vim  XXX.yaml
- name:                      #指定play名称
  hosts:                     #指定主机组
  remote_user:               #执行用户 
  gather_facts: true|false   #是否收集远程主机facts信息
  vars:                      #定义变量
  tasks:                     #定义task任务列表
  - name:                 #定义task任务名称
    模块:                 #定义任务使用的模块和参数
    with_items:           #定义循环列表
    when:                 #定义判断条件（== != >= > <= <），true则执行任务，否则不执行任务
	ignore_errors: true   #忽略任务失败
    notify:               #定义task任务changed状态时触发的任务名
    tags:                 #指定标签，ansible-playbook --tags 仅执行拥有指定 tags 标签的任务（always标签总会执行）
  handlers:                  #定义notify触发的任务列表

（2）核心元素

（3）参数

2.ROLES角色

（1）重构思路

用roles和不用roles的逻辑其实是一样的，要根据服务器的功能，先收集服务器所需要的文件，再进行安装，传输文件，启动服务或重启服务等操作。只是我们这次不必担心命名问题，因为不同的服务或不同功能的服务器所需要的配置文件会被放到不同的目录，不会冲突。

roles这个角色，可以根据同类服务器的功能定义，也可以通过服务去定义，因为我们是一键部署所有服务和项目，也不存在指定部署服务的需求，如果通过服务来定义，也容易出现需要很多when判断的情况，如果用同类功能的服务器定义角色，可能会出现同一条命令需要反复编写的情况，自行选择，我采取根据同类功能服务器去定义我们的roles角色。

（2）目录结构

（3）目录说明

3.关系

playbook是是由一系列的play组成，每个play由一个或者多个task组成，一个task一般是一个ansible module，三者的关系示意图如下：

4.Roles模块搭建LNMP架构

（1）规划

通过ansible的roles角色去配置lnmp环境，nginx、php、mysql都使用源码编译安装

（2）架构

（3）部署Nginx角色

创建nginx角色所需要的工作目录:

bash 复制代码

mkdir -p /etc/ansible/playbook/roles/nginx
mkdir -p /etc/ansible/playbook/roles/nginx/defaults
mkdir -p /etc/ansible/playbook/roles/nginx/files
mkdir -p /etc/ansible/playbook/roles/nginx/handlers
mkdir -p /etc/ansible/playbook/roles/nginx/meta
mkdir -p /etc/ansible/playbook/roles/nginx/tasks
mkdir -p /etc/ansible/playbook/roles/nginx/templates
mkdir -p /etc/ansible/playbook/roles/nginx/vars

制作/etc/ansible/playbook/roles/nginx/files/index.php网页目录:

bash 复制代码

vim /etc/ansible/playbook/roles/nginx/files/index.php

<?php
phpinfo();
?>

制作/etc/ansible/playbook/roles/nginx/files/nginx.repo源:

bash 复制代码

vim /etc/ansible/playbook/roles/nginx/files/nginx.repo
# nginx.repo

[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=1
enabled=1
gpgkey=https://nginx.org/keys/nginx_signing.key
module_hotfixes=true

制作/etc/ansible/playbook/roles/nginx/handlers/main.yml文件，加载nginx的配置模板文件:

bash 复制代码

vim /etc/ansible/playbook/roles/nginx/handlers/main.yml
- name: reload nginx
  service: name={{service}}  state=reloaded

制作/etc/ansible/playbook/roles/nginx/tasks/init.yml文件:

bash 复制代码

vim /etc/ansible/playbook/roles/nginx/tasks/init.yml
- name: disable firewalld
  service: name=firewalld  state=stopped  enabled=no
  ignore_errors: True

- name: disable selinux
  shell: "/usr/sbin/setenforce 0"
  ignore_errors: true

制作/etc/ansible/playbook/roles/nginx/tasks/main.yml文件:

bash 复制代码

- include: "init.yml"

- name: copy nginx yum repo file
  copy: src=nginx.repo  dest=/etc/yum.repos.d/

- name: install nginx
  yum: name={{pkg}}  state=latest

- name: copy index.php
  copy: src=index.php  dest={{root_dir}}

- name: copy nginx template configuration file
  template: src=default.conf.j2  dest=/etc/nginx/conf.d/default.conf
  notify: reload nginx

- name: start nginx
  service: name={{service}} state=started enabled=yes

制作/etc/ansible/playbook/roles/nginx/templates/default.conf.j2模板文:

bash 复制代码

vim /etc/ansible/playbook/roles/nginx/templates/default.conf.j2 

---修改2到8行-----------
       listen       {{http_port}};
       server_name  {{http_hostname}};
 
       #access_log  /var/log/nginx/host.access.log  main;
 
     location / {
         root   {{root_dir}};

---修改29到36行-----------
    location ~ \.php$ {
         root           {{root_dir}};
         fastcgi_pass   {{http_remote}};
         fastcgi_index  index.php;
         fastcgi_param  SCRIPT_FILENAME  {{root_dir}}$fastcgi_script_name;
        include        fastcgi_params;
     }

制作/etc/ansible/playbook/roles/nginx/vars/main.yml文件:

bash 复制代码

http_port: 192.168.204.69:80
http_hostname: www.david.com
root_dir: /usr/share/nginx/html
http_remote: 192.168.204.100:9000
pkg: nginx
service: nginx

