@84kure – 端くれプログラマの備忘録

[Ansible] mysql_userモジュール

2022年12月12日 @84kure

機能

MySQLデータベースへのユーザ追加/削除を行う。

使用例

- name: Removes anonymous user account for localhost
  mysql_user:
    name: ''
    host: localhost
    state: absent

- name: Removes all anonymous user accounts
  mysql_user:
    name: ''
    host_all: yes
    state: absent

- name: Create database user with name 'bob' and password '12345' with all database privileges
  mysql_user:
    name: bob
    password: 12345
    priv: '*.*:ALL'
    state: present

- name: Create database user using hashed password with all database privileges
  mysql_user:
    name: bob
    password: '*EE0D72C1085C46C5278932678FBE2C6A782821B4'
    encrypted: yes
    priv: '*.*:ALL'
    state: present

- name: Create database user with password and all database privileges and 'WITH GRANT OPTION'
  mysql_user:
    name: bob
    password: 12345
    priv: '*.*:ALL,GRANT'
    state: present

# Note that REQUIRESSL is a special privilege that should only apply to *.* by itself.
- name: Modify user to require SSL connections.
  mysql_user:
    name: bob
    append_privs: yes
    priv: '*.*:REQUIRESSL'
    state: present

- name: Ensure no user named 'sally'@'localhost' exists, also passing in the auth credentials.
  mysql_user:
    login_user: root
    login_password: 123456
    name: sally
    state: absent

- name: Ensure no user named 'sally' exists at all
  mysql_user:
    name: sally
    host_all: yes
    state: absent

- name: Specify grants composed of more than one word
  mysql_user:
    name: replication
    password: 12345
    priv: "*.*:REPLICATION CLIENT"
    state: present

- name: Revoke all privileges for user 'bob' and password '12345'
  mysql_user:
    name: bob
    password: 12345
    priv: "*.*:USAGE"
    state: present

# Example privileges string format
# mydb.*:INSERT,UPDATE/anotherdb.*:SELECT/yetanotherdb.*:ALL

- name: Example using login_unix_socket to connect to server
  mysql_user:
    name: root
    password: abc123
    login_unix_socket: /var/run/mysqld/mysqld.sock

- name: Example of skipping binary logging while adding user 'bob'
  mysql_user:
    name: bob
    password: 12345
    priv: "*.*:USAGE"
    state: present
    sql_log_bin: no

# Example .my.cnf file for setting the root password
# [client]
# user=root
# password=n<_665{vS43y

- name: Removes anonymous user account for localhost

mysql_user:

host: localhost

state: absent

- name: Removes all anonymous user accounts

mysql_user:

host_all: yes

state: absent

- name: Create database user with name 'bob' and password '12345' with all database privileges

mysql_user:

password: 12345

priv: '*.*:ALL'

state: present

- name: Create database user using hashed password with all database privileges

mysql_user:

password: '*EE0D72C1085C46C5278932678FBE2C6A782821B4'

encrypted: yes

priv: '*.*:ALL'

state: present

- name: Create database user with password and all database privileges and 'WITH GRANT OPTION'

mysql_user:

password: 12345

priv: '*.*:ALL,GRANT'

state: present

# Note that REQUIRESSL is a special privilege that should only apply to *.* by itself.

- name: Modify user to require SSL connections.

mysql_user:

append_privs: yes

priv: '*.*:REQUIRESSL'

state: present

- name: Ensure no user named 'sally'@'localhost' exists, also passing in the auth credentials.

mysql_user:

login_user: root

login_password: 123456

state: absent

- name: Ensure no user named 'sally' exists at all

mysql_user:

host_all: yes

state: absent

- name: Specify grants composed of more than one word

mysql_user:

password: 12345

priv: "*.*:REPLICATION CLIENT"

state: present

- name: Revoke all privileges for user 'bob' and password '12345'

mysql_user:

password: 12345

priv: "*.*:USAGE"

state: present

# Example privileges string format

# mydb.*:INSERT,UPDATE/anotherdb.*:SELECT/yetanotherdb.*:ALL

- name: Example using login_unix_socket to connect to server

mysql_user:

password: abc123

login_unix_socket: /var/run/mysqld/mysqld.sock

- name: Example of skipping binary logging while adding user 'bob'

mysql_user:

password: 12345

priv: "*.*:USAGE"

state: present

sql_log_bin: no

# Example .my.cnf file for setting the root password

# [client]

# user=root

# password=n<_665{vS43y

参考サイト

mysql_user – Adds or removes a user from a MySQL database — Ansible Documentation
https://docs.ansible.com/ansible/2.9/modules/mysql_user_module.html#mysql-user-module

