Ansible

Size: px

Start display at page:

Download "Ansible"

のぶみつねぎたや
5 years ago
Views:

1 Ansible

2 Ansible Ansible Chef Puppet Ansible Better Shell Script Ansible inventory (module) playbook YAML playbook playbook task handler playbook with_items register when until lookup filter vars_prompt local_action action environment ignore_errors task async playbook playbook include role fork serial i

3 5.6 AWS EC dynamic inventory ssh limit task tag dry-run check task step diff ansible-vault ansible-vault role Ansible Galaxy Ansible Galaxy role role role ControlPath too long inventory playbook python not found Windows ansible-playbook ansible invalid type <type list > Syntax Error Ansible A 69 A A A A.4 Python A B plugin 73 B.1 plugin ii

4 B.2 lookup plugin B.3 filter plugin B.4 callback plugin B.5 action plugin B.6 connection type plugin B.7 vars plugin C ansible config 78 C.1 default C.2 paramiko C.3 ssh_connection C.4 accelerate iii

5 Ansible Ansible Ansible Ansible Ansible Ansible 1 Ansible 2 Ansible Ansible ansible 3 playbook playbook ansible-playbook 4 playbook 3 5 playbook role 6 7 ansible-vault ansible-vault 8 role Ansible Galaxy role Ansible Galaxy Ansible 1

6 tboffice futoase 2

7 1 Ansible Ansible Ansible Ansible : Ansible GitHub (GPL v3) Ansible ( ) 300 GitHub 6000 GitHub 3

8 1.1 Ansible Ansible ssh Chef Puppet Ansible ssh ( Python OS ) ssh UNIX OS Ansible ssh Ansible Ansible 1 inventory IP $ ansible all -m command -a "uptime" intenvory uptime playbook inventory 1.1. Ansible 4

9 1.1.3 Ansible Ansible (Idempotency) spam 2 spam Ansible Ansible shell script Ansible script shell script shell script Ansible Python Python 2 inventory playbook YAML 1.1. Ansible 5

10 --- - hosts: all tasks: - name: yum yum: name={{ item }} state=present with_items: - python - ruby - name: foo.sh script: foo.sh - name UTF Ansible Batteries included( : ) htpasswd Google Computing Engine Amazon Route53 nagios ( / ) arista ( ) apache2 / Ansible HTTP Ansible Ansible Ansible Ansible 1.1. Ansible 6

11 Chef Puppet Capistrano Fabric Ansible Ansible 1.2 Ansible Ansible Ansible Ansible 5 Simply Clear ( ) Simply Fast ( ) Simply Complete ( ) Simply Efficient (ssh ) Simply Secure (ssh ) Simply 1.3 Chef Puppet CFEngine Puppet Chef Ansible 1.1: Chef Puppet UI Chef Ruby Puppet DSL Ansible ssh YAML (Ansible Tower) Ansible ssh Chef chef-solo Ansible ssh 1.2. Ansible 7

12 Chef Ansible Ansible dynamic inventory Chef UI Amazon AWS CloudFormation Chef Amazon EC2 Chef Ansible Ansible Shell Script Ruby 1.4 Ansible Better Shell Script Ansible Better Shell Script Chef Puppet Ansible playbook shell script playbook playbook Ansible shell script Ansible Ansible 1.4. Ansible Better Shell Script 8

13 2 Ansible 1. Ansible 2. inventory 3. module Ansible Ansible Ansible Python 2.6 OS Python : Ansible Python3 Ansible Ansible OS Ansible 9

14 ansible ansible ansible-playbook Playbook ansible-vault ansible-galaxy playbook ansible-playbook yum EPEL RPM EPEL $ sudo yum install ansible RPM $ git clone git://github.com/ansible/ansible.git $ cd./ansible $ make rpm $ sudo rpm -Uvh ~/rpmbuild/ansible-*.noarch.rpm rpm-build python2-devel apt PPA $ sudo apt-add-repository ppa:rquillo/ansible $ sudo apt-get update $ sudo apt-get install ansible deb $ make deb pkg FreeBSD $ sudo pkg install ansible

