web1.example.com
web2.example.com
db1.example.com
192.168.219.5

$ cd /ansible/practice

# IP를 이용한 인벤토리 파일 생성
vi inventory
192.168.219.192
192.168.219.193

vi /etc/hosts

...
192.168.219.192 ubuntu1
192.168.219.193 ubuntu2

# 호스트명을 이용한 인벤토리 파일 생성
vi inventory
ubuntu1
ubuntu2

[web]
ubuntu1

[db]
ubuntu2

[web]
ubuntu1

[db]
ubuntu2

[production]
ubuntu1
ubuntu2

[development]
192.168.219.200

[web]
ubuntu1

[db]
ubuntu2

[datacenter:children]
web
db

[web]
ubuntu1

[db]
ubuntu2

[all]
web
db

ansible-inventory -i ./inventory --list

{
    "_meta": {
        "hostvars": {}
    },
    "all": {
        "children": [
            "ungrouped",
            "web",
            "db"
        ]
    },
    "db": {
        "hosts": [
            "manage2"
        ]
    },
    "ungrouped": {
        "children": [
            "web",
            "db"
        ]
    },
    "web": {
        "hosts": [
            "manage1"
        ]
    }
}

ansible-inventory -i ./inventory --graph

@all:
  |--@ungrouped:
  |  |--@web:
  |  |  |--manage1
  |  |--@db:
  |  |  |--manage2
  |--@web:
  |  |--manage1
  |--@db:
  |  |--manage2

[defaults]
inventory = ./inventory
remote_user = user
ask_pass = false

[privilege_escalation]
become = true
become_method = sudo
become_user = root
become_ask_pass = false

ssh-keygen -t rsa -f ~/.ssh/forAnsible_id_rsa

for i in {2..3}; do ssh-copy-id root@192.168.219.19$i; done

[web]
ubuntu1

[db]
ubuntu2

[all:children]
web
db

$ ansible -m ping -i ./inventory web

ubuntu1 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3.10"
    },
    "changed": false,
    "ping": "pong"
}

$ ansible -m ping -i ./inventory --ask-pass web

ubuntu1 | SUCCESS => {
    "ansible_facts": {
        "discovered_interpreter_python": "/usr/bin/python3.10"
    },
    "changed": false,
    "ping": "pong"
}

# 1. Ubuntu 관리 노드에서 SSH 설정 파일 수정
sudo vim /etc/ssh/sshd_config

# 2. 파일에서 아래 설정을 찾고 수정
#PermitRootLogin prohibit-password

# 3. 위 줄을 아래와 같이 수정
PermitRootLogin yes

$ vi first-playbook.yaml

---
- hosts: all
  tasks:
    - name: Print message
      debug:
        msg: Hello Ansible!

$ ansible-playbook --syntax-check ./first-playbook.yaml

[WARNING]: No inventory was parsed, only implicit localhost is available
[WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match 'all'

playbook: ./first-playbook.yaml

$ ansible-playbook -i ./inventory ./first-playbook.yaml

PLAY [all] *****************************************************************************************************************************************************************************************************************************************************************

TASK [Gathering Facts] *****************************************************************************************************************************************************************************************************************************************************
[WARNING]: Platform linux on host ubuntu2 is using the discovered Python interpreter at /usr/bin/python3.10, but future installation of another Python interpreter could change the meaning of that path. See https://docs.ansible.com/ansible-
core/2.17/reference_appendices/interpreter_discovery.html for more information.
ok: [ubuntu2]
[WARNING]: Platform linux on host ubuntu1 is using the discovered Python interpreter at /usr/bin/python3.10, but future installation of another Python interpreter could change the meaning of that path. See https://docs.ansible.com/ansible-
core/2.17/reference_appendices/interpreter_discovery.html for more information.
ok: [ubuntu1]

TASK [Print message] *******************************************************************************************************************************************************************************************************************************************************
ok: [ubuntu1] => {
    "msg": "Hello Ansible!"
}
ok: [ubuntu2] => {
    "msg": "Hello Ansible!"
}

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
ubuntu2                    : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0  