Database modules — Ansible Documentation
https://docs.ansible.com/ansible/2.9/modules/list_of_database_modules.html

[Ansible] mysql_dbモジュール

2022年12月12日 @84kure

機能

リモートホストからMySQLデータベースの追加/削除を行う。

使用例

- name: Create a new database with name 'bobdata'
  mysql_db:
    name: bobdata
    state: present

- name: Create new databases with names 'foo' and 'bar'
  mysql_db:
    name:
      - foo
      - bar
    state: present

# Copy database dump file to remote host and restore it to database 'my_db'
- name: Copy database dump file
  copy:
    src: dump.sql.bz2
    dest: /tmp

- name: Restore database
  mysql_db:
    name: my_db
    state: import
    target: /tmp/dump.sql.bz2

- name: Dump multiple databases
  mysql_db:
    state: dump
    name: db_1,db_2
    target: /tmp/dump.sql

- name: Dump multiple databases
  mysql_db:
    state: dump
    name:
      - db_1
      - db_2
    target: /tmp/dump.sql

- name: Dump all databases to hostname.sql
  mysql_db:
    state: dump
    name: all
    target: /tmp/dump.sql

- name: Import file.sql similar to mysql -u <username> -p <password> < hostname.sql
  mysql_db:
    state: import
    name: all
    target: /tmp/dump.sql

- name: Delete database with name 'bobdata'
  mysql_db:
    name: bobdata
    state: absent

- name: Make sure there is neither a database with name 'foo', nor one with name 'bar'
  mysql_db:
    name:
      - foo
      - bar
    state: absent

- name: Create a new database with name 'bobdata'

mysql_db:

state: present

- name: Create new databases with names 'foo' and 'bar'

mysql_db:

name:

- foo

- bar

state: present

# Copy database dump file to remote host and restore it to database 'my_db'

- name: Copy database dump file

copy:

src: dump.sql.bz2

dest: /tmp

- name: Restore database

mysql_db:

state: import

target: /tmp/dump.sql.bz2

- name: Dump multiple databases

mysql_db:

state: dump

target: /tmp/dump.sql

- name: Dump multiple databases

mysql_db:

state: dump

name:

- db_1

- db_2

target: /tmp/dump.sql

- name: Dump all databases to hostname.sql

mysql_db:

state: dump

target: /tmp/dump.sql

- name: Import file.sql similar to mysql -u <username> -p <password> < hostname.sql

mysql_db:

state: import

target: /tmp/dump.sql

- name: Delete database with name 'bobdata'

mysql_db:

state: absent

- name: Make sure there is neither a database with name 'foo', nor one with name 'bar'

mysql_db:

name:

- foo

- bar

state: absent

参考サイト

mysql_db – Add or remove MySQL databases from a remote host — Ansible Documentation
https://docs.ansible.com/ansible/2.9/modules/mysql_db_module.html#mysql-db-module

Database modules — Ansible Documentation
https://docs.ansible.com/ansible/2.9/modules/list_of_database_modules.html

[Ansible] unarchiveモジュール

2022年12月12日 @84kure

機能

アーカイブをアンパックする。アーカイブを含まない圧縮ファイルはアンパックしない。
デフォルトでは、アンパックする前に、ローカルシステムからターゲットへソースファイルをコピーする。
ターゲットに既に存在するアーカイブをアンパックするにはremote_src=yesをセットする。
チェックサムによるバリデーションが必要な場合は、ファイルをフェッチしてremote_src=yesをセットする代わりに、get_urlまたはurlモジュールを使用する。
Windowsターゲットに関しては、代わりにwin_unzipモジュールを使う。

使用例

- name: Extract foo.tgz into /var/lib/foo
  ansible.builtin.unarchive:
    src: foo.tgz
    dest: /var/lib/foo

