root@361way ~]# ansible 10.212.52.252 -a \'uptime\' -k
SSH password:
10.212.52.252 | success | rc=0 >>
10:10am  up 27 days 19:33,  2 users,  load average: 0.39, 0.34, 0.33

ansible 主机或组  -m 模块名 -a \'模块参数\'  ansible参数

ansible all -B 3600 -a "/usr/bin/long_running_operation --do-stuff" \\后台执行命令 3600s，-B 表示后台执行的时间
ansible all -m async_status -a "jid=123456789"  \\检查任务的状态
ansible all -B 1800 -P 60 -a "/usr/bin/long_running_operation --do-stuff" \\后台执行命令最大时间是 1800s 即 30 分钟，-P 每 60s 检查下状态默认 15s

[root@361way ~]# ansible 10.212.52.252 -B 3600 -P 0 -a \'watch ls\'
background launch...
10.212.52.252 | success >> {
    "ansible_job_id": "411650646689.13501",
    "results_file": "/root/.ansible_async/411650646689.13501",
    "started": 1
}
[root@361way ~]# ansible 10.212.52.252 -m async_status -a \'jid=411650646689.13501\'
10.212.52.252 | success >> {
    "ansible_job_id": "411650646689.13501",
    "changed": false,
    "finished": 0,
    "results_file": "/root/.ansible_async/411650646689.13501",
    "started": 1
}

[root@361way ~]# ansible 10.212.52.252 -B 3600  -a \'watch ls\'
background launch...
10.212.52.252 | success >> {
    "ansible_job_id": "397200656414.15008",
    "results_file": "/root/.ansible_async/397200656414.15008",
    "started": 1
}
10.212.52.252 | success >> {
    "ansible_job_id": "397200656414.15008",
    "changed": false,
    "finished": 0,
    "results_file": "/root/.ansible_async/397200656414.15008",
    "started": 1
}
<job 397200656414.15008> polling on 10.212.52.252, 3585s remaining
…………………………………………略

[root@361way ~]# ansible 10.212.52.252 -m command -a \'ps auxf|grep snmp\'
10.212.52.252 | FAILED | rc=1 >>
ERROR: Unsupported option (BSD syntax)
********* simple selection *********  ********* selection by list *********
-A all processes                      -C by command name
-N negate selection                   -G by real group ID (supports names)
-a all w/ tty except session leaders  -U by real user ID (supports names)
-d all except session leaders         -g by session OR by effective group name
-e all processes                      -p by process ID
T  all processes on this terminal     -s processes in the sessions given
a  all w/ tty, including other users  -t by tty
g  OBSOLETE -- DO NOT USE             -u by effective user ID (supports names)
r  only running processes             U  processes for specified users
x  processes w/o controlling ttys     t  by tty
*********** output format **********  *********** long options ***********
-o,o user-defined  -f full            --Group --User --pid --cols --ppid
-j,j job control   s  signal          --group --user --sid --rows --info
-O,O preloaded -o  v  virtual memory  --cumulative --format --deselect
-l,l long          u  user-oriented   --sort --tty --forest --version
-F   extra full    X  registers       --heading --no-heading --context
                    ********* misc options *********
-V,V  show version      L  list format codes  f  ASCII art forest
-m,m,-L,-T,H  threads   S  children in sum    -y change -l format
-M,Z  security data     c  true command name  -c scheduling class
-w,w  wide output       n  numeric WCHAN,UID  -H process hierarchy
[root@361way ~]# ansible 10.212.52.252 -m raw -a \'ps auxf|grep snmp\'
10.212.52.252 | success | rc=0 >>
root      5580 25.0  0.0  12876  1792 pts/2    Ss+  12:36   0:00      \_ bash -c ps auxf|grep snmp
root      5607  0.0  0.0   5720   832 pts/2    S+   12:36   0:00          \_ grep snmp
root     24364  0.0  0.0  70416  6696 ?        SNl  May15   0:22 /usr/sbin/snmpd -r -A -LF i /var/log/net-snmpd.log -p /var/run/snmpd.pid
[root@361way ~]# ansible 10.212.52.252 -m shell -a \'ps auxf|grep snmp\'
10.212.52.252 | success | rc=0 >>
root      5803  0.0  0.0  11308  1308 pts/2    S+   12:36   0:00              \_ /bin/sh -c ps auxf|grep snmp
root      5805  0.0  0.0   4260   572 pts/2    S+   12:36   0:00                  \_ grep snmp
root     24364  0.0  0.0  70416  6696 ?        SNl  May15   0:22 /usr/sbin/snmpd -r -A -LF i /var/log/net-snmpd.log -p /var/run/snmpd.pid


