Ansible Playbooks的简单使用——搭建httpd服务、模板的使用、变量使用

淡淡的烟草味﹌ 2022-10-02 14:54 152阅读 0赞

本篇博客环境基于ansible已搭建完毕：[自动化运维工具Ansible的搭建][Ansible]

### 一、设置在.yml文件中Tab键为两个空格 ###

这是.yml文件的格式要求

[devops@ansible1 ~]$ vim .vimrc
    ===============================================
    autocmd filetype yaml setlocal ai ts=2 sw=2 et

### 二、建立playbook.yml文件，发布剧本 ###

#### 1、编辑playbook.yml文件 ####

[devops@ansible1 ansible]$ vim playbook.yml
    ============================================
    ---
    # deploy apache
    #哪些主机
    - hosts: webservers
    #任务
      tasks:
      #下载httpd服务
        - name: install httpd
          yum:
            name: httpd
            state: latest
        #启动httpd服务 
        - name: start httpd
          service:
            name: httpd
            state: started

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70]  
查看剧本hosts主机列表

[devops@ansible1 ansible]$ ansible-playbook playbook.yml --list-hosts

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 1]  
查看剧本任务列表：

[devops@ansible1 ansible]$ ansible-playbook playbook.yml --list-tasks

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 2]

#### 2、发布剧本文件 ####

#对剧本playbook进行语法检测
    [devops@ansible1 ansible]$ ansible-playbook playbook.yml --syntax-check
    #执行剧本
    [devops@ansible1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 3]

#### 3、测试 ####

我们编辑剧本，使访问到的内容指定下来

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 4]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 5]  
![在这里插入图片描述][20190621220825871.png]  
发布

[devops@ansible1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 6]  
测试

[devops@ansible1 ansible]$ curl ansible2
    =========================================
    [devops@ansible1 ansible]$ curl ansible3

![在这里插入图片描述][20190621220936224.png]

### 三、添加任务 ###

#### 1、编写playbook.yml文件 ####

[devops@ansible1 ansible]$ vim playbook.yml
    ===========================================
    ---
    # deploy apache
    - hosts: webservers
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: latest
    
        - name: create index.html
          copy:
            content: "www.taylorswift.com\n"
            dest: /var/www/html/index.html
    
        - name: configure httpd
          copy:
            src: files/httpd.conf							#将当前所在目录下的files目录中的httpd.conf文件拷贝到目标主机的指定目录中
            dest: /etc/httpd/conf/httpd.conf
            owner: root
            group: root
            mode: 644
    
        - name: start httpd
          service:
            name: httpd
            state: started

#### 2、建立files目录及相关文件 ####

[devops@ansible1 ansible]$ mkdir files
    [devops@ansible1 ansible]$ cd files/
    [devops@ansible1 files]$ scp server3:/etc/httpd/conf/httpd.conf .
    ssh: Could not resolve hostname server3: Name or service not known
    [devops@ansible1 files]$ scp ansible3:/etc/httpd/conf/httpd.conf .
    httpd.conf                                  100%   11KB  11.5KB/s   00:00    
    [devops@ansible1 files]$ ls
    httpd.conf
    [devops@ansible1 files]$ cd ..
    [devops@ansible1 ansible]$ ls
    ansible.cfg  files  inventory  playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 7]

#### 3、语法检测、发布 ####

[devops@ansible1 ansible]$ ansible-playbook playbook.yml --syntax-check
    [devops@ansible1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 8]  
![在这里插入图片描述][20190621221556615.png]  
我们可以采用文件的md5码来判断是否是同样的内容：

[devops@ansible1 ansible]$ md5sum files/httpd.conf

*  ansible1  
    ![在这里插入图片描述][20190621221744760.png]
 *  ansible2  
    ![在这里插入图片描述][201906212218092.png]
 *  ansible3  
    ![在这里插入图片描述][20190621221825888.png]  
    设定开机自启动

