1
2
3

yum search ansible

sudo yum install ansible

1
2
3
4
5

# env
# python -m virtualenv ansible
# source ansible/bin/activate
pip install --user ansible
pip install --user paramiko

1
2
3
4
5

sudo yum install epel-release
sudo yum install python-argcomplete

# pip
# pip install argcomplete

1
2

# Global completion requires bash 4.2.
sudo activate-global-python-argcomplete

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

# If you do not have bash 4.2, you must register each script independently.
# 可将这些写入.profile里
eval $(register-python-argcomplete ansible)
eval $(register-python-argcomplete ansible-config)
eval $(register-python-argcomplete ansible-console)
eval $(register-python-argcomplete ansible-doc)
eval $(register-python-argcomplete ansible-galaxy)
eval $(register-python-argcomplete ansible-inventory)
eval $(register-python-argcomplete ansible-playbook)
eval $(register-python-argcomplete ansible-pull)
eval $(register-python-argcomplete ansible-vault)

1
2
3
4
5
6

# 创建一个基本的清单
# 在此文件中添加远程系统
vim /etc/ansible/hosts
192.0.2.50
aserver.example.org
bserver.example.org

1
2
3
4
5
6

# 运行第一个ansible命令
ansible all -m ping


# 运行一个节点上的命令
ansible all -a "/bin/echo hell"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# INI格式
mail.example.com

# 组名
[webservers]
a.example.com
b.example.com

[dbserver]
db1.example.com
db2.example.com
db3.example.com

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

# YAML格式
all:
  hosts:
    mail.example.com:
  children:
    webserver:
      hosts:
        a.example.com:
        b.example.com:
    dbservers:
      hosts:
        db1.example.com:
        db2.example.com:
        db3.example.com:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

all:
  hosts:
    mail.example:
  children:
    webservers:
      hosts:
        f.example.com:
        b.example.com:
    dbservers:
      hosts:
        one.example.com:
        two.example.com:
    east:
      hosts:
        f.example.com:
        one.example.com:
    west:
      hosts:
        b.example.com:
        two.example.com:
    prod:
      children:
        east:
    test:
      hosts:
        b.example.com:

1
2
3
4
5
6
7

...
  webservers:
    hosts:
      www[01:20].example.com:
  dbservers:
    hosts:
      db-[a:f].example.com

1
2
3
4
5
6
7

atlanta:
  hosts1:
    http_port: 80
    maxRequestPerChild: 808
  hosts2:
    http_port: 303
    maxRequestPerChild: 909

1
2
3
4
5

...
  hosts:
    jumper:
      ansible_port: 5555
      ansible_host: 192.0.2.50

1
2
3
4
5
6
7

atlanta:
  hosts:
    hosts1:
    host2:
  vars:
    ntp_server: ntp.atlanta.example.com
    proxy: proxy.atlanta.example.com

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

all:
  children:
    usa:
      children:
        southeast:
          children:
            atlanta:
              hosts:
                hosts1:
                hosts2:
            raleigh:
              hosts:
                hosts2:
                hosts3:
            vars:
              some_server: foo.southeast.example.com
              halon_system_timeout: 30
              self_destruct_countdown: 60
              escape_pods: 2
          northeast:
          norethwest:
          southwest:

1
2
3
4
5
6

# testvar == a
a_group:
  testvar: a
  ansible_group_priority: 10
b_group:
  testvar: b

1
2

# target 2 sources
ansible-playbook get_logs.yml -i staging -i production

1
2
3
4
5
6

inventory/
  openstack.yml          # configure inventory plugin to get hosts from Openstack cloud
  dynamic-inventory.py   # add additional hosts with dynamic inventory script
  static-inventory       # add static hosts and groups
  group_vars/
    all.yml              # assign variables to all hosts

1
2

# target inventory
ansible-playbook example.yml -i inventory

1
2
3
4
5

# Example: One inventory per environment
# inventory_test
[dbservers]
db01.test.example.com
db02.test.example.com

1
2
3
4
5
6
7
8

# Example: Group by function
- hosts: dbservers
  tasks:
  - name: allow access from 10.0.0.1
    iptables:
      chain: INPUT
      jump: ACCEPT
      source: 10.0.0.1

