# 2. 实施步骤
# 步骤1：部署Ansible
# 步骤2：配置Ansible主机清单
# 步骤3：创建Ansible Playbook
# 步骤4：执行Ansible Playbook
# 步骤5：验证自动化效果

# 3. 应用效果
# 提高了运维效率
# 减少了人为错误
# 提高了系统的可靠性

# 部署Ansible
dnf install -y ansible

# 配置Ansible主机清单
cat > /etc/ansible/hosts << 'EOF' [web] web1 ansible_host=192.168.1.101 web2 ansible_host=192.168.1.102 [db] db1 ansible_host=192.168.1.201 [all:vars] ansible_user=root ansible_ssh_pass=password EOF # 创建Ansible Playbook mkdir -p /etc/ansible/playbooks # Web服务器配置Playbook cat > /etc/ansible/playbooks/web.yml << 'EOF' --- - name: Configure web servers hosts: web become: true tasks: - name: Install httpd dnf: name: httpd state: present - name: Start httpd service service: name: httpd state: started enabled: yes - name: Create index.html copy: content: "

Hello from {{ inventory_hostname }}

”
dest: /var/www/html/index.html

– name: Configure firewall
firewalld:
service: http
state: enabled
permanent: yes
immediate: yes
EOF

# 数据库服务器配置Playbook
cat > /etc/ansible/playbooks/db.yml << 'EOF' --- - name: Configure database servers hosts: db become: true tasks: - name: Install mysql-server dnf: name: mysql-server state: present - name: Start mysql service service: name: mysqld state: started enabled: yes - name: Create database mysql_db: name: fgedudb state: present - name: Create user mysql_user: name: fgedu password: password priv: 'fgedudb.*:ALL' state: present - name: Configure firewall firewalld: service: mysql state: enabled permanent: yes immediate: yes EOF # 执行Ansible Playbook ansible-playbook /etc/ansible/playbooks/web.yml ansible-playbook /etc/ansible/playbooks/db.yml # 验证自动化效果 curl http://192.168.1.101 curl http://192.168.1.102 mysql -h 192.168.1.201 -u fgedu -ppassword -e "SHOW DATABASES;"

# 2. 实施步骤
# 步骤1：安装Terraform
# 步骤2：配置AWS credentials
# 步骤3：创建Terraform配置文件
# 步骤4：初始化Terraform
# 步骤5：部署基础设施
# 步骤6：验证基础设施

# 3. 应用效果
# 提高了基础设施的可管理性
# 减少了人为错误
# 提高了基础设施的可重复性

# 安装Terraform
wget https://releases.hashicorp.com/terraform/1.5.0/terraform_1.5.0_linux_amd64.zip
unzip terraform_1.5.0_linux_amd64.zip
mv terraform /usr/local/bin/

# 配置AWS credentials
cat > ~/.aws/credentials << 'EOF' [default] aws_access_key_id = YOUR_ACCESS_KEY aws_secret_access_key = YOUR_SECRET_KEY EOF # 创建Terraform配置文件 mkdir -p /opt/terraform/aws cd /opt/terraform/aws cat > main.tf << 'EOF' provider "aws" { region = "us-east-1" } resource "aws_vpc" "fgedu-vpc" { cidr_block = "10.0.0.0/16" tags = { Name = "fgedu-vpc" } } resource "aws_subnet" "fgedu-subnet" { vpc_id = aws_vpc.fgedu-vpc.id cidr_block = "10.0.1.0/24" tags = { Name = "fgedu-subnet" } } resource "aws_internet_gateway" "fgedu-igw" { vpc_id = aws_vpc.fgedu-vpc.id tags = { Name = "fgedu-igw" } } resource "aws_route_table" "fgedu-rt" { vpc_id = aws_vpc.fgedu-vpc.id route { cidr_block = "0.0.0.0/0" gateway_id = aws_internet_gateway.fgedu-igw.id } tags = { Name = "fgedu-rt" } } resource "aws_route_table_association" "fgedu-rta" { subnet_id = aws_subnet.fgedu-subnet.id route_table_id = aws_route_table.fgedu-rt.id } resource "aws_security_group" "fgedu-sg" { name = "fgedu-sg" description = "Allow SSH, HTTP, and MySQL" vpc_id = aws_vpc.fgedu-vpc.id ingress { from_port = 22 to_port = 22 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] } ingress { from_port = 80 to_port = 80 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] } ingress { from_port = 3306 to_port = 3306 protocol = "tcp" cidr_blocks = ["10.0.0.0/16"] } egress { from_port = 0 to_port = 0 protocol = "-1" cidr_blocks = ["0.0.0.0/0"] } tags = { Name = "fgedu-sg" } } resource "aws_instance" "fgedu-web" { ami = "ami-0c55b159cbfafe1f0" instance_type = "t2.micro" subnet_id = aws_subnet.fgedu-subnet.id security_groups = [aws_security_group.fgedu-sg.name] user_data = <<-EOF #!/bin/bash yum update -y yum install -y httpd systemctl start httpd systemctl enable httpd echo "

