Ansible Playbook 软件安装全攻略：从基础到企业级实践

1. Ansible Playbook 基础与软件安装原理

在自动化运维领域，Ansible Playbook 是配置管理和应用部署的核心工具。与直接使用命令行安装软件不同，Playbook 通过 YAML 格式的声明式脚本，将安装过程转化为可重复执行的标准化流程。其核心优势在于：

• 幂等性设计：无论执行多少次，最终系统状态都与预期一致
• 批量操作能力：单次执行可覆盖数百台服务器
• 依赖管理：自动处理软件包之间的依赖关系

典型软件安装流程在 Playbook 中通过 package 或 yum/apt 模块实现。例如安装 Nginx 的基础 Playbook 结构：

yaml复制- name: Install Nginx
  hosts: webservers
  tasks:
    - name: Ensure Nginx is installed
      package:
        name: nginx
        state: present

2. 多平台软件安装方案实现

2.1 跨Linux发行版的兼容处理

不同Linux发行版使用不同的包管理工具，通过 ansible_os_family 变量实现条件判断：

yaml复制tasks:
  - name: Install EPEL repo (RHEL/CentOS)
    yum:
      name: epel-release
      state: present
    when: ansible_os_family == "RedHat"

  - name: Install software (Debian/Ubuntu)
    apt:
      name: "{{ item }}"
      state: latest
    with_items:
      - nginx
      - python3-pip
    when: ansible_os_family == "Debian"

2.2 Windows 环境软件部署

通过 win_package 模块处理 Windows 软件安装，特别注意权限问题和安装路径：

yaml复制- name: Install 7-Zip
  win_package:
    path: C:\temp\7z1900-x64.msi
    product_id: "{23170F69-40C1-2702-1900-000001000000}"
    arguments: /quiet
    state: present

注意：Windows 安装常见错误 "拒绝访问" 通常需要以管理员身份运行 Ansible 或配置正确的 ACL 权限

3. 复杂安装场景实战

3.1 编译安装场景处理

当需要从源码编译安装时（如特定版本的 Python），完整的处理流程应包括：

yaml复制- name: Install build dependencies
  package:
    name: "{{ item }}"
    state: present
  with_items:
    - gcc
    - make
    - zlib1g-dev

- name: Download Python source
  get_url:
    url: https://www.python.org/ftp/python/3.9.7/Python-3.9.7.tgz
    dest: /tmp/Python-3.9.7.tgz

- name: Compile and install
  command: |
    tar xzf /tmp/Python-3.9.7.tgz
    cd Python-3.9.7
    ./configure --enable-optimizations
    make -j 8
    make altinstall
  args:
    creates: /usr/local/bin/python3.9

3.2 国产操作系统适配

针对银河麒麟、统信 UOS 等国产系统，需特别注意：

1. 软件源配置差异
2. 依赖包命名不同
3. 架构兼容性（如飞腾/龙芯）

yaml复制- name: Add Kylin software repository
  copy:
    src: files/kylin.repo
    dest: /etc/yum.repos.d/
    owner: root
    group: root
    mode: 0644
  when: ansible_distribution == "Kylin"

- name: Install basic packages
  package:
    name: "{{ item }}"
    state: present
  with_items:
    - kylin-default-fonts
    - kylin-software-center

4. 生产环境最佳实践

4.1 安装前系统状态检查

完善的 Playbook 应包含预检环节：

yaml复制- name: Check disk space
  command: df -h /
  register: disk_space
  changed_when: false

- name: Validate minimum memory
  assert:
    that:
      - ansible_memtotal_mb >= 2048
    fail_msg: "System requires at least 2GB RAM"

4.2 安装后验证与监控

安装完成后的自动化验证策略：

yaml复制- name: Verify service status
  service:
    name: nginx
    state: started
    enabled: yes

- name: Check version
  command: nginx -v
  register: nginx_version
  changed_when: false
  ignore_errors: yes

- name: Log version info
  debug:
    msg: "Installed Nginx version: {{ nginx_version.stderr }}"

4.3 日志收集与排错

针对安装失败场景的日志收集方案：

yaml复制- name: Capture installation logs
  block:
    - name: Install problematic package
      package:
        name: "{{ problem_package }}"
        state: present

  rescue:
    - name: Gather yum logs
      copy:
        src: /var/log/yum.log
        dest: "/tmp/{{ ansible_hostname }}_yum.log"

    - name: Collect system messages
      command: journalctl -xe
      register: syslog
      changed_when: false

    - name: Save debug info
      copy:
        content: |
          FAILED on {{ ansible_hostname }}
          Error: {{ problem_package }}
          System: {{ ansible_distribution }} {{ ansible_distribution_version }}
          {{ syslog.stdout }}
        dest: "/tmp/{{ ansible_hostname }}_install_error.log"