上面的执行结果可以看到，我这里加了管道，command模块执行时出错，而使用raw模块和shell 模块都正常。

[root@361way ~]# ansible 10.212.52.252 -m command -a \'chdir=/tmp/361way touch test.file\'
10.212.52.252 | success | rc=0 >>
[root@361way ~]# ansible 10.212.52.252 -m shell -a \'chdir=/tmp/361way touch test2.file\'
10.212.52.252 | success | rc=0 >>
[root@361way ~]# ansible 10.212.52.252 -m raw -a \'chdir=/tmp/361way touch test3.file\'
10.212.52.252 | success | rc=0 >>

linux-wdh1:/tmp/361way # ls /tmp/361way
test.file  test2.file

linux-wdh1:~ # ls ~/test3.file
/root/test3.file

[root@361way ~]# ansible 10.212.52.252 -a \'creates=/tmp/361way/server.txt uptime\'
10.212.52.252 | success | rc=0 >>
skipped, since /tmp/361way/server.txt exists
[root@361way ~]# ansible 10.212.52.252 -a \'removes=/tmp/361way/server.txt uptime\'
10.212.52.252 | success | rc=0 >>
 15:11pm  up 28 days  0:34,  2 users,  load average: 0.75, 0.46, 0.39

[root@361way ~]# cat script.sh
#!/bin/bash
df -hl
ifconfig
ps auxf|grep snmp
[root@361way ~]# ansible 10.212.52.252 -m script -a \'scrip.sh\'
10.212.52.252 | FAILED => file or module does not exist: /root/scrip.sh
[root@361way ~]# ansible 10.212.52.252 -m script -a \'script.sh\'
10.212.52.252 | success >> {
    "changed": true,
    "rc": 0,
    "stderr": "OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: Applying options for *\r\ndebug1: auto-mux: Trying existing master\r\nControl socket connect(/root/.ansible/cp/ansible-ssh-10.212.52.252-22-root): Connection refused\r\ndebug1: Connecting to 10.212.52.252 [10.212.52.252] port 22.\r\ndebug1: fd 3 clearing O_NONBLOCK\r\ndebug1: Connection established.\r\ndebug1: permanently_set_uid: 0/0\r\ndebug1: identity file /root/.ssh/identity type -1\r\ndebug1: identity file /root/.ssh/identity-cert type -1\r\ndebug1: identity file /root/.ssh/id_rsa type -1\r\ndebug1: identity file /root/.ssh/id_rsa-cert type -1\r\ndebug1: identity file /root/.ssh/id_dsa type -1\r\ndebug1: identity file /root/.ssh/id_dsa-cert type -1\r\ndebug1: identity file /root/.ssh/id_ecdsa type -1\r\ndebug1: identity file /root/.ssh/id_ecdsa-cert type -1\r\ndebug1: Remote protocol version 2.0, remote software version OpenSSH_6.2\r\ndebug1: match: OpenSSH_6.2 pat OpenSSH*\r\ndebug1: Enabling compatibility mode for protocol 2.0\r\ndebug1: Local version string SSH-2.0-OpenSSH_5.3\r\ndebug1: SSH2_MSG_KEXINIT sent\r\ndebug1: SSH2_MSG_KEXINIT received\r\ndebug1: kex: server->client aes128-ctr hmac-md5 zlib@openssh.com\r\ndebug1: kex: client->server aes128-ctr hmac-md5 zlib@openssh.com\r\ndebug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent\r\ndebug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP\r\ndebug1: SSH2_MSG_KEX_DH_GEX_INIT sent\r\ndebug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY\r\ndebug1: Host \'10.212.52.252\' is known and matches the RSA host key.\r\ndebug1: Found key in /root/.ssh/known_hosts:1\r\ndebug1: ssh_rsa_verify: signature correct\r\ndebug1: SSH2_MSG_NEWKEYS sent\r\ndebug1: expecting SSH2_MSG_NEWKEYS\r\ndebug1: SSH2_MSG_NEWKEYS received\r\ndebug1: SSH2_MSG_SERVICE_REQUEST sent\r\ndebug1: SSH2_MSG_SERVICE_ACCEPT received\r\ndebug1: Authentications that can continue: publickey,password,keyboard-interactive\r\ndebug1: Next authentication method: keyboard-interactive\r\ndebug1: Enabling compression at level 6.\r\ndebug1: Authentication succeeded (keyboard-interactive).\r\ndebug1: setting up multiplex master socket\r\nControlSocket /root/.ansible/cp/ansible-ssh-10.212.52.252-22-root already exists, disabling multiplexing\r\ndebug1: channel 0: new [client-session]\r\ndebug1: Requesting no-more-sessions@openssh.com\r\ndebug1: Entering interactive session.\r\ndebug1: Sending environment.\r\ndebug1: Sending env LANG = en_US.UTF-8\r\ndebug1: Sending command: LANG=C LC_CTYPE=C /root/.ansible/tmp/ansible-tmp-1431924855.88-242473611260231/script.sh \r\ndebug1: client_input_channel_req: channel 0 rtype exit-status reply 0\r\ndebug1: client_input_channel_req: channel 0 rtype eow@openssh.com reply 0\r\ndebug1: channel 0: free: client-session, nchannels 1\r\ndebug1: fd 1 clearing O_NONBLOCK\r\ndebug1: fd 2 clearing O_NONBLOCK\r\nConnection to 10.212.52.252 closed.\r\nTransferred: sent 1928, received 3920 bytes, in 0.1 seconds\r\nBytes per second: sent 37017.0, received 75262.7\r\ndebug1: Exit status 0\r\ndebug1: compress outgoing: raw data 537, compressed 375, factor 0.70\r\ndebug1: compress incoming: raw data 1837, compressed 1019, factor 0.55\r\n",
    "stdout": "Filesystem      Size  Used Avail Use% Mounted on\r\n/dev/sda2       9.9G  872M  8.5G  10% /\r\nudev            3.9G  128K  3.9G   1% /dev\r\ntmpfs           3.9G   76K  3.9G   1% /dev/shm\r\n/dev/sda3       5.0G  219M  4.5G   5% /boot\r\n/dev/sda8        40G   15G   23G  40% /home\r\n/dev/sda9       9.9G  5.2G  4.3G  55% /opt\r\n/dev/sda6       5.0G  2.7G  2.1G  57% /tmp\r\n/dev/sda5       9.9G  3.4G  6.0G  36% /usr\r\n/dev/sda7       9.9G  823M  8.6G   9% /var\r\neth0      Link encap:Ethernet  HWaddr 00:50:56:A8:65:7E  \r\n          inet addr:10.212.52.252  Bcast:10.212.52.255  Mask:255.255.255.0\r\n          inet6 addr: fe80::250:56ff:fea8:657e/64 Scope:Link\r\n          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1\r\n          RX packets:24112135 errors:0 dropped:792372 overruns:0 frame:0\r\n          TX packets:10697339 errors:0 dropped:0 overruns:0 carrier:0\r\n          collisions:0 txqueuelen:1000 \r\n          RX bytes:17137233328 (16343.3 Mb)  TX bytes:13390377826 (12770.0 Mb)\r\n\r\nlo        Link encap:Local Loopback  \r\n          inet addr:127.0.0.1  Mask:255.0.0.0\r\n          inet6 addr: ::1/128 Scope:Host\r\n          UP LOOPBACK RUNNING  MTU:16436  Metric:1\r\n          RX packets:3407332 errors:0 dropped:0 overruns:0 frame:0\r\n          TX packets:3407332 errors:0 dropped:0 overruns:0 carrier:0\r\n          collisions:0 txqueuelen:0 \r\n          RX bytes:262675450 (250.5 Mb)  TX bytes:262675450 (250.5 Mb)\r\n\r\nroot     25332  0.0  0.0   4260   568 pts/2    S+   12:54   0:00          \\_ grep snmp\r\nroot     24364  0.0  0.0  70416  6696 ?        SNl  May15   0:22 /usr/sbin/snmpd -r -A -LF i /var/log/net-snmpd.log -p /var/run/snmpd.pid\r\n"
}