1
2
3
4

# Example: Group by location
[dc1]
db01.test.example.com
app01.test.example.com

1
2
3

# ad-hoc
# ansible {pattern} -m {module_name} -a "{module_options}"
ansible webservers -m service -a "name=httpd state=restarted"

1
2
3
4
5
6

# palybook
- name: {play_name}
  hosts: {pattern}

- name: restart webservers
  hosts: webservers

1
2

# playbook
webservers:!{{ excluded }}:&{{ required }}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

[g1]
aa
bb
cc


g1[0]
g1[-1]
g1[0:2]
g1[1:]

1

ansible-playbook site.yml --limit datacenter2

1
2

# 栗子
ansible [pattern] -m [module] -a "[module options]"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

# rebooting servers
ansible host1 -a "/sbin/reboot"


# 默认是5并发进程
ansible host1 -a "/sbin/reboot" -f 10


# ansible将默认为你的用户账户
ansible host1 -a "/sbin/reboot" -f 10 -u username



# 重启服务器可能需要特权提升，如从user到root
ansible host1 -a "/sbin/reboot" -f 10 -u username --become [--ask-become-pass]


# 使用不同的模块
ansible host1 -m shell -a 'echo ${TERM}'

1
2
3
4
5
6
7

# 复制文件
ansible atlanta -m copy -a "src=/etc/hosts dest=/tmp/hosts"

# file模块属主和权限，创建目录，递归删除
ansible webservers -m file -a "dest=/srv/foo/b.txt mode=600 owner=mdehaan group=mdehaan"
ansible webservers -m file -a "dest=/path/to/c mode=755 owner=mdehaan group=mdehaan state=directory"
ansible webservers -m file -a "dest=/path/to/c state=absent"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# 安装了包不更新
ansible webservers -m yum -a "name=acme state=present"

# 特定包版本
ansible webservers -m yum -a "name=acme-1.5 state=present"

# 确认包是最新版
ansible webservers -m yum -a "name=acme state=latest"


# 确保未安装
ansible webservers -m yum -a "name=acme state=absent"

1
2
3

ansible all -m user -a "name=foo password={crypted password here}"

ansible all -m user -a "name=foo state=absent"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# 确保服务已启动
ansible webservers -m service -a "name=httpd state=started"


# 重启服务
ansible webservers -m service -a "name=httpd state=restarted"


# 确保服务已停止
ansible webservers -m service -a "name=httpd state=stopped"

1
2

# 查看所有facts
ansible all -m setup

1
2
3

# 建立ssh agent来避免输入密码
ssh-agent bash
ssh-add ~/.ssh/id_rsa

1

ansible localhost -m ping -e 'ansible_python_interpreter="/usr/bin/env python"'

1
2

[defaults]
host_key_checking = False

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

# 仅包含一个paly的`verigy-apache.yml`的playbook的栗子
---
- hosts: webserver
  vars:
    http_port: 80
    max_clients: 200
  remote_user: root
  tasks:
  - name: ensure apache is at the latest version
    yum:
      name: httpd
      state: latest
  - name: write the apache config file
    template:
      src: /srv/httpd.j2
      dest: /etc/httpd.conf
    notify:
    - restart apache
  - name: ensure apache is running
    service:
      name: httpd
      state: started
  handlers:
    - name: restart apache
      service:
        name: httpd
        state: restarted

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

# 包含多个play的栗子
---
- hosts: webservers
  remote_user: root

  tasks:
  - name: ensure apache is at the lastest version
    yum:
      name: httpd
      state: latest
  - name: write the apache config file
    template:
      src: /srv/httpd.j2
      dest: /etc/httpd.conf

- hosts: databases
  remote_user: root

  tasks:
  - name: ensure pgsql is at the latest version
    yum:
      name: postgresql
      state: latest
  - name: ensure that postgresql is started
    service:
      name: postgresql
      state: started

