• 编写Ansible角色实现分布式LNMP安装

     前言

    本文将介绍如何使用 Ansible 编写角色，在分布式环境下完成 LNMP（Linux、Nginx、MySQL、PHP）的自动化（编译）安装和配置，并验证 PHP 与 MySQL 数据联通性，实现博客和论坛页面的展示。

    常规单机部署 LNMP 请参考：LNMP架构搭建-CSDN博客

    Docker Dockerfile 单机部署 LNMP 请参考：Docker构建LNMP部署WordPress-CSDN博客

    Docker Compose 单机编排部署 LNMP 请参考：Docker-Compose编排LNMP并部署WordPress-CSDN博客

    目录

    一、环境准备

    1. 节点信息表

    2. 防火墙以及地址解析

    3. 管理节点安装 ansible

    4. 免密管理 ssh-keygen 

    5. 编辑主机清单

    6. 测试联通性

    二、准备 roles 模块

    1. 创建 roles 以及项目目录

    2. 编写 nginx 模块

    2.1 准备 files 相关文件

    2.1.1 准备 nginx、论坛、博客安装包

    2.1.2 准备编译安装 nginx 脚本

    2.1.3 创建共享目录脚本

    2.2 准备 templates 相关文件

    2.2.1 编辑 nginx 配置文件模板

    2.3 编写 nginx 模块 task 任务文件

    3. 编写 mysql 模块

    3.1 准备 files 相关文件

    3.1.1 准备 mysql 安装包

    3.1.2 准备编译安装 mysql 脚本

    3.1.3 创建共享目录脚本

    3.2 编写 mysql 模块 task 任务文件

    4. 编写 php 模块

    4.1 准备 files 相关文件

    4.1.1 准备 php 安装包

    4.1.2 准备编译安装 php 脚本

    4.1.3 编辑 php 主配置文件

    4.1.4 编辑 php-fpm 主配置文件

    4.1.5 编辑 php-fpm 进程池配置文件

    4.2 准备 templates 相关文件

    4.3 编写 php 模块 task 任务文件

    5. 编写 roles 示例

    三、执行角色剧本并验证

    1. 查看目录

    2. 执行剧本

    3. 验证 Wordpress

    3.1 创建一个新的配置文件 wp-config.php

    3.2 浏览器访问 wordpress

    4. 验证 Discuz

    4.1 创建一个新的配置文件 config_global.php

    4.2 浏览器访问 Discuz

    一、环境准备

    1. 节点信息表

    节点名称IP是否安装Ansible软件版本配置
    ansible 管理节点192.168.190.103是

    ansible 2.9.27

    		2C2G
    nginx 被管理节点192.168.190.104否nginx-1.24.08C4G
    mysql 被管理节点192.168.190.105否mysql-boost-5.7.208C4G
    php 被管理节点192.168.190.106否php-7.1.108C4G

    2. 防火墙以及地址解析

    1. 四台机器均需要操作：
    2. systemctl stop firewalld.service 
    3. setenforce 0
    4.  
    5. cat << eof >> /etc/hosts
    6. 192.168.190.103 ansible
    7. 192.168.190.104 nginx
    8. 192.168.190.105 mysql
    9. 192.168.190.106 php
    10. eof

    3. 管理节点安装 ansible

    1. [root@ansible ~]# yum install -y epel-release
    2. [root@ansible ~]# yum install -y ansible
    3. [root@ansible ~]# ansible --version
    4. ansible 2.9.27
    5.   config file = /etc/ansible/ansible.cfg
    6.   configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
    7.   ansible python module location = /usr/lib/python2.7/site-packages/ansible
    8.   executable location = /usr/bin/ansible
    9.   python version = 2.7.5 (default, Aug  4 2017, 00:39:18) [GCC 4.8.5 20150623 (Red Hat 4.8.5-16)]

    4. 免密管理 ssh-keygen 

    1. 生成 SSH 密钥对：
    2. [root@ansible ~]# ssh-keygen -t rsa      # 一直回车
    3. # rsa表示生成RSA密钥对，RSA是一种非对称加密算法
    4. [root@control ~]# ls .ssh/
    5. id_rsa  id_rsa.pub       # id_rsa 是私钥文件；id_rsa.pub 是公钥文件
    6.  
    7. 将本地主机上的SSH公钥复制到远程主机：
    8. [root@ansible ~]# ssh 192.168.190.104 # ssh root@192.168.190.104，默认root
    9. [root@ansible ~]# ssh 192.168.190.105
    10. [root@ansible ~]# ssh 192.168.190.106
    11. [root@ansible ~]# sshpass -p '123' ssh-copy-id 192.168.190.104
    12. [root@ansible ~]# sshpass -p '123' ssh-copy-id 192.168.190.105
    13. [root@ansible ~]# sshpass -p '123' ssh-copy-id 192.168.190.106

    5. 编辑主机清单

    1. [root@ansible ~]# vim /etc/ansible/hosts
    2. [nginx]
    3. 192.168.190.104 php_server_ip=192.168.190.106 nginx_html_path=/usr/local/nginx/html
    4.  
    5. [mysql]
    6. 192.168.190.105
    7.  
    8. [php]
    9. 192.168.190.106 php_server_ip=192.168.190.106 nginx_server_ip=192.168.190.104

    6. 测试联通性

    1. [root@ansible ~]# ansible all -o -m ping
    2. 192.168.190.105 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python"}, "changed": false, "ping": "pong"}
    3. 192.168.190.104 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python"}, "changed": false, "ping": "pong"}
    4. 192.168.190.106 | SUCCESS => {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python"}, "changed": false, "ping": "pong"}