[root@361way ~]# ansible 10.212.52.252 -m script -a \'script.sh\' |egrep \'>>|stdout\'

[root@361way ~]# ansible 10.212.52.252 -m ping
10.212.52.252 | success >> {
    "changed": false,
    "ping": "pong"
}

[root@361way ~]# ansible 10.212.52.252 -m setup -a \'filter=ansible_*_mb\'   //查看主机内存信息
[root@361way ~]# ansible 10.212.52.252 -m setup -a \'filter=ansible_eth[0-2]\'   //查看地接口为eth0-2的网卡信息
[root@361way ~]# ansible all -m setup --tree /tmp/facts   //将所有主机的信息输入到/tmp/facts目录下，每台主机的信息输入到主机名文件中（/etc/ansible/hosts里的主机名）

ansible test -m file -a "src=/etc/fstab dest=/tmp/fstab state=link"
ansible test -m file -a "path=/tmp/fstab state=absent"
ansible test -m file -a "path=/tmp/test state=touch"

ansible test -m copy -a "src=/srv/myfiles/foo.conf dest=/etc/foo.conf owner=foo group=foo mode=0644"
ansible test -m copy -a "src=/mine/ntp.conf dest=/etc/ntp.conf owner=root group=root mode=644 backup=yes"
ansible test -m copy -a "src=/mine/sudoers dest=/etc/sudoers validate=\'visudo -cf %s\'"

# Example action to reload service httpd, in all cases
- service: name=httpd state=reloaded
# Example action to enable service httpd, and not touch the running state
- service: name=httpd enabled=yes
# Example action to start service foo, based on running process /usr/bin/foo
- service: name=foo pattern=/usr/bin/foo state=started
# Example action to restart network service for interface eth0
- service: name=network state=restarted args=eth0

ansible test -m cron -a \'name="a job for reboot" special_time=reboot job="/some/job.sh"\'
ansible test -m cron -a \'name="yum autoupdate" weekday="2" minute=0 hour=12 user="root
ansible 10.212.52.252 -m cron  -a \'backup="True" name="test" minute="0" hour="2" job="ls -alh > /dev/null"\'
ansilbe test -m cron -a \'cron_file=ansible_yum-autoupdate state=absent\'

ansible test -m yum -a \'name=httpd state=latest\'
ansible test -m yum -a \'name="@Development tools" state=present\'
ansible test -m yum -a \'name=http://nginx.org/packages/centos/6/noarch/RPMS/nginx-release-centos-6-0.el6.ngx.noarch.rpm state=present\'

