apt install ansible

获取:14 https://ppa.launchpadcontent.net/ansible/ansible/ubuntu noble/main amd64 ansible all 11.11.0-1ppa~noble [19.5 MB]
25% [14 ansible 220 kB/19.5 MB 1%] 14.9 kB/s 21分 33秒
26% [14 ansible 497 kB/19.5 MB 3%] 10.9 kB/s 29分 5秒

ls

ansible_11.11.0-1ppa~noble_all.deb

dpkg -i ./ansible_11.11.0-1ppa~noble_all.deb

dpkg: 依赖关系问题使得 ansible 的配置工作不能继续：
 ansible 依赖于 ansible-core；然而：
  未安装软件包 ansible-core。
dpkg: 处理软件包 ansible (--install)时出错：
 依赖关系问题 - 仍未被配置

apt install ./ansible_11.11.0-1ppa~noble_all.deb

您也许需要运行“apt --fix-broken install”来修正上面的错误。
ansible : 依赖: ansible-core 但是它还没有被安装
          推荐: python3-jmespath 但是它还没有被安装
          推荐: python3-winrm 但是它还没有被安装
E: 有未能满足的依赖关系。

apt --fix-broken install
ansible --version

dnf install epel-release
dnf install ansible
rpm -q ansible
ansible --version

ansible-7.7.0-1.el9.noarch
ansible [core 2.14.17]
  config file = /etc/ansible/ansible.cfg
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python3.9/site-packages/ansible
  ansible collection location = /root/.ansible/collections:/usr/share/ansible/collections
  executable location = /usr/bin/ansible
  python version = 3.9.18 (main, Jan 24 2024, 00:00:00) [GCC 11.4.1 20231218 (Red Hat 11.4.1-3)] (/usr/bin/python3)
  jinja version = 3.1.2
  libyaml = True

apt install python3 python3-venv python3-pip -y
mkdir my_project
cd my_project
python3 -m venv venv
source venv/bin/activate
pip3 install -i https://pypi.tuna.tsinghua.edu.cn/simple ansible
ansible --version

ansible [core 2.18.6]
  config file = None
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /root/my_project/venv/lib/python3.12/site-packages/ansible
  ansible collection location = /root/.ansible/collections:/usr/share/ansible/collections
  executable location = /root/my_project/venv/bin/ansible
  python version = 3.12.3 (main, Nov 6 2024, 18:32:19) [GCC 13.2.0] (/root/my_project/venv/bin/python3)
  jinja version = 3.1.4
  libyaml = True

deactivate

mkdir -p /data/codes
cd /data/codes
git clone https://github.com/ansible/ansible.git
cd ansible
source ./hacking/env-setup
ls -l bin/
python3 bin/ansible --version

ansible           -> ../lib/ansible/cli/adhoc.py
ansible-config    -> ../lib/ansible/cli/config.py
ansible-console   -> ../lib/ansible/cli/console.py
ansible-doc       -> ../lib/ansible/cli/doc.py
ansible-galaxy    -> ../lib/ansible/cli/galaxy.py
ansible-inventory -> ../lib/ansible/cli/inventory.py
ansible-playbook  -> ../lib/ansible/cli/playbook.py
ansible-pull      -> ../lib/ansible/cli/pull.py
ansible-test      -> ../test/lib/ansible_test/_util/target/cli/ansible_test_cli_stub.py
ansible-vault     -> ../lib/ansible/cli/vault.py

config file = None
configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /data/codes/ansible/lib/ansible
ansible collection location = /root/.ansible/collections:/usr/share/ansible/collections
executable location = bin/ansible
python version = 3.12.3 (main, Nov 6 2024, 18:32:19) [GCC 13.2.0] (/usr/bin/python3)
jinja version = 3.1.2
libyaml = True

ansible -h | grep '\-k,'
ansible 10.0.0.13 -a 'ls /root' -k
ansible ansible_server -a 'ls /root' -k

-k, --ask-pass        ask for connection password
SSH password:
10.0.0.13 | CHANGED | rc=0 >>
ansible.cfg
snap

[ansible_server]
10.0.0.13 ansible_connection=local ansible_python_interpreter=/usr/bin/python3

cp -a /etc/ansible/hosts /etc/ansible/hosts.bak
ansible 10.0.0.13 -m ansible.builtin.ping
ansible ansible_server -m ansible.builtin.ping

10.0.0.13 | SUCCESS => {
    "changed": false,
    "ping": "pong"
}

cp /etc/ansible/hosts.bak /etc/ansible/hosts

[ansible_server]
10.0.0.13 ansible_python_interpreter=/usr/bin/python3

ssh-keygen -t ed25519 -f ~/.ssh/id_ed25519_ansible
ssh-copy-id -i ~/.ssh/id_ed25519_ansible.pub root@10.0.0.13
ansible 10.0.0.13 -m ansible.builtin.ping --private-key ~/.ssh/id_ed25519_ansible
ansible ansible_server -m ansible.builtin.ping --private-key ~/.ssh/id_ed25519_ansible

10.0.0.13

[web]
10.0.0.12
10.0.0.13

[mysql]
10.0.0.13
10.0.0.16

[storage]
10.0.0.12
10.0.0.16

[all:vars]
ansible_user=root
ansible_ssh_private_key_file=~/.ssh/id_ed25519_ansible

for i in 12 13 16; do
  ssh-copy-id -i ~/.ssh/id_ed25519_ansible.pub root@10.0.0.$i
done
ansible all -m ansible.builtin.ping

10.0.0.13 | SUCCESS => {"changed": false, "ping": "pong"}
10.0.0.16 | SUCCESS => {"changed": false, "ping": "pong"}
10.0.0.12 | SUCCESS => {"changed": false, "ping": "pong"}

ansible all -m ansible.builtin.ping
ansible '*' -m ansible.builtin.ping
ansible '10.0.0.*' -m ansible.builtin.ping
ansible web -m ansible.builtin.ping
ansible all -m ansible.builtin.ping -l 10.0.0.13
ansible 'web:mysql' -m ansible.builtin.ping
ansible 'web:10.0.0.16' -m ansible.builtin.ping
ansible 'web:&mysql' -m ansible.builtin.ping
ansible ungrouped -m ansible.builtin.ping
ansible 'web:!storage' -m ansible.builtin.ping
ansible 'all:!web' -m ansible.builtin.ping
ansible 'web:&mysql:!storage' -m ansible.builtin.ping

ansible 10.0.0.12 -m ansible.builtin.command -a 'ls /root' -vvv

ansible [core 2.18.6]
  config file = /root/ansible.cfg
  ansible python module location = /usr/lib/python3/dist-packages/ansible
  executable location = /usr/bin/ansible
  python version = 3.12.3 (/usr/bin/python3)
  jinja version = 3.1.2
  libyaml = True
Using /root/ansible.cfg as config file
host_list declined parsing /etc/ansible/hosts as it did not pass its verify_file() method
script declined parsing /etc/ansible/hosts as it did not pass its verify_file() method
auto declined parsing /etc/ansible/hosts as it did not pass its verify_file() method
Parsed /etc/ansible/hosts inventory source with ini plugin
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
<10.0.0.12> ESTABLISH SSH CONNECTION FOR USER: None
SSH options: ControlMaster=auto ControlPersist=60s ConnectTimeout=10
ControlPath="/root/.ansible/cp/4121990a2e"
OpenSSH_9.6p1 Ubuntu-3ubuntu13.5, OpenSSL 3.0.13 30 Jan 2024
Connecting to 10.0.0.12 [10.0.0.12] port 22.

