Inventory host list in ansible (I wish you countless flowers and romance)

Preface

This blog mainly explains Ansible Related configuration knowledge of host list

One 、inventory Host list

Inventory Support grouping hosts , Multiple hosts can be defined in each group , Each host can be defined in any one or more host groups .

If it's a host with a similar name , You can use a list to represent each host

vim /etc/ansible/hosts
[dbservers]
192.168.109.131:2222		# Define the remote connection port after the colon , The default is ssh Of 22 port 
192.168.109.13[1:3]			# The scope is ：192.168.109.131 To 192.168.109.133

[[email protected] ansible]# ansible dbservers -a 'date'
192.168.109.133 | CHANGED | rc=0 >>
2022 year  07 month  06 Japan   Wednesday  14:43:18 CST
192.168.109.132 | CHANGED | rc=0 >>
2022 year  07 month  06 Japan   Wednesday  14:43:18 CST
192.168.109.131 | CHANGED | rc=0 >>
2022 year  07 month  06 Japan   Wednesday  14:43:18 CST

[dbservers]
db-[a:f].example.org		# Host name matching is supported  a~f

1.1 inventory The variables in the

Inventory Variable name	meaning
ansible_host	ansible When connecting nodes IP Address
ansible_port	The port number of the other party ,ssh even It defaults to 22
ansible_user	The host name used when connecting to the other host . When not specified , Will use to execute ansible or ansible-playbook Users of commands
ansible_passwd	The name of the user when connecting ssh password , Valid only if key pair authentication is not used
ansible_ssh_private_key_file	Specify key authentication ssh Private key file when connecting
ansible_ssh_common_args	Provide to ssh、sftp、 scp life Make additional parameters
ansible_become	Permission escalation is allowed
ansible_become_method	Specify how to raise permissions , For example, you can use sudo/su/runas Methods such as
ansible_become_user	To which user , Default promotion is root
ansible_become_password	The password when promoting to the specified user permission

1.2 Host variables

# Modify the managed client 192.168.109.134 ssh The configuration file 17 Line to modify the port number 
systemctl stop firewalld.service
setenforce 0
vim /etc/ssh/sshd_config
Port 2222
systemctl restart sshd
# I haven't configured password free login for this client 
# modify Ansible Manage the server host inventory configuration file 
vim /etc/ansible/hosts
[lhq]
192.168.109.134 ansible_port=2222 ansible_user=root ansible_password=123123
# Write the password directly to the configuration without establishing , unsafe 
ansible dbservers -a 'date'

1.3 Group variable

# Delete the existing password free login key file of the client 
# Client configuration 
cd
cd .ssh/
rm -rf authorized_keys
#ansible Configuration of control end 
vim /etc/ansible/hosts
[webservers]
192.168.109.131
192.168.109.132
192.168.109.133
[webservers:vars]				
# Expressed as  webservers  All hosts in the group define variables 
ansible_user=root
ansible_password=123456

[[email protected] ansible]# ansible webservers -a 'date'
192.168.109.132 | CHANGED | rc=0 >>
2022 year  07 month  06 Japan   Wednesday  17:34:46 CST
192.168.109.134 | CHANGED | rc=0 >>
2022 year  07 month  06 Japan   Wednesday  17:34:46 CST
192.168.109.133 | CHANGED | rc=0 >>
2022 year  07 month  06 Japan   Wednesday  17:34:46 CST
192.168.109.131 | CHANGED | rc=0 >>
2022 year  07 month  06 Japan   Wednesday  17:34:46 CST

1.4 Group nesting

vim /etc/ansible/hosts
[webservers]
192.168.239.20
192.168.239.30
192.168.239.40
[webservers:vars]
ansible_user=root
ansible_password=1999612
[dbservers]
192.168.239.50:2222 ansible_user=root ansible_password=1999612
[webservers1:children]
webservers
dbserers
# Expressed as  webservers1  The host group contains webservers Group and dbservers All hosts in the group