Differences

This shows you the differences between two versions of the page.

--- ansible_playbooks [2025/07/26 17:09] – - Imported by DokuWiki Advanced Plugin wikiadm
+++ ansible_playbooks [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1
@@ Line 1: / Line 1: @@
-====== Gerenciando Playbooks ======
-===== Módulos através do ansible-doc =====
-//''**ansible-doc**''// é um comando que exibe uma documentação sobre componentes do Ansible.
-<file bash>
-$ sudo ansible-doc -l
-</file>
-FIXME A flag **-l** lista todos os módulos que podemos utilizar no Ansible.
-Para mostrar somente a descrição do módulo user, use o seguinte comando:
-<file bash>
-$ sudo ansible-doc user | grep EXAMPLES -A 15
-EXAMPLES:
-- name: Add the user 'johnd' with a specific uid and a primary group of 'admin'
-  ansible.builtin.user:
-    name: johnd
-    comment: John Doe
-    uid: 1040
-    group: admin
-- name: Add the user 'james' with a bash shell, appending the group 'admins' and 'developers' to the user's groups
-  ansible.builtin.user:
-    name: james
-    shell: /bin/bash
-    groups: admins,developers
-    append: yes
-</file>
-===== Componentes de um Playbook =====
-**hosts:**
-Define em qual máquina o Playbook será aplicado, a partir do inventário.
-**Task:**
-Uma Task no Ansible é uma coleção de comandos que serão executados em uma ou mais máquinas. A palavra task vem do inglês “tarefa”. Cada Task do Ansible consiste em uma sequência de comandos que serão executados em uma máquina.
-**Handlers:**
-Um Handler tem a mesma função de uma Task (tarefa) dentro de um PlayBook. Um Handle será executado quando chamado por outra tarefa. Você pode pensar nisso como parte de um sistema de eventos, o Handler vai tomar uma ação quando chamado por um evento que escuta.
-Isso é útil para as ações “secundárias” que possam ser necessárias depois de executar uma tarefa, como iniciar um novo serviço após a instalação ou recarregar um serviço depois de uma alteração de configuração.
-**Fatos:**
-O Ansible pode utilizar informações do sistema chamada de fatos em seus PlayBooks.
-Exemplos:
-  * Nome da máquina
-  * IP de interface de rede
-  * Nome da distribuição Linux
-  * Quantidade de memória
-Módulos:
-O Ansible usa módulos para realizar a maioria de suas tarefas. Os módulos podem instalar um software, copiar arquivos, adicionar usuários, entre outros. Através de módulos, o Ansible usa fatos do sistema para determinar quais ações devem ser feitas para realizar uma tarefa.
-Exemplos:
-  * Se o Fato detectar que a distribuição Linux é Debian, use o módulo apt para instalar pacotes;
-  * Se o Fato detectar que a distribuição Linux é CentOS, use o módulo yum para instalar pacotes.
-**Variáveis:**
-O Ansible usa variáveis para permitir mais flexibilidade na PlayBooks e Roles. Elas podem ser usadas para fazer um loop através de um conjunto de valores fornecidos, acessar várias informações como o nome do host de um sistema e substituir certas palavras em templates por valores específicos do sistema
-===== Gerenciar PlayBooks =====
-==== Usuários ====
-<file bash>
-< /dev/urandom tr -dc '!@#%*?'_A-Z-a-z-0-9 | head -c12;echo
-b_sTssWh60NC
-</file>
-<file bash>
-$ echo 'b_sTssWh60NC' | openssl passwd -1 -stdin
-$1$cYdCAK1T$i4IEPWKr2VfsV84mhSKh50
-</file>
-<file yaml user-add.yaml>
----
-- hosts: local
-  tasks:
-    - name: Create user
-      user:
-        name: helpdesk
-        shell: /bin/bash
-        password: $1$cYdCAK1T$i4IEPWKr2VfsV84mhSKh50
-</file>
-Checando a sintax
-<file bash>
-$ sudo ansible-playbook --syntax-check user-add.yaml
-playbook: user-add.yaml
-</file>
-Aplicando a playbook
-<file bash>
-$ sudo ansible-playbook user-add.yaml
-PLAY [local] ****************************************************************************************************************************************************************************************************
-TASK [Gathering Facts] ******************************************************************************************************************************************************************************************
-ok: [ansible-server]
-TASK [Create user] **********************************************************************************************************************************************************************************************
-ok: [ansible-server]
-PLAY RECAP ******************************************************************************************************************************************************************************************************
-ansible-server             : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
-</file>
-Multiplos usuários
-<file yaml multi-user-add.yaml>
----
-- name: Create new users
-  hosts: local
-  tasks:
-    - name: Create users
-      user:
-        name: "{{ item }}"
-        password: $1$cYdCAK1T$i4IEPWKr2VfsV84mhSKh50
-        shell: /bin/bash
-      loop:
-        - alice
-        - bob
-</file>
-<file bash>
-$ sudo ansible-playbook --syntax-check multi-user-add.yaml
-playbook: multi-user-add.yaml
-</file>
-<file bash>
-$ sudo ansible-playbook multi-user-add.yaml
-PLAY [Create new users] *****************************************************************************************************************************************************************************************
-TASK [Gathering Facts] ******************************************************************************************************************************************************************************************
-ok: [ansible-server]
-TASK [Create users] *********************************************************************************************************************************************************************************************
-ok: [ansible-server] => (item=alice)
-ok: [ansible-server] => (item=bob)
-PLAY RECAP ******************************************************************************************************************************************************************************************************
-ansible-server             : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
-</file>
-<file bash>
-$ sudo ansible local -m shell -a "getent passwd | tail -n3"
-ansible-server | CHANGED | rc=0 >>
-helpdesk:x:1002:1002::/home/helpdesk:/bin/bash
-alice:x:1003:1003::/home/alice:/bin/bash
-bob:x:1004:1004::/home/bob:/bin/bash
-</file>
-==== Removendo usuários ====
-<file yaml user-del.yaml>
----
-- name: Remove the users
-  hosts: local
-  tasks:
-    - name: Remove users
-      ansible.builtin.user:
-        name: "{{ item }}"
-        state: absent
-        remove: yes
-      loop:
-        - alice
-        - bob
-</file>
-<file bash>
-$ sudo ansible-playbook --syntax-check user-del.yaml
-playbook: user-del.yaml
-</file>
-<file bash>
-$ sudo ansible-playbook user-del.yaml
