ansible 模塊之在學習--lineinfile

1、lineinfile 模塊

　　做用：替換、移除文件的單行  
　　提示：多行替換參考replace模塊

2、實踐
  playbook，我先定義前面common部分。   
---
 - hosts: "`host`"
   remote_user: "`user`"
   gather_facts: false
   tasks:
    因爲我已經定義標籤tags，執行playbook中某個特定任務時，只需執行到對應TAGNAME即可
 ansible-playbook line1.yml --extra-vars "host=gitlab user=root" --tags "TAGNAME" -v

一、正則匹配，更改某個關鍵參數值    
   - name: seline modify enforcing
      lineinfile:
         dest: /etc/selinux/config
         regexp: '^SELINUX='
         line: 'SELINUX=enforcing'
驗證   
[root@master test]# cat /etc/selinux/config
 
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of these two values:
#     targeted - Targeted processes are protected,
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

二、在匹配的內容前或後增長一行

2.1 http.conf   
[root@master test]# cat http.conf 
#Listen 12.34.56.78:80
#Listen 80
#Port
2.2 insertbefore匹配內容在前面添加    
    - name: httpd.conf modify 8080
      lineinfile:
         dest: /opt/playbook/test/http.conf
         regexp: '^Listen'
         insertbefore: '^#Port'   
         line: 'Listen 8080'
      tags:
       - http8080

   驗證   
[root@master test]# cat http.conf 
#Listen 12.34.56.78:80
#Listen 80
Listen 8080
#Port

2.3 insertafter匹配內容在後面添加  
- name: httpd.conf modify 8080
      lineinfile:
         dest: /opt/playbook/test/http.conf
         regexp: '^Listen'
         insertafter: '^#Port'   
         line: 'Listen 8080'
      tags:
       - http8080

    驗證    
[root@master test]# cat http.conf 
#Listen 12.34.56.78:80
#Listen 80
#Port
Listen 8080

3.修改文件內容和權限
3.1 原文件內容及權限  
[root@master test]# cat hosts
127.0.0.1       localhost.localdomain localhost ::1       localhost6.localdomain6 localhost6
192.168.1.2 foo.lab.net foo
root@master test]# ls -l hosts
-rwxrwxr-x 1 root qingyun 111 12月 13 18:07 hosts
3.2 劇本   
    - name: modify hosts
      lineinfile:
         dest: /opt/playbook/test/hosts
         regexp: '^127\.0\.0\.1'
         line: '127.0.0.1 localhosts'
         owner: root
         group: root
         mode: 0644
      tags:
       - hosts

3.3 執行驗證   
[root@master test]# cat hosts
127.0.0.1 localhosts
192.168.1.2 foo.lab.net foo
[root@master test]# ls -l hosts
-rw-r--r-- 1 root root 49 12月 13 18:16 hosts

四、刪除某一行內容
4.1 原文件   
[root@master test]# cat hosts
127.0.0.1 localhosts
192.168.1.2 foo.lab.net foo

4.2 absent劇本   
- name: delete 192.168.1.1
      lineinfile:
         dest:  /opt/playbook/test/hosts
         state: absent
         regexp: '^192\.'
      tags:
       - delete192

4.3 驗證
[root@master test]# cat hosts
127.0.0.1 localhosts

五、文件存在就添加一行
5.1原文件   
[root@master test]# cat hosts
127.0.0.1 localhosts

5.2 劇本  
    - name: add a line
      lineinfile:
         dest:  /opt/playbook/test/hosts
         line: '192.168.1.2 foo.lab.net foo'
      tags:
       - add_a_line

5.3 驗證   
[root@master test]# cat hosts
127.0.0.1 localhosts
192.168.1.2 foo.lab.net foo


