如何在 CentOS 7 上安装 Ansible AWX如何在 CentOS 7 上安装 Ansible AWX如何在 CentOS 7 上安装 Ansible AWX如何在 CentOS 7 上安装 Ansible AWX
  • 文章
  • 正则表达式
    • 工具
  • 登录
找到的结果: {phrase} (显示: {results_count} 共: {results_count_total})
显示: {results_count} 共: {results_count_total}

加载更多搜索结果...

搜索范围
模糊匹配
搜索标题
搜索内容
发表 admin at 2025年2月28日
类别
  • 未分类
标签

如何在 CentOS 7 上安装 Ansible AWX

本教程适用于这些操作系统版本

  • 中央操作系统 8
  • 中央操作系统 7

在此页

  1. AWX 服务器的最低系统要求
  2. 安装 Ansible AWX
  3. 配置 Nginx
  4. 从 AWX 服务器配置无密码登录
  5. 参考资料

在上一个教程中，我向您展示了如何通过 docker 部署 Ansible AWX。与此同时，我发现了两个为 AWX 构建 rpm 包的项目。因此，在本教程中，我将向您展示如何在 CentOS 7 上从 RPM 文件安装 Ansible AWX。Ansible AWX 是 Ansible Tower 软件的开源版本。

我将使用 3 台服务器，CentOS 7 最小安装和 SELinux 处于宽容模式。

  • 192.168.1.25 AWX 服务器
  • 192.168.1.21 客户端1
  • 192.168.1.22 客户端 2

AWX 服务器的最低系统要求

  • 至少 4GB 内存
  • 至少 2 个 CPU 核心
  • 至少 20GB 的空间
  • 运行 Docker、Openshift 或 Kubernetes

检查 SELinux 配置。

[ ~]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28
[ ~]#

添加主机条目

/etc/hosts
[ ~]# cat /etc/hosts
192.168.1.25    awx.sunil.cc awx
192.168.1.21    client1.sunil.cc client1
192.168.1.22    client2.sunil.cc client2
[ ~]#

添加防火墙规则

[ ~]# systemctl enable firewalld
Created symlink from /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service to /usr/lib/systemd/system/firewalld.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/firewalld.service to /usr/lib/systemd/system/firewalld.service.
[ ~]# systemctl start firewalld
[ ~]# firewall-cmd --add-service=http --permanent;firewall-cmd --add-service=https --permanent
success
success
[ ~]# systemctl restart firewalld
[ ~]#

启用 CentOS EPEL 存储库。

[ ~]# yum install -y epel-release

我们需要 postgresql 9.6 来安装 AWX。

启用 postgreSQL 存储库。

[ ~]# yum install -y https://download.postgresql.org/pub/repos/yum/9.6/redhat/rhel-7-x86_64/pgdg-centos96-9.6-3.noarch.rpm

安装 PostgreSQL。

[ ~]# yum install postgresql96-server -y

安装其他必要的 rpm。

[ ~]# yum install -y rabbitmq-server wget memcached nginx ansible

安装 Ansible AWX

添加 AWX 存储库。

[ ~]# wget -O /etc/yum.repos.d/awx-rpm.repo https://copr.fedorainfracloud.org/coprs/mrmeee/awx/repo/epel-7/mrmeee-awx-epel-7.repo

安装 rpm

[ ~]# yum install -y awx

初始化数据库

[ ~]# /usr/pgsql-9.6/bin/postgresql96-setup initdb
Initializing database ... OK

[ ~]#

启动 Rabbitmq 服务

[ ~]# systemctl start rabbitmq-server
[ ~]# systemctl enable rabbitmq-server
Created symlink from /etc/systemd/system/multi-user.target.wants/rabbitmq-server.service to /usr/lib/systemd/system/rabbitmq-server.service.
[ ~]#

启动 PostgreSQL 服务

[ ~]# systemctl enable postgresql-9.6
Created symlink from /etc/systemd/system/multi-user.target.wants/postgresql-9.6.service to /usr/lib/systemd/system/postgresql-9.6.service.
[ ~]# systemctl start postgresql-9.6

启动 Memcached 服务

[ ~]# systemctl enable memcached
Created symlink from /etc/systemd/system/multi-user.target.wants/memcached.service to /usr/lib/systemd/system/memcached.service.
[ ~]# systemctl start memcached

创建 Postgres 用户

[ ~]# sudo -u postgres createuser -S awx
could not change directory to "/root": Permission denied
[ ~]#