1
2
3
4
5
6
7
8

# hosts行是一个或多个主机或组的模式，以冒号分隔
---
- hosts: webservers
  remote_user: root
  tasks:
    - name: test
      ping:
      remote_user: username # 远程用户可在每个用户中定义

1
2
3
4
5

# 特权提升
---
- hosts: webservers
  remote_user: username
  become: yes

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# 也可在每个paly中使用become
---
- hosts: g1
  remote_user: uername
  tasks:
    - service:
        name: nginx
        state: started
      become: yes
      become_method: sudo

1
2
3
4
5
6

# 权限提升为特定用户
---
- hosts: g1
  remote_user: username
  become: yes
  become_user: postgres

1
2
3
4
5
6
7
8

# 控制运行顺序，默认是清单里面的顺序
---
- hosts: all
  order: sorted
  gather_facts: False
  tasks:
    - debug:
        var: inventory_hostname

1
2
3
4
5
6

# 一个任务的基本栗子
tasks:
  - name: make sure apache is running
    service:
      name: httpd
      state: started

1
2
3
4
5
6
7
8

# command, shell模块
tasks:
  - name: enable selinux
    command: /sbin/setenfore 1

tasks:
  - name: run this command and ignore the result
    shell: /usr/bin/somecommand || /bin/true

1
2
3
4
5

tasks:
  - name: create a virtual host file for {{ vhost}}
    template:
      src: somefile.j2
      dest: /etc/httpd/conf.d/{{ vhost}}

1
2
3
4

# Ansible prefers listing modules like this:
template:
  src: template/foo.j2
  dest: /etc/foo.conf

1
2
3
4
5
6
7
8

# 当一个文件的内容更改时（仅此文件），重启两个服务的栗子
- name: template configuration file
  template:
    src: template.j2
    dest: /etc/foo.conf
  notify:
    - restart memcached
    - restart apache

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# handlers section
handlers:
  - name: restart memcached
    service:
      name: memcached
      state: restarted
  - name: restart apached
    service:
      name: apache
      state: restarted

1
2
3
4
5
6
7
8
9

tasks:
  - name: Set host variables based on distribution
    include_vars: "{{ ansible_facts.distribution}}.yml"

handlers:
  - name: restart web service
    service:
      name: "{{ web_service_name | default('httpd') }}"
      state: restarted

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

handlers:
  - name: restart memcached
    service:
      name: memcached
      state: restarted
    listen: "restart web service"
  - name: restart apache
    service:
      name: apached
      state: restarted
    listen: "restart web services"

tasks:
  - name: restart everything
    command: echo "this task will restart the web services"
    notify: "resstart web service"

1

ansible-playbook playbook.yml -f 10

1
2
3
4

ansible-lint verify-apache.yml
[403] Package installs should not use latest
verify-apache.yml:8
Task/Handler: ensure apache is at the latest version

1
2

- import_playbook: a.yml
- import_playbook: b.yml

1
2
3
4

- name: aaa
  command: /bin/aaa
- name: bbb
  command: /bin/bbb

1
2
3
4

tasks:
- import_tasks: aaa_tasks.yml
# or
- include_tasks: aaa_tasks.yml

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

tasks:
- import_tasks: aaa.yaml
  vars:
    user: aaa
- import_tasks: aaa.yml
  vars:
    user: bbb
- import_tasks: aaa.yml
  vars:
    user: ccc

1
2
3
4
5

# more_handlers.yml
- name: restart apache
  service:
    name: apache
    state: restarted

1
2
3
4

handlers:
- include_tasks: more_handlers.yml
# or
- import_tasks: more_handlers.yml

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

site.yml
webservers.yml
fooservers.yml
roles/
    common/
        tasks/
        handlers/
        files/
        templates/
        vars/
        defaults/
        meta/
    webservers/
        tasks/
        defaults/
        meta/

1
2
3
4
5
6

# roles/example/tasks/main.yml
- name: added in 2.4, previously you used include
  import_tasks: redhat.yml
  when: ansible_facts['os_family']|lower == 'redhat'
  import_tasks: debian.yml
  when: ansible_facts['os_family']|lower == 'debian'