六、若是匹配到，引用line這一行做爲替換。若是沒有匹配到，則徹底引用line這一行做爲添加

6.1 原文件   
[root@master test]# cat testfile
# %wheel   ALL=(ALL)   ALL
6.2 劇本   
    - name: Fully quoted a line
      lineinfile:
         dest: /opt/playbook/test/testfile
         state: present
         regexp: '^%wheel'
         line: '%wheel  ALL=(ALL)       NOPASSWD: ALL'
 
      tags:
        - testfile

6.3 驗證    
[root@master test]# cat testfile
# %wheel   ALL=(ALL)   ALL
%wheel  ALL=(ALL)       NOPASSWD: ALL

6.4 原文件    
[root@master test]# cat testfile
# %wheel   ALL=(ALL)   ALL
%wheel  1234  ALL =(all) NOPASSWD

6.5 驗證   
Using /etc/ansible/ansible.cfg as config file
 
PLAY [gitlab] ******************************************************************
 
TASK [Fully quoted a line] *****************************************************
changed: [master] => {"backup": "", "changed": true, "msg": "line replaced"}
 
PLAY RECAP *********************************************************************
master                     : ok=1    changed=1    unreachable=0    failed=0   
 
[root@master test]# cat testfile
# %wheel   ALL=(ALL)   ALL
%wheel  ALL=(ALL)       NOPASSWD: ALL

七、關於參數backrefs，backup使用。

    backrefs爲no時，若是沒有匹配,則添加一行line。若是匹配了，則把匹配內容替被換爲line內容。

    backrefs爲yes時，若是沒有匹配，則文件保持不變。若是匹配了，把匹配內容替被換爲line內容。

    backup爲no時，沒有匹配，則添加。若是匹配了，則替換

    backup爲yes時，沒有匹配，添加，若是匹配了，則替換


7.1 須要關心的,backrefs爲yes時情景
7.1.1 原文件    
[root@master test]# cat testfile
# %wheel   ALL=(ALL)   ALL
%wheel  ALL=(ALL)       NOPASSWD: ALL
#?bar


7.1.2 劇本   
    - name: test backrefs
      lineinfile:
#          backup: yes
          state: present
          dest: /opt/playbook/test/testfile
          regexp: '^#\?bar'
          backrefs: yes
          line: 'bar'
      tags:
        - test_backrefs

7.1.3 驗證   
[root@master test]# cat testfile
# %wheel   ALL=(ALL)   ALL
%wheel  ALL=(ALL)       NOPASSWD: ALL
bar

7.1.3 沒有匹配   
[root@master test]# cat testfile
# %wheel   ALL=(ALL)   ALL
%wheel  ALL=(ALL)       NOPASSWD: ALL

7.1.4 驗證    
Using /etc/ansible/ansible.cfg as config file
 
PLAY [gitlab] ******************************************************************
 
TASK [test backrefs] ***********************************************************
ok: [master] => {"backup": "", "changed": false, "msg": ""}
 
PLAY RECAP *********************************************************************
master                     : ok=1    changed=0    unreachable=0    failed=0

文件保持不變
八、使用valiate參數，在保存sudoers文件前，驗證語法，若是有錯，執行時，會報出來，從新編輯playbook

8.1 劇本    
- name: test validate
      lineinfile:
          dest: /etc/sudoers
          state: present
          regexp: '^%ADMIN ALL='
          line: '%ADMIN ALL=(ALL)'
          validate: 'visudo -cf %s'
      tags:
        - testsudo

8.2 執行驗證就說語法不過關
Using /etc/ansible/ansible.cfg as config file
 
PLAY [gitlab] ******************************************************************
 
TASK [test validate] ***********************************************************
fatal: [master]: FAILED! => {"changed": false, "failed": true, "msg": "failed to validate: rc:1 error:visudo：>>> /tmp/tmpgQjHYM：syntax error 在行 114 附近<<<\n"}
    to retry, use: --limit @/opt/playbook/test/line1.retry
 
PLAY RECAP *********************************************************************
master                     : ok=0    changed=0    unreachable=0    failed=1原文連接: http://blog.51cto.com/zuoqinyun/1882367