mkdir /root/.ansible/tmp/ansible-tmp-1733403659.621861-14045-101342830451514
Using module file /usr/lib/python3/dist-packages/ansible/modules/command.py
PUT /root/.ansible/tmp/ansible-local-14041b4k_0i9f/tmpf9amqhvy TO /root/.ansible/tmp/ansible-tmp-1733403659.621861-14045-101342830451514/AnsiballZ_command.py
SSH: EXEC sftp -b - ... '[10.0.0.12]'
chmod u+x /root/.ansible/tmp/ansible-tmp-1733403659.621861-14045-101342830451514/ /root/.ansible/tmp/ansible-tmp-1733403659.621861-14045-101342830451514/AnsiballZ_command.py
/usr/bin/python3 /root/.ansible/tmp/ansible-tmp-1733403659.621861-14045-101342830451514/AnsiballZ_command.py
rm -f -r /root/.ansible/tmp/ansible-tmp-1733403659.621861-14045-101342830451514/ > /dev/null 2>&1
Received exit status from master 0

{
  "changed": true,
  "stdout": "anaconda-ks.cfg",
  "stderr": "",
  "rc": 0,
  "cmd": ["ls", "/root"],
  "start": "2024-12-05 21:01:00.121814",
  "end": "2024-12-05 21:01:00.126763",
  "delta": "0:00:00.004949",
  "msg": "",
  "invocation": {
    "module_args": {
      "_raw_params": "ls /root",
      "_uses_shell": false,
      "expand_argument_vars": true,
      "stdin_add_newline": true,
      "strip_empty_ends": true,
      "argv": null,
      "chdir": null,
      "executable": null,
      "creates": null,
      "removes": null,
      "stdin": null
    }
  }
}

10.0.0.12 | CHANGED | rc=0 >>
anaconda-ks.cfg

ansible <目标> -m ansible.builtin.script -a '/控制端/脚本 参数 executable=/目标端/解释器'

ansible 10.0.0.16 -m ansible.builtin.shell -a 'printf "#!/bin/bash\necho \"\$1\"\n" > /tmp/test.sh'
ansible 10.0.0.16 -m ansible.builtin.command -a '/bin/bash /tmp/test.sh 0.15'

mkdir -p /data/ansible/scripts
cat > /data/ansible/scripts/test.sh <<'SCRIPT'
#!/bin/bash
printf '%s\n' "$1"
SCRIPT
ansible 10.0.0.16 -m ansible.builtin.script -a '/data/ansible/scripts/test.sh 0.15 executable=/bin/bash'

ansible 10.0.0.16 -m script -a "/tmp/test.sh 0.15"
Could not find or access '/tmp/test.sh' on the Ansible Controller.
If you are using a module and expect the file to exist on the remote, see the remote_src option

ansible 10.0.0.16 -m script -a "/bin/bash /tmp/test.sh 0.15"
stdout: /tmp/test.sh: 行 1: -e: 未找到命令
        0.15

.../bash: /lib64/libc.so.6: version `GLIBC_2.38' not found

ansible-doc -s ansible.posix.selinux
ansible 10.0.0.12 -m ansible.posix.selinux -a 'state=enforcing policy=targeted'
ansible 10.0.0.12 -a 'getenforce'

{
  "changed": false,
  "configfile": "/etc/selinux/config",
  "msg": "",
  "policy": "targeted",
  "reboot_required": false,
  "state": "enforcing"
}

Enforcing

ansible 10.0.0.12 -m ansible.posix.selinux -a 'state=disabled policy=targeted'
ansible 10.0.0.12 -a 'getenforce'

[WARNING]: SELinux state temporarily changed from 'enforcing' to 'permissive'. State change will take effect next reboot.

{
  "changed": true,
  "configfile": "/etc/selinux/config",
  "msg": "Config SELinux state changed from 'enforcing' to 'disabled'",
  "policy": "targeted",
  "reboot_required": true,
  "state": "disabled"
}

ansible-doc -s ansible.posix.sysctl

ansible 10.0.0.16 -m ansible.posix.sysctl -a 'name=net.ipv4.ip_forward value=1'
ansible 10.0.0.16 -m ansible.builtin.command -a 'sysctl net.ipv4.ip_forward'
ansible 10.0.0.16 -a 'grep ip_forward /etc/sysctl.conf'

10.0.0.16 | CHANGED => {"changed": true}
net.ipv4.ip_forward = 1
#net.ipv4.ip_forward=1
net.ipv4.ip_forward=1

ansible 10.0.0.16 -m ansible.posix.sysctl -a 'name=net.ipv4.ip_forward state=absent'
ansible 10.0.0.16 -a 'grep ip_forward /etc/sysctl.conf'
ansible 10.0.0.16 -a 'sysctl net.ipv4.ip_forward'

#net.ipv4.ip_forward=1
net.ipv4.ip_forward = 1

mkdir -p /tmp/ansible-fetch-lab
ansible 10.0.0.16 -m ansible.builtin.fetch -a 'src=/tmp/tpircs.sh dest=/tmp/ansible-fetch-lab/'
apt install tree -y
tree /tmp/ansible-fetch-lab/

checksum: 8dcb191fe46af8d3b2f4fa1fcbfb6fc3e297984d
md5sum: 4a215afda9311e91b32b0f99cdced81a
remote_checksum: 8dcb191fe46af8d3b2f4fa1fcbfb6fc3e297984d
remote_md5sum: null

/tmp/ansible-fetch-lab/
└── 10.0.0.16
    └── tmp
        └── tpircs.sh
3 directories, 1 file

ansible 10.0.0.16 -m ansible.builtin.fetch -a 'src=/var/log/*.log dest=/tmp/ansible-fetch-lab/'