1
2
3
4

# roles/example/tasks/redhat.yml
- yum:
  name: "httpd"
  state: present

1
2
3
4

# roles/example/tasks/debian.yml
- pat:
  name: "apache2"
  state: present

1
2
3
4
5

---
- hosts: webservers
  roles:
    - common
    - webservers

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

---
- hosts: webservers
  tasks:
    - debug:
        msg: "before we run our role"
    - import_role:
        name: example
    - include_role:
        name: example
    - debug:
        msg: "after we ran our role"

1
2
3
4

---
- hosts: webservers
  roles:
    - role: '/path/to/roles/common'

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

---
- hosts: webservers
  tasks:
    - include_role:
        name: foo_app_instance
      when: "ansible_facts['os_family'] == 'RedHat'"
      vars:
        dir: '/opt/a'
        app_port: 5000
      tags:
        - aaa
        - bbb

1
2
3
4
5

---
- hosts: webservers
  roles:
    - foo
    - foo

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# playbook.yml
---
- hosts: webservers
  roles:
    - foo
    - foo

# roles/foo/meta/main.yml
---
allow_duplicates: true

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

# orles/myapp/meta/main.yml
---
dependencies:
  - role: common
    vars:
      come_parameter: 3
  - role: apache
    vars:
      apache_port: 80
  - role: postgres
    vars:
      dbname: blarg
      other_parameter: 12

1
2
3

foo:
  field1: one
  field2: two

1
2

foo['field1']
foo.field2

1
2

# 公共属性
add, append, count, decode...

1
2
3
4

west:
  host1:
    port: 80
    maxRequest: 808

1
2
3
4
5
6

east:
  hosts:
    host1: xx
    host2: xxx
  vars:
    port: 80

1
2
3

- hosts: xxx
  vars:
    port: 80

1
2
3
4
5
6
7
8

- hosts: xxx
  roles:
    - role: test
      vars:
        dir: '/opt/a'
    - role: test2
      vars:
        dir: '/opt/b'

1

Ma amp goes to {{ max_amp_value }}

1
2
3
4
5
6
7
8

# wrong
...
vars:
  path: {{ dir }}/22

# right
vars:
  path: "{{ dir }}/22"

1
2

# 查看facts
ansible hostname -m setup

1
2

- debug:
    var: ansible_facts

1

{{ ansible_facts['devices']['xvda']['model']}}

1
2

- hosts: xxx
  gather_facts: no

1
2
3
4
5
6
7

- hosts: xxx
  tasks:
    - shell: /usr/bin/foo
      register: foo_result
      ignore_errors: True
    - shell: /usr/bin/bar
      when: foo_result.rc == 5

1
2
3
4
5
6
7

{{ ansible_facts['eth0']['ipv4']['address']}}

# or
{{ ansible_facts.eth0.ipv4.address }}

# 访问数组的第一个元素
{{ foo[0] }}

1
2
3
4
5
6
7
8
9

{{ hostvars['test.example.com']['ansible_facts']['distribution'] }}

{% for host in groups['app_servers'] %}
    {{ hostvars[host]['ansible_facts']['eth0']['ipv4']['address'] }}
{% endfor %}

{% if 'webserver' in group_names %}
    # xxx
{% endif %}

1
2
3
4
5
6
7

---
- hosts: all
  ...
  vars:
    color: blue
  vars_files:
    - /vars/external_vars.yml

1
2
3

# external_vars.yml
user: xx
password: xxxx

1
2
3
4
5
6
7
8

# k:v格式
ansible-playbook release.yml --extra-vars "version=1.23.45 other_variable=foo"

# json格式
ansible-playbook arcade.yml --extra-vars '{"pacman":"mrs","ghosts":["inky","pinky","clyde","sue"]}'

# 文件
ansible-playbook release.yml --extra-vars "@some_file.json"

1
2
3
4
5
6

tasks:
  - name: "shut down CentOS 6 systems"
    command: /sbin/shutdown -t now
    when:
      - ansible_facts['distribution'] == "CentOS"
      - ansible_facts['distribution_major_version'] == "6"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

tasks:
  - command: /bin/false
    register: result
    ignore_errors: True

  - command: /bin/something
    when: result is failed

  # In older versions of ansible use ``success``, now both are valid but succeeded uses the correct tense.
  - command: /bin/something_else
    when: result is succeeded