(4) 部署PHP角色

创建php角色所需要的工作目录:

bash 复制代码

mkdir -p /etc/ansible/playbook/roles/php
mkdir -p /etc/ansible/playbook/roles/php/defaults
mkdir -p /etc/ansible/playbook/roles/php/files
mkdir -p /etc/ansible/playbook/roles/php/handlers
mkdir -p /etc/ansible/playbook/roles/php/meta
mkdir -p /etc/ansible/playbook/roles/php/tasks
mkdir -p /etc/ansible/playbook/roles/php/templates
mkdir -p /etc/ansible/playbook/roles/php/vars

制作/etc/ansible/playbook/roles/php/files/index.php的网页文件:

bash 复制代码

vim /etc/ansible/playbook/roles/php/files/index.php 

<?php
phpinfo();
?>

制作/etc/ansible/playbook/roles/php/handlers/main.yml文件:

bash 复制代码

vim /etc/ansible/playbook/roles/php/handlers/main.yml 

- name: reload php
  service: name={{service}} state=reloaded

制作/etc/ansible/playbook/roles/php/tasks/main.yml文件:

bash 复制代码

/etc/ansible/playbook/roles/php/tasks]# vim main.yml 

- name: install yum repo
  shell: "rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm && rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm"
  ignore_errors: True

- name: install php
  command: 'yum install -y php72w php72w-cli php72w-common php72w-devel php72w-embedded php72w-gd php72w-mbstring php72w-pdo php72w-xml p    hp72w-fpm php72w-mysqlnd php72w-opcache --skip-broken'

- name: create php user
  user: name={{user_name}}

- name: crate web root dir
  file: name={{root_dir}} state=directory

- name: copy index.php
  copy: src=index.php dest={{root_dir}}

- name: modify php configuration file
  replace: path=/etc/php.ini  regexp=";date.timezone ="  replace="date.timezone = Asia/Shanghai"
  notify: reload php

- name: modify username and groupname in www.conf
  replace: path=/etc/php-fpm.d/www.conf  regexp="apache"  replace="{{user_name}}"
    notify: reload php

- name: modify listen addr in www.conf
  replace: path=/etc/php-fpm.d/www.conf  regexp="127.0.0.1:9000"  replace="{{http_port}}"
  notify: reload php

- name: modify allowed client in www.conf
  replace: path=/etc/php-fpm.d/www.conf  regexp="127.0.0.1"  replace="{{remote_addr}}"
  notify: reload php

- name: start php
  service: name={{service}} state=started enabled=yes

制作/etc/ansible/playbook/roles/php/vars/main.yml文件:

bash 复制代码

vim /etc/ansible/playbook/roles/php/vars/main.yml 

timezone: Asia/Shanghai
user_name: php
http_port: 192.168.204.100:9000
remote_addr: 192.168.204.69
root_dir: /usr/share/nginx/html
service: php-fpm

(5) 部署MySQL角色

创建mysql角色所需要的工作目录:

java 复制代码

mkdir -p /etc/ansible/playbook/roles/mysql
mkdir -p /etc/ansible/playbook/roles/mysql/defaults
mkdir -p /etc/ansible/playbook/roles/mysql/files
mkdir -p /etc/ansible/playbook/roles/mysql/handlers
mkdir -p /etc/ansible/playbook/roles/mysql/meta
mkdir -p /etc/ansible/playbook/roles/mysql/tasks
mkdir -p /etc/ansible/playbook/roles/mysql/templates
mkdir -p /etc/ansible/playbook/roles/mysql/vars

制作/etc/ansible/playbook/roles/mysql/handlers/main.yml文件:

bash 复制代码

vim /etc/ansible/playbook/roles/mysql/handlers/main.yml 

- name: reload mysql
  service: name={{service}} state=reloaded

制作/etc/ansible/playbook/roles/mysql/tasks/main.yml文件:

bash 复制代码

vim /etc/ansible/playbook/roles/mysql/tasks/main.yml 

- name: remove mariadb
  shell: yum remove mariadb* -y
  ignore_errors: True

- name: install yum repo
  shell: "wget https://repo.mysql.com/mysql57-community-release-el7-11.noarch.rpm --force --nodeps && rpm -ivh mysql57-commu    nity-release-el7-11.noarch.rpm --force --nodeps"
  ignore_errors: True

- name: modify gpgcheck
  replace: path=/etc/yum.repos.d/mysql-community.repo  regexp="gpgcheck=1"  replace="gpgcheck=0"

- name: install mysql
  yum: name=mysql-server state=latest

- name: start mysql
  service: name={{service}} state=started enabled=yes

- name: make passwd.sh
  script: /etc/ansible/playbook/roles/mysql/files/passwd.sh

制作/etc/ansible/playbook/roles/mysql/vars/main.yml文件:

bash 复制代码

vim /etc/ansible/playbook/roles/mysql/vars/main.yml 

service: mysqld.service

(5)启动安装分布式LNMP

bash 复制代码

vim /etc/ansible/playbook/lnmp.yml 

- name: nginx play
  hosts: webservers
  remote_user: root
  roles:
  - nginx

- name: php play
  hosts: phpservers
  remote_user: root
  roles:
  - php


- name: mysql play
  hosts: mysqlservers
  remote_user: root
  roles:
  - mysql

二、实验

1.Roles模块搭建LNMP架构

（1）环境

表1 主机

|-------|-----------------|---------|
| 主控端 | 192.168.204.199 | ansible |
| 受控端-1 | 192.168.204.69 | nginx |
| 受控端-2 | 192.168.204.186 | mysql |
| 受控端-3 | 192.168.204.100 | php |

(2) 配置主机