    二、准备 roles 模块

    1. 创建 roles 以及项目目录

    一般 roles 目录会默认存在：

    1. [root@ansible ~]# mkdir /etc/ansible/roles/nginx/{files,templates,tasks,handlers,vars,defaults,meta} -p
    2. [root@ansible ~]# mkdir /etc/ansible/roles/mysql/{files,templates,tasks,handlers,vars,defaults,meta} -p
    3. [root@ansible ~]# mkdir /etc/ansible/roles/php/{files,templates,tasks,handlers,vars,defaults,meta} -p
    4.  
    5. [root@ansible ~]# touch /etc/ansible/roles/nginx/{defaults,vars,tasks,meta,handlers}/main.yml 
    6. [root@ansible ~]# touch /etc/ansible/roles/mysql/{defaults,vars,tasks,meta,handlers}/main.yml 
    7. [root@ansible ~]# touch /etc/ansible/roles/php/{defaults,vars,tasks,meta,handlers}/main.yml

    2. 编写 nginx 模块

    2.1 准备 files 相关文件

    用来存放由 copy 模块或 script 模块调用的文件。

    2.1.1 准备 nginx、论坛、博客安装包
    1. [root@ansible ~]# cd /etc/ansible/roles/nginx/files/
    2. [root@ansible files]# ls
    3. Discuz_X3.4_SC_UTF8.zip  nginx-1.24.0.tar.gz  wordpress-4.9.4-zh_CN.tar.gz
    2.1.2 准备编译安装 nginx 脚本
    1. [root@ansible files]# vim lnmp.sh
    2. #/bin/bash
    3. nginx (){
    4. nginxpath=`find / -name "*nginx*tar.gz" -exec dirname {} \; | sed -n '1p'`                #找到安装包路径
    5. nginxapp=`find / -name "*nginx*tar.gz" 2> /dev/null |awk -F/ '{print $NF}' | sed -n '1p'` #打印安装包名称
    6. systemctl status nginx.service > /dev/null
    7. if [ $? -eq 0 ];then     #判断上一条命令返回值是否为真
    8. echo  "nginx服务已安装"
    9. else
    10. useradd -M -s /sbin/nologin nginx  #创建用户
    11. echo "正在安装nginx服务，请耐心等待"
    12. tar xf  ${nginxpath}/${nginxapp} -C ${nginxpath} #解压安装包到其路径下
    13. nginxd=`find  ${nginxpath} -maxdepth 1 -type d | grep  nginx- | awk -F/ '{print $NF}'` 
    14. #只搜索当前目录，然后筛选出包含nginx- 字符串的目录，并打印这些目录的名称（去掉路径部分），-maxdepth 1表示只搜索当前目录，不搜索子目录
    15. cd  ${nginxpath}/${nginxd}
    16.  
    17. yum -y install gcc pcre-devel openssl-devel zlib-devel openssl  openssl-devel  &>>/dev/null
    18. ./configure --prefix=/usr/local/nginx \
    19. --user=nginx \
    20. --group=nginx \
    21. --with-http_ssl_module \
    22. --with-http_v2_module \
    23. --with-http_realip_module \
    24. --with-http_stub_status_module \
    25. --with-http_gzip_static_module \
    26. --with-pcre \
    27. --with-stream \
    28. --with-stream_ssl_module \
    29. --with-stream_realip_module  > /dev/null
    30. make -j `lscpu | sed -n '4p' | awk '{print $2}'`&> /dev/null
    31. make  install  &> /dev/nullh
    32. ln -s /usr/local/nginx/sbin/nginx /usr/local/sbin/
    33. cat >  /usr/lib/systemd/system/nginx.service  << EOF
    34. [Unit]
    35. Description=nginx
    36. After=network.target
    37. [Service]
    38. Type=forking
    39. PIDFile=/usr/local/nginx/logs/nginx.pid
    40. ExecStart=/usr/local/nginx/sbin/nginx
    41. ExecReload=/bin/kill -1 $MAINPID
    42. ExecStop=/bin/kill -3 $MAINPID
    43. PrivateTmp=true
    44. [Install]
    45. WantedBy=multi-user.target
    46. EOF
    47. chown -R nginx.nginx  /usr/local/nginx
    48. systemctl  daemon-reload  &> /dev/null
    49.  
    50. #准备安装论坛文件
    51. discuz=`find / -name "*scuz*UTF*.zip" -exec dirname {} \; | sed -n '1p'`
    52. discuzapp=`find  /  -name  "*scuz*UTF*.zip" 2>>/dev/null |awk  -F/ '{print $NF}' | sed -n '1p'`
    53. unzip ${discuz}/${discuzapp}  -d /usr/local/  >>/dev/null
    54. discuzd=`find /usr/local  -maxdepth 1  -type  d  |grep  UTF|awk  -F/  '{print $NF}' | sed -n '1p'`
    55. cp -r /usr/local/${discuzd}/upload/  /usr/local/nginx/html/bbs/
    56. chmod -R 777 /usr/local/nginx/html/bbs/config/
    57. chmod -R 777 /usr/local/nginx/html/bbs/data/