-PLAY [Remove the users] *****************************************************************************************************************************************************************************************
-TASK [Gathering Facts] ******************************************************************************************************************************************************************************************
-ok: [ansible-server]
-TASK [Remove users] *********************************************************************************************************************************************************************************************
-changed: [ansible-server] => (item=alice)
-changed: [ansible-server] => (item=bob)
-PLAY RECAP ******************************************************************************************************************************************************************************************************
-ansible-server             : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
-</file>
-==== Lineinfile ====
-<file yaml lineinfile.yml>
----
-- hosts: local
-  tasks:
-    - name: Garantir permissão de superusuário para o usuário helpdesk
-      lineinfile:
-        path: /etc/sudoers
-        state: present
-        insertafter: "root    ALL=(ALL:ALL) ALL"
-        line: "helpdesk ALL=(ALL) NOPASSWD: ALL"
-</file>
-**Ou:**
-<file yaml lineinfile.yaml>
----
-- hosts: local
-  tasks:
-    - name: Add user to sudo
-      ansible.builtin.lineinfile:
-        path: /etc/sudoers.d/helpdesk
-        line: 'helpdesk ALL=(ALL) NOPASSWD: ALL'
-        mode: 0440
-        create: yes
-        validate: /usr/sbin/visudo -cf %s
-</file>
-<file bash>
-$ sudo ansible-playbook --syntax-check lineinfile.yml
-playbook: lineinfile.yml
-</file>
-<file bash>
-$ sudo ansible-playbook lineinfile.yml
-PLAY [local] ***********************************************************************************************************************************************************************************************
-TASK [Gathering Facts] *************************************************************************************************************************************************************************************
-ok: [ansible-server]
-TASK [Garantir permissão de superusuário para o usuário helpdesk] ******************************************************************************************************************************************
-changed: [ansible-server]
-PLAY RECAP *************************************************************************************************************************************************************************************************
-ansible-server             : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
-</file>
-<file bash>
-$ sudo -i -u helpdesk sudo tail -n1 /etc/sudoers
-helpdesk ALL=(ALL) NOPASSWD: ALL
-</file>
-==== Criar grupo e adicionar ao sudo ====
-<file yaml group-add-sudo.yaml>
----
-- hosts: local
-  vars:
-    varsUsers:
-      - alice
-      - bob
-    varsGroups: linuxadm
-  tasks:
-    - name: Add goup to Linux
-      ansible.builtin.group:
-        name: "{{ varsGroups }}"
-        state: present
-    - name: Add group sudo
-      ansible.builtin.lineinfile:
-        path: /etc/sudoers
-        insertafter: "root    ALL=(ALL:ALL) ALL"
-        line: "%linuxadm  ALL=(ALL) NOPASSWD: ALL"
-        validate: /usr/sbin/visudo -cf %s
-    - name: Add users to linuxadm group
-      ansible.builtin.user:
-        name: "{{ item }}"
-        groups: linuxadm
-        append: yes
-      with_items: "{{ varsUsers }}"
-</file>
-<file bash>
-$ sudo ansible-playbook --syntax-check group-add-sudo.yaml
-playbook: group-add-sudo.yaml
-</file>
-<file bash>
-$ sudo ansible-playbook group-add-sudo.yaml
-PLAY [local] ****************************************************************************************************************************************************************************************************
-TASK [Gathering Facts] ******************************************************************************************************************************************************************************************
-ok: [ansible-server]
-TASK [Add goup to Linux] ****************************************************************************************************************************************************************************************
-changed: [ansible-server]
-TASK [Add group sudo] *******************************************************************************************************************************************************************************************
-changed: [ansible-server]
-TASK [Add users to linuxadm group] ******************************************************************************************************************************************************************************
-changed: [ansible-server] => (item=alice)
-changed: [ansible-server] => (item=bob)
-PLAY RECAP ******************************************************************************************************************************************************************************************************
-ansible-server             : ok=4    changed=3    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
-</file>
-==== Pacotes ====
-<file yaml install-ntpdate.yml>
----
-- hosts: local
-  tasks:
-   - name: Instala pacote ntpdate
-     apt: name=ntpdate state=present update_cache=true
-</file>
-<file bash>
-$ sudo ansible-playbook --syntax-check install-ntpdate.yml
-playbook: install-ntpdate.yml
-</file>
-<file bash>
-$ sudo ansible-playbook install-ntpdate.yml
-PLAY [local] ***********************************************************************************************************************************************************************************************
-TASK [Gathering Facts] *************************************************************************************************************************************************************************************
-ok: [ansible-server]
-TASK [Instala pacote ntpdate] ******************************************************************************************************************************************************************************
-changed: [ansible-server]
-PLAY RECAP *************************************************************************************************************************************************************************************************
-ansible-server             : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
-</file>
-===== Referências =====
-  - [[https://www.lisenet.com/2019/ansible-generate-crypted-passwords-for-the-user-module/|Ansible: Generate Crypted Passwords for the User Module]]
-  - [[https://adamtheautomator.com/ansible-create-user/|How to Use Ansible Create User Functionality in Linux]]