1 准备工作

1.1 服务器配置

主机：192.168.36.128

Node1：192.168.36.129

Node2：192.168.36.130

1.2 关闭防火墙，关闭Selinux（三台服务器）

[root@localhost ~]# systemctl stop firewalld

[root@localhost ~]# systemctl disable firewalld

[root@localhost ~]# setenforce 0

[root@localhost ~]# vim /etc/selinux/config

修改SELINUX=disabled

1.3 同步时间（三台服务器）

安装ntpdata

[root@node2 ~]#yum install -y ntpdate

同步时间

[root@node2 ~]# ntpdate http://ntp1.aliyun.com

[root@node2 ~]# cp -a /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

cp: overwrite ‘/etc/localtime’? yes

1.4 安装epel源

[root@ansible ~]# yum install -y epel-release

1.5 安装ansible

[root@ansible ~]# yum install -y ansible

查看版本

[root@ansible ~]# ansible –version

1.6 密钥认证（免密登录）

生成密钥

[root@ansible ~]# ssh-keygen

发送密钥给自己

[root@ansible ~]# ssh-copy-id 192.168.36.128

/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

root@192.168.36.128's password:

Number of key(s) added: 1

Now try logging into the machine, with: "ssh '192.168.36.128'"

and check to make sure that only the key(s) you wanted were added.

发送密钥给Node1

[root@ansible ~]# ssh-copy-id 192.168.36.129

The authenticity of host '192.168.36.129 (192.168.36.129)' can't be established.

ECDSA key fingerprint is a0:69:e4:de:f6:3e:e4:b5:cf:34:83:27:a2:cb:ea:e2.

Are you sure you want to continue connecting (yes/no)? yes

/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

root@192.168.36.129's password: 输入远程主机密码

Number of key(s) added: 1

Now try logging into the machine, with: "ssh '192.168.36.129'"

and check to make sure that only the key(s) you wanted were added.

发送密钥给Node2

[root@ansible ~]# ssh-copy-id 192.168.36.130

The authenticity of host '192.168.36.130 (192.168.36.130)' can't be established.

ECDSA key fingerprint is 3a:dc:83:32:62:eb:2f:fe:60:46:9c:4d:8c:3f:ef:87.

Are you sure you want to continue connecting (yes/no)? yes

/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

root@192.168.36.130's password: 输入远程主机密码

Number of key(s) added: 1

Now try logging into the machine, with: "ssh '192.168.36.130'"

and check to make sure that only the key(s) you wanted were added.