Ansible on F嘉阳

DevOps实践心得一

Fri, 16 Aug 2019 19:32:00 +0800

初遇DevOps

最早接触到DevOps是在2018年8月26日，那时首先接触到的就是大名鼎鼎的Jenkins，当时看了多篇关于持续集成和持续部署的文章，蠢蠢欲动，便开始了第一套DevOps环境的搭建

Jenkins

第一套DevOps是用Jenkins+Ansible+GitLab搭建的，那时只是了解Docker的好处，并没有使用Docker搭建整套环境，还是基于传统虚拟服务器搭建的整套流程。

Jenkins不仅可以编写groove脚本、pipeline 流水线等，还能与maven集成自动构建，深深感受到了Jenkins的强大，同时大量的用户为其贡献了许多插件，有很多实践问题都可以在网上搜索到解决方案

搭建过程：

最后顺利实现了静态网站持续集成、持续部署，详见：相关文章

Docker+GitLab

随着容器化技术在国内越来越流行，容器普及度越来越高，其带来的环境隔离极大推动了DevOps的落地，使得无需使用python环境隔离，可以直接利用容器技术实现跨平台和环境隔离，并且利于迁移和部署

于是在2019年4月开始研究GitLab官方文档，发现其早已原生支持流水线，并依托其GitLab-runner可以直接实现整套DevOps环境

因此，经过不断摸索，完整的搭建的基于Docker和GitLab的DevOps环境，搭建过程见：

由于国内当时对GitLab流水线使用的并不多，因此遇到的很多坑都需要翻查官方文档和国外的实践记录，比如：

DevOps 带来的好处

2019年7月将手上的一个小型项目尝试使用完整的DevOps流程开发，开发小组选择敏捷开发方法，所有的开发工具都尽量的适应快速的需求变化，同时投入非常少量的开发人员，分工明确，从一开始一周发布一次到最后一天可以发布多次

开发人员已经完全从运维中脱离，全团队没有专门的运维人员，极大的提高了开发效率，精简了人员构成，一旦构建失败，开发人员可以根据邮件通知的内容排查上线失败问题，调整代码和配置后重新提交

面板提供了流水线统计图，如果出现频繁的失败还是需要人工介入，查看问题原因

当前的问题

尽管使用了基于Docker+GitLab的流水线实现了完整的DevOps流程，但对于监控和日志部分仍然处在很多问题

尽管上线的是单体应用，服务器和应用的健康状态都无法得知，也没有相应的告警
应用的日志没有被外部服务收集，无法进行快速分析
没有实现完整的测试流程，生成测试覆盖率报告等
没有实现0停机上线，在容器切换时仍需停机1-2分钟
没有实现灰度上线、蓝绿部署等，上线失败需要手动回滚

未来探索方向

全面容器化服务治理方向
- 国内对容器化有非常多的实践
- kubernetes作为容器调度成为大多数服务治理的选择
- 容器隔离、迁移和伸缩带来的巨大优势
容器与传统应用部署结合方式
- 以半全自动方式落地DevOps，采用Mesos+marathon方式同时兼容传统服务部署和容器化部署
- 兼容分布式服务治理
- 国外有大量的实践案例
- 日志收集体系完备

Jenkins+GitLab+Ansible实现静态网站自动部署

Sat, 01 Sep 2018 12:45:00 +0800

环境准备

参考前几篇文章配置后实现以下环境

部署好Jenkins服务器一台(192.168.163.133),并在Jenkins服务器上部署ansible，且与目标主机(192.168.163.132)做了免密登录
可以访问的GitLab服务器一台，并注册了Jenkins相关账号且在Jenkins系统设置中配置完毕
一台工作环境主机，用于代码编写，该主机可以通过域名访问目标主机(192.168.163.132)

