redhat certificate rhce 2021

# vim ansible.cfg
[defaults]
inventory      = /home/student/ansible/hosts
forks          = 10
remote_user	= devops
ask_sudo_pass = False
ask_pass      = False
deprecation_warnings=False
roles_path    = /home/student/ansible/roles
remote_port    = 22
[privilege_escalation]
become=True
become_method=sudo
become_user=root
become_ask_pass=False
##
# cat inventory
[dev]
172.25.250.9
[prod]
172.25.250.11
172.25.250.12
[test]
172.25.250.9
[balancer]
172.25.250.13
[webservers:children]
prod

#!/bin/bash
ansible all -m yum_repository -a 'name=EX294_STREAM \
description="EX294 stream software" \
baseurl=http://content/rhel8.0/x86_64/dvd/AppStream \
gpgcheck=1 \
gpgkey=http://content/rhel8.0/x86_64/dvd/RPM-GPG-KEY-redhat-release \
enabled=1'

ansible all -m yum_repository -a 'name=EX294_BASE \
description="EX294 base software" \
baseurl=http://content/rhel8.0/x86_64/dvd/BaseOS \
gpgcheck=1 \
gpgkey=http://content/rhel8.0/x86_64/dvd/RPM-GPG-KEY-redhat-release \
enabled=1'

---
- name: pkgs
 hosts: dev,test,prod
 tasks:
 - name: install php mariadb
   yum:
     name: 
       - php
       - mariadb
     state: present
 - name: install rpm dev tools
   yum:
     name: "@RPM Development Tools"
     state: present
   when: ansible_hostname in groups["dev"]
 - name: update pkgs
   yum:
     name: "*"
     state: latest
   when: ansible_hostname in groups["dev"]

yum install rhel-system-roles.noarch -y 
cp -r /usr/share/ansible/roles/rhel-system-roles.timesync /home/greg/ansible/roles/timesync

vim timesync.yaml
- hosts: all
 vars:
 timesync_ntp_servers:
 - hostname: classroom.example.com
   iburst: yes
 timesync_ntp_provider: chrony
 roles:
 - timesync

# vim requirememts.yml
-  src=http://materials/haproxy.tar
  name=balancer
-  src=http://materials/haproxy.tar
  name=phpinfo
# ansible-galaxy install -r requirememts.yml -p /home/greg/ansible/roles/

# cd /home/greg/ansible/roles
# ansible-galaxy init apache
# cat /home/greg/ansible/roles/apache/templates
Welcome to {{ ansible_fqdn }} on {{ ansible_default_ipv4.address }}
# vim tasks/main.yml
---
# tasks file for apache
- name: install httpd
 yum:
 	name: httpd
	state: present
- name: websites webcontent
 template:
   src: index.html.j2
   dest: /var/www/html/index.html
   owner: apache
   group: apache
   setype: httpd_sys_content_t
- name: start httpd and on boot running
 service:
 	name: httpd
 	state: started
 	enabled: yes
- name: start firewalld
 service:
 	name: firewalld
 	state: started
 	enabled: yes
- name: open port
 	firewalld:
 	service: http
   state: enabled
 	permanent: yes
 	immediate: yes
# vim ~/ansible/apache.yml
- name: running apache role
 hosts: webservers
 roles:
 - apache

# cat roles.yml
- name: run apache roles
 hosts: webservers
 roles:
   - apache
- name: balancer role
 hosts: balancers,webservers
 roles:
   - balancer
- name: phpinfo role
 hosts: webservers
 roles:
   - phpinfo

# vim lv.yaml
---
- name: manager lvm
 hosts: all
 tasks:
 - name: vg check
   shell: vgs research
   register: rs
   ignore_errors: yes

 - name: debug vg
   debug:
     msg: "Volume group done not exist"
   when: rs.rc != 0
   failed_when: rs.rc != 0
 - block:     # if ture
   - name: create big size 1500m
     lvol:
       vg: research
       lv: data
       size: 1500m
       
       
   rescue:  # else
   - name: debug lv
     debug:
       msg: "Could not create logical volume of that size"
   - name: create small size 800m
     lvol:
       vg: research
       lv: data
       size: 800m

 - name: create filesystem
   filesystem:
     dev: /dev/research/data
     fstype: ext4    

# vim hosts.j2
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

{% for host in groups["all"] %}
{{ hostvars[host]["ansible_default_ipv4"]["address"] }} {{ hostvars[host]["ansible_fqdn"] }} {{ hostvars[host]["ansible_hostname"] }}
{% endfor %} 

# vim hosts.yaml
---
- name: create hosts file
 hosts: all
 tasks:
 - name: create hosts for dev
   template:
     src: hosts.j2
     dest: /etc/myhosts
   when: ansible_hostname in groups["dev"]

# vim issue.yaml
---
- name: issue file
 hosts: all
 tasks:
 - name: issue file
   copy:
     content: "Development"
     dest: /etc/issue
   when: ansible_hostname in groups["dev"]
 - name: test issue
   copy:
     content: "Test"
     dest: /etc/issue
   when: ansible_hostname in groups["test"]
 - name: prod issue
   copy:
     content: "Production"
     dest: /etc/issue
   when: ansible_hostname in groups["prod"]