FAILED! => {"changed": false, "msg": "the remote file does not exist, not transferring, ignored"}

ansible 10.0.0.16 -m ansible.builtin.shell -a 'tar zcf /tmp/log.tar.gz /var/log/*.log'
ansible 10.0.0.16 -m ansible.builtin.fetch -a 'src=/tmp/log.tar.gz dest=/tmp/ansible-fetch-lab/'
tar tvf /tmp/ansible-fetch-lab/10.0.0.16/tmp/log.tar.gz

tar: 从成员名中删除开头的“/”
tar: 从硬连接目标中删除开头的“/”
checksum: cc3ccfeece585acbe2405451be238b96e4a93f1e
md5sum: 1689ab279807ff1916f885058641a050

tar jcf /tmp/log.tar.xz /var/log/*.log
/bin/sh: 1: bzip2: not found
tar: /tmp/log.tar.xz: Wrote only 4096 of 10240 bytes
tar: Child returned status 127
tar: Error is not recoverable: exiting now

ansible 10.0.0.16 -m ansible.builtin.stat -a 'path=/tmp/script.sh'
ansible 10.0.0.16 -m ansible.builtin.stat -a 'path=/tmp/tpircs.sh'

{"changed": false, "stat": {"exists": false}}

changed: false
stat:
  atime: 1547223162.4770179
  attr_flags: e
  attributes: [extents]
  block_size: 4096
  blocks: 8
  xusr: false

ansible 10.0.0.16 -m ansible.builtin.get_url -a 'url=https://nginx.org/download/nginx-1.18.0.tar.gz dest=/usr/local/src/nginx.tar.gz checksum=md5:b2d33d24d89b8b1f87ff5d251aa27eb8'
ansible 10.0.0.16 -a 'ls -l /usr/local/src/nginx.tar.gz'

changed: true
checksum_dest: null
checksum_src: 47b2c5ccd12e2a7088b03d629ff6b9ab18215180
dest: /usr/local/src/nginx.tar.gz
elapsed: 4
gid: 0
group: root
md5sum: b2d33d24d89b8b1f87ff5d251aa27eb8
mode: '0644'
msg: OK (1039530 bytes)
owner: root
size: 1039530
src: /root/.ansible/tmp/ansible-tmp-1733557270.8152976-4726-267946795702593/tmpeuxnhmdr
state: file
status_code: 200
uid: 0
url: http://nginx.org/download/nginx-1.18.0.tar.gz

-rw-r--r-- 1 root root 1039530 1月 12 00:23 /usr/local/src/nginx.tar.gz

ansible 10.0.0.16 -m ansible.builtin.get_url -a 'url=https://nginx.org/download/nginx-1.21.5.tar.gz dest=/usr/local/src/nginx-mismatch.tar.gz checksum=md5:b2d33d24d89b8b1f87ff5d251aa27eb8'

changed: true
checksum_dest: null
checksum_src: c63c01da947ac925ac682a43bf097762a2cc9287
dest: /usr/local/src/nginx.tar.gz
elapsed: 7
msg: The checksum for /usr/local/src/nginx.tar.gz did not match b2d33d24d89b8b1f87ff5d251aa27eb8; it was 55783f98814279d5036cb0feb4a062b7.
src: /root/.ansible/tmp/ansible-tmp-1733557398.8789566-4763-119162282945995/tmpnmqe3l1u
url: http://nginx.org/download/nginx-1.21.5.tar.gz

ansible 10.0.0.16 -m ansible.builtin.shell -a 'mkdir -p /tmp/logs; cp /var/log/*.log /tmp/logs/'
ansible 10.0.0.16 -m ansible.builtin.command -a 'ls /tmp/logs/'

alternatives.log
apport.log
auth.log
boot.log
bootstrap.log
cloud-init.log
cloud-init-output.log
dpkg.log
fontconfig.log
gpu-manager.log
kern.log

ansible 10.0.0.16 -m ansible.builtin.file -a 'path=/data state=directory'
ansible 10.0.0.16 -m community.general.archive -a 'path=/tmp/logs/ dest=/data/log.tar.gz format=gz owner=sswang mode=0600'
ansible 10.0.0.16 -a 'ls -l /data/'

archived:
  /tmp/logs/bootstrap.log
  /tmp/logs/apport.log
  /tmp/logs/kern.log
  /tmp/logs/alternatives.log
  /tmp/logs/auth.log
  /tmp/logs/dpkg.log
  /tmp/logs/fontconfig.log
  /tmp/logs/cloud-init.log
  /tmp/logs/gpu-manager.log
  /tmp/logs/boot.log
  /tmp/logs/cloud-init-output.log
arcroot: /tmp/logs/
changed: true
dest: /data/log.tar.gz
dest_state: archive
expanded_exclude_paths: []
expanded_paths: [/tmp/logs/]
gid: 0
group: root
missing: []
mode: '0600'
owner: sswang
size: 60366
state: file
uid: 1000

总计 120
-rw------- 1 sswang root 60366 1月 12 00:28 log.tar.gz
drwxr-xr-x 3 root root 4096 12月 5 2024 softs

ansible 10.0.0.16 -m ansible.builtin.copy -a 'content="server {\n    listen 8080;\n}\n" dest=/tmp/nginx_test.conf'
ansible 10.0.0.16 -a 'cat /tmp/nginx_test.conf'

server {
    listen 8080;
}

ansible 10.0.0.16 -m ansible.builtin.lineinfile -a 'path=/tmp/nginx_test.conf regexp="^\s*listen\s+" line="    listen 80;"'

CHANGED => {"backup": "", "changed": true, "msg": "line replaced"}

ansible 10.0.0.16 -a 'cat /etc/fstab'
ansible 10.0.0.16 -m ansible.builtin.copy -a 'src=/etc/fstab dest=/tmp/fstab remote_src=true'
ansible 10.0.0.16 -m ansible.builtin.lineinfile -a 'path=/tmp/fstab state=absent regexp="^#"'
ansible 10.0.0.16 -a 'cat /tmp/fstab'

CHANGED => {"backup": "", "changed": true, "found": 8, "msg": "8 line(s) removed"}
/dev/disk/by-uuid/5a39c07c-ed04-49e3-aca8-9a99684905e8 / ext4 defaults 0 1
/swap.img none swap sw 0 0

ansible 10.0.0.16 -m ansible.builtin.shell -a 'grep default /etc/fstab >> /tmp/fstab; cat /tmp/fstab'

/dev/disk/by-uuid/5a39c07c-ed04-49e3-aca8-9a99684905e8 / ext4 defaults 0 1
/swap.img none swap sw 0 0
/dev/disk/by-uuid/5a39c07c-ed04-49e3-aca8-9a99684905e8 / ext4 defaults 0 1

ansible 10.0.0.16 -m ansible.builtin.replace -a "path=/tmp/fstab regexp='(defau.*)' replace='#\1'"
ansible 10.0.0.16 -a 'cat /tmp/fstab'
ansible 10.0.0.16 -m ansible.builtin.replace -a "path=/tmp/fstab regexp='#(defau.*)' replace='\1'"
ansible 10.0.0.16 -a 'cat /tmp/fstab'