编写ansible playbook

搭建基础工程目录结构

从仓库下载之前编写的ansible工程目录结构

若没有也可自行创建，最终文件目录结构如下

└─ansible-playbook-repo
 │ deploy.yml
 │
 ├─inventory
 │ dev
 │ prod
 │
 └─roles
 └─nginx
 ├─files
 │ │ health_check.sh
 │ │ index.html
 │ │
 │ └─website
 │
 ├─tasks
 │ main.yml
 │
 └─templates
 nginx.conf.j2

文件编写

工程入口deploy.yml编写

- hosts: "nginx"
 gather_facts: true
 remote_user: root
 roles:
 - nginx

编写开发环境配置文件inventory/dev，此处dev与prod配置一致，若实际需求可自行修改，用于最后jenkins参数化构建的选项 inventory/dev文件内容

[nginx]
test.fjy8018.top

[nginx:vars]
server_name=test.fjy8018.top
port=80
user=ansible
worker_processes=4
max_open_file=65505
root=/www

inventory/prod文件内容

[nginx]
test.fjy8018.top

[nginx:vars]
server_name=test.fjy8018.top
port=80
user=ansible
worker_processes=4
max_open_file=65505
root=/www

编写健康检查shell脚本health_check.sh roles/nginx/files/health_check.sh文件内容

#!/bin/bash

# 接受命令行参数
URL=$1

# 访问目标地址，判断是否能正常访问并输出
curl -Is http://$URL > /dev/null && echo "远程主机状态正常" || echo "远程主机已停止"

添加静态网站文件

/roles/nginx/files/website为静态网页模板目录，里面存放从网上下载的静态网站模板配置nginx指向该资源 /roles/nginx/templates/nginx.conf.j2文件内容

# For more information on configuration, see: 
user {{ user }}; 
worker_processes {{ worker_processes }}; 
 
error_log /var/log/nginx/error.log; 
 
pid /var/run/nginx.pid; 
 
events { 
 worker_connections {{ max_open_file }}; 
} 
 
 
http { 
 include /etc/nginx/mime.types; 
 default_type application/octet-stream; 
 
 log_format main '$remote_addr - $remote_user [$time_local] "$request" ' 
 '$status $body_bytes_sent "$http_referer" ' 
 '"$http_user_agent" "$http_x_forwarded_for"'; 
 
 access_log /var/log/nginx/access.log main; 
 
 sendfile on; 
 #tcp_nopush on; 
 
 #keepalive_timeout 0; 
 keepalive_timeout 65; 
 
 #gzip on; 
 
 # Load config files from the /etc/nginx/conf.d directory 
 # The default server is in conf.d/default.conf 
 #include /etc/nginx/conf.d/*.conf; 
 server { 
 listen {{ port }} default_server; 
 server_name {{ server_name }}; 
 
 #charset koi8-r; 
 
 #access_log logs/host.access.log main; 
 
 location / { 
 root {{ root }}/website; 
 index index.html index.htm; 
 } 
 
 error_page 404 /404.html; 
 location = /404.html { 
 root /usr/share/nginx/html; 
 } 
 
 # redirect server error pages to the static page /50x.html 
 # 
 error_page 500 502 503 504 /50x.html; 
 location = /50x.html { 
 root /usr/share/nginx/html; 
 } 
 
 } 
 
}

编写主任务文件

主任务文件main.yml内容如下

- name: 关闭系统防火墙
 service: name=firewalld state=stopped

- name: 关闭强制访问控制策略
 selinux: state=disabled

- name: 设置yum源
 yum: pkg=epel-release state=latest

- name: 写入nginx配置文件
 template: src=roles/nginx/templates/nginx.conf.j2 dest=/etc/nginx/nginx.conf

- name: 创建nginx根目录文件夹
 file: 'path={{ root }} state=directory owner={{ user }} group={{ user }} mode=0755'

- name: 文件拷贝
 copy: 'remote_src=no src=roles/nginx/files/website dest=/www/website owner={{ user }} mode=0755'

- name: 启动nginx
 service: name=nginx state=restarted

- name: 运行健康检查
 shell: "sh roles/nginx/files/health_check.sh {{ server_name }}"
 # 本地执行
 delegate_to: localhost
 # 参数传递
 register: health_status

