Save 37% off PRO during our Black Friday Sale! »

Ansible-Playbook-CleanUp-WinUpd-TempFiles

7e3cdbf62ad6e34cf379443678b1b378?s=47 Hisashi SOGA
September 01, 2017

 Ansible-Playbook-CleanUp-WinUpd-TempFiles

Windows Update の中間ファイル(ゴミ)を Ansible Playbook で一発で掃除することができるので事例を紹介します

7e3cdbf62ad6e34cf379443678b1b378?s=128

Hisashi SOGA

September 01, 2017
Tweet

Transcript

  1. Windows Update ͷதؒϑΝΠϧ(ΰϛ)Λ Ansible Playbook ͰҰൃͰ૟আ͢Δ 2017/09/01 @sogaoh 1 Presentation

    Slide at https://ansible-users.connpass.com/event/62508/
  2. AGENDA • ࣗݾ঺հ • લఏ • ઃఆ • ࣮ߦ •

    ஫ҙ఺ • ͓ΘΓʹ 2
  3. ࣗݾ঺հ • ીզɹԝ / Hisashi SOGA – Twitter : @sogaohɹ,

    GitHub : sogaoh • Marketing Applications, Inc. / MApps – WebΞϯέʔτ࡞੒ɾ഑৴αʔϏε forSurvey – ए೥૚ճऩ਺ࠃ಺No.1ͷ MApps Panel • DevOpsਪਐࣨ (ফ๷ୂ ) – Πϯϑϥ ʛ˛˕˛˛˗˛ʵʛ ΞϓϦ – ϑϩϯτ ʛʵʵʵ˛˗˕˛ʛ αʔό ɹ 3 ◆࠷ॳ ˛कඋൣғ ˕ΠϚίί
  4. લఏ • ※࣮૷ͨ͠ͷ͕̍೥͘Β͍લͰ͢ • Ansible (Server) ଆ (Playbook࣮ߦ؀ڥ) – CentOS

    7.2, ansible 2.1.0.0, Python 2.7 • Windows (Agent) ଆ – Powershell 3 Ҏ্ (5 ΛೖΕͨ) – Win 2008 R2 ʹ͸Πϯετʔϧ͕ඞཁɹɹɹɹɹ (2.0͕σϑΥϧτ) 4
  5. ઃఆ (1) • Windows (Agent) ଆ • ઃఆεΫϦϓτμ΢ϯϩʔυ • ઃఆεΫϦϓτ࣮ߦ

    • AllowUnencrypted="true"Λઃఆ 5 PS> Invoke-WebRequest -Uri https://raw.githubusercontent.com/ansible/ansible/devel/examples/scripts/ ConfigureRemotingForAnsible.ps1 -OutFile ConfigureRemotingForAnsible.ps1 PS> powershell -ExecutionPolicy RemoteSigned ./ConfigureRemotingForAnsible.ps1 PS C:\tmp> winrm set winrm/config/service '@{AllowUnencrypted="true"}'
  6. ઃఆ (2) • Ansible (Server)ଆ • pywinrm ͷΠϯετʔϧ • Winଆͷࣗݾূ໌ॻݕূΛεΩοϓ͢ΔઃఆΛೖΕΔ

    • /opt/ansible_win/ansible.cfg • ຤ඌʹ௥هɹɹɹɹɹɹɹɹɹɹɹͦͷଞௐ੔ 6 $ sudo mkdir -p /opt/ansible/callback_plugins $ sudo vim /opt/ansible/callback_plugins/fix-ssl.py [defaults] bin_ansible_callbacks=True callback_plugins = ./callback_plugins ansible_winrm_server_cert_validation=ignore $ sudo pip install pywinrm inventory = /opt/ansible_win/hosts host_key_checking = False
  7. ࣮ߦ • ૄ௨֬ೝ • ࣮ߦ 7 ansible win-host-01 -m win_ping

    env ANSIBLE_CONFIG=/opt/ansible_win/ansible.cfg ansible- playbook ./cleanup-win-update-tmp-files.yml -l win-host-01 env ANSIBLE_CONFIG=/opt/ansible_win/ansible.cfg ansible- playbook ./cleanup-win-installer-tmp-files.yml -l win-host-01 refs: https://github.com/sogaoh/AnsiblePractice/tree/master/operation/windows
  8. ஫ҙ఺ • ΢Οϧεରࡦιϑτ͕ೖ͍ͬͯΔ৔߹ • ϙʔτ5985, 5986 ͷղ์͕ඞཁ • ΞϯΠϯετʔϧ͕Ͱ͖ͳ͘ͳΔ •

    ʮ੾Γ໭͢ʯՄೳੑ͕͋Δ؀ڥͰ͸࣮ߦ ʹ஫ҙɾݕূ͕ඞཁ 8
  9. ͓ΘΓʹ • Windows ʹର͢ΔఆܕԽ͞Ε͍ͯΔΦϖϨʔ γϣϯ΋ɺ͖ͬͱࣗಈԽɾ؆ૉԽͰ͖Δ • ଞʹ΋ɺAnsible ͰҎԼͷΑ͏ͳ͜ͱΛ؆ૉԽ͠ ͓ͯΓɺ୭Ͱ΋Ͱ͖Δମ੍Λ੔͍͑ͯ·͢ •

    BIND ͷόʔδϣϯΞοϓ • STNS ΫϥΠΞϯτͷηοτΞοϓ • ͜ΜͳνʔϜʹjoin͍ͨ͠ͱࢥͬͨํ͸↓΁ͥͻɹ 9 https://jp.stanby.com/ats/marketing-applications/jobs