查询模块的参数：
ansible-doc -s moduleName
如 cron 模块
[[email protected] ansible]# ansible-doc -s cron less 436 Copyright (C) 1984-2009 Mark Nudelman less comes with NO WARRANTY, to the extent permitted by law. For information about the terms of redistribution, see the file named README in the less distribution. Homepage: http://www.greenwoodsoftware.com/less - name: M a n a g e c r o n . d a n d c r o n t a b e n t r i e s . action: cron backup # If set, create a backup of the crontab before it is modified. The location of the backup is returned in the `backup‘ variable by this mo cron_file # If specified, uses this file in cron.d instead of an individual user‘s crontab. day # Day of the month the job should run ( 1-31, *, */2, etc ) hour # Hour when the job should run ( 0-23, *, */2, etc ) job # The command to execute. Required if state=present. minute # Minute when the job should run ( 0-59, *, */2, etc ) month # Month of the year the job should run ( 1-12, *, */2, etc ) name= # Description of a crontab entry. reboot # If the job should be run at reboot. This option is deprecated. Users should use special_time. special_time # Special time specification nickname. state # Whether to ensure the job is present or absent. user # The specific user whose crontab should be modified. weekday # Day of the week that the job should run ( 0-6 for Sunday-Saturday, *, etc )
1、cron 模块
示例：每小时的10分钟时候执行一个脚本 默认是*
[[email protected] ansible]# ansible testservers -m cron -a ‘name="test cron", "minute=10" job="/bin/bash /root/test.sh" state=present‘
192.168.100.131 | success >> {
"changed": true,
"jobs": [
"test cron,"
]
}
192.168.100.132 | success >> {
"changed": true,
"jobs": [
"test cron,"
]
}
[[email protected] ansible]# ansible testservers -m command -a ‘crontab -l‘
192.168.100.131 | success | rc=0 >>
#Ansible: test cron,
10 * * * * /bin/bash /root/test.sh
192.168.100.132 | success | rc=0 >>
#Ansible: test cron,
10 * * * * /bin/bash /root/test.sh
删除上面的计划任务
[[email protected] ansible]# ansible testservers -m cron -a ‘name="test cron", "minute=10" job="/bin/bash /root/test.sh" state=absent‘
192.168.100.131 | success >> {
"changed": true,
"jobs": []
}
192.168.100.132 | success >> {
"changed": true,
"jobs": []
}
[[email protected] ansible]# ansible testservers -m command -a ‘crontab -l‘
192.168.100.132 | success | rc=0 >>
192.168.100.131 | success | rc=0 >>
2、user 模块
[[email protected] ansible]# ansible-doc -s user less 436 Copyright (C) 1984-2009 Mark Nudelman less comes with NO WARRANTY, to the extent permitted by law. For information about the terms of redistribution, see the file named README in the less distribution. Homepage: http://www.greenwoodsoftware.com/less - name: M a n a g e u s e r a c c o u n t s action: user append # If `yes‘, will only add groups, not set them to just the list in `groups‘. comment # Optionally sets the description (aka `GECOS‘) of user account. createhome # Unless set to `no‘, a home directory will be made for the user when the account is created or if the home directory does not exist. expires # An expiry time for the user in epoch, it will be ignored on platforms that do not support this. Currently supported on Linux and FreeBSD force # When used with `state=absent‘, behavior is as with `userdel --force‘. generate_ssh_key # Whether to generate a SSH key for the user in question. This will *not* overwrite an existing SSH key. group # Optionally sets the user‘s primary group (takes a group name). groups # Puts the user in this comma-delimited list of groups. When set to the empty string (‘groups=‘), the user is removed from all groups exce home # Optionally set the user‘s home directory. login_class # Optionally sets the user‘s login class for FreeBSD, OpenBSD and NetBSD systems. move_home # If set to `yes‘ when used with `home=‘, attempt to move the user‘s home directory to the specified directory if it isn‘t there already. name= # Name of the user to create, remove or modify. non_unique # Optionally when used with the -u option, this option allows to change the user ID to a non-unique value. password # Optionally set the user‘s password to this crypted value. See the user example in the github examples directory for what this looks lik remove # When used with `state=absent‘, behavior is as with `userdel --remove‘. shell # Optionally set the user‘s shell. ssh_key_bits # Optionally specify number of bits in SSH key to create. ssh_key_comment # Optionally define the comment for the SSH key. ssh_key_file # Optionally specify the SSH key filename. If this is a relative filename then it will be relative to the user‘s home directory. ssh_key_passphrase # Set a passphrase for the SSH key. If no passphrase is provided, the SSH key will default to having no passphrase. ssh_key_type # Optionally specify the type of SSH key to generate. Available SSH key types will depend on implementation present on target host. state # Whether the account should exist or not, taking action if the state is different from what is stated. system # When creating an account, setting this to `yes‘ makes the user a system account. This setting cannot be changed on existing users. uid # Optionally sets the `UID‘ of the user. update_password # `always‘ will update passwords if they differ. `on_create‘ will only set the password for newly created users. [[email protected] ansible]#
示例：
创建一个用户testuser uid=1000
[[email protected] ansible]# ansible testservers -m user -a ‘name=testuser uid=1000 shell=/bin/bash home=/opt/testuser state=present‘
192.168.100.131 | success >> {
"changed": true,
"comment": "",
"createhome": true,
"group": 1000,
"home": "/opt/testuser",
"name": "testuser",
"shell": "/bin/bash",
"state": "present",
"system": false,
"uid": 1000
}
192.168.100.132 | success >> {
"changed": true,
"comment": "",
"createhome": true,
"group": 1000,
"home": "/opt/testuser",
"name": "testuser",
"shell": "/bin/bash",
"state": "present",
"system": false,
"uid": 1000
}
删除此用户 连同用户家目录：
[[email protected] ansible]# ansible testservers -m user -a ‘name=testuser remove=yes state=absent‘
192.168.100.131 | success >> {
"changed": true,
"force": false,
"name": "testuser",
"remove": true,
"state": "absent"
}
192.168.100.132 | success >> {
"changed": true,
"force": false,
"name": "testuser",
"remove": true,
"state": "absent"
}
3、group模块
[[email protected] ansible]# ansible-doc -s group less 436 Copyright (C) 1984-2009 Mark Nudelman less comes with NO WARRANTY, to the extent permitted by law. For information about the terms of redistribution, see the file named README in the less distribution. Homepage: http://www.greenwoodsoftware.com/less - name: A d d o r r e m o v e g r o u p s action: group gid # Optional `GID‘ to set for the group. name= # Name of the group to manage. state # Whether the group should be present or not on the remote host. system # If `yes‘, indicates that the group created is a system group. [[email protected] ansible]#
示例：
创建一个用户组
[[email protected] ansible]# ansible testservers -m group -a ‘name=testgroup gid=1100 state=present‘
192.168.100.131 | success >> {
"changed": true,
"gid": 1100,
"name": "testgroup",
"state": "present",
"system": false
}
192.168.100.132 | success >> {
"changed": true,
"gid": 1100,
"name": "testgroup",
"state": "present",
"system": false
}
综合示例：
在主机上创建一个testgroup组，然后创建一个testuser，并将其加入testgroup组
[[email protected] ansible]# ansible testservers -m group -a ‘name=testgroup gid=1100 state=present‘ [[email protected] ansible]# ansible testservers -m user -a ‘name=testuser uid=1000 shell=/bin/bash home=/opt/testuser group=testgroup state=present‘ [[email protected] ansible]# ansible testservers -m command -a ‘id testuser‘ 192.168.100.132 | success | rc=0 >> uid=1000(testuser) gid=1100(testgroup) groups=1100(testgroup) 192.168.100.131 | success | rc=0 >> uid=1000(testuser) gid=1100(testgroup) groups=1100(testgroup)
4、copy 模块
[[email protected] ansible]# ansible-doc -s copy less 436 Copyright (C) 1984-2009 Mark Nudelman less comes with NO WARRANTY, to the extent permitted by law. For information about the terms of redistribution, see the file named README in the less distribution. Homepage: http://www.greenwoodsoftware.com/less - name: C o p i e s f i l e s t o r e m o t e l o c a t i o n s . action: copy backup # Create a backup file including the timestamp information so you can get the original file back if you somehow clobbered it incorrectly. content # When used instead of ‘src‘, sets the contents of a file directly to the specified value. dest= # Remote absolute path where the file should be copied to. If src is a directory, this must be a directory too. directory_mode # When doing a recursive copy set the mode for the directories. If this is not set we will use the system defaults. The mode is only set o follow # This flag indicates that filesystem links, if they exist, should be followed. force # the default is `yes‘, which will replace the remote file when contents are different than the source. If `no‘, the file