  - command: /bin/still/something_else
    when: result is skipped

1
2
3

tasks:
    - shell: echo "This certainly is epic!"
      when: epic or monumental|bool

1
2
3
4
5
6

tasks:
    - shell: echo "I've got '{{ foo }}' and am not afraid to use it!"
      when: foo is defined

    - fail: msg="Bailing out. this play requires 'bar'"
      when: bar is undefined

1
2
3
4

tasks:
    - command: echo {{ item }}
      loop: [ 0, 2, 4, 6, 8, 10 ]
      when: item > 5

1
2
3
4
5

tasks:
    - name: gather site specific fact data
      action: site_facts
    - command: /usr/bin/thingy
      when: my_custom_fact_just_retrieved_from_the_remote_system == '1234'

1
2
3
4

- hosts: webservers
  roles:
     - role: debian_stock_config
       when: ansible_facts['os_family'] == 'Debian'

1
2
3
4
5
6
7
8
9

---
- hosts: all
  remote_user: root
  vars_files:
    - "vars/common.yml"
    - [ "vars/{{ ansible_facts['os_family'] }}.yml", "vars/os_defaults.yml" ]
  tasks:
  - name: make sure apache is started
    service: name={{ apache }} state=started

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

- name: template a file
  template:
      src: "{{ item }}"
      dest: /etc/myapp/foo.conf
  loop: "{{ query('first_found', { 'files': myfiles, 'paths': mypaths}) }}"
  vars:
    myfiles:
      - "{{ansible_facts['distribution']}}.conf"
      -  default.conf
    mypaths: ['search_location_one/somedir/', '/opt/other_location/somedir/']

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

- name: check registered variable for emptiness
  hosts: all

  tasks:

      - name: list contents of directory
        command: ls mydir
        register: contents

      - name: check contents for emptiness
        debug:
          msg: "Directory is empty"
        when: contents.stdout == ""

1
2
3
4
5

ansible_facts[‘distribution’]

ansible_facts[‘distribution_major_version’]

ansible_facts[‘os_family’]

1
2
3
4
5
6
7

with_items:
  - 1
  - [2,3]
  - 4

# you would need
loop: "{{ [1, [2,3] ,4] | flatten(1) }}"

1
2
3
4
5
6
7
8

- name: add several users
  user:
    name: "{{ item }}"
    state: present
    groups: "wheel"
  loop:
     - testuser1
     - testuser2

1
2
3
4
5
6
7
8

- name: add several users
  user:
    name: "{{ item.name }}"
    state: present
    groups: "{{ item.groups }}"
  loop:
    - { name: 'testuser1', groups: 'wheel' }
    - { name: 'testuser2', groups: 'root' }

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

- name: create a tag dictionary of non-empty tags
  set_fact:
    tags_dict: "{{ (tags_dict|default({}))|combine({item.key: item.value}) }}"
  loop: "{{ tags|dict2items }}"
  vars:
    tags:
      Environment: dev
      Application: payment
      Another: "{{ doesnotexist|default() }}"
  when: item.value != ""

1
2
3
4
5

- shell: "echo {{ item }}"
  loop:
    - "one"
    - "two"
  register: echo

1
2
3
4
5
6
7

- name: give users access to multiple databases
  mysql_user:
    name: "{{ item[0] }}"
    priv: "{{ item[1] }}.*:ALL"
    append_privs: yes
    password: "foo"
  loop: "{{ ['alice', 'bob'] |product(['clientdb', 'employeedb', 'providerdb'])|list }}"

1
2
3
4
5

- shell: /usr/bin/foo
  register: result
  until: result.stdout.find("all systems go") != -1
  retries: 5
  delay: 10