    58. chmod -R 777 /usr/local/nginx/html/bbs/uc_client/
    59. chmod -R 777 /usr/local/nginx/html/bbs/uc_server/
    60. ip=`ifconfig ens33|awk /netmask/'{print $2}'`
    61.  
    62. #准备安装博客文件"
    63. wordpresspath=`find / -name "*wordpress*" -exec dirname {} \; | sed -n '1p'`                   #找到安装包路径
    64. wordpressapp=`find / -name "*wordpress*" 2> /dev/null | awk  -F/ '{print $NF}' | sed -n '1p'`  #打印安装包名称
    65. tar xf ${wordpresspath}/${wordpressapp} -C /usr/local/nginx/html/ > /dev/null
    66. chmod 777 -R /usr/local/nginx/html/
    67. fi
    68. }
    69.  
    70.  
    71. mysql (){
    72. mysqlpath=`find / -name "*mysql*tar.gz" -exec dirname {} \; | sed -n '1p'`
    73. mysqlapp=`find / -name *mysql*tar.gz 2> /dev/null |awk  -F/ '{print $NF}' | sed -n '1p'`
    74. #准备安装MySQL
    75. systemctl start mysqld.service &> /dev/null
    76. if [ $? -eq 0 ];then
    77. echo "mysql is exist"
    78. else
    79. #安装Mysql环境依赖包
    80. yum -y install gcc gcc-c++ cmake bison bison-devel zlib-devel libcurl-devel libarchive-devel boost-devel ncurses-devel gnutls-devel libxml2-devel openssl-devel libevent-devel libaio-devel &> /dev/null
    81. #创建运行用户
    82. useradd -M -s /sbin/nologin  mysql
    83.  
    84. #编译安装
    85. #解压mysql源码包
    86. tar xf ${mysqlpath}/${mysqlapp} -C ${mysqlpath}
    87. mysqld=`find  ${mysqlpath} -maxdepth 1 -type d | grep mysql- | awk -F/ '{print $NF}'`
    88. cd  ${mysqlpath}/${mysqld}
    89.  
    90. #执行cmake命令
    91. cmake \
    92. -DCMAKE_INSTALL_PREFIX=/usr/local/mysql \
    93. -DMYSQL_UNIX_ADDR=/usr/local/mysql/mysql.sock \
    94. -DSYSCONFDIR=/etc \
    95. -DSYSTEMD_PID_DIR=/usr/local/mysql \
    96. -DDEFAULT_CHARSET=utf8  \
    97. -DDEFAULT_COLLATION=utf8_general_ci \
    98. -DWITH_EXTRA_CHARSETS=all \
    99. -DWITH_INNOBASE_STORAGE_ENGINE=1 \
    100. -DWITH_ARCHIVE_STORAGE_ENGINE=1 \
    101. -DWITH_BLACKHOLE_STORAGE_ENGINE=1 \
    102. -DWITH_PERFSCHEMA_STORAGE_ENGINE=1 \
    103. -DMYSQL_DATADIR=/usr/local/mysql/data \
    104. -DWITH_BOOST=boost \
    105. -DWITH_SYSTEMD=1   &>>/dev/null
    106.  
    107. #执行make命令
    108. make  -j `lscpu|sed -n '4p'|awk '{print $2}'` &>>/dev/null
    109. make install > /dev/null
    110.  
    111. #修改mysql 配置文件
    112. cat > /etc/my.cnf <<EOF
    113. [client]
    114. port = 3306
    115. socket=/usr/local/mysql/mysql.sock
    116.  
    117. [mysqld]
    118. user = mysql
    119. basedir=/usr/local/mysql
    120. datadir=/usr/local/mysql/data
    121. port = 3306
    122. character-set-server=utf8
    123. pid-file = /usr/local/mysql/mysqld.pid
    124. socket=/usr/local/mysql/mysql.sock
    125. bind-address = 0.0.0.0
    126. skip-name-resolve
    127. max_connections=2048
    128. default-storage-engine=INNODB
    129. max_allowed_packet=16M
    130. server-id = 1
    131.  
    132. sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES,NO_AUTO_CREATE_USER,NO_AUTO_VALUE_ON_ZERO,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,PIPES_AS_CONCAT,ANSI_QUOTES
    133. EOF
    134.  
    135. #更改mysql安装目录和配置文件的属主属组
    136. chown -R mysql:mysql /usr/local/mysql/
    137. chown mysql:mysql /etc/my.cnf
    138.  
    139. #初始化数据库
    140. cd /usr/local/mysql/bin/
    141. ./mysqld \
    142. --initialize-insecure \
    143. --user=mysql \
    144. --basedir=/usr/local/mysql \
    145. --datadir=/usr/local/mysql/data  &> /dev/null
    146.  
    147. #添加mysqld系统服务
    148. cp /usr/local/mysql/usr/lib/systemd/system/mysqld.service /usr/lib/systemd/system/
    149. systemctl daemon-reload  &> /dev/null
