我有一本將 BASH/Python 復制到遠程客戶端然后以本地用戶身份運行腳本的劇本。安全審計員要求我將此操作保存為 ansible 服務器中的日志。如果 Ansible 在遠程主機中運行腳本，有什么簡單的方法可以記錄歷史記錄嗎？
- name: Test Playbook
hosts: all
gather_facts: false
remote_user: ansible
become: true
tasks:
- name: Copy test.sh file to remote host
ansible.builtin.copy:
src: /tmp/test.sh
dest: /tmp
owner: '{{ inventory_hostname }}'
group: '{{ inventory_hostname }}'
mode: '0755'
- name: Run test script
ansible.builtin.command:
cmd: "/tmp/test.sh"
become_user: '{{ inventory_hostname }}'
我對 Ansible 很陌生，感謝任何幫助！
uj5u.com熱心網友回復：
問：“將操作保存為 ansible 服務器中的日志。”
答：您可以使用community.general.syslogger。例如，給定腳本
shell> cat /tmp/test.sh
#!/bin/sh
printf "$0: [OK] Completed."
playbook 將在遠程主機上復制并運行腳本。最后一個任務會將注冊的結果寫入ansible服務器的日志
- name: Test Playbook
hosts: all
gather_facts: false
tasks:
- name: Copy test.sh file to remote host
ansible.builtin.copy:
src: /tmp/test.sh
dest: /tmp
mode: '0755'
- name: Run test script
ansible.builtin.command:
cmd: /tmp/test.sh
register: result
- name: Send results to log
community.general.syslogger:
msg: "{{ item }} {{ hostvars[item].result }}"
loop: "{{ ansible_play_hosts }}"
delegate_to: localhost
run_once: true
默認優先級資訊寫入Ubuntu的檔案/var/log/syslog
shell> tail -f /var/log/syslog
...
Apr 4 02:37:13 localhost python3[1429581]: ansible-community.general.syslogger Invoked with msg=host01 {'changed': True, 'stdout': '/tmp/test.sh: [OK] Completed.', 'stderr': '', 'rc': 0, 'cmd': ['/tmp/test.sh'], 'start': '2022-04-04 00:37:12.546699', 'end': '2022-04-04 00:37:12.560452', 'delta': '0:00:00.013753', 'msg': '', 'stdout_lines': ['/tmp/test.sh: [OK] Completed.'], 'stderr_lines': [], 'failed': False} ident=ansible_syslogger priority=info facility=daemon log_pid=False
Apr 4 02:37:13 localhost ansible_syslogger: host01 {'changed': True, 'stdout': '/tmp/test.sh: [OK] Completed.', 'stderr': '', 'rc': 0, 'cmd': ['/tmp/test.sh'], 'start': '2022-04-04 00:37:12.546699', 'end': '2022-04-04 00:37:12.560452', 'delta': '0:00:00.013753', 'msg': '', 'stdout_lines': ['/tmp/test.sh: [OK] Completed.'], 'stderr_lines': [], 'failed': False}
Apr 4 02:37:13 localhost python3[1429607]: ansible-community.general.syslogger Invoked with msg=host02 {'changed': True, 'stdout': '/tmp/test.sh: [OK] Completed.', 'stderr': '', 'rc': 0, 'cmd': ['/tmp/test.sh'], 'start': '2022-04-04 00:37:12.392564', 'end': '2022-04-04 00:37:12.409556', 'delta': '0:00:00.016992', 'msg': '', 'stdout_lines': ['/tmp/test.sh: [OK] Completed.'], 'stderr_lines': [], 'failed': False} ident=ansible_syslogger priority=info facility=daemon log_pid=False
Apr 4 02:37:13 localhost ansible_syslogger: host02 {'changed': True, 'stdout': '/tmp/test.sh: [OK] Completed.', 'stderr': '', 'rc': 0, 'cmd': ['/tmp/test.sh'], 'start': '2022-04-04 00:37:12.392564', 'end': '2022-04-04 00:37:12.409556', 'delta': '0:00:00.016992', 'msg': '', 'stdout_lines': ['/tmp/test.sh: [OK] Completed.'], 'stderr_lines': [], 'failed': False}
Apr 4 02:37:13 localhost python3[1429632]: ansible-community.general.syslogger Invoked with msg=host03 {'changed': True, 'stdout': '/tmp/test.sh: [OK] Completed.', 'stderr': '', 'rc': 0, 'cmd': ['/tmp/test.sh'], 'start': '2022-04-04 00:37:12.347653', 'end': '2022-04-04 00:37:12.367547', 'delta': '0:00:00.019894', 'msg': '', 'stdout_lines': ['/tmp/test.sh: [OK] Completed.'], 'stderr_lines': [], 'failed': False} ident=ansible_syslogger priority=info facility=daemon log_pid=False
Apr 4 02:37:13 localhost ansible_syslogger: host03 {'changed': True, 'stdout': '/tmp/test.sh: [OK] Completed.', 'stderr': '', 'rc': 0, 'cmd': ['/tmp/test.sh'], 'start': '2022-04-04 00:37:12.347653', 'end': '2022-04-04 00:37:12.367547', 'delta': '0:00:00.019894', 'msg': '', 'stdout_lines': ['/tmp/test.sh: [OK] Completed.'], 'stderr_lines': [], 'failed': False}
根據您的需要調整引數和格式。
劇本的輸出
PLAY [Test Playbook] ***********************************************
TASK [Copy test.sh file to remote host] ****************************
ok: [host01]
ok: [host03]
ok: [host02]
TASK [Run test script] *********************************************
changed: [host03]
changed: [host02]
changed: [host01]
TASK [Send results to log] *****************************************
changed: [host01 -> localhost] => (item=host01)
changed: [host01 -> localhost] => (item=host02)
changed: [host01 -> localhost] => (item=host03)
問：“是否可以將訊息記錄到自定義檔案中？”
A：當然，您可以自己撰寫日志訊息。例如
- name: Write results to file
ansible.builtin.shell: "echo {{ msg }} >> mylog.ansible"
vars:
msg: >-
{{ '%B %d %H:%M:%S'|strftime }}
{{ item }}
{{ hostvars[item].result.stdout }}
loop: "{{ ansible_play_hosts }}"
delegate_to: localhost
run_once: true
寫入檔案mylog.ansible
shell> tail -f mylog.ansible
April 04 07:13:28 host01 /tmp/test.sh: [OK] Completed.
April 04 07:13:29 host02 /tmp/test.sh: [OK] Completed.
April 04 07:13:29 host03 /tmp/test.sh: [OK] Completed.
uj5u.com熱心網友回復：
修改cmd以在本地輸出到日志檔案：
cmd: "/tmp/test.sh > /tmp/log 2>&1"
轉載請註明出處，本文鏈接：https://www.uj5u.com/net/457885.html