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

# show all the hosts in the inventory
- debug:
    msg: "{{ item }}"
  loop: "{{ groups['all'] }}"

# show all the hosts in the current play
- debug:
    msg: "{{ item }}"
  loop: "{{ ansible_play_batch }}"


# show all the hosts in the inventory
- debug:
    msg: "{{ item }}"
  loop: "{{ query('inventory_hostnames', 'all') }}"

# show all the hosts matching the pattern, ie all but the group www
- debug:
    msg: "{{ item }}"
  loop: "{{ query('inventory_hostnames', 'all:!www') }}"

1
2
3
4

# same thing
loop: "{{ query('inventory_hostnames', 'all') }}"

loop: "{{ lookup('inventory_hostnames', 'all', wantlist=True) }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

# 此任务输出仅显示每项的name字段
- name: create servers
  digital_ocean:
    name: "{{ item.name }}"
    state: present
  loop:
    - name: server1
      disks: 3gb
      ram: 15Gb
      network:
        nic01: 100Gb
        nic02: 10Gb
        ...
  loop_control:
    label: "{{ item.name }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# main.yml
- name: create servers, pause 3s before creating next
  digital_ocean:
    name: "{{ item }}"
    state: present
  loop:
    - server1
    - server2
  loop_control:
    pause: 3

1
2
3
4
5
6
7
8
9

- name: count our fruit
  debug:
    msg: "{{ item }} with index {{ my_idx }}"
  loop:
    - apple
    - banana
    - pear
  loop_control:
    index_var: my_idx

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

- include_tasks: inner.yml
  loop:
    - 1
    - 2
    - 3
  loop_control:
    loop_var: outer_item

# inner.yml
- debug:
    msg: "outer item={{ outer_item }} inner item={{ item }}"
  loop:
    - a
    - b
    - c

1
2

loop_control:
  extended: yes

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

Variable	Description
ansible_loop.allitems	The list of all items in the loop
ansible_loop.index	The current iteration of the loop. (1 indexed)
ansible_loop.index0	The current iteration of the loop. (0 indexed)
ansible_loop.revindex	The number of iterations from the end of the loop (1 indexed)
ansible_loop.revindex0	The number of iterations from the end of the loop (0 indexed)
ansible_loop.first	True if first iteration
ansible_loop.last	True if last iteration
ansible_loop.length	The number of items in the loop
ansible_loop.previtem	The item from the previous iteration of the loop. Undefined during the first iteration.
ansible_loop.nextitem	The item from the following iteration of the loop. Undefined during the last iteration.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

# with_list被loop替代
- name: with_list
  debug:
    msg: "{{ item }}"
  with_list:
    - one
    - two

- name: with_list -> loop
  debug:
    msg: "{{ item }}"
  loop:
    - one
    - two

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# with_items被loop和flatten过滤器替代
- name: with_items
  debug:
    msg: "{{ item }}"
  with_items: "{{ items }}"

- name: with_items -> loop
  debug:
    msg: "{{ item }}"
  loop: "{{ items|flatten(levels=1) }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# with_indexed_items被loop, flatten, loop_control.index_var替代
- name: with_indexed_items
  debug:
    msg: "{{ item.0 }} - {{ item.1 }}"
  with_indexed_items: "{{ items }}"

- name: with_indexed_items -> loop
  debug:
    msg: "{{ index }} - {{ item }}"
  loop: "{{ items|flatten(levels=1) }}"
  loop_control:
    index_var: index

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# with_flattened被loop和flatten替代
- name: with_flattened
  debug:
    msg: "{{ item }}"
  with_flattened: "{{ items }}"

- name: with_flattened -> loop
  debug:
    msg: "{{ item }}"
  loop: "{{ items|flatten }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# with_together被loop和zip替代
- name: with_together
  debug:
    msg: "{{ item.0 }} - {{ item.1 }}"
  with_together:
    - "{{ list_one }}"
    - "{{ list_two }}"

- name: with_together -> loop
  debug:
    msg: "{{ item.0 }} - {{ item.1 }}"
  loop: "{{ list_one|zip(list_two)|list }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

# with_dict可通过loop和 dictsort或dict2items替代
- name: with_dict
  debug:
    msg: "{{ item.key }} - {{ item.value }}"
  with_dict: "{{ dictionary }}"

