### 使用Ansible自动化部署Zabbix监控系统的流程 #### 准备工作 确保目标机器上已安装并配置好Ansible环境。对于基于Red Hat的企业Linux (RHEL)/CentOS系统，可以通过包管理器Yum来安装Ansible[^2]: ```bash [root@ACA8D5EF ~]# yum install ansible ``` #### 创建主机清单文件 定义要控制的目标服务器列表，在`/etc/ansible/hosts`中添加相应的条目或者创建独立的inventory文件用于指定被管设备的信息。 #### 编写Playbook 编写一个名为`all.yml`的Playbook文件用来描述整个部署过程。此文件包含了多个任务项，这些任务按照顺序执行以完成Zabbix服务端以及客户端代理程序的安装与配置操作[^1]: ```yaml --- - hosts: zabbix_servers become: yes tasks: - name: Install Zabbix repository yum_repository: name: zabbix description: Zabbix Official Repository baseurl: http://repo.zabbix.com/zabbix/4.0/rhel/$releasever/$basearch/ gpgcheck: 1 enabled: 1 - name: Install Zabbix server and web interface packages package: name: - zabbix-server-mysql - name: Configure database settings for Zabbix Server template: src: templates/zabbix_server.conf.j2 dest: /etc/zabbix/zabbix_server.conf - name: Start and enable the Zabbix services service: name: "{{ item }}" state: started enabled: true with_items: - zabbix-server - zabbix-agent - httpd - hosts: monitored_hosts become: yes tasks: - name: Add Zabbix APT or YUM repo on clients as needed based OS type block: - name: For RHEL/CentOS systems add EPEL first then Zabbix repos yum_repository: name: epel-release-latest description: Extra Packages for Enterprise Linux {{ ansible_distribution_major_version }} - $basearch mirrorlist: https://mirrors.fedoraproject.org/metalink?repo=epel-{{ ansible_distribution_major_version }}&arch=$basearch enabled: yes gpgcheck: no when: "'redhat' in ansible_facts['distribution'].lower()" - name: Then proceed to adding actual Zabbix repositories after EPEL is added. yum_repository: name: zabbix description: Zabbix Official Repository baseurl: http://repo.zabbix.com/zabbix/4.0/rhel/{{ ansible_distribution_major_version }}/x86_64/ gpgcheck: 1 enabled: 1 when: "'redhat' in ansible_facts['distribution'].lower()" - name: Ensure required software installed on client nodes package: name: zabbix-agent state: latest - name: Copy configuration file from local path to remote host copy: src: ./files/zabbix_agentd.conf dest: /etc/zabbix/zabbix_agentd.conf owner: root group: root mode: '0644' - name: Restarting Zabbix Agent Service To Apply Changes systemd: name: zabbix-agent state: restarted enabled: yes ``` 上述剧本首先处理作为Zabbix服务器的角色(`zabbix_servers`)，接着转向那些需要被监视的对象(`monitored_hosts`)。针对不同操作系统类型的客户机，适当调整软件源设置，并最终保证所有必要的组件都处于最新状态且正确启动。 #### 自动化准备SSH无密码登录 为了让Ansible能够顺利地向远端计算机下发指令而不必每次都输入密码，可以利用Expect工具自动生成密钥对并向对方发送公钥。这里给出一段简单的shell脚本来实现这一点[^3]: ```bash #!/usr/bin/expect -i ~/.ssh/id_rsa.pub user@target_host_ip match_max 100000 expect "*password:" send -- "your_password\r" expect eof ``` 保存以上代码到`.sh`结尾的文件内赋予可执行权限之后即可运行该脚本批量推送SSH keys给各个待管理节点。