以下是使用 Ansible 执行文件删除操作的完整指南，涵盖基础删除、通配符匹配、权限管理及安全策略，帮助您安全高效地管理文件清理任务

---

以下是使用 Ansible 执行文件删除操作的完整指南，涵盖基础删除、通配符匹配、权限管理及安全策略，帮助您安全高效地管理文件清理任务：

---

---

一、基础删除操作

1. 删除单个文件

- name: Delete a specific file
  ansible.builtin.file:
    path: /path/to/file.txt
    state: absent  # 强制删除文件或目录

2. 删除空目录

- name: Remove empty directory
  ansible.builtin.file:
    path: /path/to/empty_dir
    state: absent

---

二、高级删除场景

1. 递归删除目录及内容

- name: Delete directory recursively
  ansible.builtin.file:
    path: /path/to/directory
    state: absent
    recurse: yes  # 递归删除子文件和子目录

2. 通配符批量删除文件

- name: Delete log files older than 7 days
  ansible.builtin.shell: |
    find /var/log -name "*.log" -mtime +7 -exec rm -f {} \;
  register: delete_result

3. 动态匹配并删除文件

- name: Delete files by pattern
  ansible.builtin.file:
    path: "/tmp/{{ item }}"
    state: absent
  loop: "{{ lookup('fileglob', '/tmp/temp_*.tmp') }}"  # 动态获取匹配文件列表

---

三、安全与权限管理

1. 提升权限删除受保护文件

- name: Force delete protected file
  ansible.builtin.file:
    path: /protected/file
    state: absent
  become: yes  # 使用 sudo 权限

2. 检查文件存在性后删除

- name: Check if file exists
  ansible.builtin.stat:
    path: /optional/file
  register: file_stat

- name: Delete file conditionally
  ansible.builtin.file:
    path: /optional/file
    state: absent
  when: file_stat.stat.exists  # 仅当文件存在时执行删除

---

四、完整 Playbook 示例

---
- name: Clean up temporary files
  hosts: all
  become: yes  # 全局提升权限
  vars:
    temp_dirs:
      - /tmp/app_cache
      - /var/tmp/old_logs
    log_pattern: "*.log"
  tasks:
    - name: Delete specified directories
      ansible.builtin.file:
        path: "{{ item }}"
        state: absent
      loop: "{{ temp_dirs }}"

    - name: Delete old log files
      ansible.builtin.shell: |
        find /var/log -name "{{ log_pattern }}" -mtime +30 -delete
      register: log_cleanup

    - name: Show cleanup results
      ansible.builtin.debug:
        var: log_cleanup.stdout_lines

---

五、错误处理与调试

1. 权限不足

• 错误现象：Permission denied
• 解决方案：

- name: Fix directory ownership
  ansible.builtin.file:
    path: /protected/dir
    owner: root
    group: root
    mode: '0755'

2. 路径不存在导致任务失败

• 错误现象：No such file or directory
• 解决方案：添加条件判断

- name: Safe delete operation
  ansible.builtin.file:
    path: /optional/path
    state: absent
  ignore_errors: yes  # 忽略错误继续执行

3. 递归删除大目录卡顿

• 优化方案：使用异步任务

- name: Async delete large directory
  ansible.builtin.async_status:
    jid: "{{ async_result.ansible_job_id }}"
  register: job_result
  until: job_result.finished
  retries: 10

---

六、最佳实践

1. 避免硬编码路径：通过变量管理路径：

   vars:
     cleanup_path: /opt/myapp/temp
   tasks:
     - name: Delete {{ cleanup_path }}
       ansible.builtin.file