will only be tr group # name of the group that should own the file/directory, as would be fed to `chown‘ mode # mode the file or directory should be, such as 0644 as would be fed to `chmod‘. As of version 1.8, the mode may be specified as a symboli owner # name of the user that should own the file/directory, as would be fed to `chown‘ selevel # level part of the SELinux file context. This is the MLS/MCS attribute, sometimes known as the `range‘. `_default‘ feature works as for ` serole # role part of SELinux file context, `_default‘ feature works as for `seuser‘. setype # type part of SELinux file context, `_default‘ feature works as for `seuser‘. seuser # user part of SELinux file context. Will default to system policy, if applicable. If set to `_default‘, it will use the `user‘ portion of src # Local path to a file to copy to the remote server; can be absolute or relative. If path is a directory, it is copied recursively. In thi validate # The validation command to run before copying into place. The path to the file to validate is passed in via ‘%s‘ which must be present a [[email protected] ansible]#
Ps：src 可以为绝对或相对路径 dest 必须为绝对路径
示例：将文件copy到测试主机：
[[email protected] ansible]# ansible testservers -m copy -a ‘src=/root/install.log dest=/tmp/install.log owner=testuser group=testgroup‘
192.168.100.131 | success >> {
"changed": true,
"checksum": "7b3626c84bb02d12472c03d2ece878fdc4756c94",
"dest": "/tmp/install.log",
"gid": 1100,
"group": "testgroup",
"md5sum": "c7d8a01a077940859e773b7770d2e07e",
"mode": "0644",
"owner": "testuser",
"size": 9458,
"src": "/root/.ansible/tmp/ansible-tmp-1456387213.94-229503410500766/source",
"state": "file",
"uid": 1000
}
192.168.100.132 | success >> {
"changed": true,
"checksum": "7b3626c84bb02d12472c03d2ece878fdc4756c94",
"dest": "/tmp/install.log",
"gid": 1100,
"group": "testgroup",
"md5sum": "c7d8a01a077940859e773b7770d2e07e",
"mode": "0644",
"owner": "testuser",
"size": 9458,
"src": "/root/.ansible/tmp/ansible-tmp-1456387213.94-186055595812050/source",
"state": "file",
"uid": 1000
}
示例：copy 前先备份
[[email protected] ansible]# echo "test " >> /root/install.log
[[email protected] ansible]# ansible testservers -m copy -a ‘src=/root/install.log dest=/tmp/install.log owner=testuser group=testgroup backup=yes‘
192.168.100.132 | success >> {
"backup_file": "/tmp/[email protected]:01:26~",
"changed": true,
"checksum": "b5da7af32ad02eb98f77395b28f281a965b4c1f5",
"dest": "/tmp/install.log",
"gid": 1100,
"group": "testgroup",
"md5sum": "d39956add30a18019cb5ad2381a0cd43",
"mode": "0644",
"owner": "testuser",
"size": 9464,
"src": "/root/.ansible/tmp/ansible-tmp-1456387285.87-128685659798967/source",
"state": "file",
"uid": 1000
}
192.168.100.131 | success >> {
"backup_file": "/tmp/[email protected]:01:26~",
"changed": true,
"checksum": "b5da7af32ad02eb98f77395b28f281a965b4c1f5",
"dest": "/tmp/install.log",
"gid": 1100,
"group": "testgroup",
"md5sum": "d39956add30a18019cb5ad2381a0cd43",
"mode": "0644",
"owner": "testuser",
"size": 9464,
"src": "/root/.ansible/tmp/ansible-tmp-1456387285.86-134452201968647/source",
"state": "file",
"uid": 1000
}
[[email protected] ansible]# ansible testservers -m raw -a ‘ls -lrth /tmp/install*‘
192.168.100.131 | success | rc=0 >>
-rw-r--r-- 1 root root 9.3K 2 25 16:00 /tmp/[email protected]:01:26~
-rw-r--r-- 1 testuser testgroup 9.3K 2 25 16:01 /tmp/install.log
192.168.100.132 | success | rc=0 >>
-rw-r--r-- 1 root root 9.3K 2 25 16:00 /tmp/[email protected]:01:26~
-rw-r--r-- 1 testuser testgroup 9.3K 2 25 16:01 /tmp/install.log
示例：将目录copy过去
[[email protected] ansible]# tree testdir
testdir
├── a
│ ├── e
│ │ └── ansible.cfg
│ ├── f
│ └── g
├── b
│ ├── e
│ ├── f
│ └── g
└── c
├── ansible.cfg
├── e
├── f
└── g
[[email protected] ansible]# ansible testservers -m copy -a ‘src=/etc/ansible/testdir dest=/tmp/ owner=testuser group=testgroup backup=yes‘
192.168.100.131 | success >> {
"changed": true,
"dest": "/tmp/",
"src": "/etc/ansible/testdir"
}
192.168.100.132 | success >> {
"changed": true,
"dest": "/tmp/",
"src": "/etc/ansible/testdir"
}
[[email protected] ansible]# ansible testservers -m command -a ‘tree /tmp/testdir‘
192.168.100.131 | success | rc=0 >>
/tmp/testdir
|-- a
| `-- e
| `-- ansible.cfg
|-- b
| `-- e
| `-- hosts
`-- c
`-- ansible.cfg
5 directories, 3 files
192.168.100.132 | success | rc=0 >>
/tmp/testdir
|-- a
| `-- e
| `-- ansible.cfg
|-- b
| `-- e
| `-- hosts
`-- c
`-- ansible.cfg
5 directories, 3 files
发现有文件的目录copy成功，空的目录没有copy过去
时间： 2024-12-23 13:52:03