# cat webcontent.yaml
---
- name: web content
 hosts: dev
 tasks:
 - name: install httpd
   yum:
     name: httpd
     state: present

 - name: create webdev group
   group:
     name: webdev
     state: present
 - name: create directory /webdev
   file:
     path: /webdev
     state: directory
     group: webdev
     mode: "2775"
     setype: httpd_sys_content_t

 - name: create link file
   file:
     src: /webdev
     dest: /var/www/html/webdev
     state: link
 - name: web content
   copy:
     content: "Development"
     dest: /webdev/index.html
     setype: httpd_sys_content_t
 - name: service 
   service:
     name: "{{ item }}"
     state: started
     enabled: yes
   loop:
     - httpd
     - firewalld
 - name: firewalld
   firewalld:
     service: http
     state: enabled
     immediate: yes
     permanent: yes

# cat webcontent.yaml
---
- name: web tasks
  hosts: dev
  tasks:
  - name: install httpd
    yum: name=httpd state=present
  - name: start httpd
    service: 
      name: httpd 
      state:  started 
      enabled:  yes
  - name: start firewalld service
    service: 
      name: firewalld 
      state:  started
      enabled:  yes
  - name: firewall rule open
    firewalld:  service=http state=enabled permanent=yes immediate=yes
  - name: group create webdev
    group: name=webdev state=present
  - name: create dir webdev
    file: path=/webdev state=directory mode=2775 group=webdev setype=httpd_sys_content_t
  - name: link webdev dir
    file: src=/webdev dest=/var/www/html/webdev state=link
  - name: index content
    file: content="Devops" group=webdev dest=/webdev/index.html state=touch  setype=httpd_sys_content_t

# vim /home/greg/ansible/hwreport.yml
---
- name: modify hwreport
 hosts: all
 tasks:
   - name: get hwreport file to /root/hwreport.txt
     get_url:
       url: http://classroom.example.com/content/hwreport.empty
       dest: /root/hwreport.txt
   - name: inventory hostname
     lineinfile:
       path: /root/hwreport.txt
       regexp: "^inventory host name:"
       line: "inventory host name: {{ ansible_hostname }}"

   - name: total memory
     lineinfile:
       path: /root/hwreport.txt
       regexp: "^total"
       line: "total memory (MB): {{ ansible_memtotal_mb }}"

   - name: BIOS version
     lineinfile:
       path: /root/hwreport.txt
       regexp: "^BIOS version:"
       line: "BIOS version: {{ ansible_bios_version }}"

   - name: vda size is defined 
     lineinfile:
       path: /root/hwreport.txt
       regexp: "^device vda size:"
       line: "device vda size: {{ ansible_devices.vda.size }}"
     when: ansible_devices.vda is defined

   - name: vda size is not  defined 
     lineinfile:
       path: /root/hwreport.txt
       regexp: "^device vda size:"
       line: "device vda size: None"
     when: ansible_devices.vda is not defined

   - name: vdb size is defined 
     lineinfile:
       path: /root/hwreport.txt
       regexp: "^device vdb size:"
       line: "device vdb size: {{ ansible_devices.vdb.size }}"
     when: ansible_devices.vdb is defined

   - name: vdb size is not  defined 
     lineinfile:
       path: /root/hwreport.txt
       regexp: "^device vdb size:"
       line: "device vdb size: None"
     when: ansible_devices.vdb is not defined

# vim /home/greg/ansible/locker.yml
---
pw_developer: Imadev
pw_manager: Imamg
# echo whenyouwishuponastar >/home/greg/ansible/secret.txt
# ansible-vault encrypt locker.yml --vault-password-file=secret.txt

# wget http://materials/user_list.yml
# cat user_list.yml 
---
users:
- name: node1
job: developer
- name: node2
job: developer
- name: node3
job: manager
# vim user.yaml
---
- name: create usres
 hosts: dev,test,prod
 vars_files:
   - locker.yml
   - user_list.yml
 tasks:
 - name: create group opsmgr
   group:
     name: opsmgr
     state: present
   when: ansible_hostname in groups["prod"]
 - name: create group devops
   group:
     name: devops
     state: present
   when: ansible_hostname in groups["dev"] or ansible_hostname in groups["test"]

 - name: creat user for job developer
   user:
     name: "{{ item.name }}"
     groups: devops
     append: yes 
     password: "{{ pw_developer | password_hash('sha512') }}"
   loop: "{{ users }}" 
   when: (ansible_hostname in groups["dev"] or ansible_hostname in groups["test"]) and item.job =="developer"）

 - name: create user for job manager
   user:
     name: "{{ item.name }}"
     groups: opsmgr
     append: yes
     password: "{{ pw_manager | password_hash('sha512') }}"
   loop: "{{ users }}"
   when: ansible_hostname in groups["prod"] and item.job == "manager"

# wget http://materials/salaries.yml
# ansible-vault rekey salaries.yml
Vault password: insecure8sure
New Vault password: bbs2you952
Confirm New Vault password: bbs2you952