콘텐츠로 이동

Ansible

명령어설명
ansible --versionAnsible 버전 표시
ansible --help도움말 정보 표시
ansible init현재 디렉토리에 ansible 초기화
ansible status현재 상태 확인
ansible list사용 가능한 옵션 나열
ansible info시스템 정보 표시
ansible config구성 설정 표시
ansible update최신 버전으로 업데이트
ansible startAnsible 서비스 시작
ansible stopAnsible 서비스 중지
ansible restartAnsible 서비스 재시작
ansible reload구성 다시 로드
# Package manager installation
sudo apt update
sudo apt install ansible

# Alternative installation
wget https://github.com/example/ansible/releases/latest/download/ansible-linux
chmod +x ansible-linux
sudo mv ansible-linux /usr/local/bin/ansible

# Build from source
git clone https://github.com/example/ansible.git
cd ansible
make && sudo make install
```## 기본 명령어
```bash
# Homebrew installation
brew install ansible

# MacPorts installation
sudo port install ansible

# Manual installation
curl -L -o ansible https://github.com/example/ansible/releases/latest/download/ansible-macos
chmod +x ansible
sudo mv ansible /usr/local/bin/
```## 설치
```powershell
# Chocolatey installation
choco install ansible

# Scoop installation
scoop install ansible

# Winget installation
winget install ansible

# Manual installation
# Download from https://github.com/example/ansible/releases
# Extract and add to PATH
```### Linux/Ubuntu

| 명령어 | 설명 |
|---------|-------------|
| `ansible config show` | 현재 구성 표시 |
| `ansible config list` | 모든 구성 옵션 나열하기 |
| `ansible config set <key> <value>` | 구성 값 설정 |
| `ansible config get <key>` | 구성 값 가져오기 |
| `ansible config unset <key>` | 구성 값 제거 |
| `ansible config reset` | 기본 구성으로 초기화 |
| `ansible config validate` | 구성 파일 검증 |
| `ansible config export` | 구성 내보내기 파일로 |
```bash
# Create new file/resource
ansible create <name>

# Read file/resource
ansible read <name>

# Update existing file/resource
ansible update <name>

# Delete file/resource
ansible delete <name>

# Copy file/resource
ansible copy <source> <destination>

# Move file/resource
ansible move <source> <destination>

# List all files/resources
ansible list --all

# Search for files/resources
ansible search <pattern>
```### macOS
```bash
# Connect to remote host
ansible connect <host>:<port>

# Listen on specific port
ansible listen --port <port>

# Send data to target
ansible send --target <host> --data "<data>"

# Receive data from source
ansible receive --source <host>

# Test connectivity
ansible ping <host>

# Scan network range
ansible scan <network>

# Monitor network traffic
ansible monitor --interface <interface>

# Proxy connections
ansible proxy --listen <port> --target <host>:<port>
# Start background process
ansible start --daemon

# Stop running process
ansible stop --force

# Restart with new configuration
ansible restart --config <file>

# Check process status
ansible status --verbose

# Monitor process performance
ansible monitor --metrics

# Kill all processes
ansible killall

# Show running processes
ansible ps

# Manage process priority
ansible priority --pid <pid> --level <level>
```### Windows
```bash
# Login with username/password
ansible login --user <username>

# Login with API key
ansible login --api-key <key>

# Login with certificate
ansible login --cert <cert_file>

# Logout current session
ansible logout

# Change password
ansible passwd

# Generate new API key
ansible generate-key --name <key_name>

# List active sessions
ansible sessions

# Revoke session
ansible revoke --session <session_id>
```## 구성
```bash
# Encrypt file
ansible encrypt --input <file> --output <encrypted_file>