    150. systemctl start mysqld.service
    151. systemctl enable mysqld &> /dev/null
    152. echo  "5.----mysql服务已开启----"
    153.  
    154. ln -s /usr/local/mysql/bin/mysql /usr/bin/
    155. echo   "正在创建bbs数据库，并授权用户"
    156. /usr/local/mysql/bin/mysql  -uroot  -e "set password for 'root'@'localhost' = password ('123456');"
    157. /usr/local/mysql/bin/mysql  -uroot  -p'123456' -e 'create database bbs;' &> /dev/null
    158. /usr/local/mysql/bin/mysql  -uroot  -p'123456' -e "grant all on bbs.* to 'bbsuser'@'%' identified by '123456';" &> /dev/null
    159. /usr/local/mysql/bin/mysql  -uroot  -p'123456' -e "grant all on bbs.* to 'bbsuser'@'localhost' identified by '123456';" &> /dev/null
    160. /usr/local/mysql/bin/mysql  -uroot  -p'123456' -e 'flush privileges;' &> /dev/null
    161. 		
    162. echo   "正在创建wordpress数据库，并授权用户"
    163. /usr/local/mysql/bin/mysql  -uroot  -p'123456' -e 'create database wordpress;' &> /dev/null
    164. /usr/local/mysql/bin/mysql  -uroot  -p'123456' -e 'grant all privileges on wordpress.* to 'wordpress'@'%' identified by '123456';' &> /dev/null
    165. /usr/local/mysql/bin/mysql  -uroot  -p'123456' -e 'grant all privileges on *.* to 'root'@'%' identified by '123456';' &> /dev/null
    166. /usr/local/mysql/bin/mysql  -uroot  -p'123456' -e 'flush privileges;' &> /dev/null
    167. fi
    168. }
    169.  
    170.  
    171. php (){
    172. phppath=`find / -name *php*tar* -exec dirname {} \; | sed -n '1p'`
    173. phpapp=`find / -name *php*tar* 2> /dev/null |awk -F/ '{print $NF}' | sed -n '1p'`
    174. #安装编译环境
    175. systemctl start php-fpm.service &> /dev/null
    176. if [ $? -eq 0 ];then
    177. echo "php服务已安装"
    178. else
    179. echo "安装PHP服务"
    180. #安装编译环境"
    181. yum -y install gd libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel bison re2c libxml2 libxml2-devel zlib zlib-devel curl curl-devel gcc gcc-c++ openssl openssl-devel &> /dev/null
    182. #编译安装
    183. useradd -M -s /sbin/nologin nginx
    184.  
    185. #解压源码包
    186. tar xf ${phppath}/${phpapp} -C ${phppath}
    187. phpd=`find  ${phppath} -maxdepth 1 -type d |grep  php-|awk  -F/  '{print  $NF}'`
    188. cd  /${phppath}/${phpd}
    189.  
    190. #检测编译环境，并生成Makefile文件
    191. ./configure  --prefix=/usr/local/php --with-mysql-sock=/usr/local/mysql/mysql.sock --with-mysqli --with-zlib --with-curl --with-gd --with-jpeg-dir --with-png-dir --with-freetype-dir --with-openssl --enable-fpm --enable-mbstring --enable-xml --enable-session --enable-ftp --enable-pdo --enable-tokenizer --enable-zip &>>/dev/null 
    192.  
    193. #环境检测完成，正在执行make命令，进行编译
    194. make -j `lscpu|sed -n '4p'|awk '{print $2}'` &> /dev/null
    195.  
    196. #执行make install命令,将生成的程序或库文件复制到系统指定的位置进行安装
    197. make install > /dev/null
    198. ln -s /usr/local/php/bin/* /usr/local/bin/
    199. ln -s /usr/local/php/sbin/* /usr/local/sbin/
    200. cp /${phppath}/${phpd}/sapi/fpm/php-fpm.service /usr/lib/systemd/system/php-fpm.service
    201. systemctl daemon-reload  > /dev/null
    202. fi
    203. }
    204. $1
    2.1.3 创建共享目录脚本
    1. [root@ansible files]# vim nginx_nfs.sh
    2. #!/bin/bash
    3. echo "/usr/local/nginx/html *(rw)" > /etc/exports
    4. # *(rw)表示所有主机都可以以读写模式访问该共享目录
    5. # /etc/exports是NFS（Network File System）服务器的配置文件
    6. chmod -R 777 /usr/local/nginx/html/
    7. systemctl start rpcbind
    8. systemctl start nfs
    9.  
    10. [root@ansible files]# ls
    11. Discuz_X3.4_SC_UTF8.zip  lnmp.sh  nginx-1.24.0.tar.gz  nginx_nfs.sh  wordpress-4.9.4-zh_CN.tar.gz