/dev/disk/by-uuid/5a39c07c-ed04-49e3-aca8-9a99684905e8 / ext4 #defaults 0 1
/swap.img none swap sw 0 0
/dev/disk/by-uuid/5a39c07c-ed04-49e3-aca8-9a99684905e8 / ext4 #defaults 0 1

ansible 10.0.0.16 -m ansible.builtin.apt_repository -a 'repo="deb https://dl.google.com/linux/chrome/deb/ stable main" filename=chrome update_cache=false'
ansible 10.0.0.16 -a 'ls /etc/apt/sources.list.d'

changed: true
repo: deb http://dl.google.com/linux/chrome/deb/ stable main
sources_added: [/etc/apt/sources.list.d/chrome.list]
sources_removed: []
state: present

chrome.list
ubuntu.sources
ubuntu.sources.curtin.orig

ansible 10.0.0.16 -m ansible.builtin.apt_repository -a 'repo="deb https://dl.google.com/linux/chrome/deb/ stable main" filename=chrome state=absent update_cache=false'
ansible 10.0.0.16 -a 'ls /etc/apt/sources.list.d'

- hosts: 10.0.0.16
  become: true
  tasks:
    - name: Add the teaching mirror entry
      ansible.builtin.apt_repository:
        repo: deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ noble main restricted universe multiverse
        filename: mirrors_tuna_tsinghua_edu_cn_ubuntu
        state: present

ansible-playbook 01-apt_add_repo.yml
ansible 10.0.0.16 -a 'ls /etc/apt/sources.list.d'
ansible 10.0.0.16 -m ansible.builtin.apt -a 'update_cache=true'

mirrors_tuna_tsinghua_edu_cn_ubuntu.list
ubuntu.sources
ubuntu.sources.curtin.orig
cache_update_time: 1733562046
cache_updated: true
changed: true

- hosts: 10.0.0.16
  become: true
  tasks:
    - name: Remove the teaching mirror entry
      ansible.builtin.apt_repository:
        repo: deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ noble main restricted universe multiverse
        filename: mirrors_tuna_tsinghua_edu_cn_ubuntu
        state: absent

ansible-playbook 02-apt_del_repo.yml
ansible 10.0.0.16 -a 'ls /etc/apt/sources.list.d'
ansible 10.0.0.16 -m ansible.builtin.apt -a 'update_cache=true'

ubuntu.sources
ubuntu.sources.curtin.orig
cache_update_time: 1733562244
cache_updated: true
changed: true

ansible-doc -s apt_key
ansible 10.0.0.16 -m apt_key -a 'url=https://download.ceph.com/keys/release.asc state=present'

{
  "after": ["6ABFA6073131CE23", "E84AC2C0460F3994", "D94AA3F0EFE21092", "871920D1991BC93C"],
  "before": ["6ABFA6073131CE23", "D94AA3F0EFE21092", "871920D1991BC93C"],
  "changed": true,
  "fp": "E84AC2C0460F3994",
  "id": "E84AC2C0460F3994",
  "key_id": "E84AC2C0460F3994",
  "short_id": "460F3994"
}

ansible 10.0.0.16 -m shell -a 'apt-key list | grep ceph'
uid [ unknown] Ceph.com (release key) <security@ceph.com>
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).

- hosts: 10.0.0.16
  become: true
  tasks:
    - name: Prepare separate APT keyring directory
      ansible.builtin.file:
        path: /etc/apt/keyrings
        state: directory
        mode: '0755'
    - name: Obtain the repository public key
      ansible.builtin.get_url:
        url: https://download.ceph.com/keys/release.asc
        dest: /etc/apt/keyrings/ceph.asc
        mode: '0644'

ansible 10.0.0.12 -m ansible.builtin.dnf -a 'list=nginx'
ansible 10.0.0.12 -m ansible.builtin.dnf -a 'list=repos'
ansible 10.0.0.12 -m ansible.builtin.dnf -a 'name=nginx state=present'
ansible 10.0.0.12 -m ansible.builtin.shell -a 'dnf list --installed | grep nginx'

ansible_facts: {pkg_mgr: dnf}
changed: false
arch: x86_64
envra: 2:nginx-1.20.1-20.el9.0.1.x86_64
epoch: '2'
name: nginx
nevra: 2:nginx-1.20.1-20.el9.0.1.x86_64
release: 20.el9.0.1
repo: appstream
version: 1.20.1
yumstate: available

Installed: rocky-logos-httpd-90.15-2.el9.noarch
Installed: nginx-core-2:1.20.1-20.el9.0.1.x86_64
Installed: nginx-filesystem-2:1.20.1-20.el9.0.1.noarch
Installed: nginx-2:1.20.1-20.el9.0.1.x86_64

nginx.x86_64             2:1.20.1-20.el9.0.1 @appstream
nginx-core.x86_64        2:1.20.1-20.el9.0.1 @appstream
nginx-filesystem.noarch  2:1.20.1-20.el9.0.1 @appstream

ansible 10.0.0.12 -m ansible.builtin.dnf -a 'name=nginx state=absent autoremove=true'
ansible 10.0.0.12 -m ansible.builtin.shell -a 'dnf list --installed | grep nginx'

ansible 10.0.0.12 -m yum -a 'name=https://mirrors.tuna.tsinghua.edu.cn/zabbix/zabbix/6.0/rhel/8/x86_64/zabbix-agent-6.0.0-1.el8.x86_64.rpm state=present validate_certs=no disable_gpg_check=yes'
Installed: openldap-compat-2.6.6-3.el9.x86_64
Installed: compat-openssl11-1:1.1.1k-4.el9_0.x86_64
Installed: zabbix-agent-6.0.0-1.el8.x86_64
zabbix-agent.x86_64 6.0.0-1.el8 @@commandline

ansible 10.0.0.12 -m ansible.builtin.dnf -a 'name=zabbix-agent state=present'
ansible 10.0.0.12 -m ansible.builtin.dnf -a 'name=zabbix-agent state=absent'

ansible-doc -s ansible.builtin.yum_repository
ansible 10.0.0.12 -m ansible.builtin.yum_repository -a 'name=nginx description=nginx-desc baseurl="https://nginx.org/packages/centos/$releasever/$basearch/" gpgcheck=true enabled=true gpgkey=https://nginx.org/keys/nginx_signing.key'
ansible 10.0.0.12 -m ansible.builtin.shell -a 'ls /etc/yum.repos.d/ngi*'
ansible 10.0.0.12 -a 'dnf makecache'

