Char05 Ansible 最佳實務

標籤：tmp   word   shel   效率   password   實踐   slave   open   alt   

 

5.1 最佳化Ansible速度

  Ansible的執行效率低於SaltStack ： 原因，使用預設的SSH方式通訊，效率低於SaltStack 的 zeromq訊息佇列

　　1 開啟SSH 長串連

# ssh -VOpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8, OpenSSL 1.0.1f 6 Jan 2014 # 需要大於5.6# cat .ansible.cfg[defaults]host_key_checking = Falsemodule_name = shellremote_port = 22remote_tmp = $HOME/.ansible/tmprecord_host_keys= Falsesh_args= -o ControlMaster=auto -o ControlPersist-5d

　　

# netstat | grep sshtcp        0      0 172.17.150.51:34030     172.17.150.21:ssh       ESTABLISHEDtcp        0      0 172.17.150.51:52852     172.17.150.42:ssh       ESTABLISHEDtcp        0      0 172.17.150.51:41904     172.17.150.100:ssh      ESTABLISHEDtcp        0      0 172.17.150.51:53620     172.17.150.21:ssh       ESTABLISHEDtcp        0      0 172.17.150.51:53620     172.17.150.21:ssh       ESTABLISHEDunix  3      [ ]         STREAM     CONNECTED     21402633 /root/.ansible/cp/ansible-ssh-testslave5-22-jenkins.PaagQPMKpFYk0nXz

　　

　　2 開啟pipeling 

　　　也是OpenSSH的一個特性,最佳化了之前的將產生好的本地的Python指令碼PUT到遠端伺服器，如果開啟了pipelining = True ,這個過程降噪SSH 會話中執行，大大提供了效率

# piplinling= True 之前<TestSlave5> ESTABLISH CONNECTION FOR USER: jenkins<TestSlave5> REMOTE_MODULE ping<TestSlave5> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o StrictHostKeyChecking=no -o Port=22 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=jenkins -o ConnectTimeout=10 TestSlave5 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1484645825.18-280957036779280 && echo $HOME/.ansible/tmp/ansible-tmp-1484645825.18-280957036779280‘<TestSlave5> PUT /tmp/tmpj3c5YY TO /home/jenkins/.ansible/tmp/ansible-tmp-1484645825.18-280957036779280/ping<TestSlave5> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o StrictHostKeyChecking=no -o Port=22 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=jenkins -o ConnectTimeout=10 TestSlave5 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/jenkins/.ansible/tmp/ansible-tmp-1484645825.18-280957036779280/ping; rm -rf /home/jenkins/.ansible/tmp/ansible-tmp-1484645825.18-280957036779280/ >/dev/null 2>&1‘TestSlave5 | success >> {    "changed": false,    "ping": "pong"}<TestSlave6> ESTABLISH CONNECTION FOR USER: jenkins<TestSlave6> REMOTE_MODULE ping<TestSlave6> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o StrictHostKeyChecking=no -o Port=22 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=jenkins -o ConnectTimeout=10 TestSlave6 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1484645825.18-266544730254906 && echo $HOME/.ansible/tmp/ansible-tmp-1484645825.18-266544730254906‘<TestSlave6> PUT /tmp/tmpVvNM_K TO /home/jenkins/.ansible/tmp/ansible-tmp-1484645825.18-266544730254906/ping<TestSlave6> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o StrictHostKeyChecking=no -o Port=22 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=jenkins -o ConnectTimeout=10 TestSlave6 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/jenkins/.ansible/tmp/ansible-tmp-1484645825.18-266544730254906/ping; rm -rf /home/jenkins/.ansible/tmp/ansible-tmp-1484645825.18-266544730254906/ >/dev/null 2>&1‘TestSlave6 | success >> {    "changed": false,    "ping": "pong"}

　　

# piplinling = True 時 <TestSlave5> ESTABLISH CONNECTION FOR USER: jenkins<TestSlave5> REMOTE_MODULE ping<TestSlave5> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o StrictHostKeyChecking=no -o Port=22 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=jenkins -o ConnectTimeout=10 TestSlave5 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1484645805.57-70490925643456 && echo $HOME/.ansible/tmp/ansible-tmp-1484645805.57-70490925643456‘<TestSlave5> PUT /tmp/tmp8BYUur TO /home/jenkins/.ansible/tmp/ansible-tmp-1484645805.57-70490925643456/ping<TestSlave5> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o StrictHostKeyChecking=no -o Port=22 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=jenkins -o ConnectTimeout=10 TestSlave5 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/jenkins/.ansible/tmp/ansible-tmp-1484645805.57-70490925643456/ping; rm -rf /home/jenkins/.ansible/tmp/ansible-tmp-1484645805.57-70490925643456/ >/dev/null 2>&1‘TestSlave5 | success >> {    "changed": false,    "ping": "pong"}<TestSlave6> ESTABLISH CONNECTION FOR USER: jenkins<TestSlave6> REMOTE_MODULE ping<TestSlave6> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o StrictHostKeyChecking=no -o Port=22 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=jenkins -o ConnectTimeout=10 TestSlave6 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1484645805.57-26177483349407 && echo $HOME/.ansible/tmp/ansible-tmp-1484645805.57-26177483349407‘<TestSlave6> PUT /tmp/tmpQrSPOP TO /home/jenkins/.ansible/tmp/ansible-tmp-1484645805.57-26177483349407/ping<TestSlave6> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o StrictHostKeyChecking=no -o Port=22 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=jenkins -o ConnectTimeout=10 TestSlave6 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/jenkins/.ansible/tmp/ansible-tmp-1484645805.57-26177483349407/ping; rm -rf /home/jenkins/.ansible/tmp/ansible-tmp-1484645805.57-26177483349407/ >/dev/null 2>&1‘TestSlave6 | success >> {    "changed": false,    "ping": "pong"}

　　

[defaults]host_key_checking = Falsemodule_name = shellremote_port = 22remote_tmp = $HOME/.ansible/tmprecord_host_keys= Falsesh_args= -o ControlMaster=auto -o ControlPersist-5dpipelinling = True

　　3 開啟 accelerate 模式

 　　　　與 Multiplexing 有點類似，都依賴與Ansible中控制機與遠端機有一個長串連，但是accelerate 是使用python程式在遠端機上運行一個守護進程，然後Ansible 會通過這個守護進程監聽的連接埠進行通訊 。 如果使用accelerate 則需要在控制機和遠端機上都安裝python-keyczar軟體包，

 　　　　在寫 playbook時指定

 

　　4　設定facts緩衝

　　　　playbook 的預設第一個task是GATHERING FACTS 

 

　　　　gathering = smart

　　　　fact_caching_timeout = 86400

　　　　fact_caching = jsonfile

　　　　fact_caching_connection = /tmp/ansible_fact_cache

 

　　　　

5.4 灰階發布與檢測

 

 

 

　　

 

 

     

Char05 Ansible 最佳實務