- debug: msg="{{ health_status.stdout }}"

Git提交

提交变更到版本仓库GitLab

git add .
git commit -m "添加模板文件"
git push origin master

Jenkins创建并执行

创建自由风格构建任务，添加参数化构建、添加选项参数和文本参数

添加Git仓库地址和账号

添加Shell构建，Shell内容为

#!/bin/bash
# 关闭命令行扩展环境，避免环境参数日志干扰
set +x
# 加载虚拟环境
source /home/deploy/.py3-a2.5-env/bin/activate
# 加载ansible到当前用户目录
source /home/deploy/.py3-a2.5-env/ansible/hacking/env-setup -q

cd $WORKSPACE
ls -a
# 查看版本
ansible --version
ansible-playbook --version

# 引入资源清单，测试远程命令
ansible-playbook -i inventory/$deploy_env ./deploy.yml -e project=nginx -e branch=$branch -e env=$deploy_env

保存并构建

结果

构建成功

访问测试

在工作主机上访问目标地址+资源路径即可，访问通过

后续构建

后期只要在工作主机变更代码推送到git仓库，再到Jenkins的web界面点击参数化构建即可让Jenkins自动拉取最新分支并执行Ansible脚本

Ansible Playbook编写测试

Sat, 25 Aug 2018 16:19:00 +0800

环境准备

两台CentOS 7虚拟机，主IP为192.168.163.128，并在主IP虚拟机上安装了ansible2.5版本，目标IP为192.168.163.132

Ansible编写

切换用户

[root@localhost ~]# su - ansible
上一次登录：六 8月 18 20:12:23 CST 2018pts/0 上

进入虚拟环境

[ansible@localhost ~]$ source .py3-a2.5-env/bin/activate
(.py3-a2.5-env) [ansible@localhost ~]$

加载ansible到当前用户目录

source .py3-a2.5-env/ansible/hacking/env-setup -q

验证版本

(.py3-a2.5-env) [ansible@localhost ~]$ ansible-playbook --version
ansible-playbook 2.5.8 (stable-2.5 b23b1c2ee0) last updated 2018/08/18 20:35:45 (GMT +800)
 config file = None
 configured module search path = ['/home/ansible/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
 ansible python module location = /home/ansible/.py3-a2.5-env/ansible/lib/ansible
 executable location = /home/ansible/.py3-a2.5-env/ansible/bin/ansible-playbook
 python version = 3.7.0 (default, Aug 18 2018, 20:09:08) [GCC 4.8.5 20150623 (Red Hat 4.8.5-28)]
(.py3-a2.5-env) [ansible@localhost ~]$ ll
总用量 0
(.py3-a2.5-env) [ansible@localhost ~]$ pwd
/home/ansible

配置目标主机的秘钥认证

(.py3-a2.5-env) [ansible@localhost ~]$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/ansible/.ssh/id_rsa): 
Created directory '/home/ansible/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /home/ansible/.ssh/id_rsa.
Your public key has been saved in /home/ansible/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:pXMJqz9DPkjt6nKws35NYoMQeUdfu4CGATw76tr9lJY ansible@localhost.localdomain
The key's randomart image is:
+---[RSA 2048]----+
| ..o... . |
| = .o.o . . |
| =..o + o |
| + . * o |
| . o . .S + |
|. o =++o |
|. =EX |
| o .+o+.B |
|o ..+O+..+ |
+----[SHA256]-----+

拷贝公钥

(.py3-a2.5-env) [ansible@localhost ~]$ ssh-copy-id -i /home/ansible/.ssh/id_rsa.pub root@test.fjy8018.top
/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/ansible/.ssh/id_rsa.pub"
The authenticity of host 'test.fjy8018.top (192.168.163.132)' can't be established.
ECDSA key fingerprint is SHA256:3UEr3lx2jznmN3FL3SflViR05IZe6AWweb3TeSsfX0M.
ECDSA key fingerprint is MD5:0f:31:c1:cc:54:69:7f:d8:8d:7c:8c:22:95:2e:03:4e.
Are you sure you want to continue connecting (yes/no)? yes
/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@test.fjy8018.top's password: 

Number of key(s) added: 1

Now try logging into the machine, with: "ssh 'root@test.fjy8018.top'"
and check to make sure that only the key(s) you wanted were added.