CHANGED => {"changed": true, "repo": "nginx", "state": "present"}
/etc/yum.repos.d/nginx.repo
nginx-desc 9.8 kB/s | 2.9 kB
元数据缓存已建立。

ansible 10.0.0.12 -m ansible.builtin.yum_repository -a 'name=nginx state=absent'
ansible 10.0.0.12 -m ansible.builtin.shell -a 'ls /etc/yum.repos.d/ngi*'
ansible 10.0.0.12 -a 'dnf makecache'

CHANGED => {"changed": true, "repo": "nginx", "state": "absent"}
FAILED | rc=2 >>
ls: 无法访问 '/etc/yum.repos.d/ngi*': 没有那个文件或目录

ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_memtotal_mb'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=*ens*'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_all_ipv4_addresses'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_default_ipv4'

{
  "ansible_facts": {
    "ansible_default_ipv4": {
      "address": "10.0.0.16",
      "alias": "ens33",
      "broadcast": "10.0.0.255",
      "gateway": "10.0.0.2",
      "interface": "ens33",
      "macaddress": "00:50:56:26:58:e4",
      "mtu": 1500,
      "netmask": "255.255.255.0",
      "network": "10.0.0.0",
      "prefix": "24",
      "type": "ether"
    }
  },
  "changed": false
}

ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_all_ipv4_addresses' -o | awk -F '=>' '{print $2}' | jq -r '.ansible_facts.ansible_all_ipv4_addresses[0]'

10.0.0.16

ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_all_ipv4_addresses' | awk -F'"' '/ansible_all_ipv4_addresses/ {getline; print $2}'
alias ansible_getip="ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_all_ipv4_addresses' | awk -F'\"' '/ansible_all_ipv4_addresses/ {getline; print \$2}'"
ansible_getip

ansible 10.0.0.16 -m ansible.builtin.setup
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_nodename'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_hostname'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_domain'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_memtotal_mb'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_memory_mb'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_memfree_mb'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_os_family'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_distribution_major_version'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_distribution_version'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_processor_vcpus'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_all_ipv4_addresses'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_architecture'
ansible 10.0.0.16 -m ansible.builtin.setup -a 'filter=ansible_processor*'

ansible 10.0.0.16 -m ansible.builtin.debug
ansible 10.0.0.16 -m ansible.builtin.debug -a 'msg="hello debug"'
ansible 10.0.0.16 -m ansible.builtin.debug -a 'var=buzhidao'
ansible 10.0.0.16 -m ansible.builtin.debug -a 'msg="this is test msg" verbosity=2'
ansible 10.0.0.16 -m ansible.builtin.debug -a 'msg="this is test msg" verbosity=2' -vv

SUCCESS => {"msg": "Hello world!"}
SUCCESS => {"msg": "hello debug"}
SUCCESS => {"buzhidao": "VARIABLE IS NOT DEFINED!"}
SKIPPED
SUCCESS => {"msg": "this is test msg"}

- hosts: 10.0.0.16
  tasks:
    - name: Output the default message
      ansible.builtin.debug: {}

ansible-playbook 03-debug-default.yml

- hosts: 10.0.0.16
  gather_facts: true
  tasks:
    - name: Output host name and default route address
      ansible.builtin.debug:
        msg: 'Host "{{ ansible_facts["nodename"] }}" is "{{ ansible_facts.get("default_ipv4", {}).get("address", "无默认 IPv4 路由") }}"'

ansible-playbook 04-debug-msg.yml

debug: var=nginx_num msg="System {{ inventory_hostname }} has nginx service."

- hosts: 10.0.0.16
  remote_user: root
  tasks:
    - name: Count Nginx processes
      ansible.builtin.command: pgrep -c -x nginx
      register: nginx_num
      changed_when: false
      failed_when: nginx_num.rc not in [0, 1]
    - name: Show the full query result
      ansible.builtin.debug:
        var: nginx_num
    - name: Show the process count
      ansible.builtin.debug:
        msg: 'System {{ inventory_hostname }} has {{ nginx_num.stdout }} Nginx processes.'

ansible-playbook 06-debug-varmsg-ok.yml

- name: Display Facts Variables
  hosts: 10.0.0.13
  gather_facts: true
  tasks:
    - name: Display OS family
      ansible.builtin.debug:
        var: ansible_facts['os_family']
    - name: Display default IPv4 address
      ansible.builtin.debug:
        msg: '{{ ansible_facts.get("default_ipv4", {}).get("address", "无默认 IPv4 路由") }}'
    - name: Display total memory in MB
      ansible.builtin.debug:
        var: ansible_facts['memtotal_mb']

ansible-playbook get_fact.yaml

- name: 收集目标主机系统信息并提取 IPv4 地址
  hosts: all
  gather_facts: true
  tasks:
    - name: 显示主机基本信息
      ansible.builtin.debug:
        msg:
          - '主机名: {{ ansible_facts["hostname"] }}'
          - '操作系统: {{ ansible_facts["distribution"] }} {{ ansible_facts["distribution_version"] }}'
          - '内核版本: {{ ansible_facts["kernel"] }}'
    - name: 提取并显示所有 IPv4 地址
      ansible.builtin.debug:
        var: ansible_facts['all_ipv4_addresses']
      when: ansible_facts['all_ipv4_addresses'] is defined
    - name: 显示列表第一个 IPv4 地址
      ansible.builtin.debug:
        msg: '列表第一个 IPv4: {{ ansible_facts["all_ipv4_addresses"][0] }}'
      when:
        - ansible_facts['all_ipv4_addresses'] is defined
        - ansible_facts['all_ipv4_addresses'] | length > 0

ansible-playbook get_msg_fact.yaml

PLAY [收集目标主机系统信息并提取IPv4地址]
TASK [Gathering Facts]              ok: [.16, .13, .14, .12]
TASK [显示主机基本信息]              每台显示上表的主机名、系统及内核
TASK [提取并显示所有IPv4地址]         分别显示本机 IP 列表
TASK [显示主IPv4地址（第一个地址）]    分别显示 10.0.0.14、.12、.13、.16
PLAY RECAP
10.0.0.12 : ok=4 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
10.0.0.13 : ok=4 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
10.0.0.14 : ok=4 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
10.0.0.16 : ok=4 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0

执行用户@目标组 (主机数)[f:并发数]$ 模块 参数

ansible-console

help
?
list
cd web
forks 10
cd storage
ping
apt name=nginx state=present
service name=nginx state=started
exit

ansible-galaxy role list
ansible-galaxy role list username.role_name
ansible-galaxy role install username.role_name
ansible-galaxy role install --roles-path . username.role_name
ansible-galaxy role install username.role_name,v1.0.0

ansible-galaxy role install git+https://github.com/geerlingguy/ansible-role-apache.git,<实际分支、标签或提交>

- src: username.role_name
- src: https://github.com/galaxy/nginx
- src: https://github.com/galaxy/nginx
  version: master
  name: nginx_role
- src: https://some.webserver.example.com/files/master.tar.gz
  name: http-role

ansible-galaxy role install -r requirements.yml

mkdir -p /data/ansible/galaxy
cd /data/ansible/galaxy
ansible-galaxy role init roles_name
tree roles_name/

- Role roles_name was created successfully
roles_name/
├── defaults
│   └── main.yml
├── files
├── handlers
│   └── main.yml
├── meta
│   └── main.yml
├── README.md
├── tasks
│   └── main.yml
├── templates
├── tests
│   ├── inventory
│   └── test.yml
└── vars
    └── main.yml
9 directories, 8 files

ansible-galaxy role list
ansible-galaxy role list --roles-path .

