Ansible之角色基础服务MySQL安装

[root@ansbile01 ~/roles]$ mkdir mysql/{vars,tasks,templates,handlers,files} -p 

[root@ansbile01 ~/roles]$ cat mysql/tasks/user.yml 
- name: Create MySQL group
  group: name={{ group }} gid={{ gid }} system=yes
- name: Create MySQL user
  user: name={{ user }} group={{ group }} uid={{ uid }} system=yes shell=/sbin/nologin create_home=no

[root@ansible01 ~/roles/mysql/tasks]$cat packages.yml 
- name: installed MySQL packages
  yum: name={{ packages }} state=present
  vars:
    packages:
      - libaio-devel
      - MySQL-python

[root@ansbile01 ~/roles]$ cat mysql/tasks/download.yml 
- name: download MySQL
  get_url: dest={{ download }} url=https://downloads.mysql.com/archives/get/p/23/file/{{ mysql_ver|default('mysql-5.7.31-linux-glibc2.12-x86_64') }}.tar.gz force=no

- name: tar xf MySQL
  unarchive: src={{ download }}/{{ mysql_ver|default('mysql-5.7.31-linux-glibc2.12-x86_64') }}.tar.gz dest={{ download }} copy=no creates={{ install }}
  
- name: linke mysql dir
  file: 
    src: "{{ download }}/{{ mysql_ver|default('mysql-5.7.31-linux-glibc2.12-x86_64') }}"
    dest: "{{ install }}"
    state: link
- name: Create data dir.
  file:
    path: "{{ data_mysql }}"
    state: directory
    owner: "{{ user }}"
    group: "{{ group }}"

[root@ansbile01 ~/roles]$ cat mysql/tasks/install.yml 
- name: initialize mysql data
  command: >
    ./bin/mysqld --initialize-insecure
    --user={{ user }}
    --basedir={{ install }}
    --datadir={{ data_mysql }}
  args:
    chdir: "{{ install }}"
    creates: "{{ data_mysql }}/mysql"
  changed_when: yes

[root@ansbile01 ~/roles]$ cat mysql/tasks/profile.yml 
- name: MySQL profile
   lineinfile:
      dest: /etc/profile
      line: "export PATH={{ install }}/bin/:$PATH"
      state: present
      backup: yes

[root@ansbile01 ~/roles]$ cat mysql/tasks/conf.yml
- name: Configure MySQL
  template: src=my.conf.j2 dest=/etc/my.conf

[root@ansible01 ~/roles]$cat mysql/templates/my.conf.j2 
[mysqld]
user={{ user }}
basedir={{ install }}
datadir={{ data_mysql }}
port=3306
socket=/tmp/mysql.sock
[client]
socket=/tmp/mysql.sock

[root@ansible01 ~/roles]$cat mysql/tasks/start.yml
- name: copy start mysql script
  copy:
    src: "{{ install }}/support-files/mysql.server"
    dest: "/etc/init.d/mysqld"
    mode: 0650
    remote_src: yes
  notify: reload mysql

- name: started mysqld
  command: service mysqld start

[root@ansible01 ~/roles]$cat mysql/tasks/init.yml
---
- name: Set Root password
  mysql_user:
    user: "{{ dbuser }}"
    password: "{{ dbpass }}"
    host: "localhost"
    update_password: always


- name: Drop database {{ testdb|default('test') }}
  mysql_db:
    name: "{{ testdb|default('test') }}"
    login_user: "{{ dbuser }}"
    login_password: "{{ dbpass }}"
    state: absent
    run_once: true

- name: Create {{ newdb }} Databases
  mysql_db:
    name: "{{ newdb }}"
    login_user: "{{ dbuser }}"
    login_password: "{{ dbpass }}"
    state: present
    run_once: true
    encoding: utf8mb4

- name: Create {{ newuser }} user
  mysql_user:
    login_user: "{{ dbuser }}"
    login_password: "{{ dbpass }}"
    name: "{{ newuser }}"
    host: "{{ newhost }}"
    password: "{{ newpass }}"
    priv: "{{ newpriv|default('*.*:ALL')}}"
    state: present

[root@ansible01 ~/roles]$cat mysql/vars/main.yml 
# MySQL user
group: mysql
user: mysql
gid: 306
uid: 306

# MySQL vars
#
download: "/data"
install: "/usr/local/mysql"

data_mysql: "/data/3306/data"
dbuser: root
dbpass: "123456"
# testdb: test
newdb:
  - zabbix
newuser: zabbix
newhost: "10.1.1.%"
newpass: "zabbix"
newpriv: "zabbix.*:insert,update,delete,select"

[root@ansible01 ~/roles]$cat mysql/tasks/main.yml
- include_tasks: user.yml
- include_tasks: packages.yml
- include_tasks: download.yml
- include_tasks: install.yml
- include_tasks: profile.yml
- include_tasks: conf.yml
- include_tasks: start.yml
- include_tasks: init.yml

[root@ansible01 ~/roles]$cat mysql.yml 
- hosts: dbserver
  roles:
    - role: mysql

MySQL server installs with default login_user of 'root' and no password. To secure this user as part of an idempotent playbook, you must
       create at least two tasks: the first must change the root user's password, without providing any login_user/login_password details. The
       second must drop a ~/.my.cnf file containing the new root credentials. Subsequent runs of the playbook will then succeed by reading the
       new credentials from the file.
     * Currently, there is only support for the `mysql_native_password` encrypted password hash module.
     * Requires the PyMySQL (Python 2.7 and Python 3.X) or MySQL-python (Python 2.X) package on the remote host. The Python package may be
       installed with apt-get install python-pymysql (Ubuntu; see [apt]) or yum install python2-PyMySQL (RHEL/CentOS/Fedora; see [yum]). You
       can also use dnf install python2-PyMySQL for newer versions of Fedora; see [dnf].
     * Both `login_password' and `login_user' are required when you are passing credentials. If none are present, the module will attempt to
       read the credentials from `~/.my.cnf', and finally fall back to using the MySQL default login of 'root' with no password.