Red Hat Enterprise Linux Automation with Ansible

Procedure 2.5. Instructions

1. Change into the /home/student/playbook-review directory and create a new playbook called internet.yml. Add the necessary entries to start a first play named Enable internet services and specify its intended managed host, serverb.lab.example.com. Add the necessary entry to enable privilege escalation, and one to start a task list.

   1. Add the following entry to the beginning of the /home/student/playbook-review/internet.yml file to begin the YAML format.

      ---

   2. Add the following entry to denote the start of a play named Enable internet services.

      - name: Enable internet services

   3. Add the following entry to indicate that the play applies to the serverb.lab.example.com managed host. Make sure that the beginning of the entry is indented two spaces.

        hosts: serverb.lab.example.com

   4. Add the following entry to enable privilege escalation. Indent the beginning of the entry two spaces.

        become: true

   5. Add the following entry to define the beginning of the tasks list. Indent the beginning of the entry two spaces.

        tasks:

   Hide Solution

2. Add the necessary entries to the /home/student/playbook-review/internet.yml file to define a task that installs the latest versions of the firewalld, httpd, mariadb-server, php, and php-mysqlnd packages. Indent the beginning of the entry four spaces.

       - name: Latest version of all required packages installed
         ansible.builtin.dnf:
           name:
             - firewalld
             - httpd
             - mariadb-server
             - php
             - php-mysqlnd
           state: latest

   Hide Solution

3. Add the necessary entries to the /home/student/playbook-review/internet.yml file to define the firewall configuration tasks. They should ensure that the firewalld service is enabled and running, and that access is allowed to the http service. Indent the beginning of these entries four spaces.

       - name: firewalld enabled and running
         ansible.builtin.service:
           name: firewalld
           enabled: true
           state: started
   
       - name: firewalld permits http service
         ansible.posix.firewalld:
           service: http
           permanent: true
           state: enabled
           immediate: yes

   Hide Solution

4. Add the necessary entries to ensure the httpd and mariadb services are enabled and running. Indent the beginning of these entries four spaces.

       - name: httpd enabled and running
         ansible.builtin.service:
           name: httpd
           enabled: true
           state: started
   
       - name: mariadb enabled and running
         ansible.builtin.service:
           name: mariadb
           enabled: true
           state: started

   Hide Solution

5. Add the necessary entry that uses the ansible.builtin.copy module to copy the /home/student/playbook-review/index.php file to the /var/www/html/ directory on the managed host. Ensure the file mode is set to 0644. Indent the beginning of these entries four spaces.

       - name: Test php page is installed
         ansible.builtin.copy:
           src: index.php
           dest: /var/www/html/index.php
           mode: 0644

   Hide Solution

6. Define another play in the /home/student/playbook-review/internet.yml file for a task to be performed on the control node. This play tests access to the web server that should be running on the serverb.lab.example.com managed host. This play does not require privilege escalation, and runs on the workstation.lab.example.com managed host.

   1. Add the following entry to denote the start of a second play named Test internet web server.

      - name: Test internet web server

   2. Add the following entry to indicate that the play applies to the workstation managed host. Indent the beginning of the entry two spaces.

        hosts: workstation

   3. Add the following entry after the hosts keyword to disable privilege escalation for the second play. Indent the beginning of the entry two spaces.

        become: false

   4. Add the following entry to the /home/student/playbook-review/internet.yml file to define the beginning of the tasks list. Indent the beginning of the entry two spaces.

        tasks:

   Hide Solution

7. Add the necessary entry that tests the web service running on serverb from the control node using the ansible.builtin.uri module. Look for a return status code of 200. Indent the beginning of the entry four spaces.

       - name: Connect to internet web server
         ansible.builtin.uri:
           url: http://serverb.lab.example.com
           status_code: 200

   Hide Solution

8. Validate the syntax of the internet.yml playbook.

   [student@workstation playbook-review]$ ansible-navigator run \
   > -m stdout internet.yml --syntax-check
   playbook: /home/student/playbook-review/internet.yml

   Hide Solution

9. Use the ansible-navigator run command to run the playbook. Read through the generated output to ensure that all tasks completed successfully.

   [student@workstation playbook-review]$ ansible-navigator run \
   > -m stdout internet.yml
   PLAY [Enable internet services] ************************************************
   
   TASK [Gathering Facts] *********************************************************
   ok: [serverb.lab.example.com]
   
   TASK [Latest version of all required packages installed] ***********************
   changed: [serverb.lab.example.com]
   
   TASK [firewalld enabled and running] *******************************************
   ok: [serverb.lab.example.com]
   
   TASK [firewalld permits http service] ******************************************
   changed: [serverb.lab.example.com]
   
   TASK [httpd enabled and running] ***********************************************
   changed: [serverb.lab.example.com]
   
   TASK [mariadb enabled and running] *********************************************
   changed: [serverb.lab.example.com]
   
   TASK [Test php page is installed] *************************************************
   changed: [serverb.lab.example.com]
   
   PLAY [Test internet web server] ************************************************
   
   TASK [Gathering Facts] *********************************************************
   ok: [workstation]
   
   TASK [Connect to internet web server] ******************************************
   ok: [workstation]
   
   PLAY RECAP *********************************************************************
   serverb.lab.example.com    : ok=7    changed=5    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
   workstation                : ok=2    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

   Hide Solution