root@192 \~# ansible --version
ansible 2.9.11
config file = /etc/ansible/ansible.cfg
configured module search path = '/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'
ansible python module location = /usr/lib/python3.6/site-packages/ansible
executable location = /usr/bin/ansible
python version = 3.6.8 (default, Nov 21 2019, 19:31:34) GCC 8.3.1 20190507 (Red Hat 8.3.1-4)
root@192 \~# vim /etc/hosts
root@192 \~# scp /etc/hosts root@192.168.1.191:/etc/hosts
The authenticity of host '192.168.1.191 (192.168.1.191)' can't be established.
ECDSA key fingerprint is SHA256:ZVd4fwX7zxHrxSVxcJNQiZ0fzmEi1a9a+HIbw4pFZeU.
Are you sure you want to continue connecting (yes/no/fingerprint)? yes
Warning: Permanently added '192.168.1.191' (ECDSA) to the list of known hosts.
root@192.168.1.191's password:
hosts 100% 197 1.4KB/s 00:00
root@192 \~# hostnamectl set-hostname node1
Could not set property: Connection timed out
root@192 \~# hostnamectl set-hostname node1
root@192 \~# su -
Last login: Mon Apr 15 04:32:25 PDT 2024 from 192.168.1.40 on pts/1
root@node1 etc# cd /ansible
-bash: cd: /ansible: No such file or directory
root@node1 etc# cd /etc/ansible
root@node1 ansible# ll
total 24
-rw-r--r--. 1 root root 19985 Jul 21 2020 ansible.cfg
-rw-r--r--. 1 root root 1016 Jul 21 2020 hosts
drwxr-xr-x. 2 root root 6 Jul 21 2020 roles
root@node1 ansible# vim ansible.cfg
root@node1 ansible# ansible node2 -m shell -a "hostnamectl set-hostname node2" -u root -k
SSH password:
WARNING: provided hosts list is empty, only localhost is available. Note that the
implicit localhost does not match 'all'
WARNING: Could not match supplied host pattern, ignoring: node2
^C ERROR: User interrupted execution
root@node1 ansible# ansible node2 -m shell -a "hostnamectl set-hostname node2" -u root -k
SSH password:
WARNING: provided hosts list is empty, only localhost is available. Note that the
implicit localhost does not match 'all'
WARNING: Could not match supplied host pattern, ignoring: node2
root@node1 ansible# vim hosts
root@node1 ansible# ansible node2 -m shell -a "hostnamectl set-hostname node2" -u root -k
SSH password:
node2 | CHANGED | rc=0 >>
root@node1 ansible# ansible node2 -m shell -a 'hostname' -u root -k
SSH password:
node2 | CHANGED | rc=0 >>
node2
root@node1 ansible# ansible node2 -m shell -a "useradd admin" -u root -k
SSH password:
node2 | CHANGED | rc=0 >>
root@node1 ansible# ansible node2 -m shell -a "echo abc123. |passwd --stdin admin" -u root -k
SSH password:
node2 | CHANGED | rc=0 >>
Changing password for user admin.
passwd: all authentication tokens updated successfully.
root@node1 ansible# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:MZuuc5+CUB8q0cLoskqbAjzPVW77mbWEAGF5mSJ2vIA root@node1
The key's randomart image is:
+---RSA 3072----+
| . .o. o |
| E +.=.+ |
| .o+o+ o |
| . +.+..= |
|.. +o+S. |
|oo. o..+o . |
|.++ .o..o. o |
|+ oo ooo =.. |
|+o .o.*o. |
+----SHA256-----+
root@node1 ansible# ssh-copy-id admin@node2
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
admin@node2's password:
Number of key(s) added: 1
Now try logging into the machine, with: "ssh 'admin@node2'"
and check to make sure that only the key(s) you wanted were added.
