correction du fichier texte

ajout des fichiers manquants
DS ansible
2021-11-25 15:53:45 +01:00 · 2021-11-25 15:43:47 +01:00 · 2021-11-25 15:31:28 +01:00
4 changed files with 641 additions and 0 deletions
--- a/sio2/ct-ansible/bash_history
+++ b/sio2/ct-ansible/bash_history
@ -0,0 +1,491 @@
+apt install vim curl mc sudo 
+apt autoclean
+apt autoremove
+poweroff
+ip a
+ip l
+ip n
+ip r
+poweroff
+apt install ansible
+ssh-keygen
+cd /etc/ssh
+nano ~/.ssh 
+nano ~/.ssh/config 
+cd
+ssh-copy-id infra
+ssh-copy-id web1
+ssh-copy-id web2
+hostnamectl set-hostname ansible
+nano /etc/hosts
+reboot
+ssh infra uptime
+cd
+cd /home
+mkdir testansible
+cd testansible/
+nano hosts
+ansible all -i hosts -m ping
+ansible web -i hosts -m shell -a uptime
+ansible web -i hosts -m setup | more
+ cd
+cd
+mkdir tpansible
+cd tpansible/
+nano web.yml
+ansible-playbook -i hosts web.yml
+nano web.yml
+ansible-playbook -i hosts web.yml
+nano web.yml
+ansible-playbook -i hosts web.yml
+nano web.yml
+ansible-playbook -i hosts web.yml
+nano web.yml
+ansible-playbook -i hosts web.yml
+nano web.yml
+ansible-playbook -i hosts web.yml
+nano web.yml
+ansible-playbook -i hosts web.yml
+cd
+ls
+cd
+cd tpansible/
+ls
+cd
+cd /home/testansible/
+
+
+cd /home/testansible/
+ls
+cd
+cd tpansible/
+ls
+ansible-playbook -i hosts web.yml
+nano web.yml
+ansible-playbook -i hosts web.yml
+nano web.yml
+ansible-playbook -i hosts web.yml
+nano web.yml
+echo "salut" > index.html
+nano web.yml
+echo "salut" > index.html
+
+cd
+ip a
+cd
+cd /home
+ls
+cd /test
+cd testansible/
+cd
+cd tpansible/
+ls
+nano web.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog.yml
+ansible-playbook -i hosts syslog.yml 
+ansible-playbook -i hosts syslog-cli.yml 
+nano syslog-cli.yml
+nano syslog.yml
+nano syslog.yml
+ansible-playbook -i hosts syslog-cli.yml 
+ansible-playbook -i hosts syslog.yml 
+nano syslog.yml
+ansible-playbook -i hosts syslog.yml 
+nano syslog.yml
+nano syslog-cli.yml
+nano syslog-cli.yml
+ansible-playbook -i hosts syslog.yml 
+ansible-playbook -i hosts syslog.yml 
+nano syslog-cli.yml
+ansible-playbook -i hosts syslog.yml 
+nano syslog-cli.yml
+ansible-playbook -i hosts syslog-cli.yml 
+nano syslog-cli.yml
+cd ..
+poweroff
+cd /home
+ls
+cd testansible/
+ls
+ls
+cd
+ls
+cd tpansible/
+ls
+nano web.yml 
+ls
+nano syslog-cli.yml 
+cd
+cd /home
+ls
+mkdir -p dokuw/roles{web,doku}/{tasks,handlers,files,templates}
+ls
+cd dokuw
+ls
+cd ..
+tree dokuw
+cd
+tree dokuw
+three
+cd /home/dokuw/
+nano local.yml
+cd roles
+ls
+ls 
+cd rolesdoku/
+ls
+ls
+cd ..
+cd rolesweb/
+cd tasks/
+ls
+nano main.yml
+cd ..
+cd ..
+cd rolesdoku/
+ls
+cd tasks/
+ls
+nano main.yml
+cd
+ls
+cd tpansible/
+ls
+nano hosts 
+cd
+ls
+nano hosts 
+ls
+cd tpansible/
+ls
+nano hosts 
+ls
+cd
+ls
+cd /home/
+ls
+cd dokuw/
+cd rolesweb/tasks/
+ls
+nano main.yml
+cd
+cd /etc/ssh
+ls
+nano ssh_config
+nano ssh_config.d
+cd /ssh_config.d
+ls
+cd ssh_config.d/
+ls
+cd ..
