6.3. 使用 Ansible 在 IdM 中配置自动挂载位置、映射和密钥

流程

1. 在 Ansible 控制节点上，导航到 ~/MyPlaybooks/ 目录：

   $ cd ~/MyPlaybooks/

2. 复制位于 /usr/share/doc/ansible-freeipa/playbooks/automount/ 目录中的 automount-location-present.yml Ansible playbook 文件：

   $ cp /usr/share/doc/ansible-freeipa/playbooks/automount/automount-location-present.yml automount-location-map-and-key-present.yml

3. 打开 automount-location-map-and-key-present.yml 文件进行编辑。

4. 通过在 ipaautomountlocation 任务部分设置以下变量来调整文件：

   • 将 ipaadmin_password 变量设为 IdM admin 的密码。
   • 将 name 变量设为 raleigh。

   • 确保 state 变量设置为 present。

     这是当前示例修改的 Ansible playbook 文件：

   ---
   - name: Automount location present example
     hosts: ipaserver
     vars_files:
     - /home/user_name/MyPlaybooks/secret.yml
     tasks:
     - name: Ensure automount location is present
       ipaautomountlocation:
         ipaadmin_password: "{{ ipaadmin_password }}"
         name: raleigh
         state: present

5. 继续编辑 automount-location-map-and-key-present.yml 文件：

   1. 在 tasks 部分中，添加一个任务来确保存在一个自动挂载映射：

      [...]
        vars_files:
        - /home/user_name/MyPlaybooks/secret.yml
        tasks:
      [...]
        - name: ensure map named auto.devel in location raleigh is created
          ipaautomountmap:
            ipaadmin_password: "{{ ipaadmin_password }}"
            name: auto.devel
            location: raleigh
            state: present

   2. 添加另一个任务，来将挂载点和 NFS 服务器信息添加到映射中：

      [...]
        vars_files:
        - /home/user_name/MyPlaybooks/secret.yml
        tasks:
      [...]
        - name: ensure automount key /devel/project is present
          ipaautomountkey:
            ipaadmin_password: "{{ ipaadmin_password }}"
            location: raleigh
            mapname: auto.devel
            key: /devel/project
            info: nfs-server.idm.example.com:/exports/project
            state: present

   3. 添加另一个任务来确保 auto.devel 连接到 auto.master ：

      [...]
        vars_files:
        - /home/user_name/MyPlaybooks/secret.yml
        tasks:
      [...]
      - name: Ensure auto.devel is connected in auto.master:
        ipaautomountkey:
          ipaadmin_password: "{{ ipaadmin_password }}"
          location: raleigh
          mapname: auto.map
          key: /devel
          info: auto.devel
          state: present

6. 保存该文件。

7. 运行 Ansible playbook ，并指定 playbook 和清单文件：

   $ ansible-playbook --vault-password-file=password_file -v -i inventory automount-location-map-and-key-present.yml