2022年12月12日 – 端くれプログラマの備忘録

[Ansible] mysql_userモジュール

2022年12月12日 @84kure

機能

MySQLデータベースへのユーザ追加/削除を行う。

使用例

- name: Removes anonymous user account for localhost
  mysql_user:
    name: ''
    host: localhost
    state: absent

- name: Removes all anonymous user accounts
  mysql_user:
    name: ''
    host_all: yes
    state: absent

- name: Create database user with name 'bob' and password '12345' with all database privileges
  mysql_user:
    name: bob
    password: 12345
    priv: '*.*:ALL'
    state: present

- name: Create database user using hashed password with all database privileges
  mysql_user:
    name: bob
    password: '*EE0D72C1085C46C5278932678FBE2C6A782821B4'
    encrypted: yes
    priv: '*.*:ALL'
    state: present

- name: Create database user with password and all database privileges and 'WITH GRANT OPTION'
  mysql_user:
    name: bob
    password: 12345
    priv: '*.*:ALL,GRANT'
    state: present

# Note that REQUIRESSL is a special privilege that should only apply to *.* by itself.
- name: Modify user to require SSL connections.
  mysql_user:
    name: bob
    append_privs: yes
    priv: '*.*:REQUIRESSL'
    state: present

- name: Ensure no user named 'sally'@'localhost' exists, also passing in the auth credentials.
  mysql_user:
    login_user: root
    login_password: 123456
    name: sally
    state: absent

- name: Ensure no user named 'sally' exists at all
  mysql_user:
    name: sally
    host_all: yes
    state: absent

- name: Specify grants composed of more than one word
  mysql_user:
    name: replication
    password: 12345
    priv: "*.*:REPLICATION CLIENT"
    state: present

- name: Revoke all privileges for user 'bob' and password '12345'
  mysql_user:
    name: bob
    password: 12345
    priv: "*.*:USAGE"
    state: present

# Example privileges string format
# mydb.*:INSERT,UPDATE/anotherdb.*:SELECT/yetanotherdb.*:ALL

- name: Example using login_unix_socket to connect to server
  mysql_user:
    name: root
    password: abc123
    login_unix_socket: /var/run/mysqld/mysqld.sock

- name: Example of skipping binary logging while adding user 'bob'
  mysql_user:
    name: bob
    password: 12345
    priv: "*.*:USAGE"
    state: present
    sql_log_bin: no

# Example .my.cnf file for setting the root password
# [client]
# user=root
# password=n<_665{vS43y

- name: Removes anonymous user account for localhost

mysql_user:

host: localhost

state: absent

- name: Removes all anonymous user accounts

mysql_user:

host_all: yes

state: absent

- name: Create database user with name 'bob' and password '12345' with all database privileges

mysql_user:

password: 12345

priv: '*.*:ALL'

state: present

- name: Create database user using hashed password with all database privileges

mysql_user:

password: '*EE0D72C1085C46C5278932678FBE2C6A782821B4'

encrypted: yes

priv: '*.*:ALL'

state: present

- name: Create database user with password and all database privileges and 'WITH GRANT OPTION'

mysql_user:

password: 12345

priv: '*.*:ALL,GRANT'

state: present

# Note that REQUIRESSL is a special privilege that should only apply to *.* by itself.

- name: Modify user to require SSL connections.

mysql_user:

append_privs: yes

priv: '*.*:REQUIRESSL'

state: present

- name: Ensure no user named 'sally'@'localhost' exists, also passing in the auth credentials.

mysql_user:

login_user: root

login_password: 123456

state: absent

- name: Ensure no user named 'sally' exists at all

mysql_user:

host_all: yes

state: absent

- name: Specify grants composed of more than one word

mysql_user:

password: 12345

priv: "*.*:REPLICATION CLIENT"

state: present

- name: Revoke all privileges for user 'bob' and password '12345'

mysql_user:

password: 12345

priv: "*.*:USAGE"

state: present

# Example privileges string format

# mydb.*:INSERT,UPDATE/anotherdb.*:SELECT/yetanotherdb.*:ALL

- name: Example using login_unix_socket to connect to server

mysql_user:

password: abc123

login_unix_socket: /var/run/mysqld/mysqld.sock

- name: Example of skipping binary logging while adding user 'bob'

mysql_user:

password: 12345

priv: "*.*:USAGE"

state: present

sql_log_bin: no

# Example .my.cnf file for setting the root password

# [client]

# user=root

# password=n<_665{vS43y

参考サイト

mysql_user – Adds or removes a user from a MySQL database — Ansible Documentation
https://docs.ansible.com/ansible/2.9/modules/mysql_user_module.html#mysql-user-module

Database modules — Ansible Documentation
https://docs.ansible.com/ansible/2.9/modules/list_of_database_modules.html