- user: name=johnd comment="John Doe" uid=1040 group=admin
- user: name=james shell=/bin/bash groups=admins,developers append=yes
- user: name=johnd state=absent remove=yes
- user: name=james18 shell=/bin/zsh groups=developers expires=1422403387
#生成密钥时，只会生成公钥文件和私钥文件，和直接使用ssh-keygen指令效果相同，不会生成authorized_keys文件。
- user: name=test generate_ssh_key=yes ssh_key_bits=2048 ssh_key_file=.ssh/id_rsa

[root@361way ~]#  openssl passwd -1 -salt $(< /dev/urandom tr -dc \'[:alnum:]\' | head -c 32)
Password:
$1$YngB4z8s$atSVltYKnDxJmWZ3s.4/80
或者
[root@361way ~]# echo "123456" | openssl passwd -1 -salt $(< /dev/urandom tr -dc \'[:alnum:]\' | head -c 32) -stdin
$1$4P4PlFuE$ur9ObJiT5iHNrb9QnjaIB0
#经验证下面生成的密码串也可以正常使用，不过与/etc/shadow的格式不统一，不建议使用
[root@361way ~]# openssl passwd -salt -1 "123456"
-1yEWqqJQLC66
#使用上面的密码创建用户
[root@361way ~]#ansible all -m user -a \'name=foo password="$1$4P4PlFuE$ur9ObJiT5iHNrb9QnjaIB0

python -c "from passlib.hash import sha512_crypt; import getpass; print sha512_crypt

- group: name=somegroup state=present

src=some/relative/path dest=/some/absolute/path rsync_path="sudo rsync"
src=some/relative/path dest=/some/absolute/path archive=no links=yes
src=some/relative/path dest=/some/absolute/path checksum=yes times=no
src=/tmp/helloworld dest=/var/www/helloword rsync_opts=--no-motd,--exclude=.git mode=pull

name=/mnt/dvd src=/dev/sr0 fstype=iso9660 opts=ro state=present
name=/srv/disk src=\'LABEL=SOME_LABEL\' state=present
name=/home src=\'UUID=b3e48f45-f933-4c8e-a700-22a159ec9077\' opts=noatime state=present
ansible test -a \'dd if=/dev/zero of=/disk.img bs=4k count=1024\'
ansible test -a \'losetup /dev/loop0 /disk.img\'
ansible test -m filesystem \'fstype=ext4 force=yes opts=-F dev=/dev/loop0\'
ansible test -m mount \'name=/mnt src=/dev/loop0 fstype=ext4 state=mounted opts=rw\'

- name: download foo.conf
  get_url: url=http://example.com/path/file.conf dest=/etc/foo.conf mode=0440
- name: download file with sha256 check
  get_url: url=http://example.com/path/file.conf dest=/etc/foo.conf sha256sum=b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c

# cat user.yml
- name: create user
  hosts: all
  user: root
  gather_facts: false
  vars:
  - user: "test"
  tasks:
  - name: create  user
    user: name="{{ user }}"

[root@361way playbooks]# ansible-playbook user.yml
PLAY [create user] ************************************************************
TASK: [create  user ] **********************************************
changed: [10.212.52.252]
changed: [10.212.52.14]
changed: [10.212.52.16]
PLAY RECAP ********************************************************************
10.212.52.14               : ok=1    changed=1    unreachable=0    failed=0
10.212.52.16               : ok=1    changed=1    unreachable=0    failed=0
10.212.52.252              : ok=1    changed=1    unreachable=0    failed=0   

user: name="{{ user }}" state=absent remove=yes

# cat update_bash.yml
- hosts: all
  remote_user: root
  gather_facts: True
  tasks:
  - name: update bash in redhat 6 version
    yum: name=http://mirrors.aliyun.com/centos/6.6/os/x86_64/Packages/bash-4.1.2-2el6.x86_64.rpm.rpm state=present
    when: ansible_os_family == "RedHat" and ansible_distribution_version|int >=6
  - name: update bash in redhat 5 version
    yum: name=http://mirrors.hustunique.com/centos/5/updates/x86_64/RPMS/bash-3.2-33.el5.1.x86_64.rpm state=present
    when: ansible_os_family == "RedHat" and ansible_distribution_version|int <=5

- hosts: webnodes
  tasks:
    - name: test ping connection:
    remote_user: test
    sudo: yes

tasks:
  - name: make sure apache is running
    service: name=httpd state=running
在众多模块中只有command和shell模块仅需要给定一个列表而无需使用“key=value”格式例如
tasks:
  - name: disable selinux
    command: /sbin/setenforce 0  如果命令或脚本的退出码不为零可以使用如下方式替代
tasks:
  - name: run this command and ignore the result
    shell: /usr/bin/somecommand || /bin/true
或者使用ignore_errors来忽略错误信息
tasks:
  - name: run this command and ignore the result
    shell: /usr/bin/somecommand
    ignore_errors: True   

