CICD（二） Ansible

Ansible

Ansible簡介

• Ansible是一款開源部署工具
• 基於Python開發
• 特點： SSH協議；全平臺；無需編譯；模塊化部署管理
• 作用： 推送Plakbook進行遠程節點的快速部署

Ansible與Chef，Saltstack的不同

Chef

• Ruby語言編寫
• CS架構
• 配置需要Git依賴
• Rrcipe腳本書寫規範，需要編程經驗

Saltstack

• Python語言編寫
• CS架構
• 模塊化配置管理
• Yaml腳本書寫規範
• 適合大規模集羣部署

Ansible

• 基於Python
  • 無Client
  • 模塊化管理
  • Playbook腳本編寫規範
  • 易上手
  • 適合中小規模部署

Ansible的優勢和應用場景

• 輕量級無客戶端（Agentless）
• 開源免費，學習成本低，快速上手
• 使用playbook作爲核心配置架構，統一的腳本格式批量化部署
• 完善的模塊化拓展，支持目前主流的開發場景
• 強大的穩定性和兼容性
• 活躍的社區問題討論與技術支持

Ansible的安裝與配置

• 安裝Python3.6,Virtualenv，Ansible2.5

[root@centos7-node3 ~]# cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
[root@centos7-node3 ~]# yum -y install python36 python36-devel git nss curl curl-devel
[root@centos7-node3 ~]# pip3 install virtualenv
[root@centos7-node3 ~]# useradd deploy
[root@centos7-node3 ~]# su - deploy
[deploy@centos7-node3 ~]$ virtualenv -p /usr/bin/python3.6 .py3-a2.5-env
[deploy@centos7-node3 ~]$ source .py3-a2.5-env/bin/activate     #激活環境
(.py3-a2.5-env) [deploy@centos7-node3 ~]$ pip install paramiko PyYAML jinja2
[deploy@centos7-node3 ~]$ git clone https://github.com/ansible/ansible.git
(.py3-a2.5-env) [deploy@centos7-node3 ~]$ mv ansible .py3-a2.5-env/
(.py3-a2.5-env) [deploy@centos7-node3 ~]$ cd .py3-a2.5-env/ansible/
(.py3-a2.5-env) [deploy@centos7-node3 ansible]$ git checkout stable-2.5
(.py3-a2.5-env) [deploy@centos7-node3 ansible]$ source /home/deploy/.py3-a2.5-env/ansible/hacking/env-setup -q   #加載環境
(.py3-a2.5-env) [deploy@centos7-node3 ansible]$ ansible --version    #安裝完成

實戰

• SSH到客戶端的免密認證

(.py3-a2.5-env) [deploy@centos7-node3 ~]$ ssh-keygen -t rsa
(.py3-a2.5-env) [deploy@centos7-node3 ~]$ ssh-copy-id -i /home/deploy/.ssh/id_rsa.pub [email protected]

• 編寫劇本

(.py3-a2.5-env) [deploy@centos7-node3 ~]$ mkdir test_playbooks
(.py3-a2.5-env) [deploy@centos7-node3 ~]$ cd test_playbooks/
(.py3-a2.5-env) [deploy@centos7-node3 test_playbooks]$ mkdir inventory  
(.py3-a2.5-env) [deploy@centos7-node3 test_playbooks]$ mkdir roles
(.py3-a2.5-env) [deploy@centos7-node3 test_playbooks]$ vim inventory/testenv
[testservers]
centos7-node5

[testservers:vars]
servername=centos7-node5
user=root
output=/root/test.txt
(.py3-a2.5-env) [deploy@centos7-node3 test_playbooks]$ mkdir roles/testbox/tasks -p
(.py3-a2.5-env) [deploy@centos7-node3 test_playbooks]$ vim roles/testbox/tasks/main.yaml
(.py3-a2.5-env) [deploy@centos7-node3 test_playbooks]$ vim roles/testbox/tasks/main.yaml
- name: Print server name and user to remote testbox
  shell: "echo 'Currently {{ user }} is logging {{ servername }}' >> {{output}}"

(.py3-a2.5-env) [deploy@centos7-node3 test_playbooks]$ vim deploy.yml
- hosts: "testservers"
  gather_facts: true
  remote_user: root
  roles:
    - testbox

• ansible端設置主機名解析

[root@centos7-node3 ~]# vim /etc/hosts
192.168.56.11 centos7-node1
192.168.56.12 centos7-node2
192.168.56.13 centos7-node3
192.168.56.14 centos7-node4
192.168.56.15 centos7-node5

• 部署實戰

(.py3-a2.5-env) [deploy@centos7-node3 test_playbooks]$ ansible-playbook deploy.yml