1 VM + 3 Container + Docker CLI + Password Authentication – LAB 01 – Thực hành LAB

Vagrant.configure("2") do |config|
 
  config.vm.define "ansiblecontainer" do |ansiblecontainer|
 
    ansiblecontainer.vm.box = "ubuntu/jammy64"
    ansiblecontainer.vm.hostname = 'ubuntu2204'
 
    ansiblecontainer.vm.provider :virtualbox do |v|
      v.gui = true
      v.cpus = 2
      v.customize ["modifyvm", :id, "--natdnshostresolver1", "on"]
      v.customize ["modifyvm", :id, "--memory", 2048]
      v.customize ["modifyvm", :id, "--name", "Ansible-Inventory-1VM-3Container-Docker-CLI-Password-Authen"]
    end
 
  ansiblecontainer.vm.provision "shell", path: "install.sh"
  ansiblecontainer.vm.provision "shell", path: "by-docker-cli.sh"

  end
   
end

#!/bin/bash

echo -e "n1. Cài Docker, docker-composen"
apt update && apt install docker.io docker-compose pip -y
systemctl status docker

echo -e "n2. Cài Ansiblen"

# Cài sshpass để Ansible SSH tới các node được = password authen
apt -y install ansible-core sshpass
ansible --version

# Chép file config của Ansible
mkdir /etc/ansible
cp /vagrant/ansible.cfg /etc/ansible/
cp /vagrant/hosts /etc/ansible/

# Sửa lỗi https://devsecops.edu.vn/ansible-control-node-tren-ubuntu-server-2204-loi-ansible-galaxy/
pip install -Iv 'resolvelib<0.6.0'

# Cài collection community.general để chạy được lệnh apk
# https://docs.ansible.com/ansible/latest/collections/community/general/apk_module.html
ansible-galaxy collection install community.general

echo -e "n3. Xem Ansible collection đã càin"
ansible-galaxy collection list

# END

#!/bin/bash

echo -e "n1. Build 3 container imagen"

# Build AlmaLinux 9.2 chạy OpenSSH Server
cd /vagrant/normal/alma92
docker build                 -t devsecops.edu.vn/alma92-ssh-cli:1.0 .
docker run --name alma92-cli -d devsecops.edu.vn/alma92-ssh-cli:1.0

# Build Ubuntu Server 22.04.3 chạy OpenSSH Server
cd /vagrant/normal/ubuntu2204
docker build -t                     devsecops.edu.vn/ubuntu2204-ssh-cli:1.0 .
docker run --name ubuntu2204-cli -d devsecops.edu.vn/ubuntu2204-ssh-cli:1.0

# Build Alpine Linux 3.18 chạy OpenSSH Server
cd /vagrant/normal/alpine318
docker build -t                    devsecops.edu.vn/alpine318-ssh-cli:1.0 .
docker run --name alpine318-cli -d devsecops.edu.vn/alpine318-ssh-cli:1.0

echo -e "n2. 3 Container image đã build (Read Only)n"
docker image ls

echo -e "n3. 3 Container đang chạy (Read Write)n"
docker container ls

echo -e "n4. Cấu hình Ansible Inventory với 3 container đang chạyn"

# Lấy 3 IP của 3 Container đang chạy
export     Alma92_IP=$(docker inspect --format='{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' alma92-cli)
export Ubuntu2204_IP=$(docker inspect --format='{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' ubuntu2204-cli)
export  Alpine318_IP=$(docker inspect --format='{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' alpine318-cli)

# Thay 3 IP của 3 Container vào file Ansible Inventory dưới
sed -i "s/alma92_ip_cli/$Alma92_IP/"         /etc/ansible/hosts
sed -i "s/ubuntu2204_ip_cli/$Ubuntu2204_IP/" /etc/ansible/hosts
sed -i "s/alpine318_ip_cli/$Alpine318_IP/"   /etc/ansible/hosts

echo -e "n4.1 Ansible inventory coi group có 3 container đang chạyn"
ansible-inventory --graph

echo -e "n4.2 Ansible ping 3 node là 3 container đang chạyn"
ansible sshnormal_cli -m ping

echo -e "n4.3 Ansible chạy lịnh tới 3 containern"
ansible sshnormal_cli -a 'cat /etc/os-release'

echo -e "n4.4 Ansible chạy playbook tới 3 containern"
ansible-playbook /vagrant/web-server.yml

# END

[defaults]
host_key_checking=False

# Sửa lỗi 
# https://devsecops.edu.vn/ansible-galaxy-bi-loi-gi-vay-khi-cai-ansible-collections/
[galaxy]
server = https://old-galaxy.ansible.com/

[sshnormal_cli]
alma92_ip_cli
ubuntu2204_ip_cli
alpine318_ip_cli

[all:vars]
ansible_user=root
ansible_password=1

---
- hosts: sshnormal_cli
  tasks:

    - name: Cài Apache Web Server mới nhứt trên Ubuntu 22.04
      apt:
        name: apache2
      when: ansible_distribution == "Ubuntu"
        
    - name: Cài Apache Web Server mới nhứt trên AlmaLinux 9
      yum:
        name: httpd
      when: ansible_distribution == "AlmaLinux"

    - name: Cài Apache Web Server mới nhứt trên Alpine Linux 3.18
      apk:
        name: apache2
        state: present
      when: ansible_distribution == "Alpine"