- name: template configuration file
  template: src=template.j2 dest=/etc/foo.conf
  notify:
  - restart memcached
  - restart apache
handler是task列表这些task与前述的task并没有本质上的不同。
handlers:
  - name: restart memcached
    service: name=memcached state=restarted
  - name: restart apache
    service: name=apache state=restarted 

# cat /etc/ansible/playbook/install_web.yml
- hosts: webservers
  remote_user: root
  gather_fasks: False
  vars:
    packages: httpd
  tasks:
    - name: Install httpd
      yum: name={{ packages }} state=present
    - name: Cofiguration httpd
      copy: src=/root/httpd.conf dest=/etc/httpd/conf/httpd.conf
      tags: httpd_conf
    notify:
      - restart httpd
    - name: Start httpd
      service: name=httpd state=started enabled=no
      tags: start
    - name:Add centos user
      user: name={{ item }} state=absent
      tags: adduser
      with_items:
        - centos
        - admin
  handlers:
    - name: restart httpd
      service: name=httpd state=restart

- hosts: all
    tasks:
      - name: Install mlocate
        yum: name=mlocate state=installed
      - name: Run updatedb
        command: /usr/bin/updatedb
        async: 300
        poll: 10

tasks:
  - name: Secure config files
    file: path=/etc/{{ item }} mode=0600 owner=root group=root
    with_items:
     - my.cnf
     - shadow
     - fstab

tasks:     #1
    - name: Make key directory     #2
      file: path=/root/.sshkeys ensure=directory mode=0700
      owner=root group=root     #3
    - name: Upload public keys     #4
      copy: src={{ item }} dest=/root/.sshkeys mode=0600
      owner=root group=root     #5
      with_fileglob:     #6
       - keys/*.pub     #7
    - name: Assemble keys into authorized_keys file     #8
      assemble: src=/root/.sshkeys dest=/root/.ssh/authorized_keys
      mode=0600 owner=root group=root     #9

---
- name: Install VIM
  hosts: all
  tasks:
    - name: Install VIM via yum
      yum: name=vim-enhanced state=installed
      when: ansible_os_family == "RedHat"
    - name: Install VIM via apt
      apt: name=vim state=installed
      when: ansible_os_family == "Debian"
    - name: Unexpected OS family
      debug: msg="OS Family {{ ansible_os_family }} is not supported" fail=yes
      when: not ansible_os_family == "RedHat" or ansible_os_family == "Debian"

name: pause for unexpected conditions
pause: prompt="Unexpected OS"
when: ansible_os_family != "RedHat"

---
  - name: Fetch configuration from all webservers
    hosts: webservers
    tasks:
      - name: Get config
        get_url: dest=configs/{{ ansible_hostname }} force=yes url=http://{{ ansible_hostname }}/diagnostic/config
        delegate_to: localhost

---    #1
   - name: Fetch configuration from all webservers     #2
     hosts: webservers     #3
     tasks:     #4
        - name: Get config
          local_action: get_url dest=configs/{{ ansible_hostname }}.cfg url=

---
- name: Setup DNS Servers
   hosts: allnameservers
   tasks:
     - name: Install BIND
       yum: name=named state=installed
- name: Setup Slaves     #7
  hosts: slavenamesservers     #8
  tasks:     #9
    - name: Get the masters IP
      set_fact: dns_master="{{ hostvars.ns1.ansible_default_ipv4.address }}"
    - name: Configure BIND
      template: dest=/etc/named.conf src/templates/named.conf.j2

---
- name: Configure the database
  hosts: dbservers
  user: root
  tasks:
    - name: Install mysql
      yum: name={{ item }} state=installed
      with_items:
        - mysql-server
        - MySQL-python
    - name: Start mysql
      service: name=mysqld state=started enabled=true
    - name: Create a user for all app servers
      with_items: groups.appservers
      mysql_user: name=kate password=test host={{ hostvars[item].ansible_e

---
   hosts: all
   tasks:
   - name: Setup known hosts
     hosts: all
     tasks:
       - name: Create known_hosts
         template: src=templates/known_hosts.j2 dest=/etc/ssh/ssh_known_hosts owner

{% for host in groups[\'all\'] %}
{{ hostvars[host][\'ansible_hostname\'] }}
{{ hostvars[host][\'ansible_ssh_host_key_rsa_public\'] }}
{% endfor %}

---
- name: Setup SSH
  hosts: sshservers
  tasks:
    - name: For secure machines
      set_fact: sshconfig=files/ssh/sshd_config_secure
      when: "\'secure\' in group_names"
    - name: For non-secure machines
      set_fact: sshconfig=files/ssh/sshd_config_default
      when: "\'secure\' not in group_names"
    - name: Copy over the config
      copy: src={{ sshconfig }} dest=/tmp/sshd_config

---
- name: Configure NRPE for the right architecture
 hosts: ansibletest
 user: root
 tasks:
   - name: Copy in the correct NRPE config file
     copy: src=files/nrpe.{{ ansible_architecture }}.conf dest=/etc/nagios/nrpe.

