查詢模塊的參數：
ansible-doc -s moduleName
如 cron 模塊
[root@node1 ansible]# ansible-doc -s cron less 436 Copyright (C) 1984-2009 Mark Nudelman less comes with NO WARRANTY, to the extent permitted by law. For information about the terms of redistribution, see the file named README in the less distribution. Homepage: http://www.greenwoodsoftware.com/less - name: M a n a g e c r o n . d a n d c r o n t a b e n t r i e s . action: cron backup # If set, create a backup of the crontab before it is modified. The location of the backup is returned in the `backup' variable by this mo cron_file # If specified, uses this file in cron.d instead of an individual user's crontab. day # Day of the month the job should run ( 1-31, *, */2, etc ) hour # Hour when the job should run ( 0-23, *, */2, etc ) job # The command to execute. Required if state=present. minute # Minute when the job should run ( 0-59, *, */2, etc ) month # Month of the year the job should run ( 1-12, *, */2, etc ) name= # Description of a crontab entry. reboot # If the job should be run at reboot. This option is deprecated. Users should use special_time. special_time # Special time specification nickname. state # Whether to ensure the job is present or absent. user # The specific user whose crontab should be modified. weekday # Day of the week that the job should run ( 0-6 for Sunday-Saturday, *, etc )
1、cron 模塊
示例：每小時的10分鐘時候執行一個腳本 默認是*
[root@node1 ansible]# ansible testservers -m cron -a 'name="test cron", "minute=10" job="/bin/bash /root/test.sh" state=present'
192.168.100.131 | success >> {
"changed": true,
"jobs": [
"test cron,"
]
}
192.168.100.132 | success >> {
"changed": true,
"jobs": [
"test cron,"
]
}
[root@node1 ansible]# ansible testservers -m command -a 'crontab -l'
192.168.100.131 | success | rc=0 >>
#Ansible: test cron,
10 * * * * /bin/bash /root/test.sh
192.168.100.132 | success | rc=0 >>
#Ansible: test cron,
10 * * * * /bin/bash /root/test.sh刪除上面的計劃任務
[root@node1 ansible]# ansible testservers -m cron -a 'name="test cron", "minute=10" job="/bin/bash /root/test.sh" state=absent'
192.168.100.131 | success >> {
"changed": true,
"jobs": []
}
192.168.100.132 | success >> {
"changed": true,
"jobs": []
}
[root@node1 ansible]# ansible testservers -m command -a 'crontab -l'
192.168.100.132 | success | rc=0 >>
192.168.100.131 | success | rc=0 >>2、user 模塊
[root@node1 ansible]# ansible-doc -s user
less 436
Copyright (C) 1984-2009 Mark Nudelman
less comes with NO WARRANTY, to the extent permitted by law.
For information about the terms of redistribution,
see the file named README in the less distribution.
Homepage: http://www.greenwoodsoftware.com/less
- name: M a n a g e u s e r a c c o u n t s
action: user
append # If `yes', will only add groups, not set them to just the list in `groups'.
comment # Optionally sets the description (aka `GECOS') of user account.
createhome # Unless set to `no', a home directory will be made for the user when the account is created or if the home directory does not exist.
expires # An expiry time for the user in epoch, it will be ignored on platforms that do not support this. Currently supported on Linux and FreeBSD
force # When used with `state=absent', behavior is as with `userdel --force'.
generate_ssh_key # Whether to generate a SSH key for the user in question. This will *not* overwrite an existing SSH key.
group # Optionally sets the user's primary group (takes a group name).
groups # Puts the user in this comma-delimited list of groups. When set to the empty string ('groups='), the user is removed from all groups exce
home # Optionally set the user's home directory.
login_class # Optionally sets the user's login class for FreeBSD, OpenBSD and NetBSD systems.
move_home # If set to `yes' when used with `home=', attempt to move the user's home directory to the specified directory if it isn't there already.
name= # Name of the user to create, remove or modify.
non_unique # Optionally when used with the -u option, this option allows to change the user ID to a non-unique value.
password # Optionally set the user's password to this crypted value. See the user example in the github examples directory for what this looks lik
remove # When used with `state=absent', behavior is as with `userdel --remove'.
shell # Optionally set the user's shell.
ssh_key_bits # Optionally specify number of bits in SSH key to create.
ssh_key_comment # Optionally define the comment for the SSH key.
ssh_key_file # Optionally specify the SSH key filename. If this is a relative filename then it will be relative to the user's home directory.
ssh_key_passphrase # Set a passphrase for the SSH key. If no passphrase is provided, the SSH key will default to having no passphrase.
ssh_key_type # Optionally specify the type of SSH key to generate. Available SSH key types will depend on implementation present on target host.
state # Whether the account should exist or not, taking action if the state is different from what is stated.
system # When creating an account, setting this to `yes' makes the user a system account. This setting cannot be changed on existing users.
uid # Optionally sets the `UID' of the user.
update_password # `always' will update passwords if they differ. `on_create' will only set the password for newly created users.