# /data/ansible/galaxy
- roles_name, (unknown version)
# /etc/ansible/roles

ansible-galaxy role list
ansible-galaxy role search redis
ansible-galaxy role info aaronpederson.redis
ansible-galaxy role install davidwittman.redis

Found 233 roles matching your search:
Name                 Description
aaronpederson.redis  Redis is an open source, BSD ...

Starting galaxy role install process
- downloading role 'redis', owned by davidwittman
- downloading role from https://github.com/DavidWittman/ansible-redis/archive/1.2.9.tar.gz
- extracting davidwittman.redis to /root/.ansible/roles/davidwittman.redis
- davidwittman.redis (1.2.9) was installed successfully

ansible-galaxy role list
ls ~/.ansible/roles/
tree ~/.ansible/roles/davidwittman.redis/ -L 1
du -sh ~/.ansible/roles/davidwittman.redis

# /root/.ansible/roles
- davidwittman.redis, 1.2.9
/root/.ansible/roles/davidwittman.redis/
├── defaults
├── Gemfile
├── Gemfile.lock
├── handlers
├── LICENSE
├── meta
├── README.md
├── tasks
├── templates
├── test
└── vars
8 directories, 4 files
328K /root/.ansible/roles/davidwittman.redis

cd ~/.ansible/roles/
mv davidwittman.redis david.redis
ansible-galaxy role list
ansible-galaxy role remove david.redis
ansible-galaxy role list

mkdir -p /data/ansible/pull
cd /data/ansible/pull
apt install git
ansible-pull -o -C master -d /tmp/test_pull -i /tmp/test_pull/hosts -U https://gitee.com/wshs1117/kubernetes.git

Starting Ansible Pull at 2024-12-07 22:19:58
[WARNING]: Could not match supplied host pattern, ignoring: ubuntu24-13.ansible.com
[WARNING]: Could not match supplied host pattern, ignoring: ubuntu24-13
localhost | SUCCESS => {
  "after": "108c284a330a82ce1a1f80238e4f54bf5e8b045a",
  "before": "108c284a330a82ce1a1f80238e4f54bf5e8b045a",
  "changed": false,
  "remote_url_changed": false
}
Repository has not changed, quitting.

ansible-inventory --export --list
ansible-inventory --export --graph
ansible-inventory --host=10.0.0.16

_meta:
  hostvars: {}
all:
  children: [ungrouped, web, mysql, storage]

@all:
    |--@ungrouped:
    |--@web:
    |   |--10.0.0.12
    |   |--10.0.0.13
    |--@mysql:
    |   |--10.0.0.13
    |   |--10.0.0.16
    |--@storage:
    |   |--10.0.0.12
    |   |--10.0.0.16

10.0.0.16 ansible_ssh_user=root ansible_ssh_pass=123456 custom_var1=value1 custom_var2=value2

{
  "ansible_ssh_pass": 123456,
  "ansible_ssh_user": "root",
  "custom_var1": "value1",
  "custom_var2": "value2"
}

ansible-inventory --vars --graph
ansible-inventory -y --list

all:
  children:
    mysql:
      hosts:
        10.0.0.13: {}
        10.0.0.16:
          ansible_ssh_pass: 123456
          ansible_ssh_user: root
          custom_var1: value1
          custom_var2: value2
    storage:
      hosts:
        10.0.0.12: {}
        10.0.0.16: {}
    web:
      hosts:
        10.0.0.12: {}
        10.0.0.13: {}

- name: Install the teaching service or update its managed subconfiguration
  hosts: web
  remote_user: root
  gather_facts: true
  vars:
    nginx_subconfig: /etc/nginx/conf.d/nginx-define.conf
  pre_tasks:
    - name: Limit this APT example to Debian-family hosts
      ansible.builtin.assert:
        that:
          - ansible_facts['os_family'] == 'Debian'
        fail_msg: 本示例仅用于 Debian/Ubuntu，混合清单必须限制目标。
      tags: always
  tasks:
    - name: Initial installation without destructive pseudo-rollback
      tags: installtask
      block:
        - name: Install Nginx
          ansible.builtin.apt:
            name: nginx
            state: present
            update_cache: true
        - name: Create the dedicated teaching user
          ansible.builtin.user:
            name: nginx-test
            system: true
            shell: /usr/sbin/nologin
        - name: Show the teaching user
          ansible.builtin.command: getent passwd nginx-test
          changed_when: false
        - name: Create the web root
          ansible.builtin.file:
            path: /data/webserver/html
            owner: nginx-test
            state: directory
            mode: '0755'
        - name: Write the teaching index
          ansible.builtin.copy:
            content: '<h1>welcome to ansible</h1>'
            dest: /data/webserver/html/index.html
            owner: nginx-test
            mode: '0644'
        - name: Copy the prepared main configuration with backup
          ansible.builtin.copy:
            src: nginx.conf
            dest: /etc/nginx/nginx.conf
            backup: true
            mode: '0644'
          register: nginx_main_copy
        - name: Validate the main configuration
          ansible.builtin.command: /usr/sbin/nginx -t
          changed_when: false
        - name: Start and enable the teaching service
          ansible.builtin.service:
            name: nginx
            state: started
            enabled: true
      rescue:
        - name: Preserve the failed installation for explicit recovery
          ansible.builtin.fail:
            msg: >-
              初次安装失败，保留现场；没有删除用户或站点，也没有声称原子回滚。
              主配置备份为 {{ (nginx_main_copy | default({})).get('backup_file', '未生成') }}。

