastcgi_params;

        # 添加关键参数
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_intercept_errors on;
        fastcgi_param PATH_INFO $fastcgi_path_info;
    }
}

vi php.ini
[Session]

session.save_handler = redis
session.save_path = "tcp://192.168.1.125:6379?weight=1&timeout=2.5"

vi www.conf

[www]
user = www
group = www

;php_value[session.save_handler] = files
;php_value[session.save_path]    = /var/lib/php/session

#phpmyadmin程序下载到/data/phpmyadmin/files目录下
curl -O https://files.phpmyadmin.net/phpMyAdmin/5.2.2/phpMyAdmin-5.2.2-all-languages.zip

#解压程序
unzip phpMyAdmin-5.2.2-all-languages.zip
#复制并修改配置文件，连接mariadb数据库
cp phpMyAdmin-5.2.2-all-languages/config.sample.inc.php config.inc.php
#修改localhost为192.168.1.125
$cfg['Servers'][$i]['host'] = '192.168.1.125';

vi nginx-php.yml

- hosts: webservers
  tasks:
    - name: download nginx
      yum:
        name: nginx
        state: present
    - name: download php
      yum:
        name: "{{ packages }}"
      vars:
        packages:
        - php72w
        - php72w-cli
        - php72w-common
        - php72w-devel
        - php72w-embedded
        - php72w-fpm
        - php72w-gd
        - php72w-mbstring
        - php72w-mysqlnd
        - php72w-opcache
        - php72w-pdo
        - php72w-xml
        - php72w-ldap
        - php72w-pecl-redis

    - name: configure nginx
      copy:
        src: ./files/nginx.conf
        dest: /etc/nginx/nginx.conf
        owner: root
        group: root
        mode: 0644
      notify: restart nginx
    - name: init group www
      group:
        name: www
        gid: 666
    - name: init user www
      user:
        name: www
        uid: 666
        group: www
        shell: /sbin/nologin
        create_home: no
    - name: start nginx
      systemd:
        name: nginx
        state: started        
        enabled: yes

    - name: configure php.ini
      copy:
        src: ./files/php.ini
        dest: /etc/php.ini
        owner: root
        group: root
        mode: 0644
      notify: restart php    
    - name: configure www.conf
      copy:
        src: ./files/www.conf
        dest: /etc/php-fpm.d/www.conf
        owner: root
        group: root
        mode: 0644
      notify: restart php        
    - name: start php
      systemd:
        name: php-fpm
        state: started        
        enabled: yes
        
    - name: copy nginx conf 
      copy:
        src: ./files/phpmyadmin.conf
        dest: /etc/nginx/conf.d/phpmyadmin.conf
      notify: restart nginx      
    - name: create code directory
      file:
        path: /code
        state: directory
        owner: www
        group: www
        mode: "0755"
        recurse: yes    
    - name: unarchive phpmyadmin   #解压phpmyadmin
      unarchive: 
        src: ./files/phpMyAdmin-5.2.2-all-languages.zip
        dest: /code/
        owner: www
        group: www
        creates: /code/phpMyAdmin-5.2.2-all-languages/config.inc.php        
    - name: create link  #创建软连接
      file: 
        src: /code/phpMyAdmin-5.2.2-all-languages/
        dest: /code/phpmyadmin 
        state: link
    - name: change phpmyadmin configure 
      copy:
        src: ./files/config.inc.php
        dest: /code/phpMyAdmin-5.2.2-all-languages/config.inc.php  
          
        
  handlers: 
    - name: restart nginx
      systemd:
        name: nginx
        state: restarted
    - name: restart php
      systemd:
        name: php-fpm
        state: restarted

ansible-playbook --syntax-check nginx-php.yml
ansible-playbook -C nginx-php.yml
ansible-playbook nginx-php.yml

#分别配置121，122的hosts进行访问测试
192.168.1.121 ansible.phpmyadmin.local
192.168.1.122 ansible.phpmyadmin.local

cp /etc/nginx.conf /data/phpmyadmin/files/nginx.conf.lb

vi proxy.conf

upstream ansible {
    server 192.168.1.121;
    server 192.168.1.122;
}
server {
    listen 80;
    server_name ansible.phpmyadmin.local;
    location / {
        proxy_pass http://ansible;
        proxy_set_header Host $http_host;
    }

}

vi lb-nginx.yml

- hosts: lbservers
  tasks:
    - name: download nginx
      yum:
        name: nginx
        state: present
    - name: configure nginx
      copy:
        src: ./files/nginx.conf.lb
        dest: /etc/nginx/nginx.conf
      notify: restart nginx
    - name: copy nginx conf
      copy:
        src: ./files/proxy.conf
        dest: /etc/nginx/conf.d/proxy.conf
      notify: restart nginx
    - name: start nginx
      systemd:
        name: nginx
        state: started
        enabled: yes
  handlers:
    - name: restart nginx
      systemd:
        name: nginx
        state: restarted

ansible-playbook --syntax-check lb-nginx.yml
ansible-playbook -C lb-nginx.yml
ansible-playbook lb-nginx.yml

192.168.1.123 ansible.phpmyadmin.local
192.168.1.124 ansible.phpmyadmin.local

rpm -Uvh https://repo.ius.io/ius-release-el7.rpm

cp /etc/haproxy/haproxy.cfg /data/phpmyadmin/files

frontend web
                bind *:8080
                mode http
                acl ansible_domain hdr_reg(host) -i ansible.phpmyadmin.local
                use_backend ansible_cluster if ansible_domain
backend ansible_cluster
                balance roundrobin
                option httpchk HEAD / HTTP/1.1\r\nHost:\ ansible.phpmyadmin.local
                server server1 192.168.1.121:80 check port 80 inter 3s rise 2 fall 3
                server server2 192.168.1.122:80 check port 80 inter 3s rise 2 fall 3

vi lb-haproxy.yml

- hosts: lbservers
  tasks:
    - name: download haproxy
      yum:
        name: haproxy22
        state: present
    - name: configure haproxy
      copy:
        src: ./files/haproxy.cfg
        dest: /etc/haproxy/haproxy.cfg
        owner: root
        group: root
        mode: 0644
      notify: restart haproxy  
    - name: start haproxy
      systemd:
        name: haproxy
        state: started        
        enabled: yes
  handlers: 
    - name: restart haproxy
      systemd:
        name: haproxy
        state: restarted

ansible-playbook --syntax-check lb-haproxy.yml
ansible-playbook -C lb-haproxy.yml
ansible-playbook lb-haproxy.yml

192.168.1.123 ansible.phpmyadmin.local
192.168.1.124 ansible.phpmyadmin.local