[devops@ansible1 ansible]$ vim playbook.yml
    ==============================================
    ---
    # deploy apache
    - hosts: webservers
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: latest
    
        - name: create index.html
          copy:
            content: "www.taylorswift.com\n"
            dest: /var/www/html/index.html
    
        - name: configure httpd
          copy:
            src: files/httpd.conf
            dest: /etc/httpd/conf/httpd.conf
            owner: root
            group: root
            mode: 644
    
        - name: start httpd
          service:
            name: httpd
            state: started
            enabled: true

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 9]  
语法检查，运行

[devops@ansible1 ansible]$ ansible-playbook playbook.yml --syntax-check
    [devops@ansible1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 10]  
![在这里插入图片描述][20190621222143204.png]  
![在这里插入图片描述][20190621222225691.png]  
![在这里插入图片描述][20190621222232799.png]

### 四、编写触发器，实现文件更改则重启服务，不更改则不做操作 ###

#### 1、编写剧本playbook ####

[devops@ansible1 ansible]$ vim playbook.yml
    ============================================
    ---
    # deploy apache
    - hosts: webservers
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: latest
    
        - name: create index.html
          copy:
            content: "www.taylorswift.com\n"
            dest: /var/www/html/index.html
    
        - name: configure httpd
          copy:
            src: files/httpd.conf
            dest: /etc/httpd/conf/httpd.conf
            owner: root
            group: root
            mode: 644
          notify: restart httpd
    
        - name: start httpd
          service:
            name: httpd
            state: started
            enabled: true
    
      handlers:
        - name: restart httpd
          service:
            name: httpd
            state: restarted

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 11]

#### 2、更改files目录下的httpd.conf文件 ####

[devops@ansible1 ansible]$ vim files/httpd.conf
    =================================================
     42 Listen 8080

![在这里插入图片描述][20190621222638754.png]

#### 3、测试发布playbooks文件，查看更改是否生效 ####

[devops@ansible1 ansible]$ ansible-playbook playbook.yml --syntax-check
    [devops@ansible1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 12]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 13]  
查看是否生效

[root@ansible2 ~]# netstat -antlp
    ===================================
    [root@ansible3 ~]# netstat -antlp

*  ansible2  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 14]
 *  ansible3  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 15]  
    端口更改成功，记住实验后改过来

### 五、实现防火墙配置（生产环境中） ###

#### 1、编写playbook.yml文件 ####

[devops@ansible1 ansible]$ vim playbook.yml
    ============================================
    ---
    # deploy apache
    - hosts: webservers 
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: latest
    
        - name: create index.html
          copy:
            content: "www.taylorswift.com\n"
            dest: /var/www/html/index.html
    
        - name: configure httpd
          copy:
            src: files/httpd.conf
            dest: /etc/httpd/conf/httpd.conf
            owner: root
            group: root
            mode: 644
          notify: restart httpd
    
        - name: start httpd
          service:
            name: httpd
            state: started
            enabled: true
    
        - name: start firewalld
          service:
            name: firewalld
            state: started
            enabled: true
    
        - name: configure firewalld
          firewalld:
            service: http
            state: enabled
            permanent: yes
            immediate: yes
    
      handlers:
        - name: restart httpd
          service:
            name: httpd
            state: restarted

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 16]

#### 2、检测剧本是否语法正确，推送 ####

[devops@ansible1 ansible]$ ansible-playbook playbook.yml --syntax-check
    [devops@ansible1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 17]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 18]

#### 3、查看server2是否防火墙开启 ####

[root@ansible2 ~]# systemctl status firewalld.service
    [root@ansible2 ~]# firewall-cmd --list-all

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 19]  
防火墙已经开启，并且http已经加入防火墙的白名单中。

### 六、使用变量完成动态http服务部署 ###

#### 1、系统变量的两种表示方法 ####

（1）表示方法

[devops@ansible1 ansible]$ vim playbook.yml
    ============================================
    更改如下配置：
        - name: create index.html
          copy:
            content: "{ { ansible_facts['hostname'] }}\n"
            dest: /var/www/html/index.html