root@node1 ansible# ansible node2 -m shell -a 'echo admin "ALL=(ALL) NOPASSWD:ALL">>/etc/sudoers.d/admin' -u root -k
-bash: syntax error near unexpected token `('
root@node1 ansible# ansible node2 -m shell -a 'echo admin "ALL=(ALL) NOPASSWD:ALL">>/etc/sudoers.d/admin' -u root -k
SSH password:
node2 | UNREACHABLE! => {
"changed": false,
"msg": "Failed to connect to the host via ssh: root@node2: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).",
"unreachable": true
}
root@node1 ansible# ansible node2 -m shell -a 'echo admin "ALL=(ALL) NOPASSWD:ALL">>/etc/sudoers.d/admin' -u root -k
SSH password:
node2 | CHANGED | rc=0 >>
root@node1 ansible# ansible node2 -m shell -a "ls /root"
node2 | CHANGED | rc=0 >>
anaconda-ks.cfg
Desktop
Documents
Downloads
Music
original-ks.cfg
Pictures
Public
QQ_3.2.7_240401_x86_64_01.rpm
Templates
Videos
root@node1 ansible#
root@node1 ansible#
root@node1 ansible# ll
total 24
-rw-r--r--. 1 root root 20006 Apr 15 04:53 ansible.cfg
-rw-r--r--. 1 root root 1021 Apr 15 04:56 hosts
drwxr-xr-x. 2 root root 6 Jul 21 2020 roles
root@node1 ansible# vim inventory
root@node1 ansible# ssh-copy-id root@192.168.1.191
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.1.191's password:
Number of key(s) added: 1
Now try logging into the machine, with: "ssh 'root@192.168.1.191'"
and check to make sure that only the key(s) you wanted were added.
root@node1 ansible# ansible httpd -m file -a 'path=/etc/yum.repos.d state=absent'
WARNING: Could not match supplied host pattern, ignoring: httpd
WARNING: No hosts matched, nothing to do
root@node1 ansible# ansible node2 -m file -a 'path=/etc/yum.repos.d state=absent'
node2 | CHANGED => {
"ansible_facts": {
"discovered_interpreter_python": "/usr/libexec/platform-python"
},
"changed": true,
"path": "/etc/yum.repos.d",
"state": "absent"
}
root@node1 ansible# vim install.yml
- name: config httpd
hosts: all
tasks:
- name: config repo1
yum_repository:
name: BaseOS
description: BaseOS_repo
baseurl: file:///media/BaseOS
gpgcheck: no
enabled: yes
- name: config repo2
yum_repository:
name: AppStream
description: AppStream_repo
baseurl: file:///media/AppStream
gpgcheck: no
enabled: yes
- name: mount
command: mount /dev/sr0 /media
- name: install httpd
yum:
name: httpd
state: present
- name: index.html
copy:
content: "hello world!"
dest: /var/www/html/index.html
- name: start httpd
service:
name: httpd
state: restarted
enabled: yes
- name: close firewalld
service:
name: firewalld
state: stopped
enabled: no
root@node1 ansible# ansible-playbook install.yml
PLAY config httpd ***********************************************************************************************************************************************************************************************
TASK Gathering Facts ********************************************************************************************************************************************************************************************
ok: node2
TASK config repo1 ***********************************************************************************************************************************************************************************************
ok: node2
TASK config repo2 ***********************************************************************************************************************************************************************************************
ok: node2
TASK mount ******************************************************************************************************************************************************************************************************
WARNING: Consider using the mount module rather than running 'mount'. If you need to use command because mount is insufficient you can add 'warn: false' to this command task or set 'command_warnings=False'
in ansible.cfg to get rid of this message.
changed: node2
TASK install httpd **********************************************************************************************************************************************************************************************
changed: node2
TASK index.html *************************************************************************************************************************************************************************************************
changed: node2
TASK start httpd ************************************************************************************************************************************************************************************************
changed: node2
TASK close firewalld ********************************************************************************************************************************************************************************************
changed: node2
PLAY RECAP ********************************************************************************************************************************************************************************************************
node2 : ok=8 changed=5 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0