---
- name: Install an Apache config file
  hosts: ansibletest
  user: root
  tasks:
   - name: Get the best match for the machine
     copy: dest=/etc/apache.conf src={{ item }}
     first_available_file:
      - files/apache/{{ ansible_os_family }}-{{ ansible_architecture }}.cfg
      - files/apache/default-{{ ansible_architecture }}.cfg
      - files/apache/default.cfg

---
- name: Upload a remote file via S3
  hosts: ansibletest
  user: root
  tasks:
   - name: Setup EPEL
     command: rpm -ivh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm creates=/etc/yum.repos.d/epel.repo
   - name: Install pip
     yum: name=python-pip state=installed
   - name: Install the AWS tools
     pip: name=awscli state=present
   - name: Upload the file
     shell: aws s3 put-object --bucket=my-test-bucket --key={{ ansible_hostname }}/fstab --body=/etc/fstab --region=eu-west-1
  environment:
    AWS_ACCESS_KEY_ID: XXXXXXXXXXXXXXXXXXX
    AWS_SECRET_ACCESS_KEY: XXXXXXXXXXXXXXXXXXXXX

---     #1
- name: Downloads a file using the same proxy as the controlling machine
  hosts: all
  tasks:
    - name: Download file
      get_url: dest=/var/tmp/file.tar.gz url=http://server/file.tar.gz
      environment:
       http_proxy: "{{ lookup(\'env\', \'http_proxy\') }}"

---
- name: Registers the app server farm
  hosts: localhost
  connection: local
  vars:
    hostcount: 5
  tasks:
    - name: Register the webapp farm
      local_action: add_host name={{ item }} groupname=webapp
      with_sequence: start=1 end={{ hostcount }} format=webapp%02x

---
- name: Using register
  hosts: ansibletest
  user: root
  tasks:
   - name: Get /tmp info
     file: dest=/tmp state=directory
     register: tmp
   - name: Set mode on /var/tmp
     file: dest=/tmp/subtmp mode={{ tmp.mode }} state=directory

---
- name: Demonstrate the debug module
  hosts: ansibletest
  user: root
  vars:
    hostcount: 5
  tasks:
    - name: Print interface
      debug: msg="{{ item }}"
      with_items: ansible_interfaces

PLAY [Demonstrate the debug module] *********************************
GATHERING FACTS *****************************************************
ok: [ansibletest]
TASK: [Print IP address] ********************************************
ok: [ansibletest] => (item=lo) => {"item": "lo", "msg": "lo"}
ok: [ansibletest] => (item=eth0) => {"item": "eth0", "msg": "eth0"}
PLAY RECAP **********************************************************
ansibletest                : ok=2    changed=0    unreachable=0 failed=0

[root@361way api]# cat test_api.py
2.#!/usr/bin/env python
3.# coding=utf-8
4.import ansible.runner
5.import json
6.runner = ansible.runner.Runner(
7.       module_name=\'ping\',
8.       module_args=\'\',
9.       pattern=\'all\',
10.       forks=10
11.    )
12.datastructure = runner.run()
13.data = json.dumps(datastructure,indent=4)
14.print data

{
2.    "dark" : {
3.       "web1.example.com" : "failure message"
4.    },
5.    "contacted" : {
6.       "web2.example.com" : 1
7.    }
8.}

#!/usr/bin/python
2.import ansible.runner
3.import sys
4.# construct the ansible runner and execute on all hosts
5.results = ansible.runner.Runner(
6.    pattern=\'*\', forks=10,
7.    module_name=\'command\', module_args=\'/usr/bin/uptime\',
8.).run()
9.if results is None:
10.   print "No hosts found"
11.   sys.exit(1)
12.print "UP ***********"
13.for (hostname, result) in results[\'contacted\'].items():
14.    if not \'failed\' in result:
15.        print "%s >>> %s" % (hostname, result[\'stdout\'])
16.print "FAILED *******"
17.for (hostname, result) in results[\'contacted\'].items():
18.    if \'failed\' in result:
19.        print "%s >>> %s" % (hostname, result[\'msg\'])
20.print "DOWN *********"
21.for (hostname, result) in results[\'dark\'].items():
22.    print "%s >>> %s" % (hostname, result

import ansible.playbook
2.from ansible import callbacks
3.from ansible import utils
4.stats = callbacks.AggregateStats()
5.playbook_cb = callbacks.PlaybookCallbacks(verbose=utils.VERBOSITY)
6.runner_cb = callbacks.PlaybookRunnerCallbacks(stats, verbose=utils.VERBOSITY)
7.pb = ansible.playbook.PlayBook(
8.    playbook="nseries.yml",
9.    stats=stats,
10.    callbacks=playbook_cb,
11.    runner_callbacks=runner_cb,
12.    check=True
13.)
14.for (play_ds, play_basedir) in zip(pb.playbook, pb.play_basedirs):
15.    import ipdb
16.    ipdb.set_trace()
17.    # Can play around here to see what\'s going on.
18.pb.run()

arguments = []
2.if playbook is None:
3.    arguments.append(\'playbook\')
4.if callbacks is None:
5.    arguments.append(\'callbacks\')
6.if runner_callbacks is None:
7.    arguments.append(\'runner_callbacks\')
8.if stats is None:
9.    arguments.append(\'stats\')
10.if arguments:
11.    raise Exception(\'PlayBook missing required arguments: %s\' % \', \'.join(arguments))