---
- hosts: all
  tasks:
    - name: Restart sshd service
      ansible.builtin.service:
        name: sshd
        state: restarted

$ ansible-playbook -i ./inventory --check restart-sshd.yaml

TASK [Restart sshd service] ************************************************************************************************************************************************************************************************************************************************
changed: [ubuntu2]
changed: [ubuntu1]

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
ubuntu2                    : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

[web]
ubuntu1

[db]
ubuntu2

[all:children]
web
db

[all:vars]
user=ansible

---

- hosts: all
  tasks:
    - name: Create User {{ user }}
      ansible.builtin.user:
        name: "{{ user }}"
        state: present

$ ansible-playbook -i ./inventory create-user.yaml

TASK [Create User ansible] *************************************************************************************************************************************************************************************************************************************************
changed: [ubuntu2]
changed: [ubuntu1]

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
ubuntu2                    : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0 

$ grep 'ansible' /etc/passwd

ansible:x:1001:1001::/home/ansible:/bin/sh

[web]
ubuntu1

[db]
ubuntu2 user=ansible1

[all:children]
web
db

cp create-user.yaml create-user1.yaml

---
- hosts: db
  tasks:
    - name: Create User {{ user }}
      ansible.builtin.user:
        name: "{{ user }}"
        state: present

ansible-playbook -i ./inventory create-user1.yaml

cp create-user1.yaml create-user2.yaml

---
- hosts: all
  vars:
    user: ansible2

  tasks:
    - name: Create User {{ user }}
      ansible.builtin.user:
        name: "{{ user }}"
        state: present

ansible-playbook -i ./inventory create-user2.yaml

ansible-vault create mysecret.yaml

-rw------- 1 a-user a-user 355  8월 30일  17:20 mysecret.yaml

# 파일 내용또한 암호화 되어있다.
$ cat mysecret.yaml

$ANSIBLE_VAULT;1.1;AES256
30396630643338383233336163366161653530333538303636323734353464353035303363343331
3439653162623134653235316435353262383763636263350a666363656634366330326461373431
37343335393739653364356234396364653866656533626138383864666337373164396164373733
3361376630633330330a323865613130323133653961623134623831623638346438666136626164
6533

$ ansible-vault view mysecret.yaml
Vault password: 

ansible-vault encrypt create-user.yaml

ansible-vault encrypt decrypt create-user.yaml

$ ansible-vault rekey mysecret.yaml

Vault password: 
New Vault password: 
Confirm New Vault password: 
Rekey successful

$ ansible-vault view mysecret.yaml

user: ansible3
password: P@ssword!

---
- hosts: all
  vars_files:
    - mysecret.yaml
  
  tasks:
    - name: Create user {{ user }}
      ansible.builtin.user:
        name: "{{ user }}"
        state: present

$ ansible-playbook --vault-id @prompt create-user.yaml

TASK [Create user ansible3] ************************************************************************************************************************************************************************************************************************************************
changed: [ubuntu1]
changed: [ubuntu2]

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
ubuntu2                    : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

---
- hosts: all
  tasks:
    - name: Print all facts
      ansible.builtin.debug:
        var: ansible_facts

$ ansible-playbook -i ./inventory facts.yaml

ok: [ubuntu1]

TASK [Print all facts] *****************************************************************************************************************************************************************************************************************************************************
ok: [ubuntu1] => {
    "ansible_facts": {
        "all_ipv4_addresses": [
            "192.168.219.192"
        ],

  .....

---
- hosts: all
  tasks:
    - name: Print all facts
      ansible.builtin.debug:
        msg: >
          The default IPv4 address of {{ ansible_facts.fqdn }}
          is {{ ansible_facts.default_ipv4.address }}

$ ansible-playbook -i ./inventory facts.yaml

TASK [Print all facts] *****************************************************************************************************************************************************************************************************************************************************
ok: [ubuntu1] => {
    "msg": "The default IPv4 address of ubuntu1 is 192.168.219.192"
}
ok: [ubuntu2] => {
    "msg": "The default IPv4 address of ubuntu2 is 192.168.219.193"
}

