playbooks 是一种简单的配置管理系统与多机器部署系统的基础。与现有的其他系统有不同之处，且非常适合于复杂应用部署
playbook 可以定制配置，可以按指定的步骤有序执行，支持同步以及异步方式。
官网例子：https://github.com/ansible/ansible-examples
playbooks 可以用于声明配置，更强大的地方在于，在playbooks中可以编排有序的执行过程，甚至于做到多组机器间，来回有序的执行特别指定的步骤，并且可以同步或异步发起任务。
ansible-playbook命令参数：
-u REMOTE_USER, --user=REMOTE_USER ＃ ssh 连接的用户名
-k, --ask-pass ＃ssh登录认证密码 -s, --sudo ＃sudo 到root用户，相当于Linux系统下的sudo命令
-U SUDO_USER, --sudo-user=SUDO_USER ＃sudo 到对应的用户
-K, --ask-sudo-pass ＃用户的密码（—sudo时使用）
-T TIMEOUT, --timeout=TIMEOUT ＃ ssh 连接超时，默认 10 秒
-C, --check ＃ 指定该参数后，执行 playbook 文件不会真正去执行，而是模拟执行一遍，然后输出本次执行会对远程主机造成的修改
-e EXTRA_VARS, --extra-vars=EXTRA_VARS ＃ 设置额外的变量如：key=value 形式 或者 YAML or JSON，以空格分隔变量，或用多个-e
-f FORKS, --forks=FORKS ＃ 进程并发处理，默认 5
-i INVENTORY, --inventory-file=INVENTORY ＃ 指定 hosts 文件路径，默认 default=/etc/ansible/hosts
-l SUBSET, --limit=SUBSET ＃ 指定一个 pattern，对- hosts:匹配到的主机再过滤一次
--list-hosts ＃ 只打印有哪些主机会执行这个 playbook 文件，不是实际执行该 playbook
--list-tasks ＃ 列出该 playbook 中会被执行的 task
--private-key=PRIVATE_KEY_FILE ＃ 私钥路径
--step ＃ 同一时间只执行一个 task，每个 task 执行前都会提示确认一遍
--syntax-check ＃ 只检测 playbook 文件语法是否有问题，不会执行该 playbook
-t TAGS, --tags=TAGS ＃当 play 和 task 的 tag 为该参数指定的值时才执行，多个 tag 以逗号分隔
--skip-tags=SKIP_TAGS ＃ 当 play 和 task 的 tag 不匹配该参数指定的值时，才执行
-v, --verbose ＃输出更详细的执行过程信息，-vvv可得到所有执行过程信息。
实例：
[root@localhost ~]# tree /etc/ansible//etc/ansible/├── ansible.cfg├── group_vars│ ├── all│ └── t3├── hosts├── roles│ └── nginx│ ├── handlers│ │ └── main.yml│ ├── tasks│ │ └── main.yml│ └── templates│ ├── default_proxy_params.conf│ ├── new.conf│ ├── nginx.conf│ ├── static_proxy_params.conf│ ├── upstream.conf│ ├── vhost.conf│ ├── vhost_ssl.conf│ └── websocket_proxy_params.conf├── site.retry└── site.yml
[root@localhost ~]# cat /etc/ansible/hosts[all:vars]ansible_ssh_private_key_file=/root/.ssh/id_rsaansible_ssh_port=22ansible_ssh_user=root[t3:vars]ansible_python_interpreter=/usr/bin/python2[t3]192.168.11.162
[root@localhost ~]# cat /etc/ansible/site.yml - hosts: t3 # 组名 user: root roles: - nginx # 角色
[root@localhost ~]# cat /etc/ansible/group_vars/t3 # t3为组名worker_processes: 4num_cpus: 4max_open_file: 65506worker_connections: 10240log_format_format: 'json' #日志类型,默认为mainlog_format_main: '$remote_addr - $remote_user [$time_local] $request "$status" $body_bytes_sent "$http_referer" "$request_body" "$http_user_agent" "$http_x_forwarded_for" cache_status:$upstream_cache_status upstream:$upstream_addr response_time: $request_time response_time: $request_time host: $host'log_format_json: '{"client_ip":"$remote_addr","ident":"-","auth":"$remote_user","timestamp":"$time_local","request":"$request","response":"$status","bytes":"$body_bytes_sent","referer":"$http_referer","request_body":"$request_body","user_agent":"$http_user_agent","forwarded":"$http_x_forwarded_for","cache_status":"$upstream_cache_status","upstream":"$upstream_addr","upstream_status":"$upstream_status","http_host":"$host","ssl_protocol":"$ssl_protocol","ssl_cipher":"$ssl_cipher","request_time":"$request_time","upstream_response_time":"$upstream_response_time"}'vhost_domain: ["t1.bet","t2.com","t3.tv"] # 域名列表upstream_list: [ # upstream 列表 { "name" : "mobile", # 名称 "server_list": [ # 服务列表 {"ip":"10.0.0.1","port" : 3000,"max_fails":2,"fail_timeout":"30s","weight":5}, {"ip":"10.0.0.2","port" : 3000,"max_fails":2,"fail_timeout":"30s","weight":15}, {"ip":"10.0.0.3","port" : 3000,"max_fails":2,"fail_timeout":"30s","weight":10}, {"ip":"10.0.0.4","port" : 3000,"max_fails":2,"fail_timeout":"30s","weight":5} ] }, { "name":"desktop", "server_list":[ {"ip":"10.0.0.4","port" : 3001,"max_fails":2,"fail_timeout":"30s","weight":1}, {"ip":"10.0.0.3","port" : 3001,"max_fails":2,"fail_timeout":"30s","weight":1}, ] }] [root@localhost ~]# cat /etc/ansible/roles/nginx/tasks/main.yml - name: nginx is at then latest version # 安装nginx yum: pkg=nginx state=latest- name: write the nginx.conf config file # nginx.conf 模板文件 template: src=nginx.conf dest=/etc/nginx/nginx.conf notify: - restart nginx - name: write the default_proxy_params.conf config file template: src=default_proxy_params.conf dest=/etc/nginx/conf.d/default_proxy_params.conf notify: - restart nginx - name: write the default_proxy_params.conf config file template: src=new.conf dest=/etc/nginx/conf.d/new.conf notify: - restart nginx - name: write the static_proxy_params.conf config file template: src=static_proxy_params.conf dest=/etc/nginx/conf.d/static_proxy_params.conf notify: - restart nginx - name: write the websocket_proxy_params.conf config file template: src=websocket_proxy_params.conf dest=/etc/nginx/conf.d/websocket_proxy_params.conf notify: - restart nginx - name: write the upstream.conf config file template: src=upstream.conf dest=/etc/nginx/conf.d/upstream.conf notify: - restart nginx - name: write the vhost.conf config file template: src=vhost.conf dest=/etc/nginx/conf.d/vhost.conf notify: - restart nginx - name: write the vhost_ssl.conf config file template: src=vhost_ssl.conf dest=/etc/nginx/conf.d/vhost_ssl.conf notify: - restart nginx - name: ensure nginx is running service: name=nginx state=started
[root@localhost ~]# cat /etc/ansible/roles/nginx/handlers/main.yml - name: restart nginx service: name=nginx state=started
[root@localhost ~]# cat /etc/ansible/roles/nginx/templates/nginx.conf worker_processes { { worker_processes }};pid /var/run/nginx.pid;{% if num_cpus == 2 %}worker_cpu_affinity 01 10;{% elif num_cpus == 4 %}worker_cpu_affinity 1000 0100 0010 0001;{% elif num_cpus >=8 %}worker_cpu_affinity 00000001 00000010 00000100 00001000 00010000 00100000 01000000 10000000;{% else %}worker_cpu_affinity 1000 0100 0010 0001;{% endif %}worker_rlimit_nofile { { max_open_file }}events { use epoll; worker_connections { { worker_connections }}; multi_accept on;}...# 日志格式配置{% if log_format_format == 'json' %} log_format json { { log_format_json }}; {% else %} log_format main { { log_format_main }};{% endif %}[root@localhost ~]# cat /etc/ansible/roles/nginx/templates/vhost.conf{% for domain in vhost_domain %}server { listen 80 ; server_name { { domain }}; rewrite ^(.*) https://www{ { domain }} permanent; {% if log_format_format == 'json' %} access_log logs/{ { domain }}.access.log json; {% else %} access_log logs/{ { domain }}.access.log main; {% endif %}}{% endfor %}[root@localhost ~]# cat /etc/ansible/roles/nginx/templates/vhost_ssl.conf{% for domain in vhost_domain %}server { listen 443;#HTTP Port server_name www.{ { domain }} { { domain }}; include /usr/local/nginx/conf.d/new.conf; index index.jsp index.html index.htm; {% if log_format_format == 'json' %} access_log logs/{ { domain }}.access.log json; {% else %} access_log logs/{ { domain }}.access.log main; {% endif %} if ($http_host = { { domain }} ) { rewrite ^(.*)$ https://www.{ { domain }}$1 permanent; } ssl on; ssl_certificate /usr/local/nginx/conf.d/ssl/www.{ { domain }}/www.{ { domain }}.crt; ssl_certificate_key /usr/local/nginx/conf.d/ssl/www.{ { domain }}/www.{ { domain }}.key;}{% endfor %}[root@localhost ~]# cat /etc/ansible/roles/nginx/templates/upstream.conf{% for upstream_name in upstream_list %}upstream { { upstream_name.name }} { {% for server_name in upstream_name.server_list%} server { { server_name.ip }}:{ { server_name.port }} max_fails={ { server_name.max_fails }} fail_timeout={ { server_name.fail_timeout }} weight={ { server_name.weight}}; {% endfor %}}{% endfor %}... [root@localhost ~]# ansible-playbook /etc/ansible/site.ymlPLAY [t3] ***********************************************************TASK [Gathering Facts] **********************************************ok: [192.168.11.162]TASK [nginx : nginx is at then latest version] **********************ok: [192.168.11.162]...