[root@361way api]# cat playbook_api.py
2.#!/usr/bin/env python
3.# coding=utf-8
4.import ansible.playbook
5.from ansible import callbacks
6.from ansible import utils
7.import json
8.stats = callbacks.AggregateStats()
9.playbook_cb = callbacks.PlaybookCallbacks(verbose=utils.VERBOSITY)
10.runner_cb = callbacks.PlaybookRunnerCallbacks(stats,verbose=utils.VERBOSITY)
11.res=ansible.playbook.PlayBook(
12.            playbook=\'/etc/ansible/playbooks/user.yml\',
13.            stats=stats,
14.            callbacks=playbook_cb,
15.            runner_callbacks=runner_cb
16.    ).run()
17.data = json.dumps(res,indent=4)
18.print data
19.# 执行结果如下：
20.[root@361way api]# python playbook_api.py
21.PLAY [create user] ************************************************************
22.TASK: [create test "{{ user }}"] **********************************************
23.changed: [10.212.52.16]
24.changed: [10.212.52.14]
25.{
26.    "10.212.52.16": {
27.        "unreachable": 0,
28.        "skipped": 0,
29.        "ok": 1,
30.        "changed": 1,
31.        "failures": 0
32.    },
33.    "10.212.52.14": {
34.        "unreachable": 0,
35.        "skipped": 0,
36.        "ok": 1,
37.        "changed": 1,
38.        "failures": 0
39.    }
40.}
41.[root@361way api]# 

[root@361way.com ~]# cat /etc/ansible/hosts
2.[test01]
3.10.212.52.14 ansible_ssh_user=test ansible_ssh_pass=111111 ansible_su_pass=*I2145
4.10.212.52.16 ansible_ssh_user=test ansible_ssh_pass=xyz123  ansible_su_pass=mn1Pokm
5.10.212.52.252 ansible_ssh_user=amos ansible_ssh_pass=asdf ansible_su_pass=xyzp

-S, --su              run operations with su (deprecated, use become)
2.  -R SU_USER, --su-user=SU_USER
3.                        run operations with su as this user (default=root)
4.                        (deprecated, use become)

[root@361way.com ~]# ansible all  -S -R root -m shell -a "uptime"
2.10.212.52.252 | success | rc=0 >>
3. 16:13pm  up 34 days  5:40,  2 users,  load average: 0.08, 0.21, 0.30
4.10.212.52.16 | success | rc=0 >>
5. 16:26pm  up 538 days 23:17,  2 users,  load average: 0.00, 0.01, 0.05
6.10.212.52.14 | success | rc=0 >>
7. 16:24pm  up 538 days 22:39,  2 users,  load average: 0.00, 0.01, 0.05

10.212.52.252 | FAILED => Authentication or permission failure.
2.In some cases, you may have been able to authenticate and did not have permissions on the remote directory.
3.Consider changing the remote temp path in ansible.cfg to a path rooted in "/tmp".
4.Failed command was: mkdir -p $HOME/.ansible/tmp/ansible-tmp-1449456070.96-212322517029279 && echo $HOME/.ansible/tmp/ansible-tmp-1449456070.96-212322517029279,
5.exited with result 1: mkdir: cannot create directory `/home/amos/.ansible\':

[root@361way.com ~]# vim /etc/ansible/ansible.cfg
2.找到如下行：
3.remote_tmp     = $HOME/.ansible/tmp
4.修改为
5.remote_tmp     = /tmp/.ansible/tmp

tmp目录一般都有写的权限吧，改成临时目录为/tmp下即可。

再下为我们再看看远程主机的message日志文件确认下是否真的是通过普通用户切换的：

Dec  3 11:36:20 linux su: (to root) test on /dev/pts/1     //由普通用户test切换为su切换为root的日志
2.Dec  3 11:36:20 linux ansible-command: Invoked with creates=None executable

主机IP    主机名      磁盘挂载点信息     磁盘使用率

[root@361way ~]# df -hP|awk \'NR>1 && $5 > 20\'
2./dev/xvda1       20G  4.6G   15G  25% /
3./dev/xvdb        20G  645M   18G   4% /data1
4.[root@361way ~]# df -hP|awk \'NR>1 && int($5) > 20\'
5./dev/xvda1       20G  4.6G   15G  25% /

