Ansible on SAP Training Guide

[admXX@hpi-vmjump ~]$ ansible --version
ansible 2.5.2
  config file = /etc/ansible/ansible.cfg
  configured module search path = [u'/home/adm20/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python2.7/site-packages/ansible
  executable location = /bin/ansible
  python version = 2.7.5 (default, Feb 20 2018, 09:19:12) [GCC 4.8.5 20150623 (Red Hat 4.8.5-28)]

[admXX@hpi-vmjump ~]$ whoami
admXX
[admXX@hpi-vmjump ~]$ ssh-keygen

[admXX@hpi-vmjump ~]$ ssh-copy-id ansible@hpi-vmXX

[admXX@hpi-vmjump ~]$ ssh ansible@hpi-vmXX

## Allows people in group wheel to run all commands
#%wheel ALL=(ALL)       ALL

## Same thing without a password
%wheel  ALL=(ALL)       NOPASSWD: ALL

[ansible@hpi-vmXX ~]$ sudo cat /etc/shadow

[admXX@hpi-vmjump ~]$ mkdir ansible-files

hpi-vmjump.epc.ext.hpe.com
hpi-vmXX.epc.ext.hpe.com

[admXX@hpi-vmjump ansible-files]$ ansible "hpi-vmXX.epc.ext.hpe.com" -i ~/ansible-files/inventory --list-hosts
  hosts (1):
    hpi-vmXX.epc.ext.hpe.com

[webserver]
hpi-vmXX.epc.ext.hpe.com

[ftpserver]
hpi-vmXX.epc.ext.hpe.com

[management]
hpi-vmjump.epc.ext.hpe.com

[admXX@hpi-vmjump ~]$ ansible webserver -i ~/ansible-files/inventory --list-hosts
[admXX@hpi-vmjump ~]$ ansible webserver,hpi-vmjump.epc.ext.hpe.com -i ~/ansible-files/inventory --list-hosts
[admXX@hpi-vmjump ~]$ ansible '*.epc.ext.hpe.com' -i ~/ansible-files/inventory --list-hosts
[admXX@hpi-vmjump ~]$ ansible all -i ~/ansible-files/inventory --list-hosts

[defaults]
inventory=/home/admXX/ansible-files/inventory

[admXX@hpi-vmjump ansible-files]$ cd ..
[admXX@hpi-vmjump ~]$ ansible all --list-hosts

 [WARNING]: provided hosts list is empty, only localhost is available

 [WARNING]: No hosts matched, nothing to do

  hosts (0):

[admXX@hpi-vmjump ansible-files]$ ansible-doc -l

[admXX@hpi-vmjump ansible-files]$ ansible-doc -l | grep -i user

[admXX@hpi-vmjump ansible-files]$ ansible-doc user

[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m command -a 'id'


hpi-vmXX.epc.ext.hpe.com | SUCCESS | rc=0 >>
uid=789(ansible) gid=10(wheel) groups=10(wheel) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

[admXX@hpi-vmjump ansible-files]$ ansible all -m command -a 'uname -r'

[admXX@hpi-vmjump ansible-files]$ ansible all -m command -a 'uname -r' -o

[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m copy -a 'content="Managed by Ansible\n" dest=/etc/motd'

hpi-vmXX.epc.ext.hpe.com | FAILED! => {
    "changed": false,
    "checksum": "a314620457effe3a1db7e02eacd2b3fe8a8badca",
    "failed": true,
    "msg": "Destination /etc not writable"
}

[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m copy -a 'content="Managed by Ansible\n" dest=/etc/motd' -b

hpi-vmXX.epc.ext.hpe.com | SUCCESS => {
    "changed": true,
    "checksum": "a314620457effe3a1db7e02eacd2b3fe8a8badca",
    "dest": "/etc/motd",
    "gid": 0,
    "group": "root",
    "md5sum": "7a924f6b4cbcbc7414eda7763dc0e43b",
    "mode": "0644",
    "owner": "root",
    "secontext": "system_u:object_r:etc_t:s0",
    "size": 19,
    "src": "/home/ansible/.ansible/tmp/ansible-tmp-1472132609.82-261447806330276/source",
    "state": "file",
    "uid": 0
}