- name: Unarchive a file that is already on the remote machine
  ansible.builtin.unarchive:
    src: /tmp/foo.zip
    dest: /usr/local/bin
    remote_src: yes

- name: Unarchive a file that needs to be downloaded (added in 2.0)
  ansible.builtin.unarchive:
    src: https://example.com/example.zip
    dest: /usr/local/bin
    remote_src: yes

- name: Unarchive a file with extra options
  ansible.builtin.unarchive:
    src: /tmp/foo.zip
    dest: /usr/local/bin
    extra_opts:
    - --transform
    - s/^xxx/yyy/

- name: Extract foo.tgz into /var/lib/foo

ansible.builtin.unarchive:

src: foo.tgz

dest: /var/lib/foo

- name: Unarchive a file that is already on the remote machine

ansible.builtin.unarchive:

src: /tmp/foo.zip

dest: /usr/local/bin

remote_src: yes

- name: Unarchive a file that needs to be downloaded (added in 2.0)

ansible.builtin.unarchive:

src: https://example.com/example.zip

dest: /usr/local/bin

remote_src: yes

- name: Unarchive a file with extra options

ansible.builtin.unarchive:

src: /tmp/foo.zip

dest: /usr/local/bin

extra_opts:

- --transform

- s/^xxx/yyy/

参考サイト

ansible.builtin.unarchive module – Unpacks an archive after (optionally) copying it from the local machine — Ansible Documentation
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/unarchive_module.html

[Ansible] copyモジュール

2022年12月12日 @84kure

機能

ローカルまたはリモートマシンから、リモートマシン上のロケーションへ、単一ファイルをコピーする。
リモートロケーションからローカルボックスへ複数ファイルをコピーするにはfetchモジュールを使用する。
コピーされるファイル中で変数補間が必要な場合はtemplateモジュールを使用する。contentフィールド中に変数を使うと予期不可能な出力を生ずる。
Windowsターゲットに関しては、代わりにwin_copyモジュールを使う。

使用例

- name: Copy file with owner and permissions
  ansible.builtin.copy:
    src: /srv/myfiles/foo.conf
    dest: /etc/foo.conf
    owner: foo
    group: foo
    mode: '0644'

- name: Copy file with owner and permission, using symbolic representation
  ansible.builtin.copy:
    src: /srv/myfiles/foo.conf
    dest: /etc/foo.conf
    owner: foo
    group: foo
    mode: u=rw,g=r,o=r

- name: Another symbolic mode example, adding some permissions and removing others
  ansible.builtin.copy:
    src: /srv/myfiles/foo.conf
    dest: /etc/foo.conf
    owner: foo
    group: foo
    mode: u+rw,g-wx,o-rwx

- name: Copy a new "ntp.conf" file into place, backing up the original if it differs from the copied version
  ansible.builtin.copy:
    src: /mine/ntp.conf
    dest: /etc/ntp.conf
    owner: root
    group: root
    mode: '0644'
    backup: yes # バックアップファイルを作成する

- name: Copy a new "sudoers" file into place, after passing validation with visudo
  ansible.builtin.copy:
    src: /mine/sudoers
    dest: /etc/sudoers
    validate: /usr/sbin/visudo -csf %s # 更新されたファイルが最終場所にコピーされる前に実行される

- name: Copy a "sudoers" file on the remote machine for editing
  ansible.builtin.copy:
    src: /etc/sudoers
    dest: /etc/sudoers.edit
    remote_src: yes
    validate: /usr/sbin/visudo -csf %s

- name: Copy using inline content
  ansible.builtin.copy:
    content: '# This file was moved to /etc/other.conf' # ファイルの内容
    dest: /etc/mine.conf

- name: If follow=yes, /path/to/file will be overwritten by contents of foo.conf
  ansible.builtin.copy:
    src: /etc/foo.conf
    dest: /path/to/link  # link to /path/to/file
    follow: yes

- name: If follow=no, /path/to/link will become a file and be overwritten by contents of foo.conf
  ansible.builtin.copy:
    src: /etc/foo.conf
    dest: /path/to/link  # link to /path/to/file
    follow: no

