Ansible - simple it automation

1. ANSIBLE - SIMPLE IT AUTOMATION
Larry Nung

2. AGENDA
Introduction
Installation
Prepare SSH environment
Ansible CLI
Inventory
Playbook
Ansible-playbook CLI
Reference
Q & A
2

3. INTRODUCTION
3

4. INTRODUCTION
 Configuration management tool
 Simple
 Powerful
 Agentless
4

5. INSTALLATION
5

6. INSTALLATION
 Ubuntu
 sudo apt-get install software-properties-common
 sudo apt-add-repository ppa:ansible/ansible
 sudo apt-get update
 sudo apt-get install ansible
 Mac
 brew install ansible
 CentOS/RHEL
 yum -y install epel-release
 yum -y --enablerepo=epel-testing install ansible
 Python
 pip install ansible
6

7. PREPARE SSH ENVIRONMENT
7

8. PREPARE SSH ENVIRONMENT
8

9. PREPARE SSH ENVIRONMENT
9

10. ANSIBLE CLI
10

11. ANSIBLE CLI
Usage: ansible <host-pattern> [options]
Options:
-a MODULE_ARGS, --args=MODULE_ARGS
module arguments
-k, --ask-pass ask for SSH password
-K, --ask-sudo-pass ask for sudo password
-B SECONDS, --background=SECONDS
run asynchronously, failing after X seconds
(default=N/A)
-C, --check don't make any changes; instead, try to predict some
of the changes that may occur
-c CONNECTION, --connection=CONNECTION
connection type to use (default=smart)
-f FORKS, --forks=FORKS
specify number of parallel processes to use
(default=5)
-h, --help show this help message and exit
-i INVENTORY, --inventory-file=INVENTORY
specify inventory host file
(default=/etc/ansible/hosts)
11

12. ANSIBLE CLI
-l SUBSET, --limit=SUBSET
further limit selected hosts to an additional pattern
--list-hosts outputs a list of matching hosts; does not execute
anything else
-m MODULE_NAME, --module-name=MODULE_NAME
module name to execute (default=command)
-M MODULE_PATH, --module-path=MODULE_PATH
specify path(s) to module library
(default=/usr/share/ansible)
-o, --one-line condense output
-P POLL_INTERVAL, --poll=POLL_INTERVAL
set the poll interval if using -B (default=15)
--private-key=PRIVATE_KEY_FILE
use this file to authenticate the connection
-s, --sudo run operations with sudo (nopasswd)
-U SUDO_USER, --sudo-user=SUDO_USER
desired sudo user (default=root)
-T TIMEOUT, --timeout=TIMEOUT
override the SSH timeout in seconds (default=10)
-t TREE, --tree=TREE log output to this directory
-u REMOTE_USER, --user=REMOTE_USER
connect as this user (default=vagrant)
-v, --verbose verbose mode (-vvv for more, -vvvv to enable
connection debugging)
--version show program's version number and exit
12

13. ANSIBLE CLI
13

14. ANSIBLE CLI
14

15. INVENTORY
15

16. INVENTORY
16

17. PLAYBOOK
17

18. PLAYBOOK
18

19. ANSIBLE-PLAYBOOK CLI
19

20. ANSIBLE-PLAYBOOK CLI
Usage: ansible-playbook playbook.yml
Options:
-k, --ask-pass ask for SSH password
-K, --ask-sudo-pass ask for sudo password
-C, --check don't make any changes; instead, try to predict some
of the changes that may occur
-c CONNECTION, --connection=CONNECTION
connection type to use (default=smart)
-D, --diff when changing (small) files and templates, show the
differences in those files; works great with --check
-e EXTRA_VARS, --extra-vars=EXTRA_VARS
set additional variables as key=value or YAML/JSON
-f FORKS, --forks=FORKS
specify number of parallel processes to use
(default=5)
-h, --help show this help message and exit
-i INVENTORY, --inventory-file=INVENTORY
specify inventory host file
(default=/etc/ansible/hosts)
-l SUBSET, --limit=SUBSET
further limit selected hosts to an additional pattern
20

21. ANSIBLE-PLAYBOOK CLI
--list-hosts outputs a list of matching hosts; does not execute
anything else
--list-tasks list all tasks that would be executed
-M MODULE_PATH, --module-path=MODULE_PATH
specify path(s) to module library
(default=/usr/share/ansible)
--private-key=PRIVATE_KEY_FILE
use this file to authenticate the connection
--skip-tags=SKIP_TAGS
only run plays and tasks whose tags do not match these
values
--start-at-task=START_AT
start the playbook at the task matching this name
--step one-step-at-a-time: confirm each task before running
-s, --sudo run operations with sudo (nopasswd)
-U SUDO_USER, --sudo-user=SUDO_USER
desired sudo user (default=root)
--syntax-check perform a syntax check on the playbook, but do not
execute it
-t TAGS, --tags=TAGS only run plays and tasks tagged with these values
-T TIMEOUT, --timeout=TIMEOUT
override the SSH timeout in seconds (default=10)
-u REMOTE_USER, --user=REMOTE_USER
connect as this user (default=vagrant)
-v, --verbose verbose mode (-vvv for more, -vvvv to enable
connection debugging)
--version show program's version number and exit
21

22. ANSIBLE-PLAYBOOK CLI
22

23. MODULE
23

24. COMMAND - EXECUTES A COMMAND ON A
REMOTE NODE
24

25. COMMAND - EXECUTES A COMMAND ON A
REMOTE NODE
25

26. COMMAND - EXECUTES A COMMAND ON A
REMOTE NODE
26

27. COMMAND - EXECUTES A COMMAND ON A
REMOTE NODE
27

28. COMMAND - EXECUTES A COMMAND ON A
REMOTE NODE
28

29. SHELL - EXECUTE COMMANDS IN NODES
29

30. SHELL - EXECUTE COMMANDS IN NODES
30

31. SHELL - EXECUTE COMMANDS IN NODES
31

32. SHELL - EXECUTE COMMANDS IN NODES
32

33. SHELL - EXECUTE COMMANDS IN NODES
33

34. APT - MANAGES APT-PACKAGES
34

35. APT - MANAGES APT-PACKAGES
35

36. APT - MANAGES APT-PACKAGES
36

37. APT - MANAGES APT-PACKAGES
37

38. APT - MANAGES APT-PACKAGES
38

39. COPY - COPIES FILES TO REMOTE LOCATIONS
39

40. COPY - COPIES FILES TO REMOTE LOCATIONS
40

41. COPY - COPIES FILES TO REMOTE LOCATIONS
41

42. SETUP - GATHERS FACTS ABOUT REMOTE
HOSTS
42

43. SETUP - GATHERS FACTS ABOUT REMOTE
HOSTS
43

44. REFERENCE
44

45. REFERENCE
 Ansible is Simple IT Automation
 https://www.ansible.com/
 Ansible Documentation — Ansible Documentation
 http://docs.ansible.com/ansible/index.html
 What is Ansible? | Ansible Quick Start Video
 https://www.ansible.com/quick-start-video
45

46. REFERENCE
 Getting Started with Ansible | Ansible.com
 https://www.ansible.com/get-started
 七分鐘掌握 Ansible 核心觀念 (7:15) | Software
Architecture School
 http://school.soft-
arch.net/courses/ansible/lectures/655359
 現代 IT 人一定要知道的 Ansible 自動化組態技巧 ·
GitBook
 https://www.gitbook.com/book/chusiang/automate-with-
ansible/details 46

47. Q&A
47

48. QUESTION & ANSWER
48