- name: with_dict -> loop (option 1)
  debug:
    msg: "{{ item.key }} - {{ item.value }}"
  loop: "{{ dictionary|dict2items }}"

- name: with_dict -> loop (option 2)
  debug:
    msg: "{{ item.0 }} - {{ item.1 }}"
  loop: "{{ dictionary|dictsort }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

# with_sequence被loop, range, format替代
- name: with_sequence
  debug:
    msg: "{{ item }}"
  with_sequence: start=0 end=4 stride=2 format=testuser%02x

- name: with_sequence -> loop
  debug:
    msg: "{{ 'testuser%02x' | format(item) }}"
  # range is exclusive of the end point
  loop: "{{ range(0, 4 + 1, 2)|list }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# with_subelements被loop, subelements替代
- name: with_subelements
  debug:
    msg: "{{ item.0.name }} - {{ item.1 }}"
  with_subelements:
    - "{{ users }}"
    - mysql.hosts

- name: with_subelements -> loop
  debug:
    msg: "{{ item.0.name }} - {{ item.1 }}"
  loop: "{{ users|subelements('mysql.hosts') }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# with_nested/with_cartesian被loop, product替代
- name: with_nested
  debug:
    msg: "{{ item.0 }} - {{ item.1 }}"
  with_nested:
    - "{{ list_one }}"
    - "{{ list_two }}"

- name: with_nested -> loop
  debug:
    msg: "{{ item.0 }} - {{ item.1 }}"
  loop: "{{ list_one|product(list_two)|list }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

# with_random_choice被random替代
- name: with_random_choice
  debug:
    msg: "{{ item }}"
  with_random_choice: "{{ my_list }}"

- name: with_random_choice -> loop (No loop is needed here)
  debug:
    msg: "{{ my_list|random }}"
  tags: random

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

tasks:
   - name: Install, configure, and start Apache
     block:
       - name: install httpd and memcached
         yum:
           name:
           - httpd
           - memcached
           state: present

       - name: apply the foo config template
         template:
           src: templates/src.j2
           dest: /etc/foo.conf
       - name: start service bar and enable it
         service:
           name: bar
           state: started
           enabled: True
     when: ansible_facts['distribution'] == 'CentOS'
     become: true
     become_user: root
     ignore_errors: yes

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

# block error handling example
tasks:
 - name: Handle the error
   block:
     - debug:
         msg: 'I execute normally'
     - name: i force a failure
       command: /bin/false
     - debug:
         msg: 'I never execute, due to the above task failing, :-('
   rescue:
     - debug:
         msg: 'I caught an error, can do stuff here to fix it, :-)'

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

 - name: Always do X
   block:
     - debug:
         msg: 'I execute normally'
     - name: i force a failure
       command: /bin/false
     - debug:
         msg: 'I never execute :-('
   always:
     - debug:
         msg: "This always executes, :-)"

1
2
3
4
5
6

# -B 超时时间， -p 轮询数
ansible all -B 3600 -P 0 -a "/usr/bin/long_running_operation --do-stuff"


# async_status模块 检查状态
ansible web1.example.com -m async_status -a "jid=488359678239.2844"

1
2
3
4
5
6
7
8

---
- hosts: all
  remote_user: root
  tasks:
  - name: simulate long running op (15 sec), wait for up to 45 sec, poll every 5 sec
    command: /bin/sleep 15
    async: 45
    poll: 5

1
2
3
4
5
6
7
8

---
- hosts: all
  remote_user: root
  tasks:
  - name: simulate long running op, allow to run for 45 sec, fire and forget
    command: /bin/sleep 15
    async: 45
    poll: 0

1
2
3
4

# on a task
- name: execute a command
  command: false
  debugger: on_failed

1
2
3
4
5
6
7
8

# on a play
- name: play
  hosts: all
  debugger: on_skipped
  tasks:
    - name: Execute a command
      command: true
      when: False

1
2
3
4
5
6
7

- name: Play
  hosts: all
  debugger: never
  tasks:
    - name: Execute a command
      command: false
      debugger: on_failed