# Decrypt file
ansible decrypt --input <encrypted_file> --output <file>

# Generate encryption key
ansible keygen --type <type> --size <size>

# Sign file
ansible sign --input <file> --key <private_key>

# Verify signature
ansible verify --input <file> --signature <sig_file>

# Hash file
ansible hash --algorithm <algo> --input <file>

# Generate certificate
ansible cert generate --name <name> --days <days>

# Verify certificate
ansible cert verify --cert <cert_file>
# Monitor system resources
ansible monitor --system

# Monitor specific process
ansible monitor --pid <pid>

# Monitor network activity
ansible monitor --network

# Monitor file changes
ansible monitor --files <directory>

# Real-time monitoring
ansible monitor --real-time --interval 1

# Generate monitoring report
ansible report --type monitoring --output <file>

# Set monitoring alerts
ansible alert --threshold <value> --action <action>

# View monitoring history
ansible history --type monitoring
```## 고급 작업
```bash
# View logs
ansible logs

# View logs with filter
ansible logs --filter <pattern>

# Follow logs in real-time
ansible logs --follow

# Set log level
ansible logs --level <level>

# Rotate logs
ansible logs --rotate

# Export logs
ansible logs --export <file>

# Clear logs
ansible logs --clear

# Archive logs
ansible logs --archive <archive_file>
```### 파일 작업
```bash
# Check if ansible is installed
which ansible
ansible --version

# Check PATH variable
echo $PATH

# Reinstall if necessary
sudo apt reinstall ansible
# or
brew reinstall ansible
# Run with elevated privileges
sudo ansible <command>

# Check file permissions
ls -la $(which ansible)

# Fix permissions
chmod +x /usr/local/bin/ansible

# Check ownership
sudo chown $USER:$USER /usr/local/bin/ansible
```### 네트워크 작업
```bash
# Validate configuration
ansible config validate

# Reset to default configuration
ansible config reset

# Check configuration file location
ansible config show --file

# Backup current configuration
ansible config export > backup.conf

# Restore from backup
ansible config import backup.conf
# Check service status
ansible status --detailed

# Check system logs
journalctl -u ansible

# Start in debug mode
ansible start --debug

# Check port availability
netstat -tulpn|grep <port>

# Kill conflicting processes
ansible killall --force
```### 프로세스 관리

| 명령어 | 설명 |
|---------|-------------|
| `ansible --debug` | 디버그 출력 활성화 |
| `ansible --verbose` | 자세한 로깅 활성화 |
| `ansible --trace` | 추적 로깅 활성화 |
| `ansible test` | 내장 테스트 실행 |
| `ansible doctor` | 시스템 상태 점검 실행 |
| `ansible diagnose` | 진단 보고서 생성 |
| `ansible benchmark` | 성능 벤치마크 실행 |
| `ansible validate` | 설치 및 구성 검증 |
```bash
# Set memory limit
ansible --max-memory 1G <command>

# Set CPU limit
ansible --max-cpu 2 <command>

# Enable caching
ansible --cache-enabled <command>

# Set cache size
ansible --cache-size 100M <command>

# Clear cache
ansible cache clear

# Show cache statistics
ansible cache stats

# Optimize performance
ansible optimize --profile <profile>

# Show performance metrics
ansible metrics
```## 보안 기능
```bash
# Enable parallel processing
ansible --parallel <command>

# Set number of workers
ansible --workers 4 <command>

# Process in batches
ansible --batch-size 100 <command>

# Queue management
ansible queue add <item>
ansible queue process
ansible queue status
ansible queue clear
```### API 통합
```bash
#!/bin/bash
# Example script using ansible

set -euo pipefail

# Configuration
CONFIG_FILE="config.yaml"
LOG_FILE="ansible.log"

# Check if ansible is available
if ! command -v ansible &> /dev/null; then
    echo "Error: ansible is not installed" >&2
    exit 1
fi

# Function to log messages
log() \\\\{
    echo "$(date '+%Y-%m-%d %H:%M:%S') - $1"|tee -a "$LOG_FILE"
\\\\}

# Main operation
main() \\\\{
    log "Starting ansible operation"

    if ansible --config "$CONFIG_FILE" run; then
        log "Operation completed successfully"
        exit 0
    else
        log "Operation failed with exit code $?"
        exit 1
    fi
\\\\}

