zoukankan      html  css  js  c++  java
  • Centos6.5安装ansible2.6.3

    需求描述:

       管理具有特征性的集群服务器,50台左右,服务都是规划好的!为了更加有效地管理服务器,需要引入协助管理员关系的工具!ansible基于ssh通信不需要安装agent(agentless),使用简单

      有需求,动力就会诞生!为了更好地服务自己及他人,分享知识中的点点滴滴!

    搭建环境:

    Linux: Centos6.5x64

    python:python2.6+

    ansible: 2.6.3

    相关资源:

    libsodium-1.0.16.tar.gz

    https://pan.baidu.com/s/10nwgFipRbxF5yoDpYiqGtg 密码: 9w9i

    ansible2.6.3

    https://pan.baidu.com/s/1ZwzdkuhVvjhzgp9gbJZLTw 密码: 4mjq

    01、下载ansible

    https://releases.ansible.com/ansible/ansible-2.6.3.tar.gz   //发行

    https://releases.ansible.com/ansible/rpm/release/epel-6-x86_64/ansible-2.6.3-1.el6.ans.noarch.rpm  //rpm

    02、下载依赖

     https://pypi.org/     //官方库根据名字自己搜索,注意对python版本的依赖

    https://pan.baidu.com/s/1ZwzdkuhVvjhzgp9gbJZLTw 密码: 4mjq    //已经下载好的!

    03、安装依赖

     #yum安装

    yum install -y python python-setuptools gcc gcc-c++ python-devel  openssl-devel libffi-devel

     #源码安装libsodium

    https://github.com/jedisct1/libsodium/releases/download/1.0.16/libsodium-1.0.16.tar.gz
    ./configure
    make 
    make install

    /etc/ld.so.conf.d/libsodium.conf   //添加到系统环境动态库
    /usr/local/lib/

    ldconfig      
    ldconfig  -v |grep local  //查看是否加载

     #脚本自动安装

    #!/bin/bash
    #desc:  auto setup ansible
    #centos6.5+python2.6+ansible2.6.x
    
    #解压
    ls *.tar.gz |xargs -n1 tar zxf
    
    cd  MarkupSafe*
    python setup.py install
    cd ..
    
    cd Jinja2*
    python setup.py install
    cd ..
    
    cd PyYAML*
    python setup.py install
    cd ..
    
    cd pyasn1*
    python setup.py install
    cd ..
    
    cd pycparser*
    python setup.py install
    cd ..
    
    cd cffi*
    python setup.py install
    cd ..
    
    cd six*
    python setup.py install
    cd ..
    
    cd PyNaCl*
    python setup.py install
    cd ..
    
    cd ipaddress*
    python setup.py install
    cd ..
    
    cd enum34*
    python setup.py install
    cd ..
    
    cd asn1crypto*
    python setup.py install
    cd ..
    
    cd idna*
    python setup.py install
    cd ..
    
    cd cryptography*
    python setup.py install
    cd ..
    
    cd bcrypt*
    python setup.py install
    cd ..
    
    cd ordereddict*
    python setup.py install
    cd ..
    
    #安装parmiko cd paramiko* python setup.py install cd ..
    #安装ansible cd ansible* python setup.py install cd .. echo "all is ok"

     注意:注意安装中的报错要处理下!我测试没有问题的。。。

    04、配置文件

    find / -name ansible.cfg 2>/dev/null   //查找ansible.cfg主配置

    mkdir -p /etc/ansible/
    cp /root/ansible-2.6.3/examples/ansible.cfg /etc/ansible

    host_key_checking = False  //对ansible.cfg的knows检测取消

    05、测试

     #测试ssh主机是否可用

    [root@lab-110 ansible]# ansible local -m ping -k    //-k 对root密码验证
    SSH password: 
    172.24.0.110 | SUCCESS => {
        "changed": false, 
        "ping": "pong"
    }
    

    #免密码通讯

    ssh-keygen -t rsa    //在control机器上生成密钥对  id_rsa  私钥   id_rsa.pub 公钥

    利用ansible的authorized_key模块对远程主机分发公钥实现免密码登录

    [root@lab-110 ansible]# ansible local -m authorized_key -a "user=root key='{{ lookup('file','/root/.ssh/id_rsa.pub') }}
    '" -kSSH password: 
    172.24.0.110 | SUCCESS => {
        "changed": true, 
        "comment": null, 
        "exclusive": false, 
        "key": "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs81XUJHkBhwoAKU62ngLiGrR9yhLLAPPkNbnMYLnpwXXAqQFv8wcuZw4Q6C17bnHW+77XAk
    /TOyWJhZ9yHEjs80louqtZlf4s/t2wwLjCTYLLVnxPcS0KgwSvRnah+w9z0wAy0VU5QwNH4W3ukUnVCHTVI8FhWwm8tssTD+APJ1HMeum/EATIa5eNw8TEtYFOYTKtDbnXQe7BWFKrblwALQwLxaaEASFLAVv5V5BOVhFLxCIi969pQ9G46ij9jyLo7Md8Zm1ggS3zQZL9oH5WVP5pyDEjXHTCopEgp3VIirNfDRI+RDU98+BlLk8T65Z9QFM8Kf0kHw928BETmiEiw== root@lab-110",     "key_options": null, 
        "keyfile": "/root/.ssh/authorized_keys", 
        "manage_dir": true, 
        "path": null, 
        "state": "present", 
        "unique": false, 
        "user": "root", 
        "validate_certs": true
    }
    [root@lab-110 ansible]# ansible all -m ping
    172.24.0.110 | SUCCESS => {
        "changed": false, 
        "ping": "pong"
    }
  • 相关阅读:
    LeetCode0680.验证回文字符串 Ⅱ
    20145208 蔡野 《网络对抗》Exp6 信息搜集与漏洞扫描
    20145208 蔡野 《网络对抗》Exp5 MSF基础应用
    辅助模块:udp_sweep
    对客户端攻击:adobe_toolbutton
    对浏览器攻击:MS10-002
    主动攻击:利用ms08_067_netapi进行攻击
    20145208 蔡野 《网络对抗》Exp4 恶意代码分析
    20145208 蔡野《网络对抗》Exp3 Advanced 恶意代码伪装技术实践
    20145208 蔡野《网络对抗》shellcode注入&Return-to-libc攻击深入
  • 原文地址:https://www.cnblogs.com/xiaochina/p/9527331.html
Copyright © 2011-2022 走看看