[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m command -a 'cat /etc/motd'

hpi-vmXX.epc.ext.hpe.com | SUCCESS | rc=0 >>
Managed by Ansible

[admXX@hpi-vmjump ansible-files]$ ansible-doc -l | grep -i yum
[admXX@hpi-vmjump ansible-files]$ ansible-doc yum
[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m yum -a 'name=screen state=latest' -b

---
# simple playbook with a single play
- name: a simple play
  hosts: managedhost.example.com
  user: remoteuser
  become: yes
  become_method: sudo
  become_user: root
  # First a name for the task, second entry invokes the service module and supplies its
arguments.
  tasks:
  - name: first task
    service: name=httpd enabled=true
  - name: second task
    service: name=sshd enabled=true

---
- name: Apache server installed
  hosts: hpi-vmXX.epc.ext.hpe.com
  become: yes
  tasks:
  - name: latest Apache version installed
    yum:
      name: httpd
      state: latest

[admXX@hpi-vmjump ansible-files]$ ansible-playbook --syntax-check apache.yml

[admXX@hpi-vmjump ansible-files]$ ansible-playbook apache.yml

[admXX@hpi-vmjump ansible-files]$ ssh ansible@hpi-vmXX.epc.ext.hpe.com rpm -qi httpd

Name        : httpd
Version     : 2.4.6
[...]

[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m command -a 'rpm -qi httpd'

---
- name: Apache server installed
  hosts: hpi-vmXX.epc.ext.hpe.com
  become: yes
  tasks:
  - name: latest Apache version installed
    yum:
      name: httpd
      state: latest
  - name: Apache enabled and running
    service:
      name: httpd
      enabled: true
      state: started

[admXX@hpi-vmjump ansible-files]$ ansible-playbook apache.yml

[admXX@hpi-vmjump ansible-files]$ ansible localhost -m uri -a "url=http://hpi-vmXX.epc.ext.hpe.com/"

<body>
<h1>Apache is running fine</h1>
</body>

---
- name: Apache server installed
  hosts: hpi-vmXX.epc.ext.hpe.com
  become: yes
  tasks:
  - name: latest Apache version installed
    yum:
      name: httpd
      state: latest
  - name: Apache enabled and running
    service:
      name: httpd
      enabled: true
      state: started
  - name: copy index.html
    copy:
      src: ~/ansible-files/index.html
      dest: /var/www/html/

[admXX@hpi-vmjump ansible-files]$ ansible-playbook apache.yml

Here comes a variable {{ variable1 }}

[admXX@hpi-vmjump ansible-files]$ mkdir {host_vars,group_vars}

---
stage: dev

---
stage: prod

<body>
<h1>This is a production webserver, take care!</h1>
</body>

<body>
<h1>This is a development webserver, have fun!</h1>
</body>

---
- name: Copy index.html
  hosts: webserver
  become: yes
  tasks:
  - name: copy index.html
    copy:
      src: ~/ansible-files/{{ stage }}_index.html
      dest: /var/www/html/index.html

[admXX@hpi-vmjump ansible-files]$ ansible-playbook deploy_index_html.yml

[admXX@hpi-vmjump ansible-files]$ curl http://hpi-vmXX.epc.ext.hpe.com

<body>
<h1>This is a development webserver, have fun!</h1>
</body>

[admXX@hpi-vmjump ansible-files]$ curl http://hpi-vmYY.epc.ext.hpe.com

<body>
<h1>This is a production webserver, take care!</h1>
</body>

[admXX@hpi-vmjump ansible-files]$ cat host_vars/hpi-vmYY.epc.ext.hpe.com
---
stage: prod
service: httpd

[admXX@hpi-vmjump ansible-files]$ cat group_vars/webserver
---
stage: dev
service: sshd