    2.2 准备 templates 相关文件

    用来存放 jinjia2 模板，template 模块会自动在此目录中寻找 jinjia2 模板文件

    2.2.1 编辑 nginx 配置文件模板

    注意两个变量：php_server_ip，nginx_html_path

    1. [root@ansible files]# cd ../templates/
    2. [root@ansible templates]# vim nginx.conf.j2
    3. #user  nobody;
    4. worker_processes  1;
    5.  
    6. #error_log  logs/error.log;
    7. #error_log  logs/error.log  notice;
    8. #error_log  logs/error.log  info;
    9.  
    10. #pid        logs/nginx.pid;
    11.  
    12.  
    13. events {
    14.     worker_connections  1024;
    15. }
    16.  
    17.  
    18. http {
    19.     include       mime.types;
    20.     default_type  application/octet-stream;
    21.  
    22.     #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    23.     #                  '$status $body_bytes_sent "$http_referer" '
    24.     #                  '"$http_user_agent" "$http_x_forwarded_for"';
    25.  
    26.     #access_log  logs/access.log  main;
    27.  
    28.     sendfile        on;
    29.     #tcp_nopush     on;
    30.  
    31.     #keepalive_timeout  0;
    32.     keepalive_timeout  65;
    33.  
    34.     #gzip  on;
    35.  
    36.     server {
    37.         listen       80;
    38.         server_name  localhost;
    39.  
    40.         charset utf-8;
    41.  
    42.         #access_log  logs/host.access.log  main;
    43.  
    44.         location / {
    45.             root   html;
    46.             index  index.html index.php;
    47.         }
    48.  
    49.         #error_page  404              /404.html;
    50.  
    51.         # redirect server error pages to the static page /50x.html
    52.         #
    53.         error_page   500 502 503 504  /50x.html;
    54.         location = /50x.html {
    55.             root   html;
    56.         }
    57.  
    58.         # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    59.         #
    60.         #location ~ \.php$ {
    61.         #    proxy_pass   http://127.0.0.1;
    62.         #}
    63.  
    64.         # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    65.         #
    66.         location ~ \.php$ {
    67.             root           html;
    68.             fastcgi_pass   {{php_server_ip}}:9000;
    69.             fastcgi_index  index.php;
    70.             fastcgi_param  SCRIPT_FILENAME  {{nginx_html_path}}$fastcgi_script_name;
    71.             include        fastcgi_params;
    72.         }
    73.  
    74.         # deny access to .htaccess files, if Apache's document root
    75.         # concurs with nginx's one
    76.         #
    77.         #location ~ /\.ht {
    78.         #    deny  all;
    79.         #}
    80.     }
    81.  
    82.  
    83.     # another virtual host using mix of IP-, name-, and port-based configuration
    84.     #
    85.     #server {
    86.     #    listen       8000;
    87.     #    listen       somename:8080;
    88.     #    server_name  somename  alias  another.alias;
    89.  
    90.     #    location / {
    91.     #        root   html;
    92.     #        index  index.html index.htm;
    93.     #    }
    94.     #}
    95.  
    96.  
    97.     # HTTPS server
    98.     #
    99.     #server {
    100.     #    listen       443 ssl;
    101.     #    server_name  localhost;
    102.  
    103.     #    ssl_certificate      cert.pem;
    104.     #    ssl_certificate_key  cert.key;
    105.  
    106.     #    ssl_session_cache    shared:SSL:1m;
    107.     #    ssl_session_timeout  5m;
    108.  
    109.     #    ssl_ciphers  HIGH:!aNULL:!MD5;
    110.     #    ssl_prefer_server_ciphers  on;
    111.  
    112.     #    location / {
    113.     #        root   html;
    114.     #        index  index.html index.htm;
    115.     #    }
    116.     #}
    117.  
    118. }

    2.3 编写 nginx 模块 task 任务文件

    此目录应当包含一个 main.yml 文件，用于定义此角色的任务列表，此文件可以使用 include 包含其它的位于此目录的 task 文件。

    1. [root@ansible templates]# cd ../tasks/
    2. [root@ansible tasks]# vim main.yml
    3. - name: copy nginx package
    4.   copy: src=/etc/ansible/roles/nginx/files/nginx-1.24.0.tar.gz dest=/opt
    5. - name: copy wordpress package
    6.   copy: src=/etc/ansible/roles/nginx/files/Discuz_X3.4_SC_UTF8.zip dest=/opt
    7. - name: copy Discuz package
    8.   copy: src=/etc/ansible/roles/nginx/files/wordpress-4.9.4-zh_CN.tar.gz dest=/opt
    9. - name: install nginx shell
    10.   script: /etc/ansible/roles/nginx/files/lnmp.sh nginx
    11. - name: copy conf.j2
    12.   template: src=/etc/ansible/roles/nginx/templates/nginx.conf.j2 dest=/usr/local/nginx/conf/nginx.conf owner=nginx group=nginx
    13. - name: nfs shell
    14.   script: /etc/ansible/roles/nginx/files/nginx_nfs.sh
    15. - name: start nginx service
    16.   service: enabled=true name=nginx state=started

    3. 编写 mysql 模块

    3.1 准备 files 相关文件

    3.1.1 准备 mysql 安装包
    1. [root@ansible tasks]# cd ../../mysql/files/
    2. [root@ansible files]# ls
    3. mysql-boost-5.7.20.tar.gz
    3.1.2 准备编译安装 mysql 脚本

    同 2.1.2 脚本一致：

    [root@ansible files]# cp /etc/ansible/roles/nginx/files/lnmp.sh .
    3.1.3 创建共享目录脚本
    1. [root@ansible files]# vim mysql_nfs.sh
    2. #!/bin/bash
    3. echo "/usr/local/mysql  *(rw)" > /etc/exports
    4. chmod -R 777 /usr/local/mysql/
    5. systemctl start rpcbind
    6. systemctl start nfs

    3.2 编写 mysql 模块 task 任务文件

    此目录应当包含一个 main.yml 文件，用于定义此角色的任务列表，此文件可以使用 include 包含其它的位于此目录的 task 文件 

    1. [root@ansible files]# cd ../tasks/
    2. [root@ansible tasks]# vim main.yml
    3. - name: copy package
    4.   copy: src=/etc/ansible/roles/mysql/files/mysql-boost-5.7.20.tar.gz dest=/opt/
    5. - name: install mysql shell
    6.   script: /etc/ansible/roles/mysql/files/lnmp.sh mysql
    7. - name: nfs shell
    8.   script: /etc/ansible/roles/mysql/files/mysql_nfs.sh

    4. 编写 php 模块

    4.1 准备 files 相关文件

    4.1.1 准备 php 安装包
    1. [root@ansible vars]# cd ../../php/files/
    2. [root@ansible files]# ls
    3. php-7.1.10.tar.bz2
    4.1.2 准备编译安装 php 脚本