[root@node1 ansible]#示例：
創建一個用戶testuser uid=1000
[root@node1 ansible]# ansible testservers -m user -a 'name=testuser uid=1000 shell=/bin/bash home=/opt/testuser state=present'
192.168.100.131 | success >> {
"changed": true,
"comment": "",
"createhome": true,
"group": 1000,
"home": "/opt/testuser",
"name": "testuser",
"shell": "/bin/bash",
"state": "present",
"system": false,
"uid": 1000
}
192.168.100.132 | success >> {
"changed": true,
"comment": "",
"createhome": true,
"group": 1000,
"home": "/opt/testuser",
"name": "testuser",
"shell": "/bin/bash",
"state": "present",
"system": false,
"uid": 1000
}刪除此用戶 連同用戶家目錄：
[root@node1 ansible]# ansible testservers -m user -a 'name=testuser remove=yes state=absent'
192.168.100.131 | success >> {
"changed": true,
"force": false,
"name": "testuser",
"remove": true,
"state": "absent"
}
192.168.100.132 | success >> {
"changed": true,
"force": false,
"name": "testuser",
"remove": true,
"state": "absent"
}3、group模塊
[root@node1 ansible]# ansible-doc -s group less 436 Copyright (C) 1984-2009 Mark Nudelman less comes with NO WARRANTY, to the extent permitted by law. For information about the terms of redistribution, see the file named README in the less distribution. Homepage: http://www.greenwoodsoftware.com/less - name: A d d o r r e m o v e g r o u p s action: group gid # Optional `GID' to set for the group. name= # Name of the group to manage. state # Whether the group should be present or not on the remote host. system # If `yes', indicates that the group created is a system group. [root@node1 ansible]#
示例：
創建一個用戶組
[root@node1 ansible]# ansible testservers -m group -a 'name=testgroup gid=1100 state=present'
192.168.100.131 | success >> {
"changed": true,
"gid": 1100,
"name": "testgroup",
"state": "present",
"system": false
}
192.168.100.132 | success >> {
"changed": true,
"gid": 1100,
"name": "testgroup",
"state": "present",
"system": false
}綜合示例：
在主機上創建一個testgroup組，然後創建一個testuser，並將其加入testgroup組
[root@node1 ansible]# ansible testservers -m group -a 'name=testgroup gid=1100 state=present' [root@node1 ansible]# ansible testservers -m user -a 'name=testuser uid=1000 shell=/bin/bash home=/opt/testuser group=testgroup state=present' [root@node1 ansible]# ansible testservers -m command -a 'id testuser' 192.168.100.132 | success | rc=0 >> uid=1000(testuser) gid=1100(testgroup) groups=1100(testgroup) 192.168.100.131 | success | rc=0 >> uid=1000(testuser) gid=1100(testgroup) groups=1100(testgroup)
4、copy 模塊
[root@node1 ansible]# ansible-doc -s copy less 436 Copyright (C) 1984-2009 Mark Nudelman less comes with NO WARRANTY, to the extent permitted by law. For information about the terms of redistribution, see the file named README in the less distribution. Homepage: http://www.greenwoodsoftware.com/less - name: C o p i e s f i l e s t o r e m o t e l o c a t i o n s . action: copy backup # Create a backup file including the timestamp information so you can get the original file back if you somehow clobbered it incorrectly. content # When used instead of 'src', sets the contents of a file directly to the specified value. dest= # Remote absolute path where the file should be copied to. If src is a directory, this must be a directory too. directory_mode # When doing a recursive copy set the mode for the directories. If this is not set we will use the system defaults. The mode is only set o follow # This flag indicates that filesystem links, if they exist, should be followed. force # the default is `yes', which will replace the remote file when contents are different than the source. If `no', the file will only be tr group # name of the group that should own the file/directory, as would be fed to `chown' mode # mode the file or directory should be, such as 0644 as would be fed to `chmod'. As of version 1.8, the mode may be specified as a symboli owner # name of the user that should own the file/directory, as would be fed to `chown' selevel # level part of the SELinux file context. This is the MLS/MCS attribute, sometimes