[Ansible] mysql_dbモジュール

2022年12月12日 @84kure

機能

リモートホストからMySQLデータベースの追加/削除を行う。

使用例

- name: Create a new database with name 'bobdata'
  mysql_db:
    name: bobdata
    state: present

- name: Create new databases with names 'foo' and 'bar'
  mysql_db:
    name:
      - foo
      - bar
    state: present

# Copy database dump file to remote host and restore it to database 'my_db'
- name: Copy database dump file
  copy:
    src: dump.sql.bz2
    dest: /tmp

- name: Restore database
  mysql_db:
    name: my_db
    state: import
    target: /tmp/dump.sql.bz2

- name: Dump multiple databases
  mysql_db:
    state: dump
    name: db_1,db_2
    target: /tmp/dump.sql

- name: Dump multiple databases
  mysql_db:
    state: dump
    name:
      - db_1
      - db_2
    target: /tmp/dump.sql

- name: Dump all databases to hostname.sql
  mysql_db:
    state: dump
    name: all
    target: /tmp/dump.sql

- name: Import file.sql similar to mysql -u <username> -p <password> < hostname.sql
  mysql_db:
    state: import
    name: all
    target: /tmp/dump.sql

- name: Delete database with name 'bobdata'
  mysql_db:
    name: bobdata
    state: absent

- name: Make sure there is neither a database with name 'foo', nor one with name 'bar'
  mysql_db:
    name:
      - foo
      - bar
    state: absent

- name: Create a new database with name 'bobdata'

mysql_db:

state: present

- name: Create new databases with names 'foo' and 'bar'

mysql_db:

name:

- foo

- bar

state: present

# Copy database dump file to remote host and restore it to database 'my_db'

- name: Copy database dump file

copy:

src: dump.sql.bz2

dest: /tmp

- name: Restore database

mysql_db:

state: import

target: /tmp/dump.sql.bz2

- name: Dump multiple databases

mysql_db:

state: dump

target: /tmp/dump.sql

- name: Dump multiple databases

mysql_db:

state: dump

name:

- db_1

- db_2

target: /tmp/dump.sql

- name: Dump all databases to hostname.sql

mysql_db:

state: dump

target: /tmp/dump.sql

- name: Import file.sql similar to mysql -u <username> -p <password> < hostname.sql

mysql_db:

state: import

target: /tmp/dump.sql

- name: Delete database with name 'bobdata'

mysql_db:

state: absent

- name: Make sure there is neither a database with name 'foo', nor one with name 'bar'

mysql_db:

name:

- foo

- bar

state: absent

参考サイト

mysql_db – Add or remove MySQL databases from a remote host — Ansible Documentation
https://docs.ansible.com/ansible/2.9/modules/mysql_db_module.html#mysql-db-module

Database modules — Ansible Documentation
https://docs.ansible.com/ansible/2.9/modules/list_of_database_modules.html

[Ansible] unarchiveモジュール

2022年12月12日 @84kure

機能

アーカイブをアンパックする。アーカイブを含まない圧縮ファイルはアンパックしない。
デフォルトでは、アンパックする前に、ローカルシステムからターゲットへソースファイルをコピーする。
ターゲットに既に存在するアーカイブをアンパックするにはremote_src=yesをセットする。
チェックサムによるバリデーションが必要な場合は、ファイルをフェッチしてremote_src=yesをセットする代わりに、get_urlまたはurlモジュールを使用する。
Windowsターゲットに関しては、代わりにwin_unzipモジュールを使う。

使用例

- name: Extract foo.tgz into /var/lib/foo
  ansible.builtin.unarchive:
    src: foo.tgz
    dest: /var/lib/foo

- name: Unarchive a file that is already on the remote machine
  ansible.builtin.unarchive:
    src: /tmp/foo.zip
    dest: /usr/local/bin
    remote_src: yes

- name: Unarchive a file that needs to be downloaded (added in 2.0)
  ansible.builtin.unarchive:
    src: https://example.com/example.zip
    dest: /usr/local/bin
    remote_src: yes

- name: Unarchive a file with extra options
  ansible.builtin.unarchive:
    src: /tmp/foo.zip
    dest: /usr/local/bin
    extra_opts:
    - --transform
    - s/^xxx/yyy/

- name: Extract foo.tgz into /var/lib/foo

ansible.builtin.unarchive:

src: foo.tgz

dest: /var/lib/foo

- name: Unarchive a file that is already on the remote machine

ansible.builtin.unarchive:

src: /tmp/foo.zip

dest: /usr/local/bin

remote_src: yes

- name: Unarchive a file that needs to be downloaded (added in 2.0)

ansible.builtin.unarchive:

src: https://example.com/example.zip

dest: /usr/local/bin

remote_src: yes

- name: Unarchive a file with extra options

ansible.builtin.unarchive:

src: /tmp/foo.zip

dest: /usr/local/bin

extra_opts:

- --transform

- s/^xxx/yyy/

参考サイト

ansible.builtin.unarchive module – Unpacks an archive after (optionally) copying it from the local machine — Ansible Documentation
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/unarchive_module.html

[Ansible] copyモジュール

2022年12月12日 @84kure

機能

ローカルまたはリモートマシンから、リモートマシン上のロケーションへ、単一ファイルをコピーする。
リモートロケーションからローカルボックスへ複数ファイルをコピーするにはfetchモジュールを使用する。
コピーされるファイル中で変数補間が必要な場合はtemplateモジュールを使用する。contentフィールド中に変数を使うと予期不可能な出力を生ずる。
Windowsターゲットに関しては、代わりにwin_copyモジュールを使う。

使用例

- name: Copy file with owner and permissions
  ansible.builtin.copy:
    src: /srv/myfiles/foo.conf
    dest: /etc/foo.conf
    owner: foo
    group: foo
    mode: '0644'

- name: Copy file with owner and permission, using symbolic representation
  ansible.builtin.copy:
    src: /srv/myfiles/foo.conf
    dest: /etc/foo.conf
    owner: foo
    group: foo
    mode: u=rw,g=r,o=r

- name: Another symbolic mode example, adding some permissions and removing others
  ansible.builtin.copy:
    src: /srv/myfiles/foo.conf
    dest: /etc/foo.conf
    owner: foo
    group: foo
    mode: u+rw,g-wx,o-rwx

- name: Copy a new "ntp.conf" file into place, backing up the original if it differs from the copied version
  ansible.builtin.copy:
    src: /mine/ntp.conf
    dest: /etc/ntp.conf
    owner: root
    group: root
    mode: '0644'
    backup: yes # バックアップファイルを作成する

- name: Copy a new "sudoers" file into place, after passing validation with visudo
  ansible.builtin.copy:
    src: /mine/sudoers
    dest: /etc/sudoers
    validate: /usr/sbin/visudo -csf %s # 更新されたファイルが最終場所にコピーされる前に実行される

- name: Copy a "sudoers" file on the remote machine for editing
  ansible.builtin.copy:
    src: /etc/sudoers
    dest: /etc/sudoers.edit
    remote_src: yes
    validate: /usr/sbin/visudo -csf %s

- name: Copy using inline content
  ansible.builtin.copy:
    content: '# This file was moved to /etc/other.conf' # ファイルの内容
    dest: /etc/mine.conf

- name: If follow=yes, /path/to/file will be overwritten by contents of foo.conf
  ansible.builtin.copy:
    src: /etc/foo.conf
    dest: /path/to/link  # link to /path/to/file
    follow: yes

- name: If follow=no, /path/to/link will become a file and be overwritten by contents of foo.conf
  ansible.builtin.copy:
    src: /etc/foo.conf
    dest: /path/to/link  # link to /path/to/file
    follow: no

- name: Copy file with owner and permissions

ansible.builtin.copy:

src: /srv/myfiles/foo.conf

dest: /etc/foo.conf

owner: foo

group: foo

mode: '0644'

- name: Copy file with owner and permission, using symbolic representation

ansible.builtin.copy:

src: /srv/myfiles/foo.conf

dest: /etc/foo.conf

owner: foo

group: foo

mode: u=rw,g=r,o=r

- name: Another symbolic mode example, adding some permissions and removing others

ansible.builtin.copy:

src: /srv/myfiles/foo.conf

dest: /etc/foo.conf

owner: foo

group: foo

mode: u+rw,g-wx,o-rwx

- name: Copy a new "ntp.conf" file into place, backing up the original if it differs from the copied version

ansible.builtin.copy:

src: /mine/ntp.conf

dest: /etc/ntp.conf

owner: root

group: root

mode: '0644'

backup: yes # バックアップファイルを作成する

- name: Copy a new "sudoers" file into place, after passing validation with visudo

ansible.builtin.copy:

src: /mine/sudoers

dest: /etc/sudoers

validate: /usr/sbin/visudo -csf %s # 更新されたファイルが最終場所にコピーされる前に実行される

- name: Copy a "sudoers" file on the remote machine for editing

ansible.builtin.copy:

src: /etc/sudoers

dest: /etc/sudoers.edit

remote_src: yes

validate: /usr/sbin/visudo -csf %s

- name: Copy using inline content

ansible.builtin.copy:

content: '# This file was moved to /etc/other.conf' # ファイルの内容

dest: /etc/mine.conf

- name: If follow=yes, /path/to/file will be overwritten by contents of foo.conf

ansible.builtin.copy:

src: /etc/foo.conf

dest: /path/to/link # link to /path/to/file

follow: yes

- name: If follow=no, /path/to/link will become a file and be overwritten by contents of foo.conf

ansible.builtin.copy:

src: /etc/foo.conf

dest: /path/to/link # link to /path/to/file

follow: no

参考サイト

ansible.builtin.copy module – Copy files to remote locations — Ansible Documentation
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/copy_module.html