![在这里插入图片描述][20190621224403934.png]  
发布

[devops@ansible1 ansible]$ ansible-playbook playbook.yml --syntax-check
    [devops@ansible1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 20]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 21]  
测试：  
![在这里插入图片描述][20190621224726913.png]  
（2）表示方法

[devops@ansible1 ansible]$ vim playbook.yml
    ============================================
        - name: create index.html
          copy:
            content: "{ { ansible_facts.hostname }}\n"
            dest: /var/www/html/index.html

发布：

[devops@ansible1 ansible]$ ansible-playbook playbook.yml --syntax-check
    [devops@ansible1 ansible]$ ansible-playbook playbook.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 22]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 23]  
检测：  
![在这里插入图片描述][20190621225105205.png]  
查看本机系统变量

[devops@ansible1 ansible]$ ansible test -m setup| less

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 24]  
小练习：将发布内容改为 主机名 IP

[devops@ansible1 ansible]$ ansible test -m setup -a 'filter="*ipv4*"'
    ansible2 | SUCCESS => { 
        "ansible_facts": { 
            "ansible_all_ipv4_addresses": [
                "172.25.70.2"
            ], 
            "ansible_default_ipv4": { }
        }, 
        "changed": false
    }

![在这里插入图片描述][20190807105756998.png]

#### 2、单独发布模板中的一个任务 ####

[devops@ansible1 ansible]$ vim playbook.yml

- name: create index.html
          copy:
            content: "{ { ansible_facts.hostname }} { { ansible_facts['all_ipv4_addresses'] }} \n"
            dest: /var/www/html/index.html
          tags: one

![在这里插入图片描述][20190807110052996.png]  
发布时加上-t参数  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 25]

#### 3、使用template模块，编写带有变量的http配置文件 ####

[devops@ansible1 ansible]$ vim playbook.yml

---
    # deploy apache
    - hosts: webservers
      vars:
        http_port: 80
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: latest
    
        - name: create index.html
          copy:
            content: "{ { ansible_facts.hostname }} { { ansible_facts['all_ipv4_addresses'] }} \n"
            dest: /var/www/html/index.html
          tags: one
    
        - name: configure httpd
          template:
            src: files/httpd.conf.j2
            dest: /etc/httpd/conf/httpd.conf
            owner: root
            group: root
            mode: 644
          notify: restart httpd
    
        - name: start httpd
          service:
            name: httpd
            state: started
            enabled: true
    
        - name: start firewalld
          service:
            name: firewalld
            state: started
            enabled: true
    
        - name: configure firewalld
          firewalld:
            service: http
            state: enabled
            permanent: yes
            immediate: yes
    
      handlers:
        - name: restart httpd
          service:
            name: httpd
            state: restarted

将子目录下files/httpd.conf重命名为httpd.conf.j2

[devops@ansible1 ansible]$ mv files/httpd.conf files/httpd.conf.j2

编辑httpd.conf.j2文件：

[devops@ansible1 ansible]$ vim files/httpd.conf.j2
    ==================================================
    42 Listen { {  http_port }}

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 26]

#### 4、编写yml文件，实现读取并存储系统信息 ####

[devops@ansible1 ansible]$ mkdir templates
    [devops@ansible1 ansible]$ vim hostinfo.yml
    ===========================================
    ---
    - host: all
      task:
        - name: create infofile
          template:
            src:  templates/info.j2
             dest:  /mnt/hostinfo
    ===============================================
    主机名：{ {  ansible_facts.hostname }}
    主机IP地址：{ {  ansible_facts['all_ipv4_addresses'] }}
    根分区大小：{ {  ansible_facts['devices']['dm-0']['size'] }}
    系统内核：{ {  ansible_facts['distribution_version'] }}

语法检测及推送：

[devops@ansible1 ansible]$ vim hostinfo.yml 
    [devops@ansible1 ansible]$ ansible-playbook hostinfo.yml --syntax-check
    
    playbook: hostinfo.yml
    [devops@ansible1 ansible]$ ansible-playbook hostinfo.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 27]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 28]