    - name: Inspect the subconfiguration before this change
      ansible.builtin.stat:
        path: '{{ nginx_subconfig }}'
        follow: false
      register: nginx_before
      tags: [installtask, changetask]
    - name: Require an ordinary file or an absent path
      ansible.builtin.assert:
        that:
          - not nginx_before.stat.exists or nginx_before.stat.isreg | default(false)
        fail_msg: 本示例不覆盖目录或符号链接，请先确认配置管理范围。
      tags: [installtask, changetask]
    - name: Record the service state
      ansible.builtin.service_facts: {}
      tags: [installtask, changetask]
    - name: Require an installed service
      ansible.builtin.assert:
        that:
          - "'nginx.service' in ansible_facts.services"
        fail_msg: changetask 要求先完成基础安装。
      tags: [installtask, changetask]
    - name: Record whether the service was running
      ansible.builtin.set_fact:
        nginx_was_running: "{{ ansible_facts.services['nginx.service']['state'] == 'running' }}"
      tags: [installtask, changetask]
    - name: Allocate a unique backup for an existing managed file
      ansible.builtin.tempfile:
        state: file
        prefix: nginx-subconfig-before-
      register: nginx_backup
      when: nginx_before.stat.exists
      tags: [installtask, changetask]
    - name: Save the exact previous managed file
      ansible.builtin.copy:
        src: '{{ nginx_subconfig }}'
        dest: '{{ nginx_backup.path }}'
        remote_src: true
        mode: preserve
      when: nginx_before.stat.exists
      tags: [installtask, changetask]

    - name: Update only the managed subconfiguration
      tags: [installtask, changetask]
      block:
        - name: Publish the candidate subconfiguration
          ansible.builtin.copy:
            src: nginx-define.conf
            dest: '{{ nginx_subconfig }}'
            mode: '0644'
          register: nginx_candidate
        - name: Validate the complete configuration before reload
          ansible.builtin.command: /usr/sbin/nginx -t
          changed_when: false
        - name: Reload an originally running service when content changed
          ansible.builtin.service:
            name: nginx
            state: reloaded
          when:
            - nginx_was_running | bool
            - nginx_candidate.changed or (nginx_main_copy | default({})).get('changed', false)
      rescue:
        - name: Restore the previous managed configuration
          ansible.builtin.copy:
            src: '{{ nginx_backup.path }}'
            dest: '{{ nginx_subconfig }}'
            remote_src: true
            mode: '{{ nginx_before.stat.mode }}'
            owner: '{{ nginx_before.stat.uid }}'
            group: '{{ nginx_before.stat.gid }}'
          when: nginx_before.stat.exists
        - name: Remove only the newly introduced configuration
          ansible.builtin.file:
            path: '{{ nginx_subconfig }}'
            state: absent
          when: not nginx_before.stat.exists
        - name: Validate the restored configuration
          ansible.builtin.command: /usr/sbin/nginx -t
          changed_when: false
        - name: Recover a service that was originally running
          ansible.builtin.service:
            name: nginx
            state: restarted
          when: nginx_was_running | bool
        - name: Keep the deployment result failed after compensation
          ansible.builtin.fail:
            msg: 子配置更新失败，已完成上述补偿；部署未成功，备份保留供核对。
      always:
        - name: Collect the final listening state
          ansible.builtin.command: ss -tln
          register: nginx_listeners
          changed_when: false
          failed_when: false
        - name: Record diagnostic output and its return code
          ansible.builtin.copy:
            dest: /tmp/nginx-deploy-status.log
            mode: '0600'
            content: >-
              {{ {'rc': nginx_listeners.rc | default(-1),
                  'stdout': nginx_listeners.stdout | default(''),
                  'stderr': nginx_listeners.stderr | default(''),
                  'msg': nginx_listeners.msg | default('')} | to_nice_json }}
        - name: Show audit paths without claiming deployment success
          ansible.builtin.debug:
            msg:
              - 端口诊断见 /tmp/nginx-deploy-status.log，需结合任务结果和业务检查判断。
              - "原有子配置备份: {{ (nginx_backup | default({})).get('path', '原路径不存在，无旧文件') }}"

server {
    listen 10097;
    root /data/webserver/html;
    location / {
    }
}

ansible-playbook -l 10.0.0.16 --tags installtask 08-playbook-nginx-update.yml

server {
    listen 10097
    root /data/webserver/html;
    location / {
    }
}

ansible-playbook -l 10.0.0.16 --tags changetask 08-playbook-nginx-update.yml

TASK [copy subconfig前备份原有配置]
changed: [10.0.0.16]
TASK [copy subconfig]
changed: [10.0.0.16]
TASK [restart nginx service]
[ERROR]: Task failed: Module failed: Unable to restart service nginx:
Job for nginx.service failed because the control process exited with error code.
See "systemctl status nginx.service" and "journalctl -xeu nginx.service" for details.
Origin: /root/nginx/08-playbook-nginx-update.yml:37:11
fatal: [10.0.0.16]: FAILED!
TASK [部署异常：回滚清理环境]
ok: [10.0.0.16] => {"msg": "===== Nginx子配置更新失败，执行自动回滚 ====="}
TASK [恢复变更前的子配置]
changed: [10.0.0.16]
TASK [删除备份文件]
changed: [10.0.0.16]
TASK [start nginx after rollback]
changed: [10.0.0.16]
PLAY RECAP
10.0.0.16 : ok=6 changed=5 unreachable=0 failed=0 skipped=0 rescued=1 ignored=0

- hosts: websrvs
  remote_user: root
  roles:
    - role: mysql
    - memcached
    - nginx

- hosts: web
  remote_user: root
  roles:
    - role: role_nginx
      nginx_port: 8888

- hosts: web
  remote_user: root
  roles:
    - {role: role_nginx, nginx_port: 8888}

cd /data/ansible/role
cp -a nginx_pro nginx_pro-base
cd nginx_pro/roles/role_nginx
mkdir -p templates
cp files/nginx-define.conf templates/nginx-define.conf.j2

server {
    listen {{ nginx_port }};
    root /data/webserver/html;
    location / {
    }
}

- name: Render the managed subconfiguration
  ansible.builtin.template:
    src: nginx-define.conf.j2
    dest: /etc/nginx/conf.d/nginx-define.conf
    mode: '0644'

cd /data/ansible/role/nginx_pro
ansible-playbook nginx_role.yaml -C
ansible-playbook nginx_role.yaml
ansible web -m ansible.builtin.shell -a "grep 'listen' /etc/nginx/conf.d/nginx-define.conf"
ansible web -m ansible.builtin.shell -a 'ss -tlnp | grep nginx'
ansible web -m ansible.builtin.command -a 'curl -s localhost:8888'

ansible web -m ansible.builtin.setup -a 'filter=ansible_hostname'

10.0.0.16: ansible_hostname = top-node
10.0.0.13: ansible_hostname = top-node1
10.0.0.19: ansible_hostname = top-node