- name: Copy file with owner and permissions

ansible.builtin.copy:

src: /srv/myfiles/foo.conf

dest: /etc/foo.conf

owner: foo

group: foo

mode: '0644'

- name: Copy file with owner and permission, using symbolic representation

ansible.builtin.copy:

src: /srv/myfiles/foo.conf

dest: /etc/foo.conf

owner: foo

group: foo

mode: u=rw,g=r,o=r

- name: Another symbolic mode example, adding some permissions and removing others

ansible.builtin.copy:

src: /srv/myfiles/foo.conf

dest: /etc/foo.conf

owner: foo

group: foo

mode: u+rw,g-wx,o-rwx

- name: Copy a new "ntp.conf" file into place, backing up the original if it differs from the copied version

ansible.builtin.copy:

src: /mine/ntp.conf

dest: /etc/ntp.conf

owner: root

group: root

mode: '0644'

backup: yes # バックアップファイルを作成する

- name: Copy a new "sudoers" file into place, after passing validation with visudo

ansible.builtin.copy:

src: /mine/sudoers

dest: /etc/sudoers

validate: /usr/sbin/visudo -csf %s # 更新されたファイルが最終場所にコピーされる前に実行される

- name: Copy a "sudoers" file on the remote machine for editing

ansible.builtin.copy:

src: /etc/sudoers

dest: /etc/sudoers.edit

remote_src: yes

validate: /usr/sbin/visudo -csf %s

- name: Copy using inline content

ansible.builtin.copy:

content: '# This file was moved to /etc/other.conf' # ファイルの内容

dest: /etc/mine.conf

- name: If follow=yes, /path/to/file will be overwritten by contents of foo.conf

ansible.builtin.copy:

src: /etc/foo.conf

dest: /path/to/link # link to /path/to/file

follow: yes

- name: If follow=no, /path/to/link will become a file and be overwritten by contents of foo.conf

ansible.builtin.copy:

src: /etc/foo.conf

dest: /path/to/link # link to /path/to/file

follow: no

参考サイト

ansible.builtin.copy module – Copy files to remote locations — Ansible Documentation
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/copy_module.html

[Ansible] ini_fileモジュール

2022年12月7日2022年12月12日 @84kure

機能

INI形式ファイルの個々の設定を管理(追加、削除、変更)する。
セクションが存在しない場合には追加する。

使用例

- name: Ensure "fav=lemonade is in section "[drinks]" in specified file
  community.general.ini_file:
    path: /etc/conf
    section: drinks
    option: fav
    value: lemonade
    mode: '0600' # ファイルのパーミッション
    backup: true # バックアップを作成するか

- name: Ensure "temperature=cold is in section "[drinks]" in specified file
  community.general.ini_file:
    path: /etc/anotherconf
    section: drinks
    option: temperature
    value: cold
    backup: true

- name: Add "beverage=lemon juice" is in section "[drinks]" in specified file
  community.general.ini_file:
    path: /etc/conf
    section: drinks
    option: beverage
    value: lemon juice
    mode: '0600'
    state: present
    exclusive: false

- name: Ensure multiple values "beverage=coke" and "beverage=pepsi" are in section "[drinks]" in specified file
  community.general.ini_file:
    path: /etc/conf
    section: drinks
    option: beverage
    values:
      - coke
      - pepsi
    mode: '0600'
    state: present

- name: Ensure "fav=lemonade is in section "[drinks]" in specified file

community.general.ini_file:

path: /etc/conf

section: drinks

option: fav

value: lemonade

mode: '0600' # ファイルのパーミッション

backup: true # バックアップを作成するか

- name: Ensure "temperature=cold is in section "[drinks]" in specified file

community.general.ini_file:

path: /etc/anotherconf

section: drinks

option: temperature

value: cold

backup: true

- name: Add "beverage=lemon juice" is in section "[drinks]" in specified file

community.general.ini_file:

path: /etc/conf

section: drinks

option: beverage

value: lemon juice

mode: '0600'

state: present

exclusive: false

- name: Ensure multiple values "beverage=coke" and "beverage=pepsi" are in section "[drinks]" in specified file

community.general.ini_file:

path: /etc/conf

section: drinks

option: beverage

values:

- coke

- pepsi

mode: '0600'

state: present

参考サイト

community.general.ini_file module – Tweak settings in INI files — Ansible Documentation
https://docs.ansible.com/ansible/latest/collections/community/general/ini_file_module.html

[C#] 初期化子

2022年12月7日 @84kure

オブジェクトの初期化

Point p = new Point{ X = 0, Y = 1 };

1	Point p = new Point{ X = 0, Y = 1 };

コレクションの初期化

List<int> list = new List<int>{1, 2, 3};

1	List<int> list = new List<int>{1, 2, 3};

匿名型

var x = new { FamilyName = "鈴木", FirstName = "一郎"};

1	var x = new { FamilyName = "鈴木", FirstName = "一郎"};

暗黙型付け配列

int[] array = new[]{ 1, 2, 3, 4 };

1	int[] array = new[]{ 1, 2, 3, 4 };

参考ページ

C# 3.0 の新機能 – C# によるプログラミング入門 | ++C++; // 未確認飛行 C
https://ufcpp.net/study/csharp/ap_ver3.html#functional

[Ansible] yumで複数のパッケージをインストール

2022年11月27日2022年11月27日 @84kure

元手順

EPEL/Remiリポジトリ追加

# yum install epel-release
# rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-7.rpm

1 2	# yum install epel-release # rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-7.rpm

PHP7.3インストール

# yum install --enablerepo=remi,remi-php73 php php-devel php-mbstring php-pdo php-gd php-mysql

1	# yum install --enablerepo=remi,remi-php73 php php-devel php-mbstring php-pdo php-gd php-mysql

Ansible

パッケージをリストにしてyumコマンドに与えれば良い。

- name: Add EPEL/Remi repositories
  yum:
    name: "{{ package }}"
    state: latest
  vars:
    package:
      - epel-release
      - http://rpms.famillecollet.com/enterprise/remi-release-7.rpm

- name: Install PHP 7.3
  yum:
    name: "{{ package }}"
    state: latest
    enablerepo: remi-php73
  vars:
    package:
      - php
      - php-devel
      - php-mbstring
      - php-pdo
      - php-gd
      - php-mysql

- name: Add EPEL/Remi repositories

yum:

state: latest

vars:

package:

- epel-release

- http://rpms.famillecollet.com/enterprise/remi-release-7.rpm

- name: Install PHP 7.3

yum:

state: latest

enablerepo: remi-php73

vars:

package:

- php

- php-devel

- php-mbstring

- php-pdo

- php-gd

- php-mysql

[C#] ラムダ式

2022年11月27日2022年11月27日 @84kure

ラムダ式 (lambda expression)

匿名メソッドを2.0の頃の記法より簡単に書ける。
匿名メソッドと同じ記法で式木(expression tree)を作れる。

匿名メソッドの記法の簡略化

匿名メソッド (C# 2.0)

delegate(int n)
{
  return n > 0;
}

delegate(int n)

{

return n > 0;

}

ラムダ式 (C# 3.0)

(int n) => { return n > 0; };

1	(int n) => { return n > 0; };

{}の中身が単文の場合は{}とreturnも省略できる。

(int n) => n > 0;

1	(int n) => n > 0;

式木

割愛

参考サイト

ラムダ式 – C# によるプログラミング入門 | ++C++; // 未確認飛行 C
https://ufcpp.net/study/csharp/sp3_lambda.html

式木（Expression Trees） – C# によるプログラミング入門 | ++C++; // 未確認飛行 C
https://ufcpp.net/study/csharp/sp3_expression.html

[Ansible] get_urlモジュール

2022年11月25日 @84kure

機能

HTTP、HTTPS、FTPからリモートサーバーへファイルをダウンロードする。リモートサーバーがリモートリソースへ直接アクセスできることが前提。

使用例

- name: Download foo.conf
  ansible.builtin.get_url:
    url: http://example.com/path/file.conf
    dest: /etc/foo.conf
    mode: '0440'

- name: Download file and force basic auth
  ansible.builtin.get_url:
    url: http://example.com/path/file.conf
    dest: /etc/foo.conf
    force_basic_auth: yes

