ansible角色roles
官方文档：https://docs.ansible.com/ansible/latest/user_guide/playbooks_reuse_roles.html
1 角色目录规划
官方的目录结构，必须这样定义！
1.目录说明:
[root@m01 ~]# cd /etc/ansible/roles/
[root@m01 /etc/ansible/roles]# tree
.
├── nfs #角色名称
│ ├── files #存放需要copy的文件，主要是压缩包
│ ├── handlers #触发任务剧本
│ ├── tasks #具体任务剧本
│ ├── templates #模版文件，主要放服务的配置文件
│ └── vars #存放变量文件
2 使用ansible角色编写rsyncd
1.创建角色目录
cd /etc/ansible/roles/
mkdir -p rsyncd/{files,tasks,handlers,vars,templates}
2.将配置文件拷贝到files目录
[root@m01 /etc/ansible/roles]# cp /server/conf/rsync* rsyncd/files/
[root@m01 /etc/ansible/roles]# ll rsyncd/files/
67961480 -rw-r--r-- 1 root root 300 2020-01-13 19:57:02 rsyncd.conf
67961487 -rw-r--r-- 1 root root 20 2020-01-13 19:57:02 rsync.passwd
3.将主任务文件rsync_server.yaml拷贝到主任务目录tasks并重命名为main.yaml，并修改
[root@m01 /etc/ansible/roles]# cp /server/scripts/rsync_server.yaml rsyncd/tasks/main.yml
[root@m01 /etc/ansible/roles/rsyncd/tasks]# cat main.yml
- name: 01-install rsyncd
yum:
name: rsync
state: latest
- name: 02-copy rsyncd conf and passwd
copy:
src: "{{ item.src }}"
dest: /etc
mode: "{{ item.mode }}"
loop:
- { src: 'rsyncd.conf', mode: '0644' }
- { src: 'rsync.passwd', mode: '0600' }
notify: Restart_Rsyncd
- name: 03-create rsyncd running group www
group:
name: www
gid: 666
- name: 04-add rsyncd running user www
user:
name: www
group: www
shell: /sbin/nologin
create_home: no
- name: 05-create directory /backup /data
file:
path: "{{ item.path }}"
state: directory
owner: "{{ item.owner }}"
group: "{{ item.group }}"
loop:
- { path: '/backup', owner: 'www', group: 'www' }
- { path: '/data', owner: 'root', group: 'root' }
- name: 06-start rsyncd server
service:
name: rsyncd
state: started
enabled: yes
4.将主配置文件中的handlers写入到handlers目录中的main.yml文件中
[root@m01 /etc/ansible/roles/rsyncd/handlers]# cat main.yml
- name: Restart_Rsyncd
service:
name: rsyncd
state: restarted
5.编写启动文件
[root@m01 /etc/ansible/roles]# cat rsyncd.yml
- hosts: backup
roles:
- rsyncd
6.查看最终目录
[root@m01 /etc/ansible/roles]# tree rsyncd
rsyncd
├── files/
│ ├── rsyncd.conf
│ └── rsync.passwd
├── handlers/
│ └── main.yml
├── tasks/
│ └── main.yml
├── templates/
└── vars/
3 使用ansible的jinjia模板编写sshd
01.创建角色目录
cd /etc/ansible/roles/
mkdir -p sshd/{files,tasks,handlers,vars,templates}
02.编写主任务剧本
[root@m01 /etc/ansible/roles]# cat sshd/tasks/main.yml
- name: 01-config sshd
template:
src: sshd_config.j2
dest: /etc/ssh/sshd_config
notify: Restart_SSHD
03.编写jinjia模板
jinjia模板注意事项：
1-模板文件以.j2结尾
2-.j2模板文件要放在templates目录下
3-任务文件里面必须使用template模块指定模板
[root@m01 /etc/ansible/roles]# cat sshd/templates/sshd_config.j2
...
Port {{ ssh_port }}
ListenAddress {{ ansible_facts.eth1.ipv4.address }}
...
04.编写变量
[root@m01 /etc/ansible/roles]# cat sshd/vars/main.yml
ssh_port: 8888
05.编写handlers文件
[root@m01 /etc/ansible/roles]# cat sshd/handlers/main.yml
- name: Restart_SSHD
service:
name: sshd
state: restarted
06.编写主调用文件
[root@m01 /etc/ansible/roles]# cat sshd.yml
- hosts: web
roles:
- sshd
07.查看最终目录
[root@m01 /etc/ansible/roles]# tree sshd
sshd
├── files/
├── handlers/
│ └── main.yml
├── tasks/
│ └── main.yml
├── templates/
│ └── sshd_config.j2
└── vars/
└── main.yml
4 拆分init角色
[root@m01 /etc/ansible/roles]# tree
.
├── auto_deploy.yml
├── init/
│ ├── files/
│ ├── handlers/
│ ├── tasks/
│ │ ├── main.yml
│ ├── templates/
│ └── vars/
├── lsyncd/
│ ├── files/
│ ├── handlers/
│ │ └── main.yml
│ ├── tasks/
│ │ └── main.yml
│ ├── templates/
│ │ ├── lsyncd.conf.j2
│ │ └── rsync.passwd.j2
│ └── vars/
├── nfs/
│ ├── files/
│ ├── handlers/
│ │ └── main.yml
│ ├── tasks/
│ │ └── main.yml
│ ├── templates/
│ │ └── exports.j2
│ └── vars/
├── rpcbind_mounted_for_nfs_client/
│ ├── files/
│ ├── handlers/
│ ├── tasks/
│ │ └── main.yml
│ ├── templates/
│ └── vars/
├── rsyncd/
│ ├── files/
│ ├── handlers/
│ │ └── main.yml
│ ├── tasks/
│ │ └── main.yml
│ ├── templates/
│ │ ├── rsyncd.conf.j2
│ │ └── rsync.passwd.j2
│ └── vars/
└── sshd/
├── files/
├── handlers/
│ └── main.yml
├── tasks/
│ └── main.yml
├── templates/
│ └── sshd_config.j2
└── vars/
└── main.yml
[root@m01 /etc/ansible/roles]# cat auto_deploy.yml
- hosts: web
roles:
- init
- hosts: nfs
roles:
- nfs
- hosts: backup
roles:
- rsyncd
- rpcbind_mounted_for_nfs_client
- hosts: nfs
roles:
- lsyncd