创建数据库

[ ~]# sudo -u postgres createdb -O awx awx
could not change directory to "/root": Permission denied
[ ~]#

将数据导入数据库

[ ~]# sudo -u awx /opt/awx/bin/awx-manage migrate

初始化 AWX 配置

[', 'password')" | sudo -u awx /opt/awx/bin/awx-manage shell
[ ~]# sudo -u awx /opt/awx/bin/awx-manage create_preload_data
Default organization added.
Demo Credential, Inventory, and Job Template added.
[ ~]# sudo -u awx /opt/awx/bin/awx-manage provision_instance --hostname=$(hostname)
Successfully registered instance awx.sunil.cc
(changed: True)
[ ~]# sudo -u awx /opt/awx/bin/awx-manage register_queue --queuename=tower --hostnames=$(hostname)
Creating instance group tower
Added instance awx.sunil.cc to tower
(changed: True)
[ ~]#

配置 Nginx

备份 nginx.conf

[ ~]# cd /etc/nginx/
[ nginx]# pwd
/etc/nginx
[ nginx]# cp nginx.conf nginx.conf.bkp

替换 nginx conf 文件

[ nginx]# wget -O /etc/nginx/nginx.conf https://raw.githubusercontent.com/sunilsankar/awx-build/master/nginx.conf

启用并启动 nginx 服务

[ ~]# systemctl start nginx
[ ~]# systemctl enable nginx

启动 awx 服务

[ ~]# systemctl start awx-cbreceiver
[ ~]# systemctl start awx-celery-beat
[ ~]# systemctl start awx-celery-worker
[ ~]# systemctl start awx-channels-worker
[ ~]# systemctl start awx-daphne
[ ~]# systemctl start awx-web

确保服务在重启期间启动

[ ~]# systemctl enable awx-cbreceiver
Created symlink from /etc/systemd/system/multi-user.target.wants/awx-cbreceiver.service to /usr/lib/systemd/system/awx-cbreceiver.service.
[ ~]# systemctl enable awx-celery-beat
Created symlink from /etc/systemd/system/multi-user.target.wants/awx-celery-beat.service to /usr/lib/systemd/system/awx-celery-beat.service.
[ ~]# systemctl enable awx-celery-worker
Created symlink from /etc/systemd/system/multi-user.target.wants/awx-celery-worker.service to /usr/lib/systemd/system/awx-celery-worker.service.
[ ~]# systemctl enable awx-channels-worker
Created symlink from /etc/systemd/system/multi-user.target.wants/awx-channels-worker.service to /usr/lib/systemd/system/awx-channels-worker.service.
[ ~]# systemctl enable awx-daphne
Created symlink from /etc/systemd/system/multi-user.target.wants/awx-daphne.service to /usr/lib/systemd/system/awx-daphne.service.
[ ~]# systemctl enable awx-web
Created symlink from /etc/systemd/system/multi-user.target.wants/awx-web.service to /usr/lib/systemd/system/awx-web.service.
[ ~]#

从 AWX 服务器配置无密码登录

在所有 3 台主机上创建用户。

在本教程中，我将在所有 3 台服务器上创建一个用户 ansible。

[ ~]# useradd ansible
[ ~]# useradd ansible
[ ~]# useradd ansible

在 awx 服务器中生成 ssh 密钥

[ nginx]# su - ansible
[ ~]$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/ansible/.ssh/id_rsa):
Created directory '/home/ansible/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/ansible/.ssh/id_rsa.
Your public key has been saved in /home/ansible/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:RW/dhTsxcyGicleRI0LpLm+LyhAVinm0xktapodc8gY 
The key's randomart image is:
+---[RSA 2048]----+
|   . .  ..o. +ooo|
|  = o .  +.oo+*.o|
| E @ . ..oo.+ o*.|
|. # o   oo..  o  |
| = *    S      . |
|  o .  . .       |
|   .    o        |
|    o   .o       |
|     o.....      |
+----[SHA256]-----+
[ ~]$

