ansibleIntro.md

Ansible intro

Instaliramo ansible:

[root@archlinux ~]# sudo pacman -S ansible

Da radimo sa jednom (lokalnom mašinom):

[root@archlinux ~]# cat /etc/ansible/hosts 
[lokalna]
localhost ansible_connection=local

Testiramo ansible:

[root@archlinux ~]# ansible all -m ping
[WARNING]: Platform linux on host localhost is using the discovered Python
interpreter at /usr/bin/python3.10, but future installation of another Python
interpreter could change the meaning of that path. See
https://docs.ansible.com/ansible-
core/2.12/reference_appendices/interpreter_discovery.html for more information.
localhost | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3.10"
    },
    "changed": false,
    "ping": "pong"
}

Ansible dokumentacija: https://docs.ansible.com/, https://docs.ansible.com/ansible/latest/user_guide/playbooks_intro.html

Napravili smo ansible playbook gdje instaliramo apache i osiguramo da servis radi:

[root@archlinux ~]# touch ansible-playbook.yml
[root@archlinux ~]# nano ansible-playbook.yml 

---
- name: Update web servers
  hosts: lokalna
  become: yes
  remote_user: root

  tasks:
  - name: Ensure apache is at the latest version
    ansible.builtin.pacman:
      name: apache
      state: latest
  - name: Ensure apache is started
    ansible.builtin.service:
      name: httpd
      state: started

Pokrenuli smo playbook:

[root@archlinux ~]# ansible-playbook ansible-playbook.yml 
 ___________________________ 
< PLAY [Update web servers] >
 --------------------------- 
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||

 ________________________ 
< TASK [Gathering Facts] >
 ------------------------ 
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||

[WARNING]: Platform linux on host localhost is using the discovered Python
interpreter at /usr/bin/python3.10, but future installation of another Python
interpreter could change the meaning of that path. See
https://docs.ansible.com/ansible-
core/2.12/reference_appendices/interpreter_discovery.html for more information.
ok: [localhost]
 _______________________________________________ 
< TASK [Ensure apache is at the latest version] >
 ----------------------------------------------- 
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||

changed: [localhost]
 _________________________________ 
< TASK [Ensure apache is started] >
 --------------------------------- 
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||

changed: [localhost]
 ____________ 
< PLAY RECAP >
 ------------ 
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||

localhost                  : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

Važno: Ako ne pokrećemo playbook kao root, moramo dodati u playbook become: yes.

Možemo se uvjeriti da apache radi:

[root@archlinux ~]# ps aux | grep httpd
root         737  0.0  0.6   8588  6392 ?        Ss   14:24   0:00 /usr/bin/httpd -k start -DFOREGROUND
http         742  0.0  0.4 754168  4028 ?        Sl   14:24   0:00 /usr/bin/httpd -k start -DFOREGROUND
http         743  0.0  0.4 754168  4028 ?        Sl   14:24   0:00 /usr/bin/httpd -k start -DFOREGROUND
http         744  0.0  0.4 754168  4028 ?        Sl   14:24   0:00 /usr/bin/httpd -k start -DFOREGROUND
root         833  0.0  0.2   6672  2680 pts/0    S+   14:28   0:00 grep httpd

Na Arch Linuxu, Apache servira dokumente iz /srv/http.

Dodali smo u playbook:

  - name: Download index.html from group.miletic.net
    ansible.builtin.command:
      cmd: curl -o /srv/http/index.html https://group.miletic.net/index.html

Da proradi php interpreter:

[root@archlinux ~]# nano php-fpm.conf
[root@archlinux ~]# cat php-fpm.conf 
DirectoryIndex index.php index.html
<FilesMatch \.php$>
    SetHandler "proxy:unix:/run/php-fpm/php-fpm.sock|fcgi://localhost/"
</FilesMatch>

[root@archlinux ~]# cat ansible-playbook.yml

---
- name: Update web servers
  hosts: lokalna
  become: yes
  remote_user: root

  tasks:
  - name: Ensure apache is at the latest version
    ansible.builtin.pacman:
      name: apache
      state: latest
  - name: Ensure apache is started
    ansible.builtin.service:
      name: httpd
      state: started
  - name: Download index.html from group.miletic.net
    ansible.builtin.command:
      cmd: curl -o /srv/http/index.html https://group.miletic.net/index.html
  - name: https://www.miletic.net/index.txt
    ansible.builtin.command:
      cmd: curl -o /srv/http/index.php https://www.miletic.net/index.txt
  - name: Ensure php is installed
    ansible.builtin.pacman:
      name: php-fpm
      state: latest
  - name: Ensure php is running
    ansible.builtin.service:
      name: php-fpm
      state: started
  - name : Amend apache config for proxy
    ansible.builtin.command:
      cmd: echo "LoadModule proxy_module modules/mod_proxy.so" >> /etc/httpd/conf/httpd.conf
  - name : Amend apache config 2
    ansible.builtin.command:
      cmd: echo "LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so" >> /etc/httpd/conf/httpd.conf
  - name: Amend config 3
    ansible.builtin.command:
      cmd: echo "Include conf/extra/php-fpm.conf" >> /etc/httpd/conf/httpd.conf
  - name : Copy php fpm conf
    ansible.builtin.copy:
      src: ./php-fpm.conf
      dest: /etc/httpd/conf/extra/php-fpm.conf
  - name : Restart service 
    ansible.buildin.service:
      name: httpd
      state: restarted

Ovo sa echom ne radi, womp womp.

Ovo radi:

---
- name: Update web servers
  hosts: lokalna
  become: yes
  remote_user: root

  tasks:
  - name: Ensure apache is at the latest version
    ansible.builtin.pacman:
      name: apache
      state: latest
  - name: Ensure apache is started
    ansible.builtin.service:
      name: httpd
      state: started
  - name: Download index.html from group.miletic.net
    ansible.builtin.command:
      cmd: curl -o /srv/http/index.html https://group.miletic.net/index.html
  - name: https://www.miletic.net/index.txt
    ansible.builtin.command:
      cmd: curl -o /srv/http/index.php https://www.miletic.net/index.txt
  - name: Ensure php is installed
    ansible.builtin.pacman:
      name: php-fpm
      state: latest
  - name: Ensure php is running
    ansible.builtin.service:
      name: php-fpm
      state: started
  - name : Copy conf file
    ansible.builtin.copy:
      src: ./httpd.conf
      dest: /etc/httpd/conf/httpd.conf
  - name : Copy php fpm conf
    ansible.builtin.copy:
      src: ./php-fpm.conf
      dest: /etc/httpd/conf/extra/php-fpm.conf
  - name : Restart service 
    ansible.builtin.service:
      name: httpd
      state: restarted

Treba editirani config stavit u mjesto di se izvodi skripta i onda se kopira.