dhcp和ansible

一、搭建DHCP服務，為局域網內用戶提供10.1.1.0/24網段的IP，且租約期默認為48小時
1.安裝軟件包:
yum install -y dhcp*
2.配置服務:

[root@localhost dhcp]# vim dhcpd.conf 
option domain-name "example.org";
option domain-name-servers ns1.example.org, ns2.example.org;
default-lease-time 172800;
max-lease-time 172800;
log-facility local7;
subnet 10.1.1.0 netmask 255.255.255.0 {
        range 10.1.1.100 10.1.1.200;

3.啟動服務并驗證:

systemctl start dhcp
dhclient -d

二、在上述實驗基礎上，實現DHCP中繼：

# 開啟路由轉發功能
vim /etc/sysctl.conf
net.ipv4.ip-forward=1
sysctl -p
# 啟動dhcp中繼服務
dhcrelay dhcp_server_ip

中繼服務實際使用中，基本沒有必要使用。其他網絡的主機另外新建一個dhcp服務就好，沒有必要非得使用中繼

三、借助Ansible Playbook自動化搭建LNMP環境（可借助yum）
1.實驗主機:

ansible主機:172.20.10.6
webservers:172.20.10.3
appservers:172.20.10.4

2.ansible主機免密鑰認證
(1)

[root@localhost playbooks]# ssh-keygen  
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:LFUqZ3zNLyVoJzwgIo+LzGwHhd2YCnKh7kOl6IZQcZ4 root@localhost
The key's randomart image is:
+---[RSA 2048]----+
|  *o* . . .      |
|ooo@ + o = +     |
|+o+.E . * B = .  |
|*++.   * o + +   |
|=B..  . S   . .  |
|B .    .     .   |
|.=               |
|. .              |
|                 |
+----[SHA256]-----+

(2)

[root@localhost] ssh-copy-id 172.20.10.3
[root@localhost]# ssh-copy-id 172.20.10.4

3.ansible配置文件

[webservers]
172.20.10.3
[appservers]
172.20.10.4

4.定義playbook劇本:

[root@localhost playbooks]# vim lnmp.yml 
---
- hosts: webservers
  remote_user: root

  tasks:
    - name: install nginx
      yum:  name=nginx
    - name: config
      copy: src=/data/nginx.conf  dest=/etc/nginx/nginx.conf
      tags: conf
      notify: restart nginx
    - name: start nginx
      service: name=nginx state=started enabled=yes

  handlers:
    - name: restart nginx  
      service: name=nginx state=restarted

- hosts: appservers 
  remote_user: root

  tasks:
    - name: install services 
      yum: name={{ item }} 
      with_items:
        - mariadb
        - mariadb-server
        - php
        - php-fpm 
        - php-mysql
    - name:  php-fpm  config
      copy: src=/data/www.conf  dest=/etc/php-fpm.d/www.conf
      notify: restart php-fpm
    - name: start php-fpm
      service: name=php-fpm state=started enabled=yes
    - name : start mysql
      service: name=mariadb  state=started enabled=yes
    - name : config mysql
      shell: mysqladmin -uroot password "centos"
    - name: config php-index-file
      copy: src=/data/index.php  dest=/var/www/html/
    - name: config php-mysql-file
      copy: src=/data/mysql.php  dest=/var/www/html/

  handlers:
    - name: restart php-fpm
      service: name=php-fpm state=restart

(5)執行結果:

(6)測試:


四、采用Ansible Role方式自動化搭建LNMP
1.實驗主機:

ansible主機:172.20.10.6
webservers:172.20.10.3
appservers:172.20.10.4

2.ansible主機roles目錄:

3.執行結果為：

4.訪問測試為：