known as the `range'. `_default' feature works as for ` serole # role part of SELinux file context, `_default' feature works as for `seuser'. setype # type part of SELinux file context, `_default' feature works as for `seuser'. seuser # user part of SELinux file context. Will default to system policy, if applicable. If set to `_default', it will use the `user' portion of src # Local path to a file to copy to the remote server; can be absolute or relative. If path is a directory, it is copied recursively. In thi validate # The validation command to run before copying into place. The path to the file to validate is passed in via '%s' which must be present a [root@node1 ansible]#
Ps：src 可以爲絕對或相對路徑 dest 必須爲絕對路徑
示例：將文件copy到測試主機：
[root@node1 ansible]# ansible testservers -m copy -a 'src=/root/install.log dest=/tmp/install.log owner=testuser group=testgroup'
192.168.100.131 | success >> {
"changed": true,
"checksum": "7b3626c84bb02d12472c03d2ece878fdc4756c94",
"dest": "/tmp/install.log",
"gid": 1100,
"group": "testgroup",
"md5sum": "c7d8a01a077940859e773b7770d2e07e",
"mode": "0644",
"owner": "testuser",
"size": 9458,
"src": "/root/.ansible/tmp/ansible-tmp-1456387213.94-229503410500766/source",
"state": "file",
"uid": 1000
}
192.168.100.132 | success >> {
"changed": true,
"checksum": "7b3626c84bb02d12472c03d2ece878fdc4756c94",
"dest": "/tmp/install.log",
"gid": 1100,
"group": "testgroup",
"md5sum": "c7d8a01a077940859e773b7770d2e07e",
"mode": "0644",
"owner": "testuser",
"size": 9458,
"src": "/root/.ansible/tmp/ansible-tmp-1456387213.94-186055595812050/source",
"state": "file",
"uid": 1000
}示例：copy 前先備份
[root@node1 ansible]# echo "test " >> /root/install.log
[root@node1 ansible]# ansible testservers -m copy -a 'src=/root/install.log dest=/tmp/install.log owner=testuser group=testgroup backup=yes'
192.168.100.132 | success >> {
"backup_file": "/tmp/install.log.2016-02-25@16:01:26~",
"changed": true,
"checksum": "b5da7af32ad02eb98f77395b28f281a965b4c1f5",
"dest": "/tmp/install.log",
"gid": 1100,
"group": "testgroup",
"md5sum": "d39956add30a18019cb5ad2381a0cd43",
"mode": "0644",
"owner": "testuser",
"size": 9464,
"src": "/root/.ansible/tmp/ansible-tmp-1456387285.87-128685659798967/source",
"state": "file",
"uid": 1000
}
192.168.100.131 | success >> {
"backup_file": "/tmp/install.log.2016-02-25@16:01:26~",
"changed": true,
"checksum": "b5da7af32ad02eb98f77395b28f281a965b4c1f5",
"dest": "/tmp/install.log",
"gid": 1100,
"group": "testgroup",
"md5sum": "d39956add30a18019cb5ad2381a0cd43",
"mode": "0644",
"owner": "testuser",
"size": 9464,
"src": "/root/.ansible/tmp/ansible-tmp-1456387285.86-134452201968647/source",
"state": "file",
"uid": 1000
}
[root@node1 ansible]# ansible testservers -m raw -a 'ls -lrth /tmp/install*'
192.168.100.131 | success | rc=0 >>
-rw-r--r-- 1 root root 9.3K 2 25 16:00 /tmp/install.log.2016-02-25@16:01:26~
-rw-r--r-- 1 testuser testgroup 9.3K 2 25 16:01 /tmp/install.log
192.168.100.132 | success | rc=0 >>
-rw-r--r-- 1 root root 9.3K 2 25 16:00 /tmp/install.log.2016-02-25@16:01:26~
-rw-r--r-- 1 testuser testgroup 9.3K 2 25 16:01 /tmp/install.log示例：將目錄copy過去
[root@node1 ansible]# tree testdir
testdir
├── a
│ ├── e
│ │ └── ansible.cfg
│ ├── f
│ └── g
├── b
│ ├── e
│ ├── f
│ └── g
└── c
├── ansible.cfg
├── e
├── f
└── g
[root@node1 ansible]# ansible testservers -m copy -a 'src=/etc/ansible/testdir dest=/tmp/ owner=testuser group=testgroup backup=yes'
192.168.100.131 | success >> {
"changed": true,
"dest": "/tmp/",
"src": "/etc/ansible/testdir"
}
192.168.100.132 | success >> {
"changed": true,
"dest": "/tmp/",
"src": "/etc/ansible/testdir"
}
[root@node1 ansible]# ansible testservers -m command -a 'tree /tmp/testdir'
192.168.100.131 | success | rc=0 >>
/tmp/testdir
|-- a
| `-- e
| `-- ansible.cfg
|-- b
| `-- e
| `-- hosts
`-- c
`-- ansible.cfg
5 directories, 3 files
192.168.100.132 | success | rc=0 >>
/tmp/testdir
|-- a
| `-- e
| `-- ansible.cfg
|-- b
| `-- e
| `-- hosts
`-- c
`-- ansible.cfg
5 directories, 3 files發現有文件的目錄copy成功，空的目錄沒有copy過去