测试免密登录

(.py3-a2.5-env) [ansible@localhost ~]$ ssh root@test.fjy8018.top
Last login: Sat Aug 25 11:27:35 2018 from 192.168.163.1
[root@localhost ~]# exit
登出
Connection to test.fjy8018.top closed.

编写环境变量

预期的文件结构为

├── deploy.yml
├── inventory
│ └── testenv
└── roles
 └── testbox
 └── tasks
 └── main.yml

deploy.yml为工程入口，testenv为环境变量文件，tasks为任务文件夹，其中的main.yml为要执行的任务新建playbook工程目录，并根据ansible规范创建对应的文件夹

(.py3-a2.5-env) [ansible@localhost ~]$ mkdir test_playbook
(.py3-a2.5-env) [ansible@localhost ~]$ cd test_playbook/
(.py3-a2.5-env) [ansible@localhost test_playbook]$ mkdir inventory
(.py3-a2.5-env) [ansible@localhost test_playbook]$ mkdir roles
(.py3-a2.5-env) [ansible@localhost test_playbook]$ cd inventory/
(.py3-a2.5-env) [ansible@localhost inventory]$ vi testenv

testenv文件内容如下

[testservers]
test.fjy8018.top

[testservers:vars]
server_name=test.fjy8018.top
user=root
output=/root/test.txt

远程执行命令并加载环境变量的值

(.py3-a2.5-env) [ansible@localhost test_playbook]$ ll
总用量 0
drwxrwxr-x 2 ansible ansible 21 8月 18 20:49 inventory
drwxrwxr-x 2 ansible ansible 6 8月 18 20:47 roles
(.py3-a2.5-env) [ansible@localhost test_playbook]$ cd roles/
(.py3-a2.5-env) [ansible@localhost roles]$ mkdir testbox
(.py3-a2.5-env) [ansible@localhost roles]$ cd testbox/
(.py3-a2.5-env) [ansible@localhost testbox]$ mkdir tasks
(.py3-a2.5-env) [ansible@localhost testbox]$ cd tasks/
(.py3-a2.5-env) [ansible@localhost tasks]$ vi main.yml

main.yml文件内容如下

- name: Print server name and user to remote testbox
 shell: "echo 'Currently {{ user }} is loggining {{ server_name }} ' > {{ output }} "

编写工程入口文件

(.py3-a2.5-env) [ansible@localhost test_playbook]$ pwd
/home/ansible/test_playbook
(.py3-a2.5-env) [ansible@localhost test_playbook]$ ll
总用量 0
drwxrwxr-x 2 ansible ansible 21 8月 18 20:49 inventory
drwxrwxr-x 3 ansible ansible 21 8月 18 20:51 roles
(.py3-a2.5-env) [ansible@localhost test_playbook]$ vi deploy.yml

deploy.yml文件内容如下

# 调用testenv里的servers标签定义的目标主机
- hosts: "testservers"
# 用于获取目标主机的信息
 gather_facts: true
 # 使用root用户操作
 remote_user: root
 # 指定进入roles目录下的testbox任务文件执行任务
 roles:
 - testbox

查看当前目录结构，符合预期

[ansible@localhost test_playbook]$ tree .
.
├── deploy.yml
├── inventory
│ └── testenv
└── roles
 └── testbox
 └── tasks
 └── main.yml

4 directories, 3 files

执行任务

(.py3-a2.5-env) [ansible@localhost ~]$ cd test_playbook/
(.py3-a2.5-env) [ansible@localhost test_playbook]$ ls
deploy.yml inventory roles
(.py3-a2.5-env) [ansible@localhost test_playbook]$ ansible-playbook -i inventory/testenv ./deploy.yml

