4.3  Ansible : notion de "playbook"

• Un "playbook" liste des tâches à effectuer sur des machines.
• De très nombreux modules prédéfinis pour les tâches.
• Les tâches se doivent d’être idempotentes.
• Commande spécifique pour lancer un "jeu" :

  # ansible-playbook jeu.yml
  

• Exemple de "jeu" :

  ---
  - hosts: stations
    tasks:
    - name: configuration files
      copy:
        src: "{{ item.src }}"
        dest: "{{ item.dest }}"
        owner: root
        group: root
        mode: '0644'
      with_items:
        - { src: '/etc/resolv.conf', dest: '/etc/resolv.conf'}
        - { src: '/etc/apt/sources.list', dest: '/etc/apt/sources.list'}
        - { src: '/etc/default/ntpdate', dest: '/etc/default/ntpdate'}
        - { src: '/etc/ntp.conf', dest: '/etc/ntp.conf'}
    - name: network interfaces
      template:
        src: '/etc/ansible/templates/interfaces'
        dest: '/etc/network/interfaces'
        owner: root
        group: root
        mode: '0644'
      vars:
        num: "{{ inventory_hostname | regex_replace('^[^0-9]*([0-9]*).*$','\\1') }}"
        ip4: "{{ num | int + 50 }}"
        ip6: "00{{ num }}"
    - name: packages to be installed 
      apt:
        update_cache: yes
        name: "{{ packages }}"
      vars:
        packages:
         - linux-image-4.19.0-0.bpo.5-amd64
         - linux-compiler-gcc-6-x86=4.19.67-2+deb10u1~bpo9+1
         - linux-headers-4.19.0-0.bpo.5-amd64
         - ntpdate
         - ntp
    - name: packages to be removed 
      apt:
        name: "{{ packages }}"
        state: absent
        autoremove: yes
      vars:
        packages:
         - wicd
  

• Possibilité de définir plusieurs "jeux".

  ---
  - hosts: ...
    tasks:
  - hosts: ...
    tasks:
  

• Notions d’événements (mot clef "notify") :

  ---
  - hosts: serveur web
    tasks:
    - name: configuration files
      copy:
        src: web/monsite
        dest: /etc/apache2/site-enables/monsite
        owner: root
        group: root
        mode: '0644'
      notify: restart apache
    handlers:
    - name: restart apache
      service:
        name: apache2
        state: restarted