+nano sshd_config
+ls
+cd
+nano ~/.ssh/config 
+ls
+cd /home
+ls
+cd dokuw/
+ls
+cd  rolesweb/tasks/
+ansible-playbook -i hosts main.yml 
+nano main.yml 
+ansible-playbook -i hosts main.yml 
+cd
+cd tpansible/
+ls
+nano web.yml 
+cd
+cd /home/
+ls
+cd dokuw/rolesweb/tasks/
+nano main.yml 
+ansible-playbook -i hosts main.yml 
+cd
+ls
+cd tpansible/
+ls
+nano web.yml 
+cd
+cd /home/dokuw/rolesweb/tasks/
+ls
+nano main.yml 
+ansible-playbook -i hosts main.yml 
+cd
+cd tpansible/
+ls
+nano web.yml 
+ansible-playbook -i hosts web.yml 
+nano web.yml 
+cd /home/dokuw/rolesweb/tasks/
+nano main.yml 
+ansible-playbook -i hosts web.yml 
+ansible-playbook -i hosts main.yml 
+nano main.yml 
+ansible-playbook -i hosts main.yml 
+cd ..
+cd ..
+cd rolesdoku/
+ls
+cd tasks
+ls
+nano main.yml 
+ansible-playbook -i hosts main.yml
+nano main.yml 
+cd /home/dokuw/rolesweb/tasks
+nano main.yml 
+cd /home/dokuw/rolesdoku/tasks
+nano main.yml 
+cd /home/dokuw/rolesweb/tasks
+nano main.yml
+ansible-playbook -i hosts main.yml
+
+nano ~/.ssh/config 
+cd
+ls
+cd tpansible/
+ls
+nano hosts 
+cd
+cd tmp
+cd tmp/
+ls
+cd /etc/tmp
+cd
+cd /home/dokuw/rolesweb/tasks
+nano main.yml 
+ansible-playbook -i hosts main.yml
+cd
+cd tpansible/
+nano hosts 
+echo doku > h-doku
+ssh doku
+ssh doku
+echo doku > h-doku
+cd
+ls
+cd tpansible/
+ls
+nano h-doku
+ls
+cd
+cd /home
+ls
+cd dokuw/
+ls
+cd rolesweb/
+cd tasks
+nano main.yml
+ansible-playbook hosts main.yml 
+ansible-playbook -i hosts main.yml 
+nano main.yml 
+cd
+cd /home/
+ls
+nano dokuw/
+cd dokuw/rolesweb/
+cd tasks
+ls
+nano main.yml 
+cd /home/dokuw/rolesdoku/tasks
+nano main.yml 
+cd
+poweroff
+ssh-keygen
+nano /etc/ssh/sshd_config
+echo "PermitRootLogin yes" >>  /etc/ssh/sshd_config
+systemctl restart ssh
+ip a
+ssh-copy-id root@192.168.0.38
+ls
+cd tp
+cd tpansible/
+ls
+rm playb-ds.yml 
+nano user.yml
+rm user.yml 
+nano utilisateur.yml
+nano utilisateur.yml 
+nano .ssh/config 
+ssh-copy-id srv
+nano .ssh/config 
+ls
+cd tpansible/
+ls
+cd
+mkdir ds_ansible
+apt install gitea
+apt install git
+ls
+rm -r ds_ansible/
+cd tpansible/
+ls
+nano hosts
+ls
+nano h-doku 
+ls
+nano syslog-cli.yml 
+nano playb-ds.yml
+ls
+nano hosts
+ip a
+ls
+nano user.yml 
+cd
+nano /etc/resolv.conf 
+ls
+cd tpansible/
+ls
+nano user.yml 
+ls
+ip a
+ansible-playbook -i hosts utilisateur.yml 
+ -vvv
+ansible-playbook -i hosts utilisateur.yml -vvv
+nano /etc/ssh/sshd_config
+ls
+nano utilisateur.yml 
+nano resolv.conf
+ansible-playbook -i hosts utilisateur.yml 
+nano /etc/ssh/sshd_config
+ansible-playbook -i hosts utilisateur.yml 
+|more
+nano /etc/ssh/sshd_config
+nano /etc/ssh/sshd_config
+ansible-playbook -i hosts utilisateur.yml 
+cd
+nano /etc/ssh/sshd_config
+ansible all -i hosts -m ping
+nano .ssh/config 
+nano tpansible/hosts 
+ssh-copy-id srv
+ssh infra uptime
+ssh srv
+reboot
+nano .ssh/config 
+nano /etc/resolv.conf 
+ls
+cd tpansible/
+ls
+mkdir old
+mv index.html h-doku syslog-cli.yml syslog.yml web.yml old/
+ls
+nano resolv.conf 
+ansible-playbook -i hosts utilisateur.yml 
+nano utilisateur.yml 
+ansible-playbook -i hosts utilisateur.yml 
+ls
+mv resolv.conf /root
+ls
+cd
+ls
+cd tpansible/