    同 2.1.2 脚本一致：

    [root@ansible files]# cp /etc/ansible/roles/nginx/files/lnmp.sh .
    4.1.3 编辑 php 主配置文件
    1. [root@ansible files]# egrep -v "^;" php.ini | egrep -v "^$"
    2. [PHP]
    3. engine = On
    4. short_open_tag = Off
    5. precision = 14
    6. output_buffering = 4096
    7. zlib.output_compression = Off
    8. implicit_flush = Off
    9. unserialize_callback_func =
    10. serialize_precision = -1
    11. disable_functions =
    12. disable_classes =
    13. zend.enable_gc = On
    14. expose_php = On
    15. max_execution_time = 30
    16. max_input_time = 60
    17. memory_limit = 128M
    18. error_reporting = E_ALL
    19. display_errors = On
    20. display_startup_errors = On
    21. log_errors = On
    22. log_errors_max_len = 1024
    23. ignore_repeated_errors = Off
    24. ignore_repeated_source = Off
    25. report_memleaks = On
    26. track_errors = On
    27. html_errors = On
    28. variables_order = "GPCS"
    29. request_order = "GP"
    30. register_argc_argv = Off
    31. auto_globals_jit = On
    32. post_max_size = 8M
    33. auto_prepend_file =
    34. auto_append_file =
    35. default_mimetype = "text/html"
    36. default_charset = "UTF-8"
    37. doc_root =
    38. user_dir =
    39. enable_dl = Off
    40. file_uploads = On
    41. upload_max_filesize = 2M
    42. max_file_uploads = 20
    43. allow_url_fopen = On
    44. allow_url_include = Off
    45. default_socket_timeout = 60
    46. [CLI Server]
    47. cli_server.color = On
    48. [Date]
    49. date.timezone = Asia/Shanghai
    50. [filter]
    51. [iconv]
    52. [intl]
    53. [sqlite3]
    54. [Pcre]
    55. [Pdo]
    56. [Pdo_mysql]
    57. pdo_mysql.cache_size = 2000
    58. pdo_mysql.default_socket=
    59. [Phar]
    60. [mail function]
    61. SMTP = localhost
    62. smtp_port = 25
    63. mail.add_x_header = On
    64. [SQL]
    65. sql.safe_mode = Off
    66. [ODBC]
    67. odbc.allow_persistent = On
    68. odbc.check_persistent = On
    69. odbc.max_persistent = -1
    70. odbc.max_links = -1
    71. odbc.defaultlrl = 4096
    72. odbc.defaultbinmode = 1
    73. [Interbase]
    74. ibase.allow_persistent = 1
    75. ibase.max_persistent = -1
    76. ibase.max_links = -1
    77. ibase.timestampformat = "%Y-%m-%d %H:%M:%S"
    78. ibase.dateformat = "%Y-%m-%d"
    79. ibase.timeformat = "%H:%M:%S"
    80. [MySQLi]
    81. mysqli.max_persistent = -1
    82. mysqli.allow_persistent = On
    83. mysqli.max_links = -1
    84. mysqli.cache_size = 2000
    85. mysqli.default_port = 3306
    86. mysqli.default_socket = /usr/local/mysql/mysql.sock
    87. mysqli.default_host =
    88. mysqli.default_user =
    89. mysqli.default_pw =
    90. mysqli.reconnect = Off
    91. [mysqlnd]
    92. mysqlnd.collect_statistics = On
    93. mysqlnd.collect_memory_statistics = On
    94. [OCI8]
    95. [PostgreSQL]
    96. pgsql.allow_persistent = On
    97. pgsql.auto_reset_persistent = Off
    98. pgsql.max_persistent = -1
    99. pgsql.max_links = -1
    100. pgsql.ignore_notice = 0
    101. pgsql.log_notice = 0
    102. [bcmath]
    103. bcmath.scale = 0
    104. [browscap]
    105. [Session]
    106. session.save_handler = files
    107. session.use_strict_mode = 0
    108. session.use_cookies = 1
    109. session.use_only_cookies = 1
    110. session.name = PHPSESSID
    111. session.auto_start = 0
    112. session.cookie_lifetime = 0
    113. session.cookie_path = /
    114. session.cookie_domain =
    115. session.cookie_httponly =
    116. session.serialize_handler = php
    117. session.gc_probability = 1
    118. session.gc_divisor = 1000
    119. session.gc_maxlifetime = 1440
    120. session.referer_check =
    121. session.cache_limiter = nocache
    122. session.cache_expire = 180
    123. session.use_trans_sid = 0
    124. session.sid_length = 26
    125. session.trans_sid_tags = "a=href,area=href,frame=src,form="
    126. session.sid_bits_per_character = 5
    127. [Assertion]
    128. zend.assertions = 1
    129. [COM]
    130. [mbstring]
    131. [gd]
    132. [exif]
    133. [Tidy]
    134. tidy.clean_output = Off
    135. [soap]
    136. soap.wsdl_cache_enabled=1
    137. soap.wsdl_cache_dir="/tmp"
    138. soap.wsdl_cache_ttl=86400
    139. soap.wsdl_cache_limit = 5
    140. [sysvshm]
    141. [ldap]
    142. ldap.max_links = -1
    143. [mcrypt]
    144. [dba]
    145. [opcache]
    146. [curl]
    147. [openssl]
    4.1.4 编辑 php-fpm 主配置文件
    1. [root@ansible files]# egrep -v "^;" php-fpm.conf | egrep -v "^$"
    2. [global]
    3. pid = run/php-fpm.pid
    4. include=/usr/local/php/etc/php-fpm.d/*.conf
    4.1.5 编辑 php-fpm 进程池配置文件

