Ansible adalah tool infrastructure as code yang berfungsi sebagai configuration management. Ansible dapat melakukan konfigurasi beberapa server sekaligus di saat yang sama secara otomatis.
Cara Kerja
Host yang terpasang Ansible (Control Node) harus dapat terhubung ke host yang akan dikonfigurasi (Managed Nodes) melalui protokol SSH. Managed Nodes tidak perlu memasang agent atau aplikasi tambahan lainnya, cukup mengaktifkan SSH saja.
Daftar Managed Nodes disimpan di dalam file Inventory dengan menuliskan IP atau hostname.
Perintah konfigurasi (Tasks) merupakan perintah yang spesifik untuk satu perintah saja (satu task = satu perintah) yang didefinisikan di dalam file Playbook. Misal ada update dan install berarti menjadi 2 task. Perintah-perintah yang dapat dijalankan di task disebut sebagai Modules atau Task Plugins, misal ada untuk packaging, network, dan database.
0. Tutorial Environment
Environment yang digunakan pada tutorial ini:
- Control Node: Ubuntu 20.04
- Managed Nodes: 2x VPS Ubuntu 20.04
- Host webserver 178.128.55.175
- Host database 165.22.102.165
- Ansible v2.12.6
1. Memasang SSH Key
Memasang SSH key agar Ansible dapat berkomunikasi dengan Managed Nodes melalui SSH dengan authentication memakai key.
Membuat SSH key di Control Node.
1
|
ssh–keygen
|
Misal key disimpan dengan nama ansible.
1
|
/home/musa/.ssh/ansible
|
Mengirim key ke host webserver dan database, memakai user root.
1
2
|
ssh–copy–id –i ~/.ssh/ansible root@178.128.55.175
ssh–copy–id –i ~/.ssh/ansible root@165.22.102.165
|
Menguji koneksi SSH.
1
2
|
ssh –i ~/.ssh/ansible root@178.128.55.175
ssh –i ~/.ssh/ansible root@165.22.102.165
|
Install Ansible
Install Ansible di Ubuntu.
1
2
3
4
|
sudo apt update
sudo apt install software–properties–common –y
sudo add–apt–repository —yes —update ppa:ansible/ansible
sudo apt install ansible –y
|
Instalasi Ansible di sistem operasi lain baca di docs.ansible.com
Setting Inventory
Ansible menyediakan file Inventory default di /etc/ansible/hosts, tapi bisa juga membuat custom file Inventory sendiri.
Membuat folder untuk menyimpan file project Ansible.
1
2
|
mkdir ansible
cd ansible
|
Membuat file Inventory, misal diberi nama inventory.
1
|
nano inventory
|
Isi inventory.
1
2
3
4
5
6
7
8
9
|
[all:vars]
ansible_user=root
ansible_ssh_private_key_file=/home/musa/.ssh/ansible
[webserver]
178.128.55.175
[database]
165.22.102.165
|
- Mengeset user dan key yang digunakan oleh Ansible.
- Membuat group host [webserver] dan [database]. Jika ada server lain yang ingin dimasukkan, cukup menambahkan IP di group yang diinginkan.
Mengecek inventory dengan menampilkan semua host yang ada.
1
|
ansible–inventory –i inventory —list
|
Hasilnya.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
{
“_meta”: {
“hostvars”: {
“165.22.102.165”: {
“ansible_ssh_private_key_file”: “/home/musa/.ssh/ansible”,
“ansible_user”: “root”
},
“178.128.55.175”: {
“ansible_ssh_private_key_file”: “/home/musa/.ssh/ansible”,
“ansible_user”: “root”
}
}
},
“all”: {
“children”: [
“database”,
“ungrouped”,
“webserver”
]
},
“database”: {
“hosts”: [
“165.22.102.165”
]
},
“webserver”: {
“hosts”: [
“178.128.55.175”
]
}
}
|
Menguji koneksi Ansible ke hosts.
1
|
ansible –i inventory all –m ping
|
Hasilnya.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
178.128.55.175 | SUCCESS => {
“ansible_facts”: {
“discovered_interpreter_python”: “/usr/bin/python3”
},
“changed”: false,
“ping”: “pong”
}
165.22.102.165 | SUCCESS => {
“ansible_facts”: {
“discovered_interpreter_python”: “/usr/bin/python3”
},
“changed”: false,
“ping”: “pong”
}
|
Playbook
Membuat file Playbook, misal diberi nama playbook.yml.
1
|
nano playbook.yml
|
Isi file playbook.yml.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
– hosts: all
tasks:
– name: Update apt cache
apt:
update_cache: yes
– hosts: webserver
tasks:
– name: Install Nginx dan PHP
apt:
pkg:
– nginx
– php–fpm
– php–common
– hosts: database
tasks:
– name: Install MariaDB
apt:
name: [‘mariadb-server’, ‘python3-mysqldb’]
– name: Membuat database db_app
mysql_db:
name: db_app
state: present
– name: Membuat user user_app dan beri hak akses ke db_app
mysql_user:
name: user_app
password: rahasia
priv: ‘db_app.*:ALL’
state: present
– name: Membuat password root MariaDB
mysql_user:
name: root
password: rahasia
state: present
|
Perintah yang akan dijalankan:
- Update apt cache di semua host
- Install Nginx dan PHP di host webserver
- Install MariaDB di host database, buat database, user, dan set password root
Menjalankan playbook.
1
|
ansible–playbook –i inventory playbook.yml
|
Hasilnya.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
PLAY [all] *******************************************************************************************************
TASK [Gathering Facts] *******************************************************************************************
ok: [165.22.102.165]
ok: [178.128.55.175]
TASK [Update apt cache] ******************************************************************************************
changed: [165.22.102.165]
changed: [178.128.55.175]
PLAY [webserver] *************************************************************************************************
TASK [Gathering Facts] *******************************************************************************************
ok: [178.128.55.175]
TASK [Install Nginx dan PHP] *************************************************************************************
changed: [178.128.55.175]
PLAY [database] **************************************************************************************************
TASK [Gathering Facts] *******************************************************************************************
ok: [165.22.102.165]
TASK [Install MariaDB] *******************************************************************************************
changed: [165.22.102.165]
TASK [Membuat database db_app] ***********************************************************************************
changed: [165.22.102.165]
TASK [Membuat user user_app dan beri hak akses ke db_app] ********************************************************
changed: [165.22.102.165]
TASK [Membuat password root MariaDB] *****************************************************************************
changed: [165.22.102.165]
PLAY RECAP *******************************************************************************************************
165.22.102.165 : ok=7 changed=5 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
178.128.55.175 : ok=4 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
|
Pengujian
Pengujian hasil konfigurasi Ansible, mengecek Nginx dan PHP di host webserver dan browse http://IP-Server.
1
2
|
systemctl status nginx
systemctl status php7.4–fpm
|
Mengecek database dan user database di host database.
1
2
3
4
5
6
7
|
mysql –u root –p
show databases;
exit
mysql –u user_app –p
show databases;
exit
|
Selamat mencoba ?