Step 1 - Questions 1 to 7

Step 2 - Questions 8 to 11

Step 3 - Questions 12 to 17

Step 1

Question 1
Create inventory file with below content

[dev]
node1.realmX.example.com

[test]
node2.realmX.example.com

[prod]
node3.realmX.example.com
node4.realmX.example.com

[balancer]
node5.realmX.example.com

[webservers:children]
prod

Create ansible.cfg file

# vim ansible.cfg  
[defaults]  
inventory = /home/devops/ansible/inventory  
remote_user = devops  
ask_pass = false  
#roles_path = /home/devops/ansible/roles:/usr/share/ansible/roles  
#vault_password_file = /home/devops/ansible/secret.txt  
 
[privilege_escalation]  
become = true  
become_method = sudo  
become_user = root  
become_ask_pass = false  

Question 2
Ansible Install (on Master node)

$ sudo yum install ansible -y  

Question 3
Adhoc script
Create an adhoc.sh script to configure yum repository on all the nodes.
URL is available in http://content.example.com/yum/repository

# cat /adhoc.sh  
ansible all -m yum_repository -a 'name=ex407-yum \  
description="test description" \  
baseurl=http://content.example.com/rhel7.6/x86_64/dvd/ \  
gpgcheck=yes \  
enabled=yes \  
state=present \  
gpgkey=http://content.example.com/rhel7.6/x86_64/dvd/RPM-GPG-KEYredhat-release'  

ansible all -m rpm_key -a "state=present key=http://content.example.com/rhel7.6/x86_64/dvd/RPM-GPG-KEY-redhatrelease"  
# chmod 755 adhoc.sh  
# ./adhoc.sh  

Verification:

ansible all –m command –a ‘ls –l /etc/yum.repos.d'  

Question 4
Download roles using galaxy. Two links will be provided.
Create a folder 'roles' in current path.
Create an extraction file named 'requirements.yml' inside roles folder.

#  cat requirements.yml  
- src: link  
   name: balancer  
- src: link  
   name: phpinfo  
# ansible-galaxy install -r roles/requirements.yml  

Question 5
A play should be created using roles balancer and php.
The load should be balanced across two servers.
Each time when you reload the web page, the display should be
"Welcome <hostname> on <IP>"

$ cat roles.yml  
- name: user role1 
  hosts: webservers   
  roles:     
  - roles/phpinfo 
 
- name: user role2   
  hosts: balancer   
  roles:     
  - roles/balancer
$

Question 6.
Create an encrypted file named vault.yml.
Password to encrypt the file should be as "P@ssw0rd".
Save the "P@ssw0rd" in the file named "secret.txt" in current path.
Inside vault.yml, store the variable names like below:
pw_manager: Iammgr
pw_developer: Iamdev
Note: This yaml file should be accessible from anywhere in the system.

$ cat secret.txt 
P@ssw0rd 
$ 

$ ansible-vault create --vault-password-file=secret.txt vault.yml 
Enter the below content  
pw_manager: Iammgr  
pw_developer: Iamdev 
$ 

$ vim /home/devops/ansible/ansible.cfg 
vault_password_file = /home/devops/ansible/secret.txt 
$ 

Verificaton:

$ ansible-vault view vault.yml 

Question 7.
Download a file from the link and save as local.yml. Change the encryption password of the file from <password_1> to <password_2>.

$ wget http://content.example.com./  -O local.yml
$ ansible-vault rekey local.yml 
Vault password: 
New vault password: 
Confirm new vault password:
Rekey successful 
$ 

Step 2

Question 8
Download the hostfile template from the link and complete the template so that it creates and entry in dev group.
The contents on /etc/hosts should copied to /etc/myhosts.

$ cat hosts.j2  
{% for host in groups[‘all’] %}  
{{hostvars[host][‘ansible_facts’][‘default_ipv4’][‘address’]}} {{hostvars[host][‘ansible_facts’][‘fqdn’]}} {{hostvars[host][‘ansible_facts’][‘hostname’]}}  
{% endfor %}  
$  

$  cat myhosts.yml  
--- 
- name: copy content using template   
  hosts:  all   
  tasks:     
  - name: copy using template       
    template:         
      src:  hosts.j2         
      dest: /etc/myhost       
    when: inventory_hostname in groups['dev']
 $ 

Question 9
Install httpd, firewalld, start services, enable firewall service for httpd.
Create a playbook to install httpd and firewall.
Download the template to /home/greg/ansible folder.