    这步可选，如果直接复制配置文件至 templates 文件夹模板 .j2 文件自带变量会报错。

    1. [root@ansible files]# egrep -v "^;" www.conf | egrep -v "^$"
    2. [www]
    3. user = nginx
    4. group = nginx
    5. listen = 192.168.190.106:9000      # php 地址
    6. listen.allowed_clients = 127.0.0.1,192.168.190.104  # nginx 地址
    7. pm = dynamic
    8. pm.max_children = 5
    9. pm.start_servers = 2
    10. pm.min_spare_servers = 1
    11. pm.max_spare_servers = 3

    4.2 准备 templates 相关文件

    1. [root@ansible files]# cd ../templates/
    2. [root@ansible templates]# vim www.conf.j2
    3. [www]
    4. user = nginx
    5. group = nginx
    6. listen = {{php_server_ip}}:9000
    7. listen.allowed_clients = 127.0.0.1,{{nginx_server_ip}}
    8. pm = dynamic
    9. pm.max_children = 5
    10. pm.start_servers = 2
    11. pm.min_spare_servers = 1
    12. pm.max_spare_servers = 3

    4.3 编写 php 模块 task 任务文件

    此目录应当包含一个 main.yml 文件，用于定义此角色的任务列表，此文件可以使用 include 包含其它的位于此目录的 task 文件 

    1. [root@ansible templates]# cd ../tasks/
    2. [root@ansible tasks]# vim main.yml 
    3. - name: copy package
    4.   copy: src=/etc/ansible/roles/php/files/php-7.1.10.tar.bz2 dest=/opt/
    5. - name: create mysql nfs path
    6.   file: path=/usr/local/mysql/ state=directory
    7. - name: create nginx nfs path
    8.   file: path=/usr/local/nginx/html/ state=directory
    9. - name: mount nfs mysql share
    10.   ansible.builtin.mount: src=192.168.190.105:/usr/local/mysql path=/usr/local/mysql fstype=nfs opts=defaults state=mounted
    11. - name: mount nfs nginx share 
    12.   ansible.builtin.mount: src=192.168.190.104:/usr/local/nginx/html path=/usr/local/nginx/html fstype=nfs opts=defaults state=mounted
    13. - name: install php shell
    14.   script: /etc/ansible/roles/php/files/lnmp.sh php
    15. - name: copy php-fpm.conf
    16.   copy: src=/etc/ansible/roles/php/files/php-fpm.conf dest=/usr/local/php/etc/php-fpm.conf
    17. - name: copy php.ini
    18.   copy: src=/etc/ansible/roles/php/files/php.ini dest=/usr/local/php/lib/php.ini
    19. - name: copy www.conf
    20.   template: src=/etc/ansible/roles/php/templates/www.conf.j2 dest=/usr/local/php/etc/php-fpm.d/www.conf
    21. - name: start php-fpm server
    22.   service: name=php-fpm state=started

    5. 编写 roles 示例

    1. [root@ansible vars]# cd /etc/ansible/
    2. [root@ansible ansible]# vim lnmp.yml
    3. ---
    4. - hosts: nginx
    5.   remote_user: root
    6.   roles:
    7.      - nginx
    8. - hosts: mysql
    9.   remote_user: root
    10.   roles:
    11.      - mysql
    12. - hosts: php
    13.   remote_user: root
    14.   roles:
    15.      - php
    16. ...

    三、执行角色剧本并验证

    1. 查看目录

    1. [root@ansible ansible]# ls
    2. ansible.cfg  hosts  lnmp.yml  roles
    3. [root@ansible ansible]# tree
    4. .
    5. ├── ansible.cfg
    6. ├── hosts
    7. ├── lnmp.yml
    8. └── roles
    9.     ├── mysql
    10.     │   ├── defaults
    11.     │   │   └── main.yml
    12.     │   ├── files
    13.     │   │   ├── lnmp.sh
    14.     │   │   ├── mysql-boost-5.7.20.tar.gz
    15.     │   │   └── mysql_nfs.sh
    16.     │   ├── handlers
    17.     │   │   └── main.yml
    18.     │   ├── meta
    19.     │   │   └── main.yml
    20.     │   ├── tasks
    21.     │   │   └── main.yml
    22.     │   ├── templates
    23.     │   └── vars
    24.     │       └── main.yml
    25.     ├── nginx
    26.     │   ├── defaults
    27.     │   │   └── main.yml
    28.     │   ├── files
    29.     │   │   ├── Discuz_X3.4_SC_UTF8.zip
    30.     │   │   ├── lnmp.sh
    31.     │   │   ├── nginx-1.24.0.tar.gz
    32.     │   │   ├── nginx_nfs.sh
    33.     │   │   └── wordpress-4.9.4-zh_CN.tar.gz
    34.     │   ├── handlers
    35.     │   │   └── main.yml
    36.     │   ├── meta
    37.     │   │   └── main.yml
    38.     │   ├── tasks
    39.     │   │   └── main.yml
    40.     │   ├── templates
    41.     │   │   └── nginx.conf.j2
    42.     │   └── vars
    43.     │       └── main.yml
    44.     └── php
    45.         ├── defaults
    46.         │   └── main.yml
    47.         ├── files
    48.         │   ├── lnmp.sh
    49.         │   ├── php-7.1.10.tar.bz2
    50.         │   ├── php-fpm.conf
    51.         │   ├── php.ini
    52.         │   └── www.conf
    53.         ├── handlers
    54.         │   └── main.yml
    55.         ├── meta
    56.         │   └── main.yml
    57.         ├── tasks
    58.         │   └── main.yml
    59.         ├── templates
    60.         │   └── www.conf.j2
    61.         └── vars
    62.             └── main.yml

