使用Ansible批量部署Web服务器实战

Ansible 自动化运维入门：批量部署 Web 服务器实战

引言：为什么每个运维都应该掌握 Ansible

还记得那个凌晨3点被电话叫醒的夜晚吗？生产环境的20台服务器需要紧急更新配置，你不得不一台一台手动SSH登录，重复执行相同的命令。两个小时后，当你拖着疲惫的身躯完成任务时，心里暗暗发誓："一定要找个自动化工具！"

如果你有过类似的经历，那么恭喜你，今天这篇文章将彻底改变你的运维生涯。我将带你从零开始掌握Ansible，通过一个实际的Web服务器批量部署项目，让你体验自动化运维的魅力。读完这篇文章，你将能够：

10分钟内完成50台服务器的Nginx部署

一键实现应用的滚动更新和回滚

构建可复用的自动化部署流程

将重复性工作时间缩短90%以上

一、Ansible 是什么？它能解决什么问题？

1.1 传统运维的痛点

在深入Ansible之前，让我们先看看传统运维面临的挑战：

场景一：配置漂移问题你管理着100台服务器，理论上它们的配置应该完全一致。但随着时间推移，因为各种临时修改、紧急补丁，服务器配置开始出现差异。某天一个看似简单的更新，却因为配置不一致导致部分服务器故障。

场景二：规模化挑战公司业务快速增长，服务器数量从10台增长到100台。原本30分钟能完成的部署任务，现在需要5个小时。而且随着操作复杂度增加，人为错误的概率也在上升。

场景三：知识传承困难资深运维离职了，留下的只有一堆零散的Shell脚本和简单的文档。新人接手后发现，每个脚本的执行顺序、参数含义都需要猜测和试错。

1.2 Ansible 的优势

Ansible 是一个开源的IT自动化工具，它通过简单的YAML语法描述系统配置，实现：

无代理架构（Agentless）：不需要在被管理节点安装任何客户端，通过SSH即可管理

声明式配置：描述"想要达到的状态"，而不是"如何达到"

幂等性保证：多次执行产生相同结果，避免重复操作带来的问题

易学易用：YAML语法简单直观，降低学习门槛

强大的模块库：3000+内置模块，覆盖各种运维场景

二、快速上手：15分钟搭建 Ansible 环境

2.1 环境准备

我们将搭建一个实验环境，包含1台控制节点和3台被管理节点：

 

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
# 控制节点（安装Ansible的机器）
control-node: 192.168.1.10


# 被管理节点（目标服务器）
web-01: 192.168.1.11
web-02: 192.168.1.12
web-03: 192.168.1.13

 

2.2 安装 Ansible

在控制节点上执行：

 

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
# CentOS/RHEL 系统
sudo yum install -y epel-release
sudo yum install -y ansible


# Ubuntu/Debian 系统
sudo apt update
sudo apt install -y ansible


# 使用 pip 安装（推荐，获取最新版本）
sudo pip3 install ansible


# 验证安装
ansible --version

 

2.3 配置 SSH 免密登录

自动化的前提是控制节点能够无密码访问被管理节点：

 

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
# 生成SSH密钥对（如果还没有）
ssh-keygen -t rsa -b 2048


# 将公钥复制到所有被管理节点
for ip in 192.168.1.11 192.168.1.12 192.168.1.13; do
    ssh-copy-id -i ~/.ssh/id_rsa.pub root@$ip
done


# 测试连接
ssh root@192.168.1.11 'hostname'

 

2.4 创建 Inventory 文件

Inventory文件定义了Ansible要管理的主机清单：

 

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
# 创建 inventory.ini 文件
[webservers]
web-01 ansible_host=192.168.1.11
web-02 ansible_host=192.168.1.12
web-03 ansible_host=192.168.1.13


[webservers:vars]
ansible_user=root
ansible_python_interpreter=/usr/bin/python3


[all:vars]
ansible_connection=ssh

 

测试连接所有主机：

 

ounter(line
ansible -i inventory.ini all -m ping

 

如果看到所有主机返回 "pong"，恭喜你，环境搭建成功！

三、实战项目：批量部署 Nginx Web 服务器

现在让我们通过一个实际项目，深入理解Ansible的强大功能。我们将实现：

批量安装Nginx

部署自定义配置

部署静态网站

实现滚动更新

3.1 项目结构设计

 

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
nginx-deployment/
├── inventory.ini           # 主机清单
├── ansible.cfg            # Ansible配置文件
├── site.yml              # 主Playbook
├── roles/                # 角色目录
│   └── nginx/
│       ├── tasks/       # 任务定义
│       │   └── main.yml
│       ├── templates/    # 模板文件
│       │   ├── nginx.conf.j2
│       │   └── index.html.j2
│       ├── handlers/     # 触发器
│       │   └── main.yml
│       └── vars/         # 变量定义
│           └── main.yml
└── group_vars/           # 组变量
    └── webservers.yml

 

3.2 编写 Playbook

创建主Playbook site.yml：

 

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
---
- name: Deploy Nginx Web Servers
  hosts: webservers
  become: yes
  gather_facts: yes


  vars:
    nginx_port: 80
    nginx_worker_processes: "{{ ansible_processor_vcpus }}"
    nginx_worker_connections: 1024
    website_title: "Ansible自动化部署演示"


  tasks:
    - name: 更新系统包缓存
      apt:
        update_cache: yes
      when: ansible_os_family == "Debian"


    - name: 安装Nginx
      package:
        name: nginx
        state: present


    - name: 创建网站目录
      file:
        path: /var/www/html
        state: directory
        mode: '0755'


    - name: 部署Nginx配置文件
      template:
        src: nginx.conf.j2
        dest: /etc/nginx/nginx.conf
        backup: yes
      notify: restart nginx


    - name: 部署网站首页
      template:
        src: index.html.j2
        dest: /var/www/html/index.html
        mode: '0644'


    - name: 确保Nginx服务运行
      service:
        name: nginx
        state: started
        enabled: yes


    - name: 等待端口就绪
      wait_for:
        port: "{{ nginx_port }}"
        host: "{{ ansible_default_ipv4.address }}"
        delay: 5
        timeout: 30


  handlers:
    - name: restart nginx
      service:
        name: nginx
        state: restarted

 

3.3 创建配置模板

创建 templates/nginx.conf.j2：

 

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line
user www-data;
worker_processes {{ nginx_worker_processes }};
pid /run/nginx.pid;


events {
    worker_connections {{ nginx_worker_connections }};
    multi_accept on;
    use epoll;
}


http {
    # 基础配置
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;


    # 日志配置
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;


    # Gzip压缩
    gzip on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_types text/plain text/css text/xml application/json application/javascript;


    # 虚拟主机配置
    server {
        listen {{ nginx_port }} default_server;
        listen [::]:{{ nginx_port }} default_server;


        root /var/www/html;
        index index.html index.htm;


        server_name {{ ansible_hostname }}.example.com;


        location / {
            try_files $uri $uri/ =404;
        }


        # 健康检查端点
        location /health {
            access_log off;
            return 200 "healthy
";
            add_header Content-Type text/plain;
        }
    }
}

 

创建 templates/index.html.j2：

 

ounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(lineounter(line



    
    
    
    


    
        
 {{ website_title }}
        
恭喜！您已成功使用 Ansible 部署了这个页面
        
            
服务器名称: {{ ansible_hostname }}
            
IP地址: {{ ansible_default_ipv4.address }}
            
操作系统: {{ ansible_distribution }} {{ ansible_distribution_version }}
            
部署时间: {{ ansible_date_time.iso8601 }}