+nano utilisateur.yml 
+ansible-playbook -i hosts utilisateur.yml 
+cd
+mv resolv.conf tpansible/
+ls
+cd tpansible/
+ls
+nano utilisateur.yml 
+nano utilisateur.yml 
+rm /etc/resolv.conf 
+ansible-playbook  -i hosts utilisateur.yml 
+cd
+cd /etc/
+resolv.conf
+nano resolv.conf
+cd
+apt install ansible ansible-lint
+apt update
+apt upgrade
+apt update
+apt install ansible ansible-lint
+apt-get update
+apt install ansible-lint
+apt install ansible-lint --fix-missing
+reboot
+apt install ansible-lint --fix-missing
+apt update
+apt upgrade
+ip a
+git clone https://gitea.lyc-lecastel.fr/ludovic.diemert/siotp.git
+ls
+cd siotp
+ls
+cd sio2/
+ls
+mkdir ct-ansible
+cp /root/tpansible/utilisateur.yml .
+cp /root/tpansible/hosts .
+ls
+mv hosts utilisateur.yml ct-ansible/
+ls
+cd ct-ansible/
+ls
+git add utilisateur.yml 
+git add hosts 
+git commit
+git config --global user.email "ludovic.diemert@localhost.fr"
+git config --global user.name "ludovic diemert"
+git commit -am "ds ansible"
+git tag v1.1
+git push --tag
+cd
+nano .bash_history 
+cd tpansible/
+ls
+script cr-ansible.txt
+ansible-playbook utilisateur.yml
+ls
+nano cr-ansible.txt 
+cd
+ls
+cd siotp/
+ls
+cd sio2/
+ls
+cd ct-ansible/
+ls
+cp /root/.bash_history .
+ls
+cd
+nano .bash_history 
+cp .bash_history /root/tpansible/
+cd tpansible/
+ls
+ansible-playbook utilisateur.yml
+ls
+nano utilisateur.yml 
+ls
+nano hosts 
+cd
+nano .ssh/config 
+reboot
+ansible-playbook cr-ansible.yml
+ansible-playbook utilisateur.yml 
--- a/sio2/ct-ansible/cr-ansible.txt
+++ b/sio2/ct-ansible/cr-ansible.txt
@ -0,0 +1,110 @@
+Script démarré sur 2021-11-25 15:52:11+01:00 [TERM="linux" TTY="/dev/tty1" COLUMNS="100" LINES="37"]
+[?2004hroot@ansible:~/tpansible# ansible-playbook utilisateur.yml [2Pcr-ansible.yml
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Creboot[Knano .ssh/config cd[Knano hosts ls[Knano utilisateur.yml ls[Kansible-playbook utilisateur.yml
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Cls[Kansible-playbook utilisateur.yml-utilisateur.ymliutilisateur.yml utilisateur.yml[1Putilisateur.yml[1Putilisateur.yml[1Putilisateur.yml-utilisateur.ymliutilisateur.yml utilisateur.yml
+[?2004l
usage: ansible-playbook [-h] [--version] [-v] [-k] [--private-key PRIVATE_KEY_FILE]
+                        [-u REMOTE_USER] [-c CONNECTION] [-T TIMEOUT]
+                        [--ssh-common-args SSH_COMMON_ARGS] [--sftp-extra-args SFTP_EXTRA_ARGS]
+                        [--scp-extra-args SCP_EXTRA_ARGS] [--ssh-extra-args SSH_EXTRA_ARGS]
+                        [--force-handlers] [--flush-cache] [-b] [--become-method BECOME_METHOD]
+                        [--become-user BECOME_USER] [-K] [-t TAGS] [--skip-tags SKIP_TAGS] [-C]
+                        [--syntax-check] [-D] [-i INVENTORY] [--list-hosts] [-l SUBSET]
+                        [-e EXTRA_VARS] [--vault-id VAULT_IDS]
+                        [--ask-vault-password | --vault-password-file VAULT_PASSWORD_FILES]
+                        [-f FORKS] [-M MODULE_PATH] [--list-tasks] [--list-tags] [--step]
+                        [--start-at-task START_AT_TASK]
+                        playbook [playbook ...]
