linux學習-DAY3-上線BBS項目、ansible的使用

1、LNM+Python Django+uwsgi+redis項目

1.安裝項目中須要的python模塊

pip3 install -i https://pypi.doubanio.com/simple/ -r re.txt
pip3 install -i https://pypi.doubanio.com/simple/ uwsgi
    
vim  re.txt

asn1crypto==0.24.0
beautifulsoup4==4.6.3
bs4==0.0.1
certifi==2018.4.16
cffi==1.11.5
chardet==3.0.4
Click==7.0
cryptography==2.3.1
Django==1.11.9
Flask==1.0.2
Flask-Cors==3.0.6
gevent==1.3.6
greenlet==0.4.15
idna==2.7
ItsDangerous==1.1.0
Jinja2==2.10
lxml==4.2.6
MarkupSafe==1.0
numpy==1.15.3
Pillow==5.3.0
pycparser==2.18
PyMySQL==0.9.2
pytz==2018.7
requests==2.19.1
selenium==3.141.0
six==1.11.0
urllib3==1.23
virtualenv==16.1.0
Werkzeug==0.14.1
wordcloud==1.5.0

2.數據庫的處理

上傳bbs.sql

# 在mysql中建立bbs庫,並導入數據庫SQL腳本

mysql> create database bbs charset utf8mb4;
mysql> use bbs
mysql> source /opt/bbs.sql
mysql> grant all on *.* to bbs@'10.0.0.%' identified by '123';
# 爲了安全性，爲項目單獨創建一個用戶連接數據庫，最好和項目同樣

# MySQL用戶的定義

# mysql用戶權限 grant
grant all   # 全部權限  
grant select,update,insert # 增查改


# 該用戶對哪一個庫哪一個表的權限
# on 庫名.表名
# on *.*：該用戶擁有對全部庫的全部表的權限

# USERNAME@'白名單'
# 白名單: 主機域IP地址

bbs@'localhost'                 # 本地訪問
bbs@'10.0.0.110'                # 容許10.0.0.110訪問
bbs@'10.0.0.%'                  # 容許10.0.0開頭24位掩碼的整個網段訪問
bbs@'10.0.0.0/255.255.240.0'    # 容許255.255.240.0網段的10.0.0.0的訪問
bbs@'10.0.0.5%'             # 容許10.0.0.50~59訪問
bbs@'%'                     # 容許任意網絡訪問
    
    
# identified by '123'
# 設置密碼爲123

Django中數據庫的連接

DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.mysql',
        'NAME': 'bbs',
        'HOST': "10.0.0.100",
        'USER': 'bbs',
        'PASSWORD': '123',
        'PORT': 3306,
    }
}

3.BBS項目部署

配置Nginx

vim /etc/nginx/conf.d/py.conf

server {
    listen 80;
    server_name 10.0.0.100;
    client_max_body_size 100M;
    
    location /static {
        alias /opt/BBS/static/;
    }

    location /media {
        alias /opt/BBS/media;
    }

    location / {
        index index.html;
        include uwsgi_params;
        uwsgi_pass 127.0.0.1:9090;
        uwsgi_param UWSGI_SCRIPT BBS.wsgi;
        uwsgi_param UWSGI_CHDIR /opt/BBS;
    }
}

配置uwsgi

# 關閉全部已有的uwsgi進程
kill -9 `ps -ef |grep uwsgi|awk {'print $2'}`

# 在項目根目錄建立
vim  uwsgi.ini

[uwsgi]
socket = 127.0.0.1:9090
master = true
workers = 2
reload-mercy = 10
vacuum = true
max-requests = 1000
limit-as = 512
buffer-size = 30000


# 啓動uwsgi
uwsgi --ini uwsgi.ini &

# 重啓nginx
systemctl restart nginx

2、Python 在運維工做中的經典應用

1.ansible

# 經過ansible能夠一次性配置多臺電腦
# Linux的 SSHD(22)
# 驗證方式:
#   (1)用戶+密碼(PAM)
#   (2)祕鑰驗證(公鑰:鑰匙和私鑰:鎖)
#       經過祕鑰對實現,須要將公鑰分發到各節點
# ansible管理被控端：管理機先生成祕鑰，而後推送公鑰給各個節點



# 1.安裝ansible
wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
    
yum install ansible -y


# 2.克隆一臺虛擬機模擬
# 配置模擬機
# 主機名
hostnamectl set-hostname test

# 更改網絡地址
# 要把UUID行刪掉
vim /etc/sysconfig/network-scripts/ifcfg-eth0
IPADDR=10.0.0.200

# 更改地址以及對應主機名
vim /etc/hosts
10.0.0.200 standby

# 重啓網卡
systemctl restart network



# 3.生成密鑰對，並分發
# 生成一組密鑰對
ssh-keygen

# 分配公鑰給各節點
# 分發給一個節點，要記得給本身分發
ssh-copy-id -i ~/.ssh/id_rsa.pub root@10.0.0.100
ssh-copy-id -i ~/.ssh/id_rsa.pub root@10.0.0.200

# 循環分發多個節點
for i in {1..12};do ssh-copy-id -i ~/.ssh/id_rsa.pub root@10.0.0.$i;done


# 測試是否聯通10.0.0.200，若是顯示時間，就說明聯通了
# 如今能夠鏈接一臺
ssh 10.0.0.200 date



# 4.爲了同時控制多臺，要配置被管理的主機清單
vim /etc/ansible/hosts
# [web]：IP組名，能夠按組來控制
[web]
10.0.0.100
10.0.0.200

# 5.使用ansible的ad-hoc測試是否控制多臺
ansible all -m ping
10.0.0.100 | SUCCESS => {
    "changed": false, 
    "ping": "pong"
}
10.0.0.200 | SUCCESS => {
    "changed": false, 
    "ping": "pong"
}

ansible all -m shell -a "df -h"
10.0.0.100 | CHANGED | rc=0 >>
Filesystem      Size  Used Avail Use% Mounted on
/dev/sda3        98G  3.4G   95G   4% /
devtmpfs        477M     0  477M   0% /dev
tmpfs           488M     0  488M   0% /dev/shm
tmpfs           488M  7.7M  480M   2% /run
tmpfs           488M     0  488M   0% /sys/fs/cgroup
/dev/sda1       197M  102M   96M  52% /boot
tmpfs            98M     0   98M   0% /run/user/0

10.0.0.200 | CHANGED | rc=0 >>
Filesystem      Size  Used Avail Use% Mounted on
/dev/sda3        98G  1.6G   97G   2% /
devtmpfs        981M     0  981M   0% /dev
tmpfs           992M  124K  992M   1% /dev/shm
tmpfs           992M  9.6M  982M   1% /run
tmpfs           992M     0  992M   0% /sys/fs/cgroup
/dev/sda1       197M  102M   96M  52% /boot
tmpfs           199M     0  199M   0% /run/user/0




# 6.ansible playbook自動化安裝nginx
vim  playbook_nginx.yml 

- hosts: web
  remote_user: root
  vars:
    http_port: 80
  tasks:
    # 第一步：配置YUM源
    - name: Add Nginx Yum Repository
      yum_repository:
        name: nginx
        description: Nginx Repository
        baseurl: http://nginx.org/packages/centos/7/$basearch/
        gpgcheck: no
    
    # 第二步：下載nginx
    - name: Install Nginx Server
      yum: 
        name=nginx state=present
    
    # 第三步：鏈接到配置文件並配置到各節點
    - name: Configure Nginx Server
      template: src=./default.conf.template dest=/etc/nginx/conf.d/default.conf
      notify: Restart Nginx Server
    
    # 第四步：啓動nginx服務
    - name: Start Nginx Server
      service: name=nginx state=started enabled=yes

  handlers:
    - name: Restart Nginx Server
      service: name=nginx state=
        
        
# default.conf.template文件以下
# 必須和上面的playbook_nginx.yml 在同一目錄下
vim default.conf.template 

server {
    listen       {{ http_port }};
    server_name  localhost;

    location / {
        root   /usr/share/nginx/html;
        index  index.html index.htm;
    }
}


# 7.執行ansible-playbook
# 檢查語法
ansible-playbook --syntax playbook_nginx.yml     

# 模擬執行
ansible-playbook -C playbook_nginx.yml 

# 模擬執行沒有錯誤，正常執行
ansible-playbook playbook_nginx.yml  


# 此時10.0.0.200：端口號就能夠訪問了