[admXX@hpi-vmjump ansible-files]$ cat check_service.yml
---
- name: Check if  service is enabled and started
  hosts: rhel*.epc.ext.hpe.com
  become: yes
  tasks:
  - name: Check service is enabled and started
    service:
      name: "{{ service }}"
      enabled: true
      state: started

[admXX@hpi-vmjump ansible-files]$ ansible-playbook check_service.yml -v

---
- name: Installs a package and prints the result
  hosts: hpi-vmXX.epc.ext.hpe.com
  tasks:
    - name: Install the package
      yum:
        name: httpd
        state: installed
      register: install_result
    - debug: var=install_result

[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m setup | grep distribution

[admXX@hpi-vmjump ansible-files]$ ansible all -m setup -a 'filter=ansible_distribution' -o

---
- name: Output facts within a playbook
  hosts: all
  tasks:
  - name: Prints Ansible facts
    debug:
      msg: The default IPv4 address of {{ ansible_fqdn }} is {{ ansible_default_ipv4.address }}

[admXX@hpi-vmjump ansible-files]$ ansible-playbook facts.yml

PLAY [Output facts within a playbook] ******************************************************************************

TASK [Gathering Facts] ******************************************************************************
ok: [hpi-vmjump.epc.ext.hpe.com]
ok: [hpi-vmXX.epc.ext.hpe.com]

TASK [Prints Ansible facts] ******************************************************************************
ok: [hpi-vmjump.epc.ext.hpe.com] => {
    "msg": "The default IPv4 address of hpi-vmjump.epc.ext.hpe.com is 192.168.25.200"
}
ok: [hpi-vmXX.epc.ext.hpe.com] => {
    "msg": "The default IPv4 address of hpi-vmXX.epc.ext.hpe.com is 192.168.25.XX"
}

PLAY RECAP ******************************************************************************
hpi-vmjump.epc.ext.hpe.com : ok=2    changed=0    unreachable=0    failed=0
hpi-vmXX.epc.ext.hpe.com : ok=2    changed=0    unreachable=0    failed=0

[general]
package = httpd
service = httpd
state = started

---
- name: Install remote facts
  hosts: hpi-vmXX.epc.ext.hpe.com
  vars:
    remote_dir: /etc/ansible/facts.d
    facts_file: custom.fact
  tasks:
    - name: Create the remote directory
      file:
        state: directory
        recurse: yes
        path: "{{ remote_dir }}"
    - name: Install the new facts
      copy:
        src: "{{ facts_file }}"
        dest: "{{ remote_dir }}"

[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m setup -a 'filter=ansible_local'
hpi-vmXX.epc.ext.hpe.com | SUCCESS => {
    "ansible_facts": {},
    "changed": false
}

[admXX@hpi-vmjump ansible-files]$ ansible-playbook setup_facts.yml

[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m setup -a 'filter=ansible_local'
hpi-vmXX.epc.ext.hpe.com | SUCCESS => {
    "ansible_facts": {
        "ansible_local": {
            "custom": {
                "general": {
                    "package": "httpd",
                    "service": "httpd",
                    "state": "started"
                }
            }
        }
    },
    "changed": false
}

---
- name: Install package named by fact and start the service
  hosts: hpi-vmXX.epc.ext.hpe.com
  become: yes
  tasks:
   - name: Install the required package
     yum:
       name: "{{ ansible_local.custom.general.package }}"
       state: latest
   - name: Start the service
     service:
       name: "{{ ansible_local.custom.general.service }}"
       state: "{{ ansible_local.custom.general.state }}"

[admXX@hpi-vmjump ansible-files]$ cp /etc/httpd/conf/httpd.conf .

