MoreExam
1. Question Content...
EXPLANATION
Answer: X - EXPLANATION Content.
Question1: Create a file called requirements.yml in /home/sandy/ansible/roles a file called role.yml in /home/sandy/ansible/.The haproxy-role should be used on the proxy host. And when you curl http://node3.example.com it should display "Welcome to node4.example.com" and when you curl again "Welcome to node5.example.com" The php-role should be used on the prod host.
Question2: Create a role called sample-apache in /home/sandy/ansible/roles that enables and starts httpd, enables and starts the firewall and allows the webserver service. Create a template called index.html.j2 which creates and serves a message from /var/www/html/index.html Whenever the content of the file changes, restart the webserver service.Welcome to [FQDN] on [IP]Replace the FQDN with the fully qualified domain name and IP with the ip address of the node using ansible facts. Lastly, create a playbook in /home/sandy/ansible/ called apache.yml and use the role to serve the index file on webserver hosts.
Question3: ===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.Create a playbook called packages.yml that:------------------------------------------------> Installs the php and mariadb packages on hosts in the dev, test, and prod hostgroups.--> Installs the Development Tools package group on hosts in the dev host group.--> Updates all packages to the latest version on hosts in the dev host group.
Question4: ===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.Rekey an existing Ansible vault as follows:-----------------------------------------------* Download Ansible vault from http:// classroom.example.com /secret.yml to /home/admin/ansible/* The current vault password is curabete* The new vault password is newvare* The vault remains in an encrypted state with the new password
Question5: What keyword sets a change condition for a given task?
Question6: Install and configure ansibleUser sandy has been created on your control node with the appropriate permissions already, do not change or modify ssh keys. Install the necessary packages to run ansible on the control node. Configure ansible.cfg to be in folder /home/sandy/ansible/ansible.cfg and configure to access remote machines via the sandy user. All roles should be in the path /home/sandy/ansible/roles. The inventory path should be in /home/sandy/ansible/invenlory.You will have access to 5 nodes.node1.example.comnode2.example.comnode3.example.comnode4.example.comnode5.example.comConfigure these nodes to be in an inventory file where node I is a member of group dev. nodc2 is a member of group test, node3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.
Question7: ===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.Create a role called apache in "/home/admin/ansible/roles" with the followingrequirements:--> The httpd package is installed, enabled on boot, and started.--> The firewall is enabled and running with a rule to allow access to the web server.--> template file index.html.j2 is used to create the file /var/www/html/index.htmlwith the output:Welcome to HOSTNAME on IPADDRESS--> Where HOSTNAME is the fqdn of the managed node and IPADDRESS is the IP-Address ofthe managed node.note: you have to create index.html.j2 file.--> Create a playbook called httpd.yml that uses this role and the playbook runs onhosts in the webservers host group.
Question8: Create a role called sample-apache and store it in /home/bob/ansible/roles. The role shouldsatisfy the following requirements:*In the role, install and enable httpd. Also enable the firewall to allow http. Also run the template*index.html.j2 and make sure this runs Create a template index.html.j2 that displays "Welcome to the server HOSTNAME"In a play called apache.yml in /home/bob/ansible/ run the sample-apache role.
Question9: ===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.Install the RHEL system roles package and create a playbook called timesync.yml that:--> Runs over all managed hosts.--> Uses the timesync role.--> Configures the role to use the time server 192.168.10.254 ( Hear in redhat labuse "classroom.example.com" )--> Configures the role to set the iburst parameter as enabled.
Question10: ===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.Modify file content.------------------------Create a playbook called /home/admin/ansible/modify.yml as follows:* The playbook runs on all inventory hosts* The playbook replaces the contents of /etc/issue with a single line of text asfollows:--> On hosts in the dev host group, the line reads: "Development"--> On hosts in the test host group, the line reads: "Test"--> On hosts in the prod host group, the line reads: "Production"
Question11: Install and configure ansibleUser bob has been created on your control node. Give him the appropriate permissions on the control node. Install the necessary packages to run ansible on the control node.Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements:* The roles path should include /home/bob/ansible/roles, as well as any other path that may be required for the course of the sample exam.* The inventory file path is /home/bob/ansible/inventory.* Ansible should be able to manage 10 hosts at a single time.* Ansible should connect to all managed nodes using the bob user.Create an inventory file for the following five nodes:nodel.example.comnode2.example.comnode3.example.comnode4.example.comnode5.example.comConfigure these nodes to be in an inventory file where node1 is a member of group dev. nodc2 is a member of group test, nodc3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.
Question12: ===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.Use Ansible Galaxy with a requirements file called /home/admin/ansible/roles/install.yml to download and install roles to /home/admin/ansible/roles from thefollowing URLs:http:// classroom.example.com /role1.tar.gz The name of this role should be balancerhttp:// classroom.example.com /role2.tar.gz The name of this role should be phphello
Question13: Create a playbook /home/bob /ansible/motd.yml that runs on all inventory hosts and docs the following: The playbook should replaee any existing content of/etc/motd in the following text. Use ansible facts to display the FQDN of each hostOn hosts in the dev host group the line should be "Welcome to Dev Server FQDN".On hosts in the webserver host group the line should be "Welcome to Apache Server FQDN".On hosts in the database host group the line should be "Welcome to MySQL Server FQDN".
Question14: Using the Simulation Program, perform the following tasks:1. Use an ansible ad-hoc command, check the connectivity of your servers.2. Use an ad-hoc ansible command, find the free space of your servers.3. Use an ad-hoc ansible command, find out the memory usage of your servers.4. Do an ls -l on the targets /var/log/messages file.5. Tail the contents of the targets /var/log/messages file.