Red Hat Security: Linux in Physical, Virtual, and Cloud

Instructions

1. On the workstation machine, install the ansible-navigator package that provides automation content navigator, to use that machine as your control node.

   1. Install the ansible-navigator package on the workstation machine.

      [student@workstation ~]$ sudo dnf install ansible-navigator
      [sudo] password for student: student
      ...output omitted...
      Is this ok [y/N]: y
      ...output omitted...
      Complete!

   Hide Solution

2. Ensure that the execution environment container image is downloaded for the ansible-navigator tool.

   Note

   You do not need to download the ee-supported-rhel9 execution environment, because it is preloaded in your classroom.

   1. Use the ansible-navigator tool to list the container images.

      [student@workstation ~]$ ansible-navigator images

   2. Press Esc to exit the image list.

        Image                Tag     Execution environment    Created       Size
      0│ee-supported-rhel9   latest  True                     4 months ago  1.63 GB
      
      ^b/PgUp page up ^f/PgDn page down ↑↓ scroll esc back [0-9] goto :help help

   Hide Solution

3. Create the /home/student/ansible-review directory.

   [student@workstation ~]$ mkdir ~/ansible-review

   Hide Solution

4. Navigate to the /home/student/ansible-review directory.

   [student@workstation ~]$ cd ~/ansible-review
   [student@workstation ansible-review]$

   Hide Solution

5. In the /home/student/ansible-review directory, create an Ansible configuration file named ansible.cfg. Use the following values.

   Section	Directive	Value
   defaults	inventory	./inventory
   	remote_user	ansible-labuser
   privilege_escalation	become	true
   	become_method	sudo
   	become_user	root
   	become_ask_pass	false

   [student@workstation ansible-review]$ cat ansible.cfg
   [defaults]
   inventory       = ./inventory
   remote_user     = ansible-labuser
   
   [privilege_escalation]
   become          = true
   become_method   = sudo
   become_user     = root
   become_ask_pass = false

   Hide Solution

6. In the /home/student/ansible-review directory, create the inventory file. Use the following values.

   Group	Host
   prod	servera
   	serverb
   test	workstation
   webserver:children	prod
   	test

   [student@workstation ansible-review]$ cat inventory
   [prod]
   servera
   serverb
   
   [test]
   workstation
   
   [webserver:children]
   prod
   test

   Hide Solution

7. List all the managed hosts that are present in the inventory.

   [student@workstation ansible-review]$ ansible-navigator inventory \
       -m stdout --graph
   @all:
     |--@ungrouped:
     |--@webserver:
     |  |--@prod:
     |  |  |--servera
     |  |  |--serverb
     |  |--@test:
     |  |  |--workstation

   Hide Solution

8. In the /home/student/ansible-review directory, create an Ansible Playbook file named webserver.yml. The playbook acts on all hosts in the prod host group. Create the following tasks:

   • Install the httpd package.

   • Start the firewalld service.

   • Create the index.html file with some content.

   • Use the firewalld Ansible module to enable the http service.

   • Start the httpd service.

     [student@workstation ansible-review]$ cat webserver.yml
     ---
     - name: Start a webserver
       hosts: prod
       tasks:
         - name: Install httpd package
           yum:
             name: httpd
             state: present
     
         - name: Start firewalld service
           service:
             name: firewalld
             state: started
             enabled: true
     
         - name: Copy content
           copy:
             content: "Welcome to RH415 webserver\n"
             dest: /var/www/html/index.html
     
         - name: Add http service to firewalld
           firewalld:
             service: http
             state: enabled
             immediate: true
             permanent: true
     
         - name: Start httpd service
           service:
             name: httpd
             state: started
             enabled: true
     ...

9. Before running your playbook, validate the webserver.yml playbook syntax. Correct any reported errors before continuing.

   [student@workstation ansible-review]$ ansible-navigator run -m stdout \
   	webserver.yml --syntax-check
   playbook: /home/student/ansible-review/webserver.yml

   Hide Solution

10. Run the webserver.yml playbook. Read through the generated output to ensure that all tasks completed successfully.

    [student@workstation ansible-review]$ ansible-navigator run -m stdout \
    	webserver.yml
    PLAY [Start a webserver] *******************************************************
    
    TASK [Gathering Facts] *********************************************************
    ok: [serverb]
    ok: [servera]
    
    TASK [Install httpd package] ***************************************************
    changed: [serverb]
    changed: [servera]
    
    TASK [Start firewalld service] *************************************************
    ok: [serverb]
    ok: [servera]
    
    TASK [Copy content] ************************************************************
    changed: [serverb]
    changed: [servera]
    
    TASK [Add http service to firewalld] *******************************************
    changed: [serverb]
    changed: [servera]
    
    TASK [Start httpd service] *****************************************************
    changed: [serverb]
    changed: [servera]
    
    PLAY RECAP *********************************************************************
    servera   : ok=6    changed=4    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
    serverb   : ok=6    changed=4    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0

    Hide Solution

11. Use the curl command to verify that both servera.lab.example.com and serverb.lab.example.com are configured as HTTPD servers.

    [student@workstation ansible-review]$ curl servera.lab.example.com
    Welcome to RH415 webserver
    [student@workstation ansible-review]$ curl serverb.lab.example.com
    Welcome to RH415 webserver

    Hide Solution