---
- hosts: all
  tasks:
    - name: Check sshd state
      ansible.builtin.service:
        name: sshd
        state: started
    - name: Check rsyslog state
      ansible.builtin.service:
        name: rsyslog
        state: started

- hosts: all
  tasks:
    - name: Check sshd and rsyslog state
      ansible.builtin.service:
        name: "{{ item }}"
        state: started
      loop:
        - sshd
        - rsyslog

$ ansible-playbook -i ./inventory check-services.yaml

ok: [ubuntu1] => (item=sshd)
ok: [ubuntu2] => (item=sshd)
ok: [ubuntu1] => (item=rsyslog)
ok: [ubuntu2] => (item=rsyslog)

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
ubuntu2                    : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0  

---
- hosts: all
  vars:
    services:
      - sshd
      - rsyslog
  tasks:
    - name: Check sshd and rsyslog state
      ansible.builtin.service:
        name: "{{ item }}"
        state: started
      loop: "{{ services }}"

---
- hosts: all
  tasks:
    - name: Create files
      ansible.builtin.file:
        path: "{{ item['log-path'] }}"
        mode: "{{ item['log-mode'] }}"
        state: touch
      loop:
        - log-path: /var/log/test1.log
          log-mode: '0644'
        - log-path: /var/log/test2.log
        - log-mode: '0600'

- hosts: all
  vars:
    files:
      - log-path: /var/log/test1.log
        log-mode: '0644'
      - log-path: /var/log/test2.log
        log-mode: '0600'
  tasks:
    - name: Create files
      ansible.builtin.file:
        path: "{{ item['log-path'] }}"
        mode: "{{ item['log-mode'] }}"
        state: touch
      loop: "{{ files }}"

---
- hosts: all
  tasks:
    - name: loop echo test
      ansible.builtin.shell: "echo 'I can speak {{ item}}"
      loop:
        - Korean
        - English
      register: result

    - name: Show result
      ansible.builtin.debug:
        var: result

$ ansible-playbook -i ./inventory loop_register.yaml

TASK [loop echo test] ******************************************************************************************************************************************************************************************************************************************************
changed: [localhost] => (item=Korean)
changed: [localhost] => (item=English)

TASK [Show result] *********************************************************************************************************************************************************************************************************************************************************
ok: [localhost] => {
    "result": {
        "changed": true,
        "msg": "All items completed",
        "results": [
            {
                "ansible_loop_var": "item",
                "changed": true,
                "cmd": "echo 'I can speak Korean'",
                "delta": "0:00:00.002777",
                "end": "2024-09-02 10:45:36.068628",
                "failed": false,
                "invocation": {
                    "module_args": {
                        "_raw_params": "echo 'I can speak Korean'",
                        "_uses_shell": true,
                        "argv": null,
                        "chdir": null,
                        "creates": null,
                        "executable": null,
                        "expand_argument_vars": true,
                        "removes": null,
                        "stdin": null,
                        "stdin_add_newline": true,
                        "strip_empty_ends": true
                    }
                },
                "item": "Korean",
                "msg": "",
                "rc": 0,
                "start": "2024-09-02 10:45:36.065851",
                "stderr": "",
                "stderr_lines": [],
                "stdout": "I can speak Korean",
                "stdout_lines": [
                    "I can speak Korean"
                ]
            },
                },
                "item": "English",
                "msg": "",
                "rc": 0,
                "start": "2024-09-02 10:45:36.202427",
                "stderr": "",
                "stderr_lines": [],
                "stdout": "I can speak English",
                "stdout_lines": [
                    "I can speak English"
                ]
            }
        ],
        "skipped": false
    }
}

---
- hosts: localhost
  vars:
    run_my_task: true
  tasks:
    - name: echo message
      ansible.builtin.shell: "echo message"
      when: run_my_task 

$ ansible-playbook -i ./inventory when_task.yaml

TASK [echo message] ********************************************************************************************************************************************************************************************************************************************************
changed: [localhost]

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
localhost                  : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0  