---
- name: manage httpd.conf
  hosts: webserver
  become: yes
  tasks:
  - name: Copy Apache configuration file
    copy:
      src: httpd.conf
      dest: /etc/httpd/conf/
    notify:
       - restart_apache
  handlers:
    - name: restart_apache
      service:
        name: httpd
        state: restarted

Listen 8080

[admXX@hpi-vmjump ansible-files]$ curl http://hpi-vmXX.epc.ext.hpe.com

curl: (7) Failed connect to hpi-vmXX.epc.ext.hpe.com:80; Connection refused

[admXX@hpi-vmjump ansible-files]$ curl http://hpi-vmXX.epc.ext.hpe.com:8080

<body>
<h1>This is a production webserver, take care!</h1>
</body>

---
- hosts: all
  tasks:
    - block:
      - yum:
          name: httpd
          state: installed
      when: ansible_os_family == 'RedHat'
      become: yes

    - block:
      - apt:
          name: apache2
          state: installed
      when: ansible_os_family == 'Debian'
      become: yes

Welcome to {{ ansible_hostname }}.
{{ ansible_distribution }} {{ ansible_distribution_version}}
deployed on {{ ansible_architecture }} architecture.

---
- name: Fill motd file with host data
  hosts: hpi-vmXX.epc.ext.hpe.com
  become: yes
  tasks:
    - template:
        src: motd-facts.j2
        dest: /etc/motd
        owner: root
        group: root
        mode: 0644

[admXX@hpi-vmjump ansible-files]$ ansible hpi-vmXX.epc.ext.hpe.com -m setup | grep -i fqdn

### {{ ansible_managed }}

### My host name
My non-FQDN hostname is {{ ansible_hostname }}.

### What is the management host
 IP is: {{ hostvars['hpi-vmjump.epc.ext.hpe.com']['ansible_default_ipv4']['address'] }}

### What else is here?
The machines in group webserver are:
{% for host in groups['webserver'] %}
- {{ hostvars[host]['inventory_hostname'] }}

{% if host | match('hpi-vmXX.epc.ext.hpe.com') %}
hpi-vmXX.epc.ext.hpe.com MEM: {{ ansible_memfree_mb }}
{% endif %}
{% endfor %}

We also support external lookups: {{ lookup('dig', 'redhat.com./MX') }}

---
- name: advanced template test
  hosts: all
  tasks:
  - name: template vhost file
    template:
      src: advanced_template.j2
      dest: "{{ ansible_user_dir }}/advanced_template.out"
      owner: "{{ ansible_user_id }}"
      group: "{{ ansible_user_gid }}"
      mode: 0644

tasks:
  - name: Include tasks to install the database server
    include: tasks/db_server.yml

tasks:
  - name: Include the variables from a YAML or JSON file
    include_vars: vars/variables.yml

[admXX@hpi-vmjump ~]$ ansible-galaxy install mk-ansible-roles.saphana-deploy

[admXX@hpi-vmjump ~]$ ansible-galaxy list
- linux-system-roles.kdump, (unknown version)
- linux-system-roles.network, (unknown version)
- linux-system-roles.postfix, (unknown version)
- linux-system-roles.selinux, (unknown version)
- linux-system-roles.timesync, (unknown version)
- rhel-system-roles.kdump, (unknown version)
- rhel-system-roles.network, (unknown version)
- rhel-system-roles.postfix, (unknown version)
- rhel-system-roles.selinux, (unknown version)
- rhel-system-roles.timesync, (unknown version)
- mk-ansible-roles.saphana-deploy, master
- mk-ansible-roles.saphana-preconfigure, master

[admXX@hpi-vmjump ~]$ ansible-galaxy info mk-ansible-roles.saphana-preconfigure
[admXX@hpi-vmjump ~]$ ansible-galaxy info mk-ansible-roles.saphana-deploy

- name: Update Hana Server
  hosts: hpi-vmXX.epc.ext.hpe.com
  become: yes

  vars:
              sid: hxe

    tasks:
              ## update the system
              - name: ensure the the system is updated
                yum: name=* state=latest

              ## stop database
              - name: ensure HANA is stopped
                command: su - "{{ sid + 'adm' }}" -c "HDB stop"