在所有 3 个服务器上添加 sudoers 条目作为文件的最后一个条目

[ nginx]# visudo
ansible ALL=(ALL) NOPASSWD: ALL

将 id_rsa.pub 的内容复制到所有 3 个服务器上的 authorized_keys

[ .ssh]$ cat id_rsa.pub
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDStB8JGsVsSLppwYWdnEPLE4xwFqRDn7xE/d3hjBQ6A0JGm1t+GtHB3GPIEjANFTnxQwHpR+cRttbL3mlQvpIYqCZOMZds9XA7VI5qgs0aSGUU8cNYKjmmrMpJa9sB4WVtj3M4u2fEXt9FKKCtjMMpOfiQxIkEhYZ+2GoAX5sHXan7TPcgwb5r7WW6j43aaPc6g9XWN63nonQz6KeMSFZ/y0o2HJMh1FEkktZw6A1HVfn+JNWoQb1glyqGjO1ync+Sok8yXpqakEEWpXNQSQYs4eBEwfkKql5EuolQMIbF9VYhpEcR9LfbMvYdq/RPKWN3mmRMWfPZ2dTZl515XBdV 
[ .ssh]$
[ .ssh]$ cat authorized_keys
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDStB8JGsVsSLppwYWdnEPLE4xwFqRDn7xE/d3hjBQ6A0JGm1t+GtHB3GPIEjANFTnxQwHpR+cRttbL3mlQvpIYqCZOMZds9XA7VI5qgs0aSGUU8cNYKjmmrMpJa9sB4WVtj3M4u2fEXt9FKKCtjMMpOfiQxIkEhYZ+2GoAX5sHXan7TPcgwb5r7WW6j43aaPc6g9XWN63nonQz6KeMSFZ/y0o2HJMh1FEkktZw6A1HVfn+JNWoQb1glyqGjO1ync+Sok8yXpqakEEWpXNQSQYs4eBEwfkKql5EuolQMIbF9VYhpEcR9LfbMvYdq/RPKWN3mmRMWfPZ2dTZl515XBdV 
[ .ssh]$ chmod 600 authorized_keys

客户1

[ ~]# su - ansible
[ ~]$ mkdir .ssh
[ ~]$ chmod 700 .ssh
[ ~]$ cat .ssh/authorized_keys
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDStB8JGsVsSLppwYWdnEPLE4xwFqRDn7xE/d3hjBQ6A0JGm1t+GtHB3GPIEjANFTnxQwHpR+cRttbL3mlQvpIYqCZOMZds9XA7VI5qgs0aSGUU8cNYKjmmrMpJa9sB4WVtj3M4u2fEXt9FKKCtjMMpOfiQxIkEhYZ+2GoAX5sHXan7TPcgwb5r7WW6j43aaPc6g9XWN63nonQz6KeMSFZ/y0o2HJMh1FEkktZw6A1HVfn+JNWoQb1glyqGjO1ync+Sok8yXpqakEEWpXNQSQYs4eBEwfkKql5EuolQMIbF9VYhpEcR9LfbMvYdq/RPKWN3mmRMWfPZ2dTZl515XBdV 
[ ~]$ chmod 600 .ssh/authorized_keys

客户2

[ ~]# su - ansible
[ ~]$ mkdir .ssh
[ ~]$ chmod 700 .ssh
[ ~]$ cat .ssh/authorized_keys
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDStB8JGsVsSLppwYWdnEPLE4xwFqRDn7xE/d3hjBQ6A0JGm1t+GtHB3GPIEjANFTnxQwHpR+cRttbL3mlQvpIYqCZOMZds9XA7VI5qgs0aSGUU8cNYKjmmrMpJa9sB4WVtj3M4u2fEXt9FKKCtjMMpOfiQxIkEhYZ+2GoAX5sHXan7TPcgwb5r7WW6j43aaPc6g9XWN63nonQz6KeMSFZ/y0o2HJMh1FEkktZw6A1HVfn+JNWoQb1glyqGjO1ync+Sok8yXpqakEEWpXNQSQYs4eBEwfkKql5EuolQMIbF9VYhpEcR9LfbMvYdq/RPKWN3mmRMWfPZ2dTZl515XBdV 
[ ~]$ chmod 600 .ssh/authorized_keys

检查来自 AWX 服务器的无密码登录。

[ ~]$ ssh client1
Last login: Sun Mar 11 13:14:06 2018 from 192.168.1.25
[ ~]$ exit
logout
Connection to client1 closed.
[ ~]$ ssh client2
Last login: Sun Mar 11 12:50:14 2018 from 192.168.1.25
[ ~]$

验证登录：

登录详细信息是：

用户名：\admin\
密码：\password\

在下一个教程中将展示如何添加剧本和运行作业。

参考

  • https://github.com/MrMEEE/awx-build
  • https://github.com/subuk/awx-rpm

©2015-2025 艾丽卡 support@alaica.com