---
- hosts: all
  vars:
    supported_distros:
      - Ubuntu
  tasks:
    - name: Print supported os
      ansible.builtin.debug:
        msg: "This {{ ansible_facts['distribution'] }} need to use apt"
      when: ansible_facts['distribution'] in supported_distros

TASK [Print supported os] **************************************************************************************************************************************************************************************************************************************************
ok: [ubuntu1] => {
    "msg": "This Ubuntu need to use apt"
}
ok: [ubuntu2] => {
    "msg": "This Ubuntu need to use apt"
}

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
ubuntu2                    : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

- hosts: all
  vars:
    supported_distros:
      - Ubuntu
  tasks:
    - name: Print supported os
      ansible.builtin.debug:
        msg: >
          OS Type: {{ ansible_facts['distribution'] }}
          OS Version: {{ ansible_facts['distribution_version'] }}
      when: >
        ( ansible_facts['distribution'] == 'CentOS' and
          ansible_facts['distribution_version'] == '8' )
          or
          ( ansible_facts['distribution'] == 'Ubuntu' and
            ansible_facts['distribution_version'] == '22.04' )

$ ansible-playbook -i ./inventory check-os.yaml

TASK [Print supported os] **************************************************************************************************************************************************************************************************************************************************
ok: [ubuntu1] => {
    "msg": "OS Type: Ubuntu OS Version: 22.04\n"
}
ok: [ubuntu2] => {
    "msg": "OS Type: Ubuntu OS Version: 22.04\n"
}

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
ubuntu2                    : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0  

---
- hosts: web
  tasks:
    - name: Print Root directory size
      ansible.builtin.debug:
        msg: >
          "Directory {{ item.mount }} size is {{ item.size_available }}"
      loop: "{{ ansible_facts['mounts'] }}"
      when: item['mount'] == '/' and item['size_available'] > 300000000

$ ansible-playbook -i ./inventory check-mount.yaml

ok: [ubuntu1]

TASK [Print Root directory size] *******************************************************************************************************************************************************************************************************************************************
ok: [ubuntu1] => (item={'mount': '/', 'device': '/dev/mapper/ubuntu--vg-ubuntu--lv', 'fstype': 'ext4', 'options': 'rw,relatime', 'dump': 0, 'passno': 0, 'size_total': 25180848128, 'size_available': 16377282560, 'block_size': 4096, 'block_total': 6147668, 'block_available': 3998360, 'block_used': 2149308, 'inode_total': 1572864, 'inode_available': 1490433, 'inode_used': 82431, 'uuid': 'efab5bcf-8a63-4463-a220-1ed261707ab1'}) => {
    "msg": "\"Directory / size is 16377282560\"\n"
}
skipping: [ubuntu1] => (item={'mount': '/snap/snapd/21759', 'device': '/dev/loop1', 'fstype': 'squashfs', 'options': 'ro,nodev,relatime,errors=continue', 'dump': 0, 'passno': 0, 'size_total': 40763392, 'size_available': 0, 'block_size': 131072, 'block_total': 311, 'block_available': 0, 'block_used': 311, 'inode_total': 651, 'inode_available': 0, 'inode_used': 651, 'uuid': 'N/A'}) 

---
- hosts: ubuntu1
  tasks:
    - name: restart rsyslog
      ansible.builtin.service:
        name: "rsyslog"
        state: restarted
      notify:
        - print msg
  handlers:
    - name: print msg
      ansible.builtin.debug:
        msg: "rsyslog is restarted"

$ ansible-playbook -i ./inventory handler-sample.yaml

TASK [restart rsyslog] *****************************************************************************************************************************************************************************************************************************************************
changed: [ubuntu1]

RUNNING HANDLER [print msg] ************************************************************************************************************************************************************************************************************************************************
ok: [ubuntu1] => {
    "msg": "rsyslog is restarted"
}

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=3    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

---
- hosts: ubuntu2
  tasks:
    - name: Install apache4
      ansible.builtin.apt:
        name: apache4
        state: latest
      ignore_errors: yes

    - name: print msg
      ansible.builtin.debug:
        msg: "before task is ignored"

