yum install ansible -y

yum -y install python-jinja2 PyYAML python-paramiko python-babel python-crypto

wget https://releases.ansible.com/ansible/ansible-latest.tar.gz

tar xf ansible-latest.tar.gz

cd ansible-2.9.0

python setup.py build

python setup.py install

mkdir /etc/ansible

cp -r examples/* /etc/ansible

git clone git://github.com/ansible/ansible.git --recursive

cd ./ansible

source ./hacking/env-setu

yum install python-pip python-devel

yum install gcc glibc-devel zibl-devel rpm-bulid openssl-devel

pip install --upgrade pip

pip install ansible --upgrade

# This is the default ansible 'hosts' file.

#

# It should live in /etc/ansible/hosts

#

#   - Comments begin with the '#' character

#   - Blank lines are ignored

#   - Groups of hosts are delimited by [header] elements

#   - You can enter hostnames or ip addresses

#   - A hostname/ip can be a member of multiple groups

# Ex 1: Ungrouped hosts, specify before any group headers.

## green.example.com

## blue.example.com

## 192.168.100.1

## 192.168.100.10

# Ex 2: A collection of hosts belonging to the 'webservers' group

## [webservers]

## alpha.example.org

## beta.example.org

## 192.168.1.100

## 192.168.1.110

# If you have multiple hosts following a pattern you can specify

# them like this:

## www[001:006].example.com

# Ex 3: A collection of database servers in the 'dbservers' group

## [dbservers]

##

## db01.intranet.mydomain.net

## db02.intranet.mydomain.net

## 10.25.1.56

## 10.25.1.57

# Here's another example of host ranges, this time there are no

# leading 0s:

## db-[99:101]-node.example.com

ntp.magedu.com

[webservers]

www1.magedu.com:2222

www2.magedu.com

[dbservers]

db1.magedu.com

db2.magedu.com

db3.magedu.com

[websrvs]

www[01:100].example.com

[dbsrvs]

db-[a:f].example.com

 [defaults]

#inventory = /etc/ansible/hosts # 主机列表配置文件

#library = /usr/share/my_modules/ # 库文件存放目录

#remote_tmp = $HOME/.ansible/tmp #临时py命令文件存放在远程主机目录

#local_tmp = $HOME/.ansible/tmp # 本机的临时命令执行目录

#forks = 5 # 默认并发数

#sudo_user = root # 默认sudo 用户

#ask_sudo_pass = True #每次执行ansible命令是否询问ssh密码

#ask_pass = True

#remote_port = 22

#host_key_checking = False # 检查对应服务器的host_key，建议取消注释

#log_path=/var/log/ansible.log #日志文件

#module_name = command #默认模块

[websers]

192.168.0.128

192.168.0.218

[appsers]

192.168.0.217

[root@docker ~]#ansible --help

Usage: ansible <host-pattern> [options]

Define and run a single task 'playbook' against a set of hosts

Options:

  -a MODULE_ARGS, --args=MODULE_ARGS

                        module arguments

  --ask-vault-pass      ask for vault password

  -B SECONDS, --background=SECONDS

                        run asynchronously, failing after X seconds

                        (default=N/A)

  -C, --check           don't make any changes; instead, try to predict some

                        of the changes that may occur

  -D, --diff            when changing (small) files and templates, show the

                        differences in those files; works great with --check

  -e EXTRA_VARS, --extra-vars=EXTRA_VARS

                        set additional variables as key=value or YAML/JSON, if

                        filename prepend with @

  -f FORKS, --forks=FORKS

                        specify number of parallel processes to use

                        (default=5)

  -h, --help            show this help message and exit

  -i INVENTORY, --inventory=INVENTORY, --inventory-file=INVENTORY

                        specify inventory host path or comma separated host

                        list. --inventory-file is deprecated

  -l SUBSET, --limit=SUBSET

                        further limit selected hosts to an additional pattern

  --list-hosts          outputs a list of matching hosts; does not execute

                        anything else

  -m MODULE_NAME, --module-name=MODULE_NAME

                        module name to execute (default=command)

  -M MODULE_PATH, --module-path=MODULE_PATH

                        prepend colon-separated path(s) to module library

                        (default=[u'/root/.ansible/plugins/modules',

                        u'/usr/share/ansible/plugins/modules'])

  --new-vault-id=NEW_VAULT_ID

                        the new vault identity to use for rekey

  --new-vault-password-file=NEW_VAULT_PASSWORD_FILES

                        new vault password file for rekey

  -o, --one-line        condense output

  -P POLL_INTERVAL, --poll=POLL_INTERVAL

                        set the poll interval if using -B (default=15)