+ansible-playbook: error: the following arguments are required: playbook
+ 
+usage: ansible-playbook [-h] [--version] [-v] [-k] [--private-key PRIVATE_KEY_FILE]
+                        [-u REMOTE_USER] [-c CONNECTION] [-T TIMEOUT]
+                        [--ssh-common-args SSH_COMMON_ARGS] [--sftp-extra-args SFTP_EXTRA_ARGS]
+                        [--scp-extra-args SCP_EXTRA_ARGS] [--ssh-extra-args SSH_EXTRA_ARGS]
+                        [--force-handlers] [--flush-cache] [-b] [--become-method BECOME_METHOD]
+                        [--become-user BECOME_USER] [-K] [-t TAGS] [--skip-tags SKIP_TAGS] [-C]
+                        [--syntax-check] [-D] [-i INVENTORY] [--list-hosts] [-l SUBSET]
+                        [-e EXTRA_VARS] [--vault-id VAULT_IDS]
+                        [--ask-vault-password | --vault-password-file VAULT_PASSWORD_FILES]
+                        [-f FORKS] [-M MODULE_PATH] [--list-tasks] [--list-tags] [--step]
+                        [--start-at-task START_AT_TASK]
+                        playbook [playbook ...]
+
+Runs Ansible playbooks, executing the defined tasks on the targeted hosts.
+
+positional arguments:
+  playbook              Playbook(s)
+
+optional arguments:
+  --ask-vault-password, --ask-vault-pass
+                        ask for vault password
+  --flush-cache         clear the fact cache for every host in inventory
+  --force-handlers      run handlers even if a task fails
+  --list-hosts          outputs a list of matching hosts; does not execute anything else
+  --list-tags           list all available tags
+  --list-tasks          list all tasks that would be executed
+  --skip-tags SKIP_TAGS
+                        only run plays and tasks whose tags do not match these values
+  --start-at-task START_AT_TASK
+                        start the playbook at the task matching this name
+  --step                one-step-at-a-time: confirm each task before running
+  --syntax-check        perform a syntax check on the playbook, but do not execute it
+  --vault-id VAULT_IDS  the vault identity to use
+  --vault-password-file VAULT_PASSWORD_FILES, --vault-pass-file VAULT_PASSWORD_FILES
+                        vault password file
+  --version             show program's version number, config file location, configured module
+                        search path, module location, executable location and exit
+  -C, --check           don't make any changes; instead, try to predict some of the changes that
+                        may occur
+  -D, --diff            when changing (small) files and templates, show the differences in those
+                        files; works great with --check
+  -M MODULE_PATH, --module-path MODULE_PATH
+                        prepend colon-separated path(s) to module library
+                        (default=~/.ansible/plugins/modules:/usr/share/ansible/plugins/modules)
+  -e EXTRA_VARS, --extra-vars EXTRA_VARS
+                        set additional variables as key=value or YAML/JSON, if filename prepend
+                        with @
+  -f FORKS, --forks FORKS
+                        specify number of parallel processes to use (default=5)
+  -h, --help            show this help message and exit
+  -i INVENTORY, --inventory INVENTORY, --inventory-file INVENTORY
+                        specify inventory host path or comma separated host list. --inventory-file
+                        is deprecated
+  -l SUBSET, --limit SUBSET
+                        further limit selected hosts to an additional pattern
+  -t TAGS, --tags TAGS  only run plays and tasks tagged with these values
+  -v, --verbose         verbose mode (-vvv for more, -vvvv to enable connection debugging)
+
+Connection Options:
+  control as whom and how to connect to hosts
+
+  --private-key PRIVATE_KEY_FILE, --key-file PRIVATE_KEY_FILE
+                        use this file to authenticate the connection
+  --scp-extra-args SCP_EXTRA_ARGS
+                        specify extra arguments to pass to scp only (e.g. -l)
+  --sftp-extra-args SFTP_EXTRA_ARGS
+                        specify extra arguments to pass to sftp only (e.g. -f, -l)
+  --ssh-common-args SSH_COMMON_ARGS
+                        specify common arguments to pass to sftp/scp/ssh (e.g. ProxyCommand)
+  --ssh-extra-args SSH_EXTRA_ARGS
+                        specify extra arguments to pass to ssh only (e.g. -R)
+  -T TIMEOUT, --timeout TIMEOUT
+                        override the connection timeout in seconds (default=10)
+  -c CONNECTION, --connection CONNECTION
+                        connection type to use (default=smart)
+  -k, --ask-pass        ask for connection password
+  -u REMOTE_USER, --user REMOTE_USER
+                        connect as this user (default=None)
+
+Privilege Escalation Options:
+  control how and which user you become as on target hosts
+
+  --become-method BECOME_METHOD
+                        privilege escalation method to use (default=sudo), use `ansible-doc -t
+                        become -l` to list valid choices.