Download template

$ pwd 
/home/greg/ansible 
$ wget http://example.com/template.j2 -O template.j2 

Create apache role in roles directory

$ mkdir /home/greg/ansible/roles 
$ cd /home/greg/ansible/roles 
$ pwd 
/home/greg/ansible/roles 
$ ansible-galaxy init apache

Update template and move into roles' template directory

$ pwd 
/home/greg/ansible 
$ mv template.j2 apache/templates
$ echo '{{ ansible_hostname }} {{ ansible_default_ipv4['address'] }}' >> apache/templates/template/j2 

Create apache deployment yaml file

$ pwd
/home/greg/ansible 
$ cat apache_role.yml 
---
- name: apache_role.yml
  hosts: dev, test 
  roles:
  - apache 
$ 

Create tasks in apache role

$ pwd 
/home/greg/ansible 
$ cd roles/apache/tasks
$ cat main.yml
# tasks for apache 
- name: install httpd and firewalld
  yum: 
    name: "{{ item }}" 
    state: latest 
  loop:
  - httpd
  - firewalld 
    
- name: Enable services 
  service:
    name: "{{ item }}" 
    state: started 
    enabled: yes 
  loop:
  - httpd 
  - firewalld 
  
- name: Enable firewall rule 
  firewalld:
    immediate: yes 
    permanent: yes 
    service: http
    state: enabled 
    
- name: create index.html 
  copy: 
    src: template.j2 
    dest: /var/www/html/index.html 
$

Question 10
Create a playbook (timesync.yml) to use system roles.
Set hostname to 172.25.254.254.
Set timesync_ntp_provider to chrony.

Enable repo

$ sudo yum-config-manager --enable rhel-7-server-extras-rpms

Install the system roles

$ sudo yum install rhel-system-roles

Verify the roles

$ ansible-galaxy list
$ cd /usr/share/ansible/roles/rhel-system-roles.timesync 
$ ls 

Create yaml file

$ cat configure_time.yml 
--- 
- name: time sync   
  hosts:  all   
  vars:     
    timesync_ntp_servers:        
      - hostname: 172.25.254.254         
        iburst: yes     
    timesync_ntp_provider: chrony        
  roles:     
    - /usr/share/ansible/roles/rhel-system-roles.timesync
$ 

Question 11
Create a playbook to replace the contents of the file /etc/issue on particular host groups (test, prod, dev).

$ cat issue.yml 
--- 
- name: copy content   
  hosts:  all   
  tasks:     
  - name: copy to dev server       
    copy:         
      content:  Developmenet server         
      dest: /etc/issue       
    when: inventory_hostname in groups['dev']     
    
  - name: copy to test server       
    copy:         
      content:  Test server      
      dest: /etc/issue       
    when: inventory_hostname in groups['test']     
    
  - name: copy to prod server       
    copy:         
      content:  production server         
      dest: /etc/issue       
    when: inventory_hostname in groups['prod'] 
$   

Step 3

Question 12
Create packages.yml playbook.
Install php and mariadb in dev hosts.
Install 'Development Tools' in prod hosts.
Update all packages to the latest in dev hosts.

$ cat package.yml 
--- 
- name: install php and maria   
  hosts:  all   
  tasks:     
  - name: install package       
    yum:         
      name: "{{item}}"         
      state: present       
    when: inventory_hostname in groups['dev']       
    loop: 
      - php 
      - mariadb
  - name: group install 
    yum: 
      name: '@Development Tools' 
      state: present 
    when: inventory_hostname in groups['prod']
  - name: update 
    yum: 
      name: '*' 
      state: latest 
    when: inventory_hostname in groups['dev']

Question 13
Create a directory /devweb and give group permission as devops and set gid to group.
Create a file index.html under /devweb.
Create link to /devweb/index.html to /var/www/html/index.html.
Copy the content 'Development" to /devweb/index.html.

$ cat webcontent.yml 
---
- name: webcontent.yml 
  hosts: all
  tasks:
  - name: directory creation 
    file: 
      path: /devweb
      state: directory 
      group: devops 
      mode: u=rwx,g=rwx,o=rx,g+s 
      setype: httpd_sys_content_t 
      recurse: yes 
  - name: copy content 
    copy: 
      content: Development server 
      dest: /devweb/index.html 
      setype: httpd_sys_content_t 
    when: inventory_hostname in groups['dev']
  - name: link file 
    file: 
      src: /devweb
      dest: /var/www/html/devweb
      state: link

Question 14

Question 15

Question 16

Question 17