$ ansible-playbook -i ./inventory ignore-example.yaml

TASK [Install apache4] *****************************************************************************************************************************************************************************************************************************************************
fatal: [ubuntu2]: FAILED! => {"changed": false, "msg": "No package matching 'apache4' is available"}
...ignoring

TASK [print msg] ***********************************************************************************************************************************************************************************************************************************************************
ok: [ubuntu2] => {
    "msg": "before task is ignored"
}

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu2                    : ok=3    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=1   

#!/usr/bin/bash

# 사용자 계정 및 패스워드가 입력 되었는지 확인
if [[ -n ${1} ]] && [[ -n ${2} ]]
then	
	# 배열 선언
	declare -a UserList
	declare -a Password

	UserList=(${1})
	Password=(${2})
	
	# for문을 이용하여 사용자 계정 생성
	## i = 0 : 변수 'i' 에 초기값 선언
	## i < ${#UserList[@]} : UserList 배열의 인수 갯수가 i 보다 작을때까지
	## i++ : i 증감
	for (( i=0; i < ${#UserList[@]}; i++ ))
	do
		# if문을 사용하여 사용자 계정이 있는지 확인
		if [[ $(cat /etc/passwd | grep "${UserList[${i}]}" | wc -l ) == 0 ]]
		then
			# 사용자 생성 및 패스워드 설정
			/usr/sbin/useradd ${UserList[${i}]}
			echo "${Password[${i}]}" | passwd ${UserList[${i}]} --stdin
		else
			# 사용자가 있다고 메시지를 출력
			echo "This User ${UserList[${i}]} is existing"
		fi
	done

	# 사용자 계정이 입력 되지 않은 경우
else
	echo -e "Please Input user_id and password.\nUsage : adduser-script.sh "user01 user02" "pw01 pw02""
fi

---
- hosts: ubuntu1
  tasks:
    - name: Run user add script
      ansible.builtin.shell: /root/scripts/adduser-script.sh
      register: command_result
      ignore_errors: yes
    
    - name: Report script failure
      ansible.builtin.fail:
        msg: "{{ command_result.stdout }}"
      when: "'Please input user id and password' in command_result.stdout"

$ ansible-playbook -i ./inventory failed-when2.yaml

TASK [Run user add script] *************************************************************************************************************************************************************************************************************************************************
changed: [ubuntu1]

TASK [Report script failure] ***********************************************************************************************************************************************************************************************************************************************
skipping: [ubuntu1]

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=2    changed=1    unreachable=0    failed=0    skipped=1    rescued=0    ignored=0 

---
- hosts: ubuntu1
  vars:
    logdir: /var/log/daily_log
    logfile: todays.log

  tasks:
    - name: Configure Log Env
      block:
        - name: Find Directory
          ansible.builtin.find:
            paths: "{{ logdir }}"
          register: result
          failed_when: "'Not all paths' in result.msg"

      rescue:
        - name: Make Directory when Not found Directory
          ansible.builtin.file:
            path: "{{ logdir }}"
            state: directory
            mode: '0755'

      always:
        - name: Create File
          ansible.builtin.file:
            path: "{{ logdir }}/{{ logfile }}"
            state: touch
            mode: '0644'

$ ansible-playbook -i ./inventory block-example.yaml

TASK [Find Directory] ******************************************************************************************************************************************************************************************************************************************************
[WARNING]: Skipped '/var/log/daily_log' path due to this access issue: '/var/log/daily_log' is not a directory
fatal: [ubuntu1]: FAILED! => {"changed": false, "examined": 0, "failed_when_result": true, "files": [], "matched": 0, "msg": "Not all paths examined, check warnings for details", "skipped_paths": {"/var/log/daily_log": "'/var/log/daily_log' is not a directory"}}

TASK [Make Directory when Not found Directory] *****************************************************************************************************************************************************************************************************************************
changed: [ubuntu1]

TASK [Create File] *********************************************************************************************************************************************************************************************************************************************************
changed: [ubuntu1]

PLAY RECAP *****************************************************************************************************************************************************************************************************************************************************************
ubuntu1                    : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=1    ignored=0