Ansible on CentOS6.7 - Setting up PandoraFMS sytems #0
7386 ワード
Overview
PandoraFMSを使って監視システムを作ることになった。
PandoraFMSはクラスタ構成（作り方による）が組めるほか、
監視システムという構成上、複数サーバ作ることが予見されるため、
設定ファイルの一元管理なども見据え、構築にAnsibleを用いることにした
Installation
Ansible server
CentOS6.7でAnsible serverを作る。他の記事も記載の通りyumで入れるだけ
# yum install epel-release
# yum install ansible
hostの登録
# vi /etc/ansible/hosts
# Ex 1: Ungrouped hosts, specify before any group headers.
192.168.240.200
192.168.240.201
# Ex 2: A collection of hosts belonging to the 'webservers' group
[PandoraFMS]
192.168.240.200
192.168.240.201
ssh鍵の登録
省略。ssh-agentを使っても良いし、pubkeyを転送してauthorized_keysにaddしても良い。
Ansible Playbookの作成
ベストプラクティスに従ってファイル配置を行う
まだ、中身やコピーするファイルが記載されていないが、概ねこんな感じで配置。
.
├── ansible.cfg
├── group_vars
├── hosts
├── hosts.org
├── host_vars
├── pandoraFMS.yml
├── roles
│ ├── common
│ │ ├── defaults
│ │ ├── files
│ │ ├── handlers
│ │ ├── meta
│ │ ├── tasks
│ │ │ └── main.yml
│ │ ├── templates
│ │ └── vars
│ └── pandoraFMS
│ ├── defaults
│ ├── files
│ │ └── etc
│ │ └── yum.repos.d
│ │ └── pandorafms.repo
│ ├── handlers
│ ├── meta
│ ├── tasks
│ │ └── main.yml
│ ├── templates
│ └── vars
└── site.yml
Server - Client Connection test
ansible ping
成功例
$ ansible all -m ping
192.168.240.201 | success >> {
"changed": false,
"ping": "pong"
}
192.168.240.200 | success >> {
"changed": false,
"ping": "pong"
}
失敗例: ssh鍵を登録しないで実行した場合
$ ansible all -m ping
192.168.240.200 | FAILED => SSH Error: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
while connecting to 192.168.240.200:22
It is sometimes useful to re-run the command using -vvvv, which prints SSH debug output to help diagnose the issue.
192.168.240.201 | FAILED => SSH Error: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
while connecting to 192.168.240.201:22
It is sometimes useful to re-run the command using -vvvv, which prints SSH debug output to help diagnose the issue
Configuration for Ansible server
Configure
- Install PandoraFMSの項で記述
Config check
$ ansible-playbook site.yml --syntax-check
$ ansible-playbook site.yml -C
Installation PandoraFMS from Ansible
Configuration for ansible
Inventory, playbook files
hosts (inventory)
記載済みsite.yml
---
# file: site.yml
- include: pandoraFMS.yml
- pandoraFMS.yml
---
# file: pandoraFMS.yml
- hosts: pandoraFMS
roles:
- common
- pandoraFMS
role files
common
- common/tasks/main.yml
# Add epel-release repo
- name: install the latest version of epel-release
yum: name=epel-release state=latest
tags: prod
pandoraFMS
- pandoraFMS/tasks/main.yml
# Add pandoraFMS repo
- copy: src=/etc/ansible/roles/pandoraFMS/files/etc/yum.repos.d/pandorafms.repo dest=/etc/yum.repos.d/pandorafms.repo owner=root group=root mode=0644
tags: prod
sudo: yes
# Install pandoraFMS console (with MySQL)
- name: install the latest version of MySQL
yum: name={{ item }} state=latest
with_items:
- mysql-server
- mysql-connector-python
- MySQL-python
tags: prod
sudo: yes
# Install pandoraFMS console (with MySQL)
- name: install the latest version of pandorafms_console pandorafms_server mysql-server
yum: name={{ item }} state=latest
with_items:
- pandorafms_console
- pandorafms_server
tags: prod
sudo: yes
# Dependent packages
- name: install the latest version of other packages
yum: name={{ item }} state=latest
with_items:
- php
- php-gd
- graphviz
- php-mysql
- php-pear-DB
- php-mbstring
- php-ldap
- php-snmp
- php-ldap
- php-common
- php-zip
- perl-HTML-Tree
- perl-DBI
- perl-DBD-mysql
- perl-libwww-perl
- perl-XML-Simple
- perl-XML-SAX
- perl-NetAddr-IP
- net-snmp
- net-tools
- perl-IO-Socket-INET6
- perl-Socket6
- nmap
- wmic
- sudo
- xprobe2
- make
- perl-CPAN
- perl-JSON
- net-snmp-perl
- perl-Time-HiRes
- perl-XML-Twig
- perl-Encode-Locale
- httpd
tags: prod
sudo: yes
# Starting & chkconfig
- name: chkconfig on mysqld
service:
name: mysqld
state: started
enabled: yes
tags: prod
sudo: yes
- name: stop iptables
service:
name: iptables
state: stopped
enabled: no
tags: prod
sudo: yes
- name: chkconfig on httpd
service:
name: httpd
state: started
enabled: yes
tags: prod
sudo: yes
## Setup MySQL
- name: create root password
mysql_user:
name: root
host: localhost
password: "password"
tags: prod
sudo: yes
Installation
Syntax Check
$ ansible-playbook -i hosts -vvv site.yml --syntax-check
参考記事（続編）
Author And Source
この問題について(Ansible on CentOS6.7 - Setting up PandoraFMS sytems #0), 我々は、より多くの情報をここで見つけました https://qiita.com/ainamori/items/ea4ae2df9d5cc4435afa著者帰属：元の著者の情報は、元のURLに含まれています。著作権は原作者に属する。
Content is automatically searched and collected through network algorithms . If there is a violation . Please contact us . We will adjust (correct author information ,or delete content ) as soon as possible .