008.Ansible文件管理模块

一 stat模块

检查文件状态使用，模块获取文件的状态等信息，类似与linux中的STAT命令可以用来获取文件的属主、可读/写、文件状态等信息

[root@node1 ansible]# stat lookup_files_ex.yml

  File: ‘lookup_files_ex.yml’

  Size: 125           Blocks: 8          IO Block: 4096   regular file

Device: fd00h/64768d    Inode: 69018922    Links: 1

Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)

Access: 2020-04-30 18:01:52.947596173 +0800

Modify: 2020-04-30 18:01:51.624591268 +0800

Change: 2020-04-30 18:01:51.626591276 +0800

 Birth: -

[root@node1 ansible]# vim files_stat_ex.yml

- hosts: demo2.example.com

  gather_facts: no

  tasks:

    - name: stat /rtc/fstab

      stat:

        path: /etc/fstab

      register: fstab_stat

    - name: print fstab_stat

      debug:

        msg: "{{ fstab_stat }}"

[root@node1 ansible]# ansible-playbook files_stat_ex.yml

TASK [print fstab_stat] ***********************************************************************************************************************

ok: [demo2.example.com] => {

    "msg": {

        "changed": false,

        "failed": false,

        "stat": {

            "atime": 1588162552.5214317,

            "attr_flags": "",

            "attributes": [],

            "block_size": 4096,

            "blocks": 8,

            "charset": "us-ascii",

            "checksum": "8e1580bbd25809a2232e28adba26735dad99cc06",

            "ctime": 1565620911.8073654,

            "dev": 64768,

            "device_type": 0,

            "executable": false,

            "exists": true,

            "gid": 0,

            "gr_name": "root",

            "inode": 33554498,

            "isblk": false,

            "ischr": false,

            "isdir": false,

            "isfifo": false,

            "isgid": false,

            "islnk": false,

            "isreg": true,

            "issock": false,

            "isuid": false,

            "mimetype": "text/plain",

            "mode": "0644",

            "mtime": 1565620660.3251472,

            "nlink": 1,

            "path": "/etc/fstab",

            "pw_name": "root",

            "readable": true,

            "rgrp": true,

            "roth": true,

            "rusr": true,

            "size": 465,

            "uid": 0,

            "version": "598828928",

            "wgrp": false,

            "woth": false,

            "writeable": true,

            "wusr": true,

            "xgrp": false,

            "xoth": false,

            "xusr": false

        }

    }

}

二 blockinfile模块

blockinfile 是 Ansible 的一个非常实用的模块，和单行替换模块 lineinfile 类似，但是可以帮助我们在文件中插入一段文本。

[root@node1 ansible]# vim files/test.html

<html>

    <head>

    </head>

    <body>

    </body>

</html>

[root@node1 ansible]# vim blockfile_ex.yml

- name: blockinfile module test

  hosts: demo3.example.com

  tasks:

    - name: install httpd

      yum:

        name: httpd

        state: installed

    - name: copy test.html to dest

      copy:

        src: files/test.html

        dest: /var/www/html/test.html

    - name: add block

      blockinfile:

        marker: "<!--{mark} ANSIBLE MANAGED BLOCK -->"

        insertafter: "<body>"

        path: /var/www/html/test.html

        block:

          <h1>Welcome to {{ ansible_hostname}}</h1>

          <p>Last update on {{ ansible_date_time.iso8601}} </p>

    - name: start service

      service:

        name: httpd

        state: started

执行

[root@node1 ansible]# ansible-playbook blockfile_ex.yml

访问

三 lineinfile模块

在大多数时候，我们在linux上的操作，就是针对文件的操作，通过配置管理工具对配置文件作统一的配置修改是一个非常酷的功能。

下面是官方针对该模块的说明：

lineinfile - Ensure a particular line is in a file, or replace an existing line using a back-referenced regular expression

简单讲，这个模块就是针对一个文件中行内容的操作。

下面我们详细说一说其具体可以做的事情。

3.1 修改匹配行

修改selinux示例

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /etc/selinux/config |grep ^SELINUX="

[root@node1 ansible]# vim edit_selinux.yml

- hosts: demo3.example.com

  gather_facts: no

  tasks:

    - name: disable selinux

      lineinfile:

        path: /etc/selinux/config

        regex: ^SELINUX=

        line: SELINUX=disabled

[root@node1 ansible]# ansible-playbook edit_selinux.yml

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /etc/selinux/config |grep ^SELINUX="

demo3.example.com | CHANGED | rc=0 >>

SELINUX=disabled

在node3节点写入一个文件

[root@node3 ~]# vim /tmp/test.conf

Listen 127.0.0.1:80

Listen 80

Port

3.2 插入匹配行

[root@node1 ansible]# vim lineinfile.yml

- hosts: demo3.example.com

  gather_facts: no

  tasks:

    - name: inser after

      lineinfile:

        path: /tmp/test.conf

        insertafter: "^Listen 80"   #在之后插入

        line: "aaaaa"

    - name: inser befor

      lineinfile:

        path: /tmp/test.conf

        insertbefore: "^Listen 80"    #之前插入

        line: "befor bbbb"

执行

[root@node1 ansible]# ansible-playbook lineinfile.yml

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /tmp/test.conf"

demo3.example.com | CHANGED | rc=0 >>

Listen 127.0.0.1:80

befor bbbb

Listen 80

aaaaa

Port

3.3 删除匹配行

[root@node1 ansible]# vim lineinfile.yml

- hosts: demo3.example.com

  gather_facts: no

  vars:

    testfile: "/tmp/test.conf"

  tasks:

    - name: inser after

      lineinfile:

        path: "{{testfile}}"

        insertafter: "^Listen 80"

        line: "aaaaa"

    - name: inser befor

      lineinfile:

        path: "{{ testfile }}"

        insertbefore: "^Listen 80"

        line: "befor bbbb"

    - name: delete line

      lineinfile:

        path: "{{ testfile }}"

        regex: "^Port"

        state: absent

[root@node1 ansible]# ansible-playbook lineinfile.yml

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /tmp/test.conf"

demo3.example.com | CHANGED | rc=0 >>

Listen 127.0.0.1:80

befor bbbb

Listen 80

aaaaa

3.4 文件存在则添加一行内容

往/etc/hosts里添加一行10.1.61.131 test.dz11.com（多次执行，不会重复添加），示例如下：

- name: add a line

  lineinfile:

    path: /etc/hosts

    line: '10.1.61.131 test.dz11.com'

如果有匹配的行则修改该行，如果不匹配则添加

[root@node1 ansible]# vim lineinfile.yml

- hosts: demo3.example.com

  gather_facts: no

  vars:

    testfile: "/tmp/test.conf"

  tasks:

    - name: inser after

      lineinfile:

        path: "{{testfile}}"

        insertafter: "^Listen 80"

        line: "aaaaa"

    - name: inser befor

      lineinfile:

        path: "{{ testfile }}"

        insertbefore: "^Listen 80"

        line: "befor bbbb"

    - name: delete line

      lineinfile:

        path: "{{ testfile }}"

        regex: "^Port"

        state: absent

    - name: regex

      lineinfile:

        path: "{{testfile}}"

        regex: "^Listen 8080 "

        line: "Listen 809090 "

[root@node1 ansible]# ansible-playbook lineinfile.yml

[root@node1 ansible]# ansible demo3.example.com -m shell -a "cat /tmp/test.conf"

demo3.example.com | CHANGED | rc=0 >>

Listen 127.0.0.1:80

befor bbbb

Listen 80

aaaaa

Listen 809090

3.5 参数backrefs，backup说明

backup：是否备份原文件，默认为no
backrefs：
- 当backrefs为no时，如果regex没有匹配到行，则添加一行，如果Regx匹配到行，则修改该行
- 当backrefs为yes时，如果regex没有匹配到行，则保持原文件不变，如果regex匹配到行，则修改该行
- backrefs默认为no，所以上面那个示例中，我们没有配置backrefs，而默认没有匹配，则修改。

3.6 使用validate验证文件是否正确修改

在一些场景下，我们修改完文件后，需要对文件做一下测试，用以检查文件修改之后，是否能正常运行。如http.conf、nginx.conf等，一旦改错，而不加以测试，可能会直接导致http服务挂掉。

可以使用validate关键字，在修改完成以后，对文件执行检测：

- name: test validate

  lineinfile:

      dest: /etc/sudoers

      state: present

      regexp: '^%ADMIN ALL='

      line: '%ADMIN ALL=(ALL)'

      validate: 'visudo -cf %s'    #这里就是执行检测，比如nginx就可以写入nginx -t检测配置文件

  tags:

    - testsudo

博主声明：本文的内容来源主要来自誉天教育晏威老师，由本人实验完成操作验证，需要的博友请联系誉天教育（http://www.yutianedu.com/），获得官方同意或者晏老师（https://www.cnblogs.com/breezey/）本人同意即可转载，谢谢！