- name: Download file with custom HTTP headers
  ansible.builtin.get_url:
    url: http://example.com/path/file.conf
    dest: /etc/foo.conf
    headers:
      key1: one
      key2: two

- name: Download file with check (sha256)
  ansible.builtin.get_url:
    url: http://example.com/path/file.conf
    dest: /etc/foo.conf
    checksum: sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c

- name: Download file with check (md5)
  ansible.builtin.get_url:
    url: http://example.com/path/file.conf
    dest: /etc/foo.conf
    checksum: md5:66dffb5228a211e61d6d7ef4a86f5758

- name: Download file with checksum url (sha256)
  ansible.builtin.get_url:
    url: http://example.com/path/file.conf
    dest: /etc/foo.conf
    checksum: sha256:http://example.com/path/sha256sum.txt

- name: Download file from a file path
  ansible.builtin.get_url:
    url: file:///tmp/afile.txt
    dest: /tmp/afilecopy.txt

- name: < Fetch file that requires authentication.
        username/password only available since 2.8, in older versions you need to use url_username/url_password
  ansible.builtin.get_url:
    url: http://example.com/path/file.conf
    dest: /etc/foo.conf
    username: bar
    password: '{{ mysecret }}'

- name: Download foo.conf

ansible.builtin.get_url:

url: http://example.com/path/file.conf

dest: /etc/foo.conf

mode: '0440'

- name: Download file and force basic auth

ansible.builtin.get_url:

url: http://example.com/path/file.conf

dest: /etc/foo.conf

force_basic_auth: yes

- name: Download file with custom HTTP headers

ansible.builtin.get_url:

url: http://example.com/path/file.conf

dest: /etc/foo.conf

headers:

key1: one

key2: two

- name: Download file with check (sha256)

ansible.builtin.get_url:

url: http://example.com/path/file.conf

dest: /etc/foo.conf

checksum: sha256:b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c

- name: Download file with check (md5)

ansible.builtin.get_url:

url: http://example.com/path/file.conf

dest: /etc/foo.conf

checksum: md5:66dffb5228a211e61d6d7ef4a86f5758

- name: Download file with checksum url (sha256)

ansible.builtin.get_url:

url: http://example.com/path/file.conf

dest: /etc/foo.conf

checksum: sha256:http://example.com/path/sha256sum.txt

- name: Download file from a file path

ansible.builtin.get_url:

url: file:///tmp/afile.txt

dest: /tmp/afilecopy.txt

- name: < Fetch file that requires authentication.

username/password only available since 2.8, in older versions you need to use url_username/url_password

ansible.builtin.get_url:

url: http://example.com/path/file.conf

dest: /etc/foo.conf

username: bar

password: '{{ mysecret }}'

参考サイト

ansible.builtin.get_url module – Downloads files from HTTP, HTTPS, or FTP to node — Ansible Documentation
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/get_url_module.html

[C#] デリゲート

2022年11月25日 @84kure

デリゲート(delegate)とは

メソッドを参照するための型

デリゲート型の定義

delegate 戻り値の型デリゲート型名(引数リスト);

デリゲート例(C# 1.1)

delegate void showValue(int a);

static void Main()
{
    showValue a = new ShowValue(A);
    a(123);
}
static void A(int n)
{
    Console.WriteLine("{0}", n);
}

delegate void showValue(int a);

static void Main()

{

showValue a = new ShowValue(A);

a(123);

}

static void A(int n)

{

Console.WriteLine("{0}", n);

}

デリゲート例(C# 2.0)

delegate void showValue(int a);

static void Main()
{
    showValue a = A;
    a(123);
}
static void A(int n)
{
    Console.WriteLine("{0}", n);
}

delegate void showValue(int a);

static void Main()

{

showValue a = A;

a(123);

}

static void A(int n)

{

Console.WriteLine("{0}", n);

}

デリゲートの機能

インスタンスメソッドの代入 – クラス(static)メソッドとインスタンス(非static)メソッドのどちらでも代入可
複数のメソッドを代入 (+=演算子を使用) – マルチキャストデリゲート
非同期呼び出し

参考サイト

デリゲート – C# によるプログラミング入門 | ++C++; // 未確認飛行 C
https://ufcpp.net/study/csharp/sp_delegate.html