部署完成

登录目标主机查看

远程文件创建

编辑任务文件

(.py3-a2.5-env) [ansible@localhost test_playbook]$ vi roles/testbox/tasks/main.yml

修改为在远程创建文件，指定路径并赋予权限为755，所有者为foo用户，属于foo用户组，故添加如下内容

- name: create a file
 file: 'path=/root/foo.txt state=touch mode=0755 owner=foo group=foo'

执行文件

执行成功，登录目标主机查看是否创建

远程文件拷贝

新建存放文件目录

(.py3-a2.5-env) [ansible@localhost test_playbook]$ mkdir roles/testbox/files
(.py3-a2.5-env) [ansible@localhost test_playbook]$ tree .
.
├── deploy.yml
├── inventory
│ └── testenv
└── roles
 └── testbox
 ├── files
 └── tasks
 └── main.yml

5 directories, 3 files

新建目标文件foo.sh

(.py3-a2.5-env) [ansible@localhost test_playbook]$ vi roles/testbox/files/foo.sh

文件内容如下

echo "This is a test script for ansible"

编辑任务文件

(.py3-a2.5-env) [ansible@localhost test_playbook]$ vi roles/testbox/tasks/main.yml

remote_src=no定义为文件传输，并设置644权限，指定强制执行，故添加任务如下

- name: copy a file
 copy: 'remote_src=no src=roles/testbox/files/foo.sh dest=/root/foo.sh mode=0644 force=yes'

执行成功

判断文件是否存在

在roles/testbox/tasks/main.yml添加任务如下

# 任务名称
- name: check if foo.sh exists
 stat: 'path=/root/foo.sh'
 register: script_stat
 # 若when中返回信息，则输出msg后的值
- debug: msg="foo.sh exists"
 # 调用模块任务
 when: script_stat.stat.exists

执行，成功输出信息

远程执行命令

在roles/testbox/tasks/main.yml添加任务如下

- name: run the script
 command: 'sh /root/foo.sh'

执行成功

template模块任务

环境变量配置文件中inventory/testenv添加如下命令

server_name=test.fjy8018.top
port=80
user=ansible
worker_processes=4
max_open_file=65505
root=/www

新建template文件夹

(.py3-a2.5-env) [ansible@localhost test_playbook]$ mkdir roles/testbox/templates

添加nginx j2文件

(.py3-a2.5-env) [ansible@localhost test_playbook]$ vi roles/testbox/templates/nginx.conf.j2

文件内容如下，其中调用了环境变量中的配置

# For more information on configuration, see: 
user {{ user }}; 
worker_processes {{ worker_processes }}; 
 
error_log /var/log/nginx/error.log; 
 
pid /var/run/nginx.pid; 
 
events { 
 worker_connections {{ max_open_file }}; 
} 
...

在roles/testbox/tasks/main.yml添加任务如下

# 复制nginx配置文件
- name: write the nginx config file
 template: src=roles/testbox/templates/nginx.conf.j2 dest=/etc/nginx/nginx.conf
# 远程安装最新版nginx
- name: install nginx at latest version
 yum: pkg=nginx state=latest
# 新增模块任务启动nginx服务
- name: start nginx service
 service: name=nginx state=started

所有任务列表

查看变量参数是否应用成功

ssh root@test.fjy8018.top ps -ef | grep nginx查看nginx是否启动成功

Ansible安装配置

Sun, 19 Aug 2018 16:38:00 +0800

ansible官方文档指南

系统预配置

关闭防火墙

[root@localhost ~]# systemctl stop firewalld

关闭防火墙开机启动

[root@localhost ~]# systemctl disable firewalld
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

关闭强制访问控制安全策略

vi /etc/sysconfig/selinux

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of three two values:
# targeted - Targeted processes are protected,
# minimum - Modification of targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection.
SELINUXTYPE=targeted