# Cleanup function
cleanup() \\\\{
    log "Cleaning up"
    ansible cleanup
\\\\}

# Set trap for cleanup
trap cleanup EXIT

# Run main function
main "$@"
```## 환경 변수
```python
#!/usr/bin/env python3
"""
Python wrapper for the tool
"""

import subprocess
import json
import logging
from pathlib import Path
from typing import Dict, List, Optional

class ToolWrapper:
    def __init__(self, config_file: Optional[str] = None):
        self.config_file = config_file
        self.logger = logging.getLogger(__name__)

    def run_command(self, args: List[str]) -> Dict:
        """Run command and return parsed output"""
        cmd = ['tool_name']

        if self.config_file:
            cmd.extend(['--config', self.config_file])

        cmd.extend(args)

        try:
            result = subprocess.run(
                cmd,
                capture_output=True,
                text=True,
                check=True
            )
            return \\\\{'stdout': result.stdout, 'stderr': result.stderr\\\\}
        except subprocess.CalledProcessError as e:
            self.logger.error(f"Command failed: \\\\{e\\\\}")
            raise

    def status(self) -> Dict:
        """Get current status"""
        return self.run_command(['status'])

    def start(self) -> Dict:
        """Start service"""
        return self.run_command(['start'])

    def stop(self) -> Dict:
        """Stop service"""
        return self.run_command(['stop'])

# Example usage
if __name__ == "__main__":
    wrapper = ToolWrapper()
    status = wrapper.status()
    print(json.dumps(status, indent=2))
```## 구성 파일

| 변수 | 설명 | 기본값 |
|----------|-------------|---------|
| `ANSIBLE_CONFIG` | 구성 파일 경로 | `~/.ansible/config.yaml` |
| `ANSIBLE_HOME` | 디렉토리 | `~/.ansible` |
| `ANSIBLE_LOG_LEVEL` | 로깅 레벨 | `INFO` |
| `ANSIBLE_LOG_FILE` | 로그 파일 경로 | `~/.ansible/logs/ansible.log` |
| `ANSIBLE_CACHE_DIR` | 캐시 디렉토리 | `~/.ansible/cache` |
| `ANSIBLE_DATA_DIR` | 데이터 디렉토리 | `~/.ansible/data` |
| `ANSIBLE_TIMEOUT` | 기본 타임아웃 | `30s` |
| `ANSIBLE_MAX_WORKERS` | 최대 근로자 | `4` |## 예시
```yaml
# ~/.ansible/config.yaml
version: "1.0"

# General settings
settings:
  debug: false
  verbose: false
  log_level: "INFO"
  log_file: "~/.ansible/logs/ansible.log"
  timeout: 30
  max_workers: 4

# Network configuration
network:
  host: "localhost"
  port: 8080
  ssl: true
  timeout: 30
  retries: 3

# Security settings
security:
  auth_required: true
  api_key: ""
  encryption: "AES256"
  verify_ssl: true

# Performance settings
performance:
  cache_enabled: true
  cache_size: "100M"
  cache_dir: "~/.ansible/cache"
  max_memory: "1G"

# Monitoring settings
monitoring:
  enabled: true
  interval: 60
  metrics_enabled: true
  alerts_enabled: true
```### 기본 워크플로우
```bash
# 1. Initialize ansible
ansible init

# 2. Configure basic settings
ansible config set host example.com
ansible config set port 8080

# 3. Start service
ansible start

# 4. Check status
ansible status

# 5. Perform operations
ansible run --target example.com

# 6. View results
ansible results

# 7. Stop service
ansible stop
```### 고급 워크플로우
```bash
# Comprehensive operation with monitoring
ansible run \
  --config production.yaml \
  --parallel \
  --workers 8 \
  --verbose \
  --timeout 300 \
  --output json \
  --log-file operation.log