Hello from Terraform!

” > /var/www/html/index.html
EOF

tags = {
Name = “fgedu-web”
}
}

resource “aws_instance” “fgedu-db” {
ami = “ami-0c55b159cbfafe1f0”
instance_type = “t2.micro”
subnet_id = aws_subnet.fgedu-subnet.id
security_groups = [aws_security_group.fgedu-sg.name]

user_data = <<-EOF #!/bin/bash yum update -y yum install -y mysql-server systemctl start mysqld systemctl enable mysqld mysql -e "CREATE DATABASE fgedudb;" mysql -e "CREATE USER 'fgedu'@'%' IDENTIFIED BY 'password';" mysql -e "GRANT ALL PRIVILEGES ON fgedudb.* TO 'fgedu'@'%';" mysql -e "FLUSH PRIVILEGES;" EOF tags = { Name = "fgedu-db" } } output "web_public_ip" { value = aws_instance.fgedu-web.public_ip } output "db_private_ip" { value = aws_instance.fgedu-db.private_ip } EOF # 初始化Terraform terraform init # 部署基础设施 terraform apply # 验证基础设施 terraform output curl http://$(terraform output -raw web_public_ip)

# 2. 实施步骤
# 步骤1：部署Jenkins
# 步骤2：配置GitHub Webhook
# 步骤3：创建Jenkins Pipeline
# 步骤4：推送代码触发部署
# 步骤5：验证部署效果

# 3. 应用效果
# 提高了部署效率
# 减少了人为错误
# 提高了系统的可靠性

# 部署Jenkins
dnf install -y jenkins

# 启动Jenkins服务
systemctl start jenkins
systemctl enable jenkins

# 安装Jenkins插件
# 浏览器访问 http://localhost:8080
# 安装Git插件、Pipeline插件、Ansible插件

# 配置GitHub Webhook
# 浏览器访问 GitHub 仓库 -> Settings -> Webhooks -> Add webhook
# Payload URL: http://jenkins-server-ip:8080/github-webhook/
# Content type: application/json
# Events: Push

# 创建Jenkins Pipeline
cat > Jenkinsfile << 'EOF' pipeline { agent any stages { stage('Checkout') { steps { git url: 'https://github.com/fgedu/website.git', branch: 'main' } } stage('Build') { steps { sh 'echo "Building website..." # 这里可以添加构建步骤，例如编译、打包等 ' } } stage('Test') { steps { sh 'echo "Testing website..." # 这里可以添加测试步骤 ' } } stage('Deploy') { steps { sh 'ansible-playbook playbooks/deploy.yml' } } stage('Verify') { steps { sh 'curl -s http://web1' sh 'curl -s http://web2' } } } post { success { echo 'Deployment successful!' } failure { echo 'Deployment failed!' } } } EOF # 创建Ansible Playbook mkdir -p playbooks cat > playbooks/deploy.yml << 'EOF' --- - name: Deploy website hosts: web become: true tasks: - name: Copy website files copy: src: ./dist/ dest: /var/www/html/ - name: Restart httpd service service: name: httpd state: restarted EOF # 推送代码触发部署 # git add . # git commit -m "Update website" # git push origin main # 验证部署效果 curl http://web1 curl http://web2