使用Ansible批量部署Web服务器实战

Ansible 自动化运维入门：批量部署 Web 服务器实战

引言：为什么每个运维都应该掌握 Ansible

还记得那个凌晨3点被电话叫醒的夜晚吗？生产环境的20台服务器需要紧急更新配置，你不得不一台一台手动SSH登录，重复执行相同的命令。两个小时后，当你拖着疲惫的身躯完成任务时，心里暗暗发誓："一定要找个自动化工具！"

如果你有过类似的经历，那么恭喜你，今天这篇文章将彻底改变你的运维生涯。我将带你从零开始掌握Ansible，通过一个实际的Web服务器批量部署项目，让你体验自动化运维的魅力。读完这篇文章，你将能够：

10分钟内完成50台服务器的Nginx部署

一键实现应用的滚动更新和回滚

构建可复用的自动化部署流程

将重复性工作时间缩短90%以上

一、Ansible 是什么？它能解决什么问题？

1.1 传统运维的痛点

在深入Ansible之前，让我们先看看传统运维面临的挑战：

场景一：配置漂移问题你管理着100台服务器，理论上它们的配置应该完全一致。但随着时间推移，因为各种临时修改、紧急补丁，服务器配置开始出现差异。某天一个看似简单的更新，却因为配置不一致导致部分服务器故障。

场景二：规模化挑战公司业务快速增长，服务器数量从10台增长到100台。原本30分钟能完成的部署任务，现在需要5个小时。而且随着操作复杂度增加，人为错误的概率也在上升。

场景三：知识传承困难资深运维离职了，留下的只有一堆零散的Shell脚本和简单的文档。新人接手后发现，每个脚本的执行顺序、参数含义都需要猜测和试错。

1.2 Ansible 的优势

Ansible 是一个开源的IT自动化工具，它通过简单的YAML语法描述系统配置，实现：

无代理架构（Agentless）：不需要在被管理节点安装任何客户端，通过SSH即可管理

声明式配置：描述"想要达到的状态"，而不是"如何达到"

幂等性保证：多次执行产生相同结果，避免重复操作带来的问题

易学易用：YAML语法简单直观，降低学习门槛

强大的模块库：3000+内置模块，覆盖各种运维场景

二、快速上手：15分钟搭建 Ansible 环境

2.1 环境准备

我们将搭建一个实验环境，包含1台控制节点和3台被管理节点：

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
# 控制节点（安装Ansible的机器）
control-node:192.168.1.10


# 被管理节点（目标服务器）
web-01:192.168.1.11
web-02:192.168.1.12
web-03:192.168.1.13

2.2 安装 Ansible

在控制节点上执行：

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
# CentOS/RHEL 系统
sudoyum install -y epel-release
sudoyum install -y ansible


# Ubuntu/Debian 系统
sudoapt update
sudoapt install -y ansible


# 使用 pip 安装（推荐，获取最新版本）
sudopip3 install ansible


# 验证安装
ansible--version

2.3 配置 SSH 免密登录

自动化的前提是控制节点能够无密码访问被管理节点：

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
# 生成SSH密钥对（如果还没有）
ssh-keygen -t rsa -b2048


# 将公钥复制到所有被管理节点
forip in192.168.1.11192.168.1.12192.168.1.13; do
 ssh-copy-id -i ~/.ssh/id_rsa.pub root@$ip
done


# 测试连接
sshroot@192.168.1.11'hostname'

2.4 创建 Inventory 文件

Inventory文件定义了Ansible要管理的主机清单：

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
# 创建 inventory.ini 文件
[webservers]
web-01 ansible_host=192.168.1.11
web-02 ansible_host=192.168.1.12
web-03 ansible_host=192.168.1.13


[webservers:vars]
ansible_user=root
ansible_python_interpreter=/usr/bin/python3


[all:vars]
ansible_connection=ssh

测试连接所有主机：

ounter(line
ansible -iinventory.iniall-m ping

如果看到所有主机返回 "pong"，恭喜你，环境搭建成功！

三、实战项目：批量部署 Nginx Web 服务器

现在让我们通过一个实际项目，深入理解Ansible的强大功能。我们将实现：

批量安装Nginx

部署自定义配置

部署静态网站

实现滚动更新

3.1 项目结构设计

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
nginx-deployment/
├── inventory.ini     # 主机清单
├── ansible.cfg      # Ansible配置文件
├── site.yml       # 主Playbook
├── roles/        # 角色目录
│  └── nginx/
│    ├── tasks/   # 任务定义
│    │  └── main.yml
│    ├── templates/  # 模板文件
│    │  ├── nginx.conf.j2
│    │  └── index.html.j2
│    ├── handlers/  # 触发器
│    │  └── main.yml
│    └──vars/    # 变量定义
│      └── main.yml
└── group_vars/     # 组变量
  └── webservers.yml

3.2 编写 Playbook

创建主Playbooksite.yml：

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
---
-name: Deploy Nginx Web Servers
 hosts: webservers
 become: yes
 gather_facts: yes


 vars:
 nginx_port:80
 nginx_worker_processes:"{{ ansible_processor_vcpus }}"
 nginx_worker_connections:1024
 website_title:"Ansible自动化部署演示"


 tasks:
  -name: 更新系统包缓存
  apt:
   update_cache: yes
  when: ansible_os_family =="Debian"


  -name: 安装Nginx
  package:
   name: nginx
   state: present


  -name: 创建网站目录
  file:
   path: /var/www/html
   state: directory
   mode:'0755'


  -name: 部署Nginx配置文件
  template:
   src: nginx.conf.j2
   dest: /etc/nginx/nginx.conf
   backup: yes
  notify: restart nginx


  -name: 部署网站首页
  template:
   src: index.html.j2
   dest: /var/www/html/index.html
   mode:'0644'


  -name: 确保Nginx服务运行
  service:
   name: nginx
   state: started
   enabled: yes


  -name: 等待端口就绪
  wait_for:
   port:"{{ nginx_port }}"
   host:"{{ ansible_default_ipv4.address }}"
   delay:5
   timeout:30


 handlers:
  -name: restart nginx
  service:
   name: nginx
   state: restarted

3.3 创建配置模板

创建templates/nginx.conf.j2：

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
user www-data;
worker_processes {{ nginx_worker_processes }};
pid /run/nginx.pid;


events {
  worker_connections {{ nginx_worker_connections }};
  multi_accept on;
  use epoll;
}


http {
 # 基础配置
  sendfile on;
  tcp_nopush on;
  tcp_nodelay on;
  keepalive_timeout 65;
  types_hash_max_size 2048;


 # 日志配置
  access_log /var/log/nginx/access.log;
  error_log /var/log/nginx/error.log;


 # Gzip压缩
  gzip on;
  gzip_vary on;
  gzip_proxied any;
  gzip_comp_level 6;
  gzip_types text/plain text/css text/xml application/json application/javascript;


 # 虚拟主机配置
  server {
    listen {{ nginx_port }} default_server;
    listen [::]:{{ nginx_port }} default_server;


    root /var/www/html;
    index index.html index.htm;


    server_name {{ ansible_hostname }}.example.com;


    location / {
      try_files$uri$uri/ =404;
    }


   # 健康检查端点
    location /health {
      access_log off;
     return200"healthy
";
      add_header Content-Type text/plain;
    }
  }
}

创建templates/index.html.j2：

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line



 
 
 
 


 
   
 {{ website_title }}
   
恭喜！您已成功使用 Ansible 部署了这个页面
   
     
服务器名称:{{ ansible_hostname }}
     
IP地址:{{ ansible_default_ipv4.address }}
     
操作系统:{{ ansible_distribution }} {{ ansible_distribution_version }}
     
部署时间:{{ ansible_date_time.iso8601 }}