    2. 执行剧本

    1. [root@ansible ansible]# ansible-playbook lnmp.yml
    2.  
    3. PLAY [nginx] **************************************************************************************
    4.  
    5. TASK [Gathering Facts] ****************************************************************************
    6. ok: [192.168.190.104]
    7.  
    8. TASK [copy nginx package] *************************************************************************
    9. changed: [192.168.190.104]
    10.  
    11. TASK [nginx : copy wordpress package] *************************************************************
    12. changed: [192.168.190.104]
    13.  
    14. TASK [nginx : copy Discuz dpackage] ***************************************************************
    15. changed: [192.168.190.104]
    16.  
    17. TASK [install nginx shell] ************************************************************************
    18. changed: [192.168.190.104]
    19.  
    20. TASK [nginx : copy conf.j2] ***********************************************************************
    21. changed: [192.168.190.104]
    22.  
    23. TASK [nginx : nfs shell] **************************************************************************
    24. changed: [192.168.190.104]
    25.  
    26. TASK [start nginx service] ************************************************************************
    27. changed: [192.168.190.104]
    28.  
    29. PLAY [mysql] **************************************************************************************
    30.  
    31. TASK [Gathering Facts] ****************************************************************************
    32. ok: [192.168.190.105]
    33.  
    34. TASK [mysql : copy package] ***********************************************************************
    35. changed: [192.168.190.105]
    36.  
    37. TASK [install mysql shell] ******************************************************************************
    38. changed: [192.168.190.105]
    39.  
    40. TASK [mysql : nfs shell] **************************************************************************
    41. changed: [192.168.190.105]
    42.  
    43. PLAY [php] ****************************************************************************************
    44.  
    45. TASK [Gathering Facts] ****************************************************************************
    46. ok: [192.168.190.106]
    47.  
    48. TASK [php : copy package] *************************************************************************
    49. changed: [192.168.190.106]
    50.  
    51. TASK [php : create mysql nfs path] ****************************************************************
    52. changed: [192.168.190.106]
    53.  
    54. TASK [php : create nginx nfs path] ****************************************************************
    55. changed: [192.168.190.106]
    56.  
    57. TASK [php : mount nfs mysql share] ****************************************************************
    58. changed: [192.168.190.106]
    59.  
    60. TASK [php : mount nfs nginx share] ****************************************************************
    61. changed: [192.168.190.106]
    62.  
    63. TASK [install php shell] ********************************************************************************
    64. changed: [192.168.190.106]
    65.  
    66. TASK [copy php-fpm.conf] **************************************************************************
    67. changed: [192.168.190.106]
    68.  
    69. TASK [copy php.ini] *******************************************************************************
    70. changed: [192.168.190.106]
    71.  
    72. TASK [php : copy www.conf] ************************************************************************
    73. changed: [192.168.190.106]
    74.  
    75. TASK [start php-fpm server] ***********************************************************************
    76. changed: [192.168.190.106]
    77.  
    78. PLAY RECAP ****************************************************************************************
    79. 192.168.190.104            : ok=8    changed=7    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
    80. 192.168.190.105            : ok=4    changed=3    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
    81. 192.168.190.106            : ok=11   changed=10   unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

    3. 验证 Wordpress

    3.1 创建一个新的配置文件 wp-config.php

    1. [root@nginx ~]# cd /usr/local/nginx/html/wordpress
    2. [root@nginx wordpress]# cp wp-config-sample.php wp-config.php
    3. [root@nginx wordpress]# vim wp-config.php
    4. // ** MySQL 设置 - 具体信息来自您正在使用的主机 ** //
    5. /** WordPress数据库的名称 */
    6. define('DB_NAME', 'wordpress');
    7.  
    8. /** MySQL数据库用户名 */
    9. define('DB_USER', 'wordpress');
    10.  
    11. /** MySQL数据库密码 */
    12. define('DB_PASSWORD', '123456');
    13.  
    14. /** MySQL主机 */
    15. define('DB_HOST', '192.168.190.105:3306');

    3.2 浏览器访问 wordpress

    访问192.168.190.104/wordpress/index.php

    4. 验证 Discuz

    4.1 创建一个新的配置文件 config_global.php

    1. [root@nginx ~]# cd /usr/local/nginx/html/bbs/config
    2. [root@nginx config]# cp config_global_default.php config_global.php
    3. [root@nginx config]# chmod 777 config_global.php
    4. [root@nginx config]# vim config_global.php
    5. // ----------------------------  CONFIG DB  ----------------------------- //
    6. $_config['db']['1']['dbhost'] = '192.168.190.105:3306';  # 数据库地址端口
    7. $_config['db']['1']['dbuser'] = 'bbsuser';               # 用户名
    8. $_config['db']['1']['dbpw'] = '123456';                  # 密码

    4.2 浏览器访问 Discuz

    访问192.168.190.104/bbs/install/index.php

  • 相关阅读:
    Tailwindcss 提取组件
    JVM参数MetaspaceSize的解读
    Angular-Web前端框架
    chrome浏览器也能做自动化测试
    四大函数式接口（重点，必须掌握）
    《向量数据库指南》——宏观解读向量数据库Milvus Cloud
    websocket flv 客户端解封包
    PTC自恢复保险丝应用和选型
    join(),Java内存图
    Ubuntu使用过程中的常见问题及解决方案
  • 原文地址：https://blog.csdn.net/qq_64612585/article/details/138748513