#### 5、我们也可以实现通过各种变量，配置不同的主机配置不同的服务： ####

示例：

[devops@ansible1 ansible]$ vim install.yml
    ===========================================
    ---
    - hosts: all
      tasks:
        - name: install httpd
          yum:
            name: httpd
            state: present
          when: ansible_facts.hostname == 'ansible2'
    
        - name: install mariadb
          yum:
            name: mariadb
            state: present
          when: ansible_facts.hostname == 'ansible3'

语法检测，推送：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 29]  
也可以使用类似python中列表的方式，指定下载服务：

[devops@ansible1 ansible]$ vim install.yml
    ==============================================
    ---
    - hosts: all
      tasks:
        - name: install httpd
          yum:
            name: '{ { item }}'
            state: present
          when: ansible_facts.hostname == 'ansible2'
          loop:
            - httpd
            - mariadb
            - php
            - php-mysql
    
        - name: install mariadb
          yum:
            name: mariadb
            state: present
          when: ansible_facts.hostname == 'ansible3'

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 30]

#### 6、使用ansible快速布置每一台主机的解析 ####

[devops@ansible1 ansible]$ vim hostinfo.yml
    ============================================
    ---
    - hosts: all
      tasks:
        - name: create infofile
          template:
            src:  templates/info.j2
            dest:  /mnt/hostinfo
    
        - name: create hosts
          template:
            src: templates/host.j2
            dest: /etc/hosts
            owner: root
            group: root
            mode: 644

[devops@ansible1 ansible]$ vim templates/host.j2
    =================================================
    127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
    ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
    172.25.254.250  content.example.com
    { % for host in groups['webservers'] %}
    { {  hostvars[host]['ansible_facts']['eth0']['ipv4']['address'] }}        { {  hostvars[host]['ansible_facts']['hostname'] }}
    { % endfor %}

[devops@ansible1 ansible]$ vim inventory
    ==========================================
    [test]
    ansible2
    ansible1
    [db]
    ansible3
    
    [webservers:children]
    test
    db

[devops@ansible1 ansible]$ ssh-copy-id ansible1

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 31]  
![在这里插入图片描述][20190808132604362.png]  
![在这里插入图片描述][20190808132613222.png]

#### 7、批量添加用户 ####

[devops@ansible1 ansible]$ vim adduser.yml
    ===========================================
    ---
    - hosts: all
      tasks:
        - name: create users
          user:
            name: "{ { item }}"
            state: present
            password: redhat
          loop:
            - user1
            - user2
            - user3
            - user4

推送：

[devops@ansible1 ansible]$ ansible-playbook adduser.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 32]  
![在这里插入图片描述][20190808153733508.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 33]  
我们发现这样添加用户密码是可见的，非常不安全：

[devops@ansible1 ansible]$ pwd
    /home/devops/ansible
    [devops@ansible1 ansible]$ mkdir vars
    [devops@ansible1 ansible]$ vim vars/userllist.yml
    [devops@ansible1 ansible]$ ansible-vault encrypt vars/userllist.yml 
    New Vault password: 
    Confirm New Vault password: 
    Encryption successful

加密  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 34]  
加密后没有密码，会显示加密字符

[devops@ansible1 ansible]$ ansible-vault view vars/userllist.yml 
    Vault password:

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 35]  
推送：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 36]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 37]  
我们发现密码这里在系统上是明文的，这是不合情理的

---
    - hosts: all
      vars_files:
        - vars/userlist.yml
      tasks:
        - name: create users
          user:
            name: "{ { item.user }}"
            state: present
            password: "{ { item.pass | password_hash('sha512','mysecretsalt') }}"
          loop: "{ { userlist }}"

推送  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 38]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 39]  
如果我们对两个文件都加密了，那么一定要密码相同，因为推送时只会输入一次密码：