# ansible all -m shell -a "df -hP|awk \'NR>1 && int($5) > 50\'"
2.10.212.52.252 | FAILED | rc=2 >>
3.awk: fatal: 0 is invalid as number of arguments for int
4.[root@361way ~]# df -hP|awk \'NR>1 && int(\$5) > 20\'
5.awk: NR>1 && int(\$5) > 20
6.awk:             ^ backslash not last character on line

[root@localhost ~]# ansible all -m shell -a "df -hP|awk \'NR>1 && int(\$5) > 30\'"|awk \'/success/{ip=$1;next}{print ip,$0}\'
2.10.212.52.252 /dev/sda9       9.9G  2.9G  6.5G  31% /opt
3.10.212.52.252 /dev/sda6       5.0G  1.9G  2.8G  41% /tmp
4.10.212.52.252 /dev/sda5       9.9G  3.9G  5.5G  42% /usr
5.10.212.52.252
6.10.212.52.14 /dev/cciss/c0d0p5  9.9G  3.2G  6.3G  34% /usr
7.10.212.52.14
8.10.212.52.16 /dev/cciss/c0d0p7  9.9G  4.0G  5.4G  43% /tmp
9.10.212.52.16 /dev/cciss/c0d0p5  9.9G  2.9G  6.5G  31% /usrdf: `/root/.gvfs\': Permission denied
10.10.212.52.16 

[root@localhost ~]# cat /tmp/test.py
2.#!/usr/bin/env python
3.# coding=utf-8
4.# author ： www.361way.com
5.# mail : itybku@139.com
6.import ansible.runner
7.#import json
8.runner = ansible.runner.Runner(
9.           module_name=\'shell\',
10.           module_args="df -hP|awk \'NR>1 && int($5)>30\'",
11.           pattern=\'all\',
12.           forks=10
13.        )
14.results = runner.run()
15.#print  results
16.for (hostname, result) in results[\'contacted\'].items():
17.    if not \'failed\' in result:
18.        for line in  result[\'stdout\'].split(\'\n\'):
19.            print "%s  %s" % (hostname, line)
20.# 执行结果如下
21.[root@localhost ~]# python /tmp/test.py
22.10.212.52.16  /dev/cciss/c0d0p7  9.9G  4.0G  5.4G  43% /tmp
23.10.212.52.16  /dev/cciss/c0d0p5  9.9G  2.9G  6.5G  31% /usr
24.10.212.52.252  /dev/sda9       9.9G  2.9G  6.5G  31% /opt
25.10.212.52.252  /dev/sda6       5.0G  1.9G  2.8G  41% /tmp
26.10.212.52.252  /dev/sda5       9.9G  3.9G  5.5G  42% /usr
27.10.212.52.14  /dev/cciss/c0d0p5  9.9G  3.2G  6.3G  34% /usr

#/bin/bash
2.# author : www.361way.com
3.IP=`ip add show|grep inet|grep 10|awk \'{print $2}\'`
4.df -hl|grep \'^/\'|sed \'s/%//g\'|awk \'{if($5>30) print $0}\'|while read line
5.do
6.    echo $IP `hostname` $line
7.done
8.# 执行结果如下
9.# sh aa.sh
10.10.212.52.253/24 localhost /dev/sda3 9.5G 5.7G 3.4G 64 /
11.10.212.52.253/24 localhost /dev/sda2 39G 19G 18G 52 /home
12.10.212.52.253/24 localhost /dev/sda6 9.5G 7.1G 2.0G 78 /usr

# python dfscript.py
2.df: `/root/.gvfs\': Permission denied
3.df: `/root/.gvfs\': Permission denied
4.10.212.52.16/24 linux /dev/cciss/c0d0p7 9.9G 4.0G 5.4G 43 /tmp
5.10.212.52.16/24 linux /dev/cciss/c0d0p5 9.9G 2.9G 6.5G 31 /usr
6.10.212.52.252/24 zjhz-bmc-test /dev/sda9 9.9G 2.9G 6.5G 31 /opt
7.10.212.52.252/24 zjhz-bmc-test /dev/sda6 5.0G 1.9G 2.8G 41 /tmp
8.10.212.52.252/24 zjhz-bmc-test /dev/sda5 9.9G 3.9G 5.5G 42 /usr
9.10.212.52.14/24 linux /dev/cciss/c0d0p5 9.9G 3.2G 6.3G 34 /usr

# cat dfscript.py
2.#!/usr/bin/env python
3.# coding=utf-8
4.# author ： www.361way.com
5.# mail : itybku@139.com
6.import ansible.runner
7.#import json
8.runner = ansible.runner.Runner(
9.           module_name=\'script\',
10.           module_args="aa.sh",
11.           pattern=\'all\',
12.           forks=10
13.        )
14.results = runner.run()
15.#print  results
16.for (hostname, result) in results[\'contacted\'].items():
17.    if not \'failed\' in result:
18.        for line in  result[\'stdout\'].split(\'\r\n\'):
19.            #print "%s  %s" % (hostname, line)
20.            print line