SELINUX=enforcing改成SELINUX=disabled

reboot使禁用操作生效

查看操作是否生效

[root@localhost ~]# getenforce
Disabled

安装Python3

wget https://www.python.org/ftp/python/3.7.0/Python-3.7.0.tar.xz

解压编译包

tar xf Python-3.7.0.tar.xz

查看文件

[root@localhost ~]# ls
anaconda-ks.cfg Python-3.7.0 Python-3.7.0.tar.xz
[root@localhost ~]# cd Python-3.7.0

安装OpenSSL依赖，否则使用pip3.7会报找不到SSL模块错误

yum install openssl-devel

设定编译参数，/usr/local为安装位置，–with-ensurepip=install指定安装包管理工具，–enable-shared配置Python匹配系统参数

[root@localhost Python-3.7.0]# ./configure --prefix=/usr/local --with-ensurepip=install --enable-shared LDFLAGS="-Wl,-rpath /usr/local/lib" --with-ssl
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking for python3.7... no
checking for python3... no
checking for python... python
checking for --enable-universalsdk... no
checking for --with-universal-archs... no
checking MACHDEP... checking for --without-gcc... no
checking for --with-icc... no
checking for gcc... no
checking for cc... no
checking for cl.exe... no
configure: error: in `/root/Python-3.7.0':
configure: error: no acceptable C compiler found in $PATH
See `config.log' for more details

报错为找不到C编译器，由于系统为最小化安装，没有自带gcc编译器安装gcc

yum install gcc

再次编译，编译通过安装编译文件

 make && make altinstall

日志如下

Traceback (most recent call last):
 File "/root/Python-3.7.0/Lib/runpy.py", line 193, in _run_module_as_main
 "__main__", mod_spec)
 File "/root/Python-3.7.0/Lib/runpy.py", line 85, in _run_code
 exec(code, run_globals)
 File "/root/Python-3.7.0/Lib/ensurepip/__main__.py", line 5, in <module>
 sys.exit(ensurepip._main())
 File "/root/Python-3.7.0/Lib/ensurepip/__init__.py", line 204, in _main
 default_pip=args.default_pip,
 File "/root/Python-3.7.0/Lib/ensurepip/__init__.py", line 117, in _bootstrap
 return _run_pip(args + [p[0] for p in _PROJECTS], additional_paths)
 File "/root/Python-3.7.0/Lib/ensurepip/__init__.py", line 27, in _run_pip
 import pip._internal
zipimport.ZipImportError: can't decompress data; zlib not available

make: *** [altinstall] 错误 1

编译报错，找不到zlib，同理，安装zlib

yum -y install zlib*

另外，此时安装的是3.7版本，3.7版本需要一个新的包libffi-devel否则也会编译报错

yum install libffi-devel -y

安装成功

Python3.7对应的包管理工具pip版本也为3.7，查看其路径

[root@localhost Python-3.7.0]# which pip3.7
/usr/local/bin/pip3.7

设置软链接

ln -s /usr/local/bin/pip3.7 /usr/local/bin/pip

安装virtualenv

安装virtualenv，用于隔离Python环境

pip install virtualenv

安装git工具及其依赖

yum -y install git nss curl

创建ansible账户

useradd ansible

切换用户

[root@localhost Python-3.7.0]# su - ansible
[ansible@localhost ~]$

在ansible用户下创建virtualenv实例，用于集成ansible2.5

virtualenv -p /usr/local/bin/python3.7 .py3-a2.5-env

源码安装git-ansible2.5

cd /home/ansible/.py3-a2.5-env

下载源码

git clone https://github.com/ansible/ansible.git

加载virtualenv环境

[ansible@localhost .py3-a2.5-env]$ source /home/ansible/.py3-a2.5-env/bin/activate
(.py3-a2.5-env) [ansible@localhost .py3-a2.5-env]$

