Skip to main content

Ansible 常用指令

ansible-playbook 執行 playbook​

ansible-playbook -i $INVENTORY $PLAYBOOK

ansible-config 查看 ansible 配置​

ansible-config [-h] [--version] [-v] {list,dump,view,init} …

ansible-console 執行 Ansible 的控制台​

usage: ansible-console [-h] [--version] [-v] [-b]
                        [--become-method BECOME_METHOD]
                        [--become-user BECOME_USER]
                        [-K | --become-password-file BECOME_PASSWORD_FILE]
                        [-i INVENTORY] [--list-hosts] [-l SUBSET]
                        [--private-key PRIVATE_KEY_FILE] [-u REMOTE_USER]
                        [-c CONNECTION] [-T TIMEOUT]
                        [--ssh-common-args SSH_COMMON_ARGS]
                        [--sftp-extra-args SFTP_EXTRA_ARGS]
                        [--scp-extra-args SCP_EXTRA_ARGS]
                        [--ssh-extra-args SSH_EXTRA_ARGS]
                        [-k | --connection-password-file CONNECTION_PASSWORD_FILE]
                        [-C] [-D] [--vault-id VAULT_IDS]
                        [-J | --vault-password-file VAULT_PASSWORD_FILES]
                        [-f FORKS] [-M MODULE_PATH] [--playbook-dir BASEDIR]
                        [-e EXTRA_VARS] [--task-timeout TASK_TIMEOUT] [--step]
                        [pattern]

ansible-doc 插件文檔工具​

ansible-doc [-h] [--version] [-v] [-M MODULE_PATH]
[--playbook-dir BASEDIR]
[-t {become,cache,callback,cliconf,connection,httpapi,inventory,lookup,netconf,shell,vars,module,strategy,test,filter,role,keyword}]
[-j] [-r ROLES_PATH]
[-e ENTRY_POINT | -s | -F | -l | --metadata-dump]
[--no-fail-on-errors]
[plugin ...

ansible-galaxy 執行各種與角色和集合相關的操作​

ansible-galaxy [-h] [--version] [-v] TYPE …

ansible-inventory 顯示 Ansible 庫存訊息​

usage: ansible-inventory [-h] [--version] [-v] [-i INVENTORY] [-l SUBSET]
                        [--vault-id VAULT_IDS]
                        [-J | --vault-password-file VAULT_PASSWORD_FILES]
                        [--playbook-dir BASEDIR] [-e EXTRA_VARS] [--list]
                        [--host HOST] [--graph] [-y] [--toml] [--vars]
                        [--export] [--output OUTPUT_FILE]
                        [host|group]

ansible-inventory ping 了解是否伺服器可以被 Ansible 管理​

ansible -i $INVENTORYFILE $HOSTNAME -m ping -k
ansible -i inventory all -m ping -k

ansible-inventory shell 對多個伺服器下相同指令​

ansible -i $INVENTORYFILE $HOSTNAME -m shell -k -a $COMMAND
ansible -i inventory all -m shell -k -a "timedatectl"
ansible -i inventory all -m shell -k -a "yum update -y"
ansible -i inventory all -m shell -k -a "systemctl status tuned"
ansible -i inventory all -m shell -k -a "cat /etc/os-release | grep PRETTY_NAME"

ansible-inventory copy 將檔案或資料夾傳送到多個伺服器​

  • 檔案
ansible -i inventory all -m copy -k -a "src=/etc/motd dest=/etc/motd"
  • 資料夾
ansible -i inventory all -m copy -k -a "src=/etc/yum.repos.d/ dest=/etc/yum.repos.d/"

ansible-playbook 在目標主機上執行定義的任務​

ansible-playbook [-h] [--version] [-v] [--private-key PRIVATE_KEY_FILE]
                [-u REMOTE_USER] [-c CONNECTION] [-T TIMEOUT]
                [--ssh-common-args SSH_COMMON_ARGS]
                [--sftp-extra-args SFTP_EXTRA_ARGS]
                [--scp-extra-args SCP_EXTRA_ARGS]
                [--ssh-extra-args SSH_EXTRA_ARGS]
                [-k | --connection-password-file CONNECTION_PASSWORD_FILE]
                [--force-handlers] [--flush-cache] [-b]
                [--become-method BECOME_METHOD]
                [--become-user BECOME_USER]
                [-K | --become-password-file BECOME_PASSWORD_FILE]
                [-t TAGS] [--skip-tags SKIP_TAGS] [-C] [-D]
                [-i INVENTORY] [--list-hosts] [-l SUBSET]
                [-e EXTRA_VARS] [--vault-id VAULT_IDS]
                [-J | --vault-password-file VAULT_PASSWORD_FILES]
                [-f FORKS] [-M MODULE_PATH] [--syntax-check]
                [--list-tasks] [--list-tags] [--step]
                [--start-at-task START_AT_TASK]
                playbook [playbook ...]

ansible-playbook --check 在檢查模式下執行 playbook​

ansible-playbook --check playbook.yaml

ansible-pull 從 VCS 儲存庫中提取 playbook 並執行​

ansible-pull [-h] [--version] [-v] [--private-key PRIVATE_KEY_FILE]
            [-u REMOTE_USER] [-c CONNECTION] [-T TIMEOUT]
            [--ssh-common-args SSH_COMMON_ARGS]
            [--sftp-extra-args SFTP_EXTRA_ARGS]
            [--scp-extra-args SCP_EXTRA_ARGS]
            [--ssh-extra-args SSH_EXTRA_ARGS]
            [-k | --connection-password-file CONNECTION_PASSWORD_FILE]
            [--vault-id VAULT_IDS]
            [-J | --vault-password-file VAULT_PASSWORD_FILES]
            [-e EXTRA_VARS] [-t TAGS] [--skip-tags SKIP_TAGS]
            [-i INVENTORY] [--list-hosts] [-l SUBSET] [-M MODULE_PATH]
            [-K | --become-password-file BECOME_PASSWORD_FILE]
            [--purge] [-o] [-s SLEEP] [-f] [-d DEST] [-U URL] [--full]
            [-C CHECKOUT] [--accept-host-key] [-m MODULE_NAME]
            [--verify-commit] [--clean] [--track-subs] [--check]
            [--diff]
            [playbook.yml ...]

ansible-vault 資料檔的加密解密程式​

ansible-vault [-h] [--version] [-v]
{create,decrypt,edit,view,encrypt,encrypt_string,rekey}
...