- hosts: web
  remote_user: root
  gather_facts: true
  roles:
    - role: role_nginx
      nginx_port: 10086
      when: ansible_facts['hostname'] == 'top-node'

cd /data/ansible/role/nginx_pro
ansible-playbook nginx_role.yaml -C
ansible-playbook nginx_role.yaml

10.0.0.13 | FAILED | rc=1 >>
non-zero return code
10.0.0.19 | CHANGED | rc=0 >>
tcp 0 0 0.0.0.0:10086 0.0.0.0:* LISTEN 21981/nginx: master
10.0.0.16 | CHANGED | rc=0 >>
tcp 0 0 0.0.0.0:10086 0.0.0.0:* LISTEN 22054/nginx: master

cd /data/ansible/role
cp -a nginx_pro nginx_pro_when
cp -a nginx_pro_when/roles/role_nginx nginx_pro/roles/role_nginx1
cd nginx_pro

- name: Render the port-specific subconfiguration
  ansible.builtin.template:
    src: nginx-define.conf.j2
    dest: '/etc/nginx/conf.d/nginx-{{ nginx_port }}.conf'
    mode: '0644'

- hosts: web
  remote_user: root
  roles:
    - {role: role_nginx, nginx_port: 200, tags: [nginx, web]}
    - {role: role_nginx1, nginx_port: 100, tags: [nginx1, web]}

cd /data/ansible/role/nginx_pro
ansible-playbook -C -t nginx nginx_role.yaml -l 10.0.0.16
ansible-playbook -t nginx nginx_role.yaml -l 10.0.0.16
ansible 10.0.0.16 -a 'ls /etc/nginx/conf.d'
ansible 10.0.0.16 -m ansible.builtin.shell -a 'ss -tlnp | grep nginx'
ansible-playbook -C -t nginx1 nginx_role.yaml -l 10.0.0.19
ansible-playbook -t nginx1 nginx_role.yaml -l 10.0.0.19
ansible 10.0.0.19 -a 'ls /etc/nginx/conf.d'
ansible 10.0.0.19 -m ansible.builtin.shell -a 'ss -tlnp | grep nginx'

10.0.0.16: nginx-200.conf
          0.0.0.0:200 LISTEN 23165/nginx: master
10.0.0.19: nginx-define.conf
          0.0.0.0:100 LISTEN 23119/nginx: master

cd /data/ansible/role
mv nginx_pro nginx_pro-tags
cp -a nginx_pro_when nginx_pro
cd nginx_pro
mkdir -p roles/role_nginx/vars roles/role_nginx/handlers

server_name: ansible_nodename
pre_name: 'www.'
tail_name: '.com'

- name: validate nginx
  ansible.builtin.command: /usr/sbin/nginx -t
  changed_when: false
  listen: apply nginx configuration

- name: reload nginx
  ansible.builtin.service:
    name: nginx
    state: reloaded
  listen: apply nginx configuration

- name: Render the virtual host configuration
  ansible.builtin.template:
    src: nginx-define.conf.j2
    dest: '/etc/nginx/conf.d/{{ server_name }}.conf'
    mode: '0644'
  notify: apply nginx configuration

- name: Copy the main configuration and notify on change
  ansible.builtin.copy:
    src: nginx.conf
    dest: /etc/nginx/nginx.conf
    backup: true
    mode: '0644'
  notify: apply nginx configuration

- name: Run the existing group preparation tasks
  ansible.builtin.include_tasks: groups.yaml
- name: Run the existing user preparation tasks
  ansible.builtin.include_tasks: users.yaml
- name: Run the existing package preparation tasks
  ansible.builtin.include_tasks: packages.yaml
- name: Run the existing configuration tasks
  ansible.builtin.include_tasks: configs.yaml
- name: Run the existing service preparation tasks
  ansible.builtin.include_tasks: services.yaml

- name: Validate the assembled configuration
  ansible.builtin.command: /usr/sbin/nginx -t
  changed_when: false
- name: Ensure the service is started and enabled
  ansible.builtin.service:
    name: nginx
    state: started
    enabled: true

{% for vhost in nginx_vhosts %}
server {
    listen {{ vhost.port }};
    server_name {{ pre_name }}{{ vhost.name }}{{ tail_name }};
    root /data/webserver/html;
    location / {
    }
}
{% endfor %}

- hosts: web
  remote_user: root
  vars:
    nginx_vhosts:
      - port: 81
        name: a
      - port: 82
        name: b
      - port: 83
        name: c
  roles:
    - role: role_nginx

ansible-playbook nginx_role.yaml -C
ansible-playbook nginx_role.yaml
ansible web -m ansible.builtin.shell -a 'ss -tlnp | grep nginx'
ansible web -a 'ls /etc/nginx/conf.d'
ansible web -a 'grep server_name /etc/nginx/conf.d/ansible_nodename.conf'

10.0.0.16 | CHANGED | rc=0 >>
tcp 0 0 0.0.0.0:83 0.0.0.0:* LISTEN 24643/nginx: master
tcp 0 0 0.0.0.0:82 0.0.0.0:* LISTEN 24643/nginx: master
tcp 0 0 0.0.0.0:81 0.0.0.0:* LISTEN 24643/nginx: master
10.0.0.19 | CHANGED | rc=0 >>
tcp 0 0 0.0.0.0:81 0.0.0.0:* LISTEN 24847/nginx: master
tcp 0 0 0.0.0.0:83 0.0.0.0:* LISTEN 24847/nginx: master
tcp 0 0 0.0.0.0:82 0.0.0.0:* LISTEN 24847/nginx: master
10.0.0.13 | CHANGED | rc=0 >>
tcp 0 0 0.0.0.0:81 0.0.0.0:* LISTEN 37167/nginx: master
tcp 0 0 0.0.0.0:82 0.0.0.0:* LISTEN 37167/nginx: master
tcp 0 0 0.0.0.0:83 0.0.0.0:* LISTEN 37167/nginx: master

server_name www.a.com;
server_name www.b.com;
server_name www.c.com;

ansible 10.0.0.16 -m ansible.builtin.service -a 'name=nginx state=stopped'
ansible 10.0.0.16 -m ansible.builtin.file -a 'path=/etc/nginx/conf.d/nginx-define.conf state=absent'
ansible 10.0.0.16 -m ansible.builtin.file -a 'path=/etc/nginx/conf.d/nginx-200.conf state=absent'
ansible 10.0.0.16 -m ansible.builtin.file -a 'path=/etc/nginx/conf.d/ansible_nodename.conf state=absent'
ansible 10.0.0.16 -m ansible.builtin.apt -a 'name=nginx state=absent purge=true autoremove=true'
ansible 10.0.0.16 -m ansible.builtin.file -a 'path=/data/webserver/html state=absent'
ansible 10.0.0.16 -m ansible.builtin.user -a 'name=nginx-test state=absent'