              # Reboot the server now and wait until it is back
              # inspired by https://support.ansible.com/hc/en-us/articles/201958037-Reboot-a-server-and-wait-for-it-to-come-back
              - name: restart machine
                shell: sleep 2 && shutdown -r now "Ansible updates triggered"
                async: 1
                poll: 0
                become: true
                ignore_errors: true

              - name: waiting for server to come back
                local_action: wait_for host={{ inventory_hostname }} port=22 state=started delay=90 sleep=2 timeout=900
                become: false

              ## start database again
              - name: ensure HANA is started
                command: su - "{{ sid + 'adm' }}" -c "HDB start"

[admXX@hpi-vmjump ansible-files]$ ansible-galaxy install mk-ansible-roles.saphana-hsr
- downloading role 'saphana-hsr', owned by mk-ansible-roles
- downloading role from https://github.com/mk-ansible-roles/saphana-hsr/archive/master.tar.gz
- extracting mk-ansible-roles.saphana-hsr to /home/admXX/.ansible/roles/mk-ansible-roles.saphana-hsr

[all:vars]
ansible_ssh_user=ansible

[hana]
hpi-vmXX
hpi-vmYY

- name: Install SAP HANA
  hosts: hana
  become: yes

  vars:
              # SAP Precoonfigure role
              # SAP-Media Check
              install_nfs: infshare.epc.ext.hpe.com:/Install/SAP/HANA
              installroot: /install
              hana_installdir: /install/51052325

              hana_pw_hostagent_ssl: "MyS3cret!"
              id_user_sapadm: "30200"
              id_group_shm: "30220"
              id_group_sapsys: "30200"
              pw_user_sapadm_clear: "MyS3cret!"

  roles:
              - { role: mk-ansible-roles.saphana-preconfigure }
              - { role: mk-ansible-roles.saphana-deploy }
              - { role: mk-ansible-roles.saphana-hsr }

hsr_deploy_type: enable

hsr:
  hxe:
    hana_instance_hostname: hpi-vmXX
    hana_sid: HXE
    hana_instance_number: 90
    hana_pw_system_user_clear: "System123"
    hsr_name: DC1
    hsr_type: PRIMARY
    hsr_configure: yes
    hsr_type_remote_host: hpi-vmYY
    hsr_operation_mode: logreplay
    hsr_replicationmode: sync
    hsr_backup_directory: /hana/shared/HXE/HDB90/backup/data

hsr_deploy_type: register

hsr:
  hxe:
    hana_instance_hostname: hpi-vmYY
    hana_sid: HXE
    hana_instance_number: 90
    hana_pw_system_user_clear: "System123"
    hsr_name: DC2
    hsr_type: SECONDARY
    hsr_configure: yes
    hsr_type_remote_host: hpi-vmXX
    hsr_operation_mode: logreplay
    hsr_replicationmode: sync
    hsr_backup_directory: /hana/shared/HXE/HDB90/backup/data

---
- name: test debug
  hosts: localhost
  gather_facts: yes
  vars:
    - myvar: variable_content

  tasks:
    - name: output myvar
      debug:
        msg: "myvar: {{ myvar }}"
    - name: output myvar only at higher verbosity
      debug:
        msg: "myvar verbosity 2 {{ myvar }}"
        verbosity: 2
    - name: output fact
      debug:
        msg="The free memory for this system is {{ ansible_memfree_mb }}"

[admXX@hpi-vmjump ~]$ ansible-playbook -i localhost, -c local debug.yml

[admXX@hpi-vmjump ~]$ ansible-playbook -i localhost, -c local debug.yml -vv

[admXX@hpi-vmjump ansible-files]$ ansible-playbook play.yml --step

[admXX@hpi-vmjump ansible-files]$ ansible-playbook play.yml --start-at-task="start httpd service"

[admXX@hpi-vmjump ansible-files]$ ansible-playbook play.yml --syntax-check

[admXX@hpi-vmjump ansible-files]$ ANSIBLE_KEEP_REMOTE_FILES=1 ansible-playbook playbook.yml -vvv

[ansible@host1]$ python /home/ansible/.ansible/tmp/ansible-tmp-<id>/command