EX294 Red Hat Certified Engineer (RHCE) exam for Red Hat Enterprise Linux 8 Questions and Answers

/home/sandy/ansible/apache.yml

/home/sandy/ansible/roles/sample-apache/tasks/main.yml

Solution as:

Solution as:

# pwd

home/admin/ansible/

# sudo yum install rhel-system-roles.noarch -y

# cd roles/

# ansible-galaxy list

# cp -r /usr/share/ansible/roles/rhelsystem-roles.timesync .

# vim timesync.yml

---

- name: timesynchronization

hosts: all

vars:

timesync_ntp_provider: chrony

timesync_ntp_servers:

- hostname: classroom.example.com _ in exam its ip-address

iburst: yes

timezone: Asia/Kolkata

roles:

- rhel-system-roles.timesync

tasks:

- name: set timezone

timezone:

name: " {{ timezone }} "

wq!

timedatectl list-timezones | grep india

# ansible-playbook timesync.yml --syntax-check

# ansible-playbook timesync.yml

# ansible all -m shell -a ' chronyc sources -v '

# ansible all -m shell -a ' timedatectl '

# ansible all -m shell -a ' systemctl is-enabled chronyd '

Solution as:

# pwd

/home/admin/ansible

# wget http://classroom.example.com/hosts.j2

# vim hosts.j2

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1

localhost localhost.localdomain localhost6 localhost6.localdomain6

{% for host in groups[ ' all ' ] %}

{{ hostvars[host][ ' ansible_facts ' ][ ' default_ipv4 ' ][ ' address ' ] }} {{ hostvars[host]

[ ' ansible_facts ' ][ ' fqdn ' ] }} {{ hostvars[host] [ ' ansible_facts ' ][ ' hostname ' ] }}

{% endfor %}

wq!

# vim gen_hosts.yml

---

- name: collecting all host information

hosts: all

tasks:

- name:

template:

src: hosts.j2

dest: /etc/myhosts

when: inventory_hostname in groups[ ' dev ' ]

wq

# ansible-playbook gen_hosts.yml -–syntax-check

# ansible-playbook gen_hosts.yml

Solution as:

# pwd

/home/admin/ansible

# vim modify.yml

---

- name:

hosts: all

tasks:

- name:

copy:

content: " Development "

dest: /etc/issue

when: inventory_hostname in groups[ ' dev ' ]

- name:

copy:

content: " Test "

dest: /etc/issue

when: inventory_hostname in groups[ ' test ' ]

- name:

copy:

content: " Production "

dest: /etc/issue

when: inventory_hostname in groups[ ' prod ' ]

wq

# ansible-playbook modify.yml –-syntax-check

# ansible-playbook modify.yml

Solution as:

----------

# pwd

/home/admin/ansible/roles/

# ansible-galaxy init apache

# vim apache/vars/main.yml

---

# vars file for apache

http_pkg: httpd

firewall_pkg: firewalld

http_srv: httpd

firewall_srv: firewalld

rule: http

webpage: /var/www/html/index.html

template: index.html.j2

wq!

# vim apache/tasks/package.yml

---

- name: Installing packages

yum:

name:

- " {{http_pkg}} "

- " {{firewall_pkg}} "

state: latest

wq!

# vim apache/tasks/service.yml

---

- name: start and enable http service

service:

name: " {{http_srv}} "

enabled: true

state: started

- name: start and enable firewall service

service:

name: " {{firewall_srv}} "

enabled: true

state: started

wq!

# vim apache/tasks/firewall.yml

---

- name: Adding http service to firewall

firewalld:

service: " {{rule}} "

state: enabled

permanent: true

immediate: true

wq!

# vim apache/tasks/webpage.yml

---

- name: creating template file

template:

src: " {{template}} "

dest: " {{webpage}} "

notify: restart_httpd

!wq

# vim apache/tasks/main.yml

# tasks file for apache

- import_tasks: package.yml

- import_tasks: service.yml

- import_tasks: firewall.yml

- import_tasks: webpage.yml

wq!

# vim apache/templates/index.html.j2

Welcome to {{ ansible_facts.fqdn }} on {{ ansible_facts.default_ipv4.address }}

# vim apache/handlers/main.yml

---

# handlers file for apache

- name: restart_httpd

service:

name: httpd

state: restarted

wq!

# cd ..

# pwd

/home/admin/ansible/

# vim httpd.yml

---

- name: Including apache role

hosts: webservers

pre_tasks:

- name: pretask message

debug:

msg: ' Ensure webserver configuration '

roles:

- ./roles/apache

post_tasks:

- name: Check webserver

uri:

url: " http://{{ ansible_facts.default_ipv4.address }} "

return_content: yes

status_code: 200

wq!

# ansible-playbook httpd.yml –-syntax-check

# ansible-playbook httpd.yml

# curl http://serverx

Solution as:

# pwd

/home/admin/ansible

# echo " atenorth " > password.txt

# chmod 0600 password.txt

# ansible-vault create vault.yml --vault-password-file=password.txt

---

- dev_pass: wakennym

- mgr_pass: rocky

wq

# cat vault.yml

$ANSIBLE_VAULT;1.1;AES256

36383862376164316436353665343765643331393433373564613762666531313034336438353662

3464346331346461306337633632393563643531376139610a343531326130663266613533633562

38623439316631306463623761343939373263333134353264333834353264343934373765643737

3535303630626666370a643663366634383863393338616661666632353139306436316430616334

65386134393363643133363738656130636532346431376265613066326162643437643064313863

6633333537303334333437646163343666666132316639376531

# ansible-vault view vault.yml

password:******

---

- dev_pass: wakennym

- mgr_pass: rocky