dhcp和ansible-创新互联
一、搭建DHCP服务,为局域网内用户提供10.1.1.0/24网段的IP,且租约期默认为48小时
1.安装软件包:yum install -y dhcp*
2.配置服务:
[root@localhost dhcp]# vim dhcpd.conf
option domain-name "example.org";
option domain-name-servers ns1.example.org, ns2.example.org;
default-lease-time 172800;
max-lease-time 172800;
log-facility local7;
subnet 10.1.1.0 netmask 255.255.255.0 {
range 10.1.1.100 10.1.1.200;
3.启动服务并验证:
systemctl start dhcp
dhclient -d
二、在上述实验基础上,实现DHCP中继:
# 开启路由转发功能
vim /etc/sysctl.conf
net.ipv4.ip-forward=1
sysctl -p
# 启动dhcp中继服务
dhcrelay dhcp_server_ip
中继服务实际使用中,基本没有必要使用。其他网络的主机另外新建一个dhcp服务就好,没有必要非得使用中继
三、借助Ansible Playbook自动化搭建LNMP环境(可借助yum)
1.实验主机:
ansible主机:172.20.10.6
webservers:172.20.10.3
appservers:172.20.10.4
2.ansible主机免密钥认证
(1)
[root@localhost playbooks]# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:LFUqZ3zNLyVoJzwgIo+LzGwHhd2YCnKh7kOl6IZQcZ4 root@localhost
The key's randomart image is:
+---[RSA 2048]----+
| *o* . . . |
|ooo@ + o = + |
|+o+.E . * B = . |
|*++. * o + + |
|=B.. . S . . |
|B . . . |
|.= |
|. . |
| |
+----[SHA256]-----+
(2)
[root@localhost] ssh-copy-id 172.20.10.3
[root@localhost]# ssh-copy-id 172.20.10.4
3.ansible配置文件
[webservers]
172.20.10.3
[appservers]
172.20.10.4
4.定义playbook剧本:
[root@localhost playbooks]# vim lnmp.yml
---
- hosts: webservers
remote_user: root
tasks:
- name: install nginx
yum: name=nginx
- name: config
copy: src=/data/nginx.conf dest=/etc/nginx/nginx.conf
tags: conf
notify: restart nginx
- name: start nginx
service: name=nginx state=started enabled=yes
handlers:
- name: restart nginx
service: name=nginx state=restarted
- hosts: appservers
remote_user: root
tasks:
- name: install services
yum: name={{ item }}
with_items:
- mariadb
- mariadb-server
- php
- php-fpm
- php-mysql
- name: php-fpm config
copy: src=/data/www.conf dest=/etc/php-fpm.d/www.conf
notify: restart php-fpm
- name: start php-fpm
service: name=php-fpm state=started enabled=yes
- name : start mysql
service: name=mariadb state=started enabled=yes
- name : config mysql
shell: mysqladmin -uroot password "centos"
- name: config php-index-file
copy: src=/data/index.php dest=/var/www/html/
- name: config php-mysql-file
copy: src=/data/mysql.php dest=/var/www/html/
handlers:
- name: restart php-fpm
service: name=php-fpm state=restart
(5)执行结果:
(6)测试:
四、采用Ansible Role方式自动化搭建LNMP
1.实验主机:
ansible主机:172.20.10.6
webservers:172.20.10.3
appservers:172.20.10.4
2.ansible主机roles目录:
3.执行结果为:
4.访问测试为:
另外有需要云服务器可以了解下创新互联cdcxhl.cn,海内外云服务器15元起步,三天无理由+7*72小时售后在线,公司持有idc许可证,提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案,具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势,专为企业上云打造定制,能够满足用户丰富、多元化的应用场景需求。
当前名称:dhcp和ansible-创新互联
浏览路径:http://hbruida.cn/article/csesjh.html