5. 企业级扩展方案

5.1 私有仓库集成

对接企业内部软件仓库的配置方法：

yaml复制- name: Configure corporate repository
  yum_repository:
    name: corporate
    description: Corporate Software Repo
    baseurl: http://repo.internal/centos/$releasever/os/$basearch/
    gpgcheck: yes
    gpgkey: http://repo.internal/RPM-GPG-KEY
    enabled: yes

- name: Install from private repo
  package:
    name: internal-app
    enablerepo: corporate

5.2 多阶段部署策略

复杂软件的分阶段安装控制：

yaml复制- name: Phase 1 - Core installation
  include_tasks: phase1_core.yml
  when: deployment_phase == "1"

- name: Phase 2 - Configuration
  include_tasks: phase2_config.yml
  when: deployment_phase == "2"

- name: Phase 3 - Integration
  include_tasks: phase3_integration.yml
  when: deployment_phase == "3"

5.3 安全加固措施

安装过程中的安全最佳实践：

yaml复制- name: Verify package signatures
  yum:
    name: "{{ item }}"
    state: present
    disable_gpg_check: no
  with_items:
    - openssl
    - openssh-server

- name: Set secure permissions
  file:
    path: /etc/application.conf
    owner: root
    group: appuser
    mode: 0640

6. 常见问题解决方案

6.1 依赖冲突处理

典型依赖问题的解决模式：

yaml复制- name: Resolve dependency conflicts
  block:
    - name: Clean existing packages
      package:
        name: "{{ conflict_packages }}"
        state: absent

    - name: Install with dependency tree
      command: yum install --skip-broken -y {{ target_package }}
      args:
        creates: "/usr/bin/{{ target_package }}"

  rescue:
    - name: Generate dependency report
      command: rpm -qa --tree
      register: rpm_tree
      changed_when: false

    - debug:
        var: rpm_tree.stdout_lines

6.2 磁盘空间不足

安装前的空间管理策略：

yaml复制- name: Clean package cache
  package:
    name: "*"
    state: present
    autoremove: yes

- name: Rotate log files
  command: logrotate -f /etc/logrotate.conf

- name: Check again after cleanup
  assert:
    that:
      - ansible_facts['mounts']['/']['size_available'] > 1073741824  # 1GB
    fail_msg: "Insufficient disk space after cleanup"

6.3 网络代理配置

通过企业代理下载软件的特殊配置：

yaml复制- name: Configure yum proxy
  ini_file:
    path: /etc/yum.conf
    section: main
    option: proxy
    value: "http://proxy.corp:3128"
    backup: yes

- name: Set environment proxy
  lineinfile:
    path: /etc/environment
    line: "https_proxy=http://proxy.corp:3128"
    create: yes

7. 性能优化技巧

7.1 并行安装加速

利用 Ansible 的并行执行能力：

yaml复制- name: Parallel package installation
  package:
    name: "{{ item }}"
    state: present
  with_items: "{{ package_list }}"
  async: 300
  poll: 0
  throttle: 10

7.2 本地缓存策略

建立本地软件包缓存提升效率：

yaml复制- name: Create cache directory
  file:
    path: /var/cache/ansible/packages
    state: directory
    mode: 0755

- name: Download packages with cache
  get_url:
    url: "{{ download_url }}"
    dest: "/var/cache/ansible/packages/{{ package_file }}"
    checksum: "sha256:{{ package_checksum }}"

7.3 增量更新机制

智能更新检测实现：

yaml复制- name: Check current versions
  command: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}\n' installed_packages
  register: installed_versions
  changed_when: false

- name: Install only if newer available
  package:
    name: "{{ item.key }}"
    state: latest
  when: item.value != current_versions[item.key]
  with_dict: "{{ target_versions }}"

8. 扩展应用场景

8.1 开发环境配置

完整开发工具链的自动化安装：

yaml复制- name: Install Python AI stack
  pip:
    name: "{{ item }}"
    state: latest
  with_items:
    - numpy
    - pandas
    - tensorflow
    - torch
    - scikit-learn

- name: Setup IDE components
  package:
    name: "{{ ide_packages }}"
    state: present

8.2 容器环境准备

为 Docker/Kubernetes 环境准备基础软件：

yaml复制- name: Install container runtime
  package:
    name: "{{ container_engine }}"
    state: present

- name: Configure storage driver
  lineinfile:
    path: /etc/docker/daemon.json
    line: '{"storage-driver": "overlay2"}'
    create: yes

- name: Start container service
  service:
    name: docker
    state: started
    enabled: yes

8.3 混合云部署

跨云平台的统一软件部署：

yaml复制- name: Cloud-init preparation
  copy:
    content: |
      #cloud-config
      packages:
        - nginx
        - mysql-client
    dest: /etc/cloud/cloud.cfg.d/00_base.cfg

- name: Apply cloud configuration
  command: cloud-init clean && cloud-init init
  when: ansible_cloud_vendor is defined