  --syntax-check        perform a syntax check on the playbook, but do not

                        execute it

  -t TREE, --tree=TREE  log output to this directory

  --vault-id=VAULT_IDS  the vault identity to use

  --vault-password-file=VAULT_PASSWORD_FILES

                        vault password file

  -v, --verbose         verbose mode (-vvv for more, -vvvv to enable

                        connection debugging)

  --version             show program's version number and exit

  Connection Options:

    control as whom and how to connect to hosts

    -k, --ask-pass      ask for connection password

    --private-key=PRIVATE_KEY_FILE, --key-file=PRIVATE_KEY_FILE

                        use this file to authenticate the connection

    -u REMOTE_USER, --user=REMOTE_USER

                        connect as this user (default=None)

    -c CONNECTION, --connection=CONNECTION

                        connection type to use (default=smart)

    -T TIMEOUT, --timeout=TIMEOUT

                        override the connection timeout in seconds

                        (default=10)

    --ssh-common-args=SSH_COMMON_ARGS

                        specify common arguments to pass to sftp/scp/ssh (e.g.

                        ProxyCommand)

    --sftp-extra-args=SFTP_EXTRA_ARGS

                        specify extra arguments to pass to sftp only (e.g. -f,

                        -l)

    --scp-extra-args=SCP_EXTRA_ARGS

                        specify extra arguments to pass to scp only (e.g. -l)

    --ssh-extra-args=SSH_EXTRA_ARGS

                        specify extra arguments to pass to ssh only (e.g. -R)

  Privilege Escalation Options:

    control how and which user you become as on target hosts

    -s, --sudo          run operations with sudo (nopasswd) (deprecated, use

                        become)

    -U SUDO_USER, --sudo-user=SUDO_USER

                        desired sudo user (default=root) (deprecated, use

                        become)

    -S, --su            run operations with su (deprecated, use become)

    -R SU_USER, --su-user=SU_USER

                        run operations with su as this user (default=None)

                        (deprecated, use become)

    -b, --become        run operations with become (does not imply password

                        prompting)

    --become-method=BECOME_METHOD

                        privilege escalation method to use (default=sudo),

                        valid choices: [ sudo | su | pbrun | pfexec | doas |

                        dzdo | ksu | runas | pmrun ]

    --become-user=BECOME_USER

                        run operations as this user (default=root)

    --ask-sudo-pass     ask for sudo password (deprecated, use become)

    --ask-su-pass       ask for su password (deprecated, use become)

    -K, --ask-become-pass

                        ask for privilege escalation password

Some modules do not make sense in Ad-Hoc (include, meta, etc)

root@docker ~]#ansible-doc  ping

> PING    (/usr/lib/python2.7/site-packages/ansible/modules/system/ping.py)

        A trivial test module, this module always returns `pong' on successful contact. It does

        not make sense in playbooks, but it is useful from `/usr/bin/ansible' to verify the

        ability to login and that a usable python is configured. This is NOT ICMP ping, this is

        just a trivial test module. For Windows targets, use the [win_ping] module instead.

OPTIONS (= is mandatory):

- data

        Data to return for the `ping' return value.

        If this parameter is set to `crash', the module will cause an exception.

        [Default: pong]

NOTES:

      * For Windows targets, use the [win_ping] module instead.

AUTHOR: Ansible Core Team, Michael DeHaan

        METADATA:

          status:

          - stableinterface

          supported_by: core

:

[root@docker ~]#ansible-doc -s ping

- name: Try to connect to host, verify a usable python and return `pong' on success

  ping:

      data:                  # Data to return for the `ping' return value. If this parameter is set to `crash', the

                               module will cause an exception.

[root@docker ~]#

[root@docker ~]#ansible websers -m ping

192.168.0.128 | SUCCESS => {

    "changed": false,

    "ping": "pong"

}

192.168.0.218 | SUCCESS => {

    "changed": false,

    "ping": "pong"

}

[root@docker ~]#ansible appsers -m ping

192.168.0.217 | SUCCESS => {

    "changed": false,

    "ping": "pong"

}

[root@docker ~]#ansible all -m ping

192.168.0.128 | SUCCESS => {

    "changed": false,

    "ping": "pong"

}

192.168.0.218 | SUCCESS => {

    "changed": false,

    "ping": "pong"

}

192.168.0.217 | SUCCESS => {

    "changed": false,

    "ping": "pong"

}

[root@docker ~]#

[root@docker ~]#ansible all -m ping -k

SSH password:

192.168.0.128 | SUCCESS => {

    "changed": false,

    "ping": "pong"

}

192.168.0.218 | SUCCESS => {

    "changed": false,

    "ping": "pong"

}

192.168.0.217 | SUCCESS => {

    "changed": false,

    "ping": "pong"

}

[root@docker ~]#