15 Homebrew Mac OS X Homebrew $ brew update $ brew install ansible pip Ansible Python Python pip $ pip install ansible : OS X Mavericks $ sudo CFLAGS=-Qunused-arguments CPPFLAGS=-Qunused-arguments \ pip install ansible Ansible Python # CentOS $ sudo yum install python-simplejson # Debian $ sudo apt-get install python-simplejson # FreeBSD $ sudo pkg install py27-simplejson Ansible raw Ansible $ ansible all -m raw -a yum -y install python-simplejson Ansible Ansible

16 1. inventory 2. playbook task 3. ansible.cfg Ansible Ansible inventory inventory 2.2 inventory inventory ini ( ini ) /etc/ansible/hosts Ansible mail.example.com [web] web01.example.com web02.example.com web03.example.com [db] db01.example.com db02.example.com [webservers] [db] web01 db01 web web01.example.com web02.example.com web03.example.com 3 mail.example.com ansible ( ssh ) $ ansible all -m command -a "uptime" mail.example.com success rc=0 >> 23:51:40 up 33 days, 1:55, 2 users, load average: 1.17, 1.21, 1.20 web01.example.com success rc=0 >> 23:51:41 up 29 days, 12:22, 2 users, load averages: 0.36, 0.28, 0.18 ( ) uptime 2.2. inventory 12

17 db $ ansible db -m command -a "uptime" db01.example.com success rc=0 >> 23:55:11 up 33 days, 1:55, 2 users, load averages: 0.41, 0.30, 0.20 db01.example.com success rc=0 >> 23:55:11 up 29 days, 12:22, 2 users, load averages: 1.11, 1.07, 1.09 db $ ansible web02.example.com -m command -a "uptime" web02.example.com success rc=0 >> 23:58:32 up 29 days, 1:55, 2 users, load averages: 0.13, 0.20, 0.17 : www*.example.com www www[01:50].example.com www01 www50 web:db web db (or ) web!ng web ng (not ) web:&prod web prod (and ) web:!{{excluded}}:&{{required}} web01.example.com ansible_ssh_port=2222 ansible_ssh_host= web ansible_ssh_user ssh ansible_ssh_private_key_file 2.2. inventory 13

18 ansible_connection ssh : Linux Ansible Python /usr/bin/python FreeBSD /usr/local/bin/python ansible_python_interpreter freebsd_host ansible_python_interpreter=/usr/local/bin/python ansible_ssh_port :vars [web] web01.example.com [web:vars] ansible_ssh_port=2222 ansible_ssh_user=admin web children [eggservice:children] eggweb eggdb [eggweb] web01.example.com web02.example.com [eggdb] db01.example.com db02.example.com eggservice eggweb * web01 * web inventory 14

19 eggdb * db01 * db (module) inventory (module) setup setup IP setup inventory $ ansible all -m setup web02.example.com success >> { "ansible_facts": { "ansible_all_ipv4_addresses": [ " " ], "ansible_all_ipv6_addresses": [ "fe80::a00:27ff:fe99:ebc3", ], "ansible_architecture": "x86_64", "ansible_bios_date": "12/01/2006", "ansible_bios_version": "VirtualBox", ansible_all_ipv4_addresses IP inventory module ansible-playbook 2.3. (module) 15

(Microsoft PowerPoint - \201y\214\366\212J\224\305\201zENOG45.pptx)

$(Microsoft PowerPoint - \201y\214\366\212J\224\305\201zENOG45.pptx)$ Ansible を使ったネットワーク運用 ENOG 45 Meeting ( 株 )NS コンピュータサービス江部仁士話の流れ構成管理ツールの選定 Ansible の概要 Ansible インストール ~ 設定 ~ 実の流れ検証構成管理ツールの選定構成管理ツールの選定構成管理ツールとはサーバの管理や設定を動化してくれるツール 1 手順書の作成 2 構成管理ツールへインプット /