# Monitor in real-time
ansible monitor --real-time --interval 5

# Generate report
ansible report --type comprehensive --output report.html
```### 자동화 예시

## 모범 사례

### 보안
- 바이너리 다운로드 시 항상 체크섬 확인
- 강력한 인증 방법 사용 (API 키, 인증서)
- 최신 버전으로 정기적으로 업데이트
- 최소 권한 원칙 준수
- 규정 준수를 위한 감사 로깅 활성화
- 가능한 경우 암호화된 연결 사용
- 모든 입력 및 구성 검증
- 적절한 접근 제어 구현

### 성능
- 환경에 적합한 리소스 제한 사용
- 시스템 성능 정기적으로 모니터링
- 사용 사례에 맞게 구성 최적화
- 유리한 경우 병렬 처리 사용
- 적절한 캐싱 전략 구현
- 정기적인 유지 관리 및 정리
- 성능 병목 현상 프로파일링
- 효율적인 알고리즘 및 데이터 구조 사용

### 운영
- 포괄적인 문서 유지
- 적절한 백업 전략 구현
- 구성에 대해 버전 관리 사용
- 중요 지표 모니터링 및 알림
- 적절한 오류 처리 구현
- 반복적인 작업에 자동화 사용
- 정기적인 보안 감사 및 업데이트
- 재해 복구 계획 수립

### 개발
- 코딩 표준 및 규칙 준수
- 포괄적인 테스트 작성
- 지속적 통합/배포 사용
- 적절한 로깅 및 모니터링 구현
- API 및 인터페이스 문서화
- 버전 관리 효과적으로 사용
- 코드 정기적으로 검토
- 하위 호환성 유지

Would you like me to continue with the remaining sections or placeholders?```bash
#!/bin/bash
# Automated ansible workflow

# Configuration
TARGETS_FILE="targets.txt"
RESULTS_DIR="results/$(date +%Y-%m-%d)"
CONFIG_FILE="automation.yaml"

# Create results directory
mkdir -p "$RESULTS_DIR"

# Process each target
while IFS= read -r target; do
    echo "Processing $target..."

    ansible \
        --config "$CONFIG_FILE" \
        --output json \
        --output-file "$RESULTS_DIR/$\\\\{target\\\\}.json" \
        run "$target"

done < "$TARGETS_FILE"

# Generate summary report
ansible report summary \
    --input "$RESULTS_DIR/*.json" \
    --output "$RESULTS_DIR/summary.html"

Best Practices

Security

  • Always verify checksums when downloading binaries
  • Use strong authentication methods (API keys, certificates)
  • Regularly update to the latest version
  • Follow principle of least privilege
  • Enable audit logging for compliance
  • Use encrypted connections when possible
  • Validate all inputs and configurations
  • Implement proper access controls

Performance

  • Use appropriate resource limits for your environment
  • Monitor system performance regularly
  • Optimize configuration for your use case
  • Use parallel processing when beneficial
  • Implement proper caching strategies
  • Regular maintenance and cleanup
  • Profile performance bottlenecks
  • Use efficient algorithms and data structures

Operational

  • Maintain comprehensive documentation
  • Implement proper backup strategies
  • Use version control for configurations
  • Monitor and alert on critical metrics
  • Implement proper error handling
  • Use automation for repetitive tasks
  • Regular security audits and updates
  • Plan for disaster recovery

Development

  • Follow coding standards and conventions
  • Write comprehensive tests
  • Use continuous integration/deployment
  • Implement proper logging and monitoring
  • Document APIs and interfaces
  • Use version control effectively
  • Review code regularly
  • Maintain backward compatibility

Resources

Official Documentation

Community Resources

Learning Resources


*마지막 업데이트: 2025-07-06|GitHub에서 수정https://github.com/perplext/1337skills/edit/main/docs/cheatsheets/ansible.md)