安装ansible依赖

pip install paramiko PyYAML jinja2

查看文件

(.py3-a2.5-env) [ansible@localhost .py3-a2.5-env]$ ll
总用量 8
drwxrwxr-x 14 ansible ansible 4096 8月 18 20:24 ansible
drwxrwxr-x 2 ansible ansible 248 8月 18 20:16 bin
drwxrwxr-x 2 ansible ansible 24 8月 18 20:13 include
drwxrwxr-x 3 ansible ansible 23 8月 18 20:13 lib
-rw-rw-r-- 1 ansible ansible 59 8月 18 20:16 pip-selfcheck.json

移动源码至虚拟环境

mv ansible/ .py3-a2.5-env/

进入虚拟环境源码目录

(.py3-a2.5-env) [ansible@localhost .py3-a2.5-env]$ cd .py3-a2.5-env/
(.py3-a2.5-env) [ansible@localhost .py3-a2.5-env]$ ll
总用量 108
drwxrwxr-x 2 ansible ansible 223 8月 18 20:24 bin
drwxrwxr-x 3 ansible ansible 63 8月 18 20:24 changelogs
-rw-rw-r-- 1 ansible ansible 10591 8月 18 20:24 CODING_GUIDELINES.md
drwxrwxr-x 4 ansible ansible 53 8月 18 20:24 contrib
-rw-rw-r-- 1 ansible ansible 35148 8月 18 20:24 COPYING
drwxrwxr-x 7 ansible ansible 71 8月 18 20:24 docs
-rw-rw-r-- 1 ansible ansible 48 8月 18 20:24 docsite_requirements.txt
drwxrwxr-x 4 ansible ansible 192 8月 18 20:24 examples
drwxrwxr-x 5 ansible ansible 305 8月 18 20:24 hacking
drwxrwxr-x 3 ansible ansible 21 8月 18 20:24 lib
drwxrwxr-x 2 ansible ansible 78 8月 18 20:24 licenses
-rw-rw-r-- 1 ansible ansible 13452 8月 18 20:24 Makefile
-rw-rw-r-- 1 ansible ansible 557 8月 18 20:24 MANIFEST.in
-rw-rw-r-- 1 ansible ansible 201 8月 18 20:24 MODULE_GUIDELINES.md
drwxrwxr-x 10 ansible ansible 120 8月 18 20:24 packaging
-rw-rw-r-- 1 ansible ansible 5265 8月 18 20:24 README.rst
-rw-rw-r-- 1 ansible ansible 371 8月 18 20:24 requirements.txt
-rw-rw-r-- 1 ansible ansible 10586 8月 18 20:24 setup.py
-rw-rw-r-- 1 ansible ansible 3287 8月 18 20:24 shippable.yml
drwxrwxr-x 10 ansible ansible 121 8月 18 20:24 test
-rw-rw-r-- 1 ansible ansible 1103 8月 18 20:24 tox.ini

切换版本

(.py3-a2.5-env) [ansible@localhost .py3-a2.5-env]$ git checkout stable-2.5

分支 stable-2.5 设置为跟踪来自 origin 的远程分支 stable-2.5。切换到一个新分支 ‘stable-2.5’

(.py3-a2.5-env) [ansible@localhost ansible]$ git branch
 devel
* stable-2.5

(.py3-a2.5-env) [ansible@localhost ansible]$ pwd
/home/ansible/.py3-a2.5-env/ansible

加载ansible2.5版本

source /home/ansible/.py3-a2.5-env/ansible/hacking/env-setup -q

验证版本

(.py3-a2.5-env) [ansible@localhost ansible]$ ansible --version
ansible 2.5.8 (stable-2.5 b23b1c2ee0) last updated 2018/08/18 20:35:45 (GMT +800)
 config file = None
 configured module search path = ['/home/ansible/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
 ansible python module location = /home/ansible/.py3-a2.5-env/ansible/lib/ansible
 executable location = /home/ansible/.py3-a2.5-env/ansible/bin/ansible
 python version = 3.7.0 (default, Aug 18 2018, 20:09:08) [GCC 4.8.5 20150623 (Red Hat 4.8.5-28)]