+  --become-user BECOME_USER
+                        run operations as this user (default=root)
+  -K, --ask-become-pass
+                        ask for privilege escalation password
+  -b, --become          run operations with become (does not imply password prompting)
+ [?2004hroot@ansible:~/tpansible# ls
+[?2004l
cr-ansible.txt	hosts  old  resolv.conf  utilisateur.yml
+[?2004hroot@ansible:~/tpansible# nano cr-ansible.txt 
+[?2004l
[?2004h)0[1;37r[m[4l[?7h[39;49m[?25l[?1c[39;49m[m[H[J[35;44H[0;10;7m[ Lecture... ][m[35;39H[0;10;7m[ Lecture de 52 lignes ][m[H[0;10;7m  GNU nano 5.4                               cr-ansible.txt                                         [1;99H[m
[36d[0;10;7m^G[m Aide[15G[0;10;7m^O[m Écrire     [0;10;7m^W[m Chercher   [0;10;7m^K[m Couper     [0;10;7m^T[m Exécuter   [0;10;7m^C[m Emplacement[0;10;7mM-U[m Annuler
[37d[0;10;7m^X[m Quitter    [0;10;7m^R[m Lire fich. [0;10;7m^\[m Remplacer  [0;10;7m^U[m Coller     [0;10;7m^J[m Justifier  [0;10;7m^_[m Aller ligne[0;10;7mM-E[m Refaire
[2dScript démarré sur 2021-11-25 15:52:11+01:00 [TERM="linux" TTY="/dev/tty1" COLUMNS="100" LINES="37"][3;1H^[[m[?2004hroot@ansible:~/tpansible# an
--- a/sio2/ct-ansible/hosts
+++ b/sio2/ct-ansible/hosts
@ -0,0 +1,4 @@
+[user]
+srv
+
+
--- a/sio2/ct-ansible/utilisateur.yml
+++ b/sio2/ct-ansible/utilisateur.yml
@ -0,0 +1,36 @@
+---
+- hosts: srv
+  vars:
+    password: Azerty1+
+  tasks:
+
+    - name: creation de l'utilisateur sioadm
+      user:
+        name: sioadm
+        state: present
+        generate_ssh_key: yes
+        uid: 1200
+        groups: sudo
+        append: yes
+        password: "{{ 'Azerty1+' | password_hash('sha512') }}"
+      
+    - name: desinstallation du paquet wpasupplicant
+      apt:
+         name: wpasupplicant
+         state: absent
+
+    - name: desinstallation du paquet rpcbind
+      apt:
+         name: rpcbind
+         state: absent
+
+    - name: copie du fichier /etc/resolv.conf
+      copy:
+        src: resolv.conf
+        dest: /etc/resolv.conf
+
+    - name: ajout de la ligne PermitRootLogin prohibit-password dans /etc/ssh/sshd_config
+      lineinfile:
+        path: /etc/ssh/sshd_config
+        line: 'PermitRootLogin prohibit-password'
+        create: yes
Author	SHA1	Message	Date
ludovic diemert	3617c1448f	correction du fichier texte	2021-11-25 15:53:45 +01:00
ludovic diemert	f35e953e33	ajout des fichiers manquants	2021-11-25 15:43:47 +01:00
ludovic diemert	b922c7b009	DS ansible	2021-11-25 15:31:28 +01:00