[devops@ansible1 ansible]$ ansible-vault encrypt adduser.yml
    New Vault password: 
    Confirm New Vault password: 
    Encryption successful
    [devops@ansible1 ansible]$ cat adduser.yml 
    $ANSIBLE_VAULT;1.1;AES256
    37316265646263373061646630643330613961663262323866353462643532333265663165376365
    6463383537336130623164303232626662643738306563650a636431666265316162363533303766
    30326363346363656238666261323864366364306366616233633437653137633437646639623565
    6161326633616132370a383330383231333435633932626165346561393432333737653832356263
    36666137306634316430646532383731303035323139353837666334346363316266653962313465
    65663532643439306565353230373862626666383537646339613462333337613230363138353161
    65353065353562356332643038373933386266313335643939353062656331646638383262663633
    66323739626537663532326664613432653034383537373763383030396139323965303961656632
    34643239646563373531613635623437653831396436363466633335363035656163356363366463
    62346462313865303566323134643936343061376163356263393135333964653934326261633635
    34353465613434653631396230643732333437623263333964343165653361316433393030373937
    65366461373263626565333166316331313462616533383033616336366435373633306263323536
    38643061393136636330346661363132353461323139343131656634306264333763636364613931
    32396635613439663564326132656333656330613434363233626537623037323161656363383361
    66396430323138353833626230323936656563373532306634376139373961643434313134396261
    61363665303036383433653866383766356335303663323364373061356266656138353035313439
    31353235633631353331353636623632306530323839353337353434303737373339

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 40]  
![在这里插入图片描述][20190808161319543.png]  
这里发现解析文件的权限有点问题

[devops@ansible1 ansible]$ vim hostinfo.yml
    ===========================================
    ---
    - hosts: all
      tasks:
        - name: create infofile
          template:
            src:  templates/info.j2
            dest:  /mnt/hostinfo
    
        - name: create hosts
          template:
            src: templates/host.j2
            dest: /etc/hosts
            owner: root
            group: root
            mode: 0644

推送

[devops@ansible1 ansible]$ ansible-playbook hostinfo.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 41]  
![在这里插入图片描述][20190808161822706.png]

[Ansible]: https://blog.csdn.net/qq_43570369/article/details/93215452
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70]: /images/20220109/678b2ba7bf8b46a28c961e4cf18c953a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 1]: /images/20220109/58bcbed5ded04b46857f254ed622c30a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 2]: /images/20220109/8bee1d9395054c499d4429978fb94f0b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 3]: /images/20220109/9bf1d02b75554b578dacdbb29e31ef74.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 4]: /images/20220109/57fdb00c00ec404291048221965d2d2d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 5]: /images/20220109/05516ae4811143d2bb16784183b5fe0d.png
[20190621220825871.png]: /images/20220109/01c8915f7cc34d1d917e392ba420af57.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 6]: /images/20220109/d4628dd72bc3450897bf98b663e0e4fc.png
[20190621220936224.png]: /images/20220109/0cdd830bbfe743acb3f3334dbc93a433.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 7]: /images/20220109/1ebad480e8a34d8a8b150dcf8c04f258.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 8]: /images/20220109/095b12d9392c4e5996f6388c63d2d433.png
[20190621221556615.png]: /images/20220109/28b4bed069a44e7fbd6fa4b650ca8842.png
[20190621221744760.png]: /images/20220109/709356b64c9741da84d7ad8fd901171e.png
[201906212218092.png]: /images/20220109/df8d333906674049b990edc5bd19bb35.png
[20190621221825888.png]: /images/20220109/636b058cb52c4926a2bb474f40b10a87.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 9]: /images/20220109/359515a28b4b4f088ee89fe0b965678c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 10]: /images/20220109/3768b8aaea7047c9937c4e5f76a4d1b2.png
[20190621222143204.png]: /images/20220109/e2bac51d4b7646418dc76468da959a5e.png
[20190621222225691.png]: /images/20220109/963384d7a0d04df7a9342d1b9cb7bbd3.png
[20190621222232799.png]: /images/20220109/d614c4b2d4fb48ac87dbfbad9b1124de.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 11]: /images/20220109/44d19d8c05214d9caaff460a70c28226.png
[20190621222638754.png]: /images/20220109/c47e0b5b45e64b3c938ff13bd43e77f8.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 12]: /images/20220109/263171e9053542efb3ea763cfe9d3374.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 13]: /images/20220109/c9ff1aa7c8814d7cb5f396286f52428f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 14]: /images/20220109/898b255044db400d88ff0b006be9cf1a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 15]: /images/20220109/d533953ae43341de8aa746553451af45.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 16]: /images/20220109/47feffd35e104743be4978eefbd8a4d9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 17]: /images/20220109/62bb3682ea2c438887e254e789af8945.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 18]: /images/20220109/662dbdf703024df088278f137375f445.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 19]: /images/20220109/880f43cd32724276b3afdb06793af7d5.png
[20190621224403934.png]: /images/20220109/74a5f721a6e9469d80556fffc11fd14d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 20]: /images/20220109/a507f898e55a475c9de769ec39e5a386.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 21]: /images/20220109/d459aa962a2a4de8aae90791107f9a28.png
[20190621224726913.png]: /images/20220109/5780654fd0b3408e92ea6daf070cf32d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 22]: /images/20220109/de8b1816326c4a78b0f22b6ef2588037.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 23]: /images/20220109/81b3bb46845f4f95868a0bf6841349b6.png
[20190621225105205.png]: /images/20220109/9655ee801cf84e3c8d4fc4d292b9605c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 24]: /images/20220109/033e65f6309a4dd3907f0f560bbd3f13.png
[20190807105756998.png]: /images/20220109/1469925ba442479d8e49716df8ada61a.png
[20190807110052996.png]: /images/20220109/0592ee3ddfa644558bb2eb67b9fb8a6d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 25]: /images/20220109/3ce1ef7ffb44465b888817cfcea352b4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 26]: /images/20220109/8f948aff887846188004f1feff8a1134.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 27]: /images/20220109/87f1fc2a81ce44b1ac783110a6a47bd4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 28]: /images/20220109/bb3e75bf2a2042ed863e0c2e1d33faef.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 29]: /images/20220109/2c5bdfbeaddc49049f62cb32a7186407.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 30]: /images/20220109/3f1eece275664c708326175d89aec911.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 31]: /images/20220109/410cb444fa124477bb70f321254f6c7d.png
[20190808132604362.png]: /images/20220109/26e6e4b2b7c54f1c9d458676b2d10abd.png
[20190808132613222.png]: /images/20220109/e364d259a1dd40ebad95a60ec35079bc.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 32]: /images/20220109/85bd6295cd59419bb47754f836863cd0.png
[20190808153733508.png]: /images/20220109/6cbc666c72494c56b78cc1161ffe0ca4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 33]: /images/20220109/a5f3823017f14940989ae0494f453850.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 34]: /images/20220109/387b447155f54f1682d84c8a8dd858a8.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 35]: /images/20220109/4356580fab7c488b82227f02b0f22f75.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 36]: /images/20220109/eb00dc56f8994f37aa60e46648835314.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 37]: /images/20220109/293757db53ae4dd4a3aa895d536cd4aa.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 38]: /images/20220109/1ead0bb7b31844ee8ca59db72bb9e8af.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 39]: /images/20220109/5922d24015ae4193ae72ffcfb99e15d5.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 40]: /images/20220109/0d457bc39d674fb6b9245cc386dfdae3.png
[20190808161319543.png]: /images/20220109/55f307cdae1947de92c28f4dd2dcfc41.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNTcwMzY5_size_16_color_FFFFFF_t_70 41]: /images/20220109/bba59db91e9c441796dbb915d2d83136.png
[20190808161822706.png]: /images/20220109/2a44af0594d440e397ceb793531d288f.png