Modules

Question 1

User

Answer 1

• name: testing playbooks
  hosts: dbsystems
  become: yes
  tasks:
  
  • name: create users
    user:
    name: “{{ user_name }}”
    vars:
    user_name: bob
  • name: test packages
    shell:
    cmd: id bob
    …

Question 2

YUM

Answer 2

• name: testing yum module
  hosts: systems
  become: yes
  tasks:
  
  • name: install elinks and nano
    yum:
    name: “{{ params }}”
    state: latest
    …
    __________________
    vim group_vars/systems
    params:
  • elinks
  • nano

Question 3

Service

Answer 3

• name: testing service module
  hosts: systems
  become: yes
  tasks:
  
  • name: start httpd and enable it
    service:
    name: httpd
    state: started
    enabled: yes
    …

Question 4

File

Answer 4

• name: testing service module
  hosts: systems
  become: yes
  tasks:
  
  • name: create file index.html
    file:
    path: /var/www/html/index.html
    state: touch
  • name: create dir super
    file:
    path: /var/www/html/super
    state: directory

  - name: remove file index2.html
       file:
         path: /var/www/html/index2.html
         state: absent
...

Question 5

Lineinfile

Answer 5

• name: testing service module
  hosts: systems
  become: yes
  tasks:
  
  • name: add hello world
    lineinfile:
    path: /var/www/html/index.html
    line: “Hello world!”
    …
    Note: file should be created first by module file

Question 6

Copy

Answer 6

• name: testing service module
  hosts: systems
  become: yes
  tasks:
  
  • name: create file index.html
    file:
    path: /var/www/html/index.html
    state: absent
  • name: add hello again
    copy:
    dest: /var/www/html/index.html
    content: “Hello again!”
    …

Question 7

Replace

Answer 7

• name:
  hosts: systems
  tasks:
  
  • name: change cnfig
    replace:
    path: /etc/httpd/httpd.conf
    regexp: ‘^DocumentRoot.*$’
    replace: ‘DocumentRoot “/opt/www”’
    backup: yes
    …

Question 8

Firewalld

Answer 8

- name: add firewall rules by service
  firewalld:
    immediate: yes
    permanent: yes
    state: enabled
    service: http
- name: remove firewall rules by port
  firewalld:
      zone: public|dmz|internal|external
      port: 80/tcp|170-179/udp
      immediate: yes|no
      permanent: yes|no
      state: disabled

Question 9

Cron

add new jobs

Answer 9

- name: show options of cron
  cron:
      name: "job name"
      special_time: reboot|daily|weekly|etc
      minute: 0-59|*|*/2
      hour: 0-23|*|*/2
      day: 1-31|*|*/2
      month: 1-12|*|*/2
      weekday: 0-6|*
      user: user_name
      cron_file: file_name
      state: present|absent
      job: command      

• name: testing cron module
  become: yes
  hosts: all
  tasks:
  
  • name: create job for root
    cron:
    name: “Echo job”
    job: “echo Haya!&raquo_space; /home/lisa/test.txt”
    minute: “*/2”
    user: lisa
  • name: check disk space
    cron:
    name: “Diskspace”
    hour: 5,17
    job: “df -h&raquo_space; /tmp/diskspace”
    …

Question 10

Archive

Answer 10

- name: show options for archive module
  archive:
     path: 
          - /path/to/different_files
          - /path/to/file*
          - /path/to/dir/
    dest: /dest/of/archive_file
    exclude_path:
         - /path/to/file3
    format: gz|bz2|tar|zip
---
- name: testing archive module
  become: yes
  hosts: dbsystems
  tasks:
    - name: archiving /var/log and /home on slave nodes
      archive:
        path:
          - /var/log
          - /home
        dest: /tmp/archive.tar.gz
        format: gz
        owner: ansible
- name: fetching archives to control node
  become: yes
  hosts: all
  tasks:
    - name: copying archives to control node
      fetch:
        src: /tmp/archive.tar.gz
        dest: /home/ansible/archive-{{inventory_hostname}}.tar.gz
...

Question 11

Filesystem

Answer 11

• hosts: localhost
  become: true
  tasks:
  
  • name: mkfs.xfs /dev/battlestar/galactica
    filesystem:
    dev: /dev/my_vg/my_lv
    fstype: xfs
    …

Question 12

LVG

pvcreate/vgcreate

Answer 12

• hosts: localhost
  become: true
  tasks:
  
  • name: pvcreate, vgcreate
    lvg:
    pvs: /dev/nvme1n1,/dev/nvme2n1
    vg: my_pv

Question 13

LVOL
lvcreate without rezifs option
lvextend the same as for create, but with resizefs option

Answer 13

• hosts: localhost
  become: true
  tasks:
  
  • name: lvcreate
    lvol:
    vg: my_vg
    lv: my_lv
    size: 60%PVS
    resizefs: true

Question 14

Mount

add entry to fstab

Answer 14

• hosts: localhost
  become: true
  tasks:
  
  • name: create dir to mount
    file:
    path: /mnt/lvm
    state: directory
  • name: create mount entry in fstab
    mount:
    src: /dev/my_vg/my_lv
    path: /mnt/lvm
    fstype: xfs
    state: mounted
    …

Question 15

Git

Answer 15

Main parameters:
repo (required)
dest (required)
clone

• hosts: localhost
  become: true
  tasks:
  
  • name:
    git:
    repo: “https://github/ansible/ansible.git”
    dest: /home/user/git/ansible
    …

Question 16

Get_url

Answer 16

• name: copy content of index file to tmp dir
  get_url:
  url: http://server1/index.html
  dest: /tmp/index-file

Question 17

Parted

Answer 17

• hosts: localhost
  become: true
  vars:
  disk:
  - /dev/nvme1n1
  - /dev/nvme2n1
  tasks:
  
  • name: fdisk /dev/nvme1n1, /dev/nvme2n1
    parted:
    device: “{{ item }} “
    state: present
    flags: [ lvm ]
    number: 1
    with_items: “{{ disk }}”

Question 18

At

Answer 18

- name: show options for at module
  at:
     command: command_to_run
     script_file: /path/to/script.sh
     count: count of units
     unit: minutes|hours|days|weeks
     state: present|absent

Question 19

SELinux

Answer 19

- name: show options for selinux module
  selinux:
      configfile: /path/config/file
      policy: targeted
      state: enforcing|permissive|disabled

Question 20

Seboolean

Answer 20

- name: show options for seboolean module
  seboolean:
      name: boolean_name
      state: no|yes
      persistent: no|yes

Question 21

Sefcontext

Answer 21

- name: show options for secontext module
  sefcontext:
      ftype: a|d
      reload: yes|no
      target: '/path/to/dir(/.*)?'
      setype: selinux_type
      state: present|absent
- name: apply selinux content
  cmd: "Restorecon -R -v /path/to/dir"

Question 22

Template

Answer 22

- name: show template options
  template:
     src: /path/to/template.j2
     dest: /path/to/dest
      owner: owner_name
      group: group_owner_name
      mode: file_perm
      backup: yes|no
      validate: validation command %s

Question 23

Yum_repository

Answer 23

- name: add yum_repository 
  yum_repository:
      name: repo_name
      description: will_be_set_in_[name]_repo
      baseurl: base_url
      gpgcheck: yes|no
\_\_\_\_\_\_\_\_\_\_
- name: remove yum_repository
  yum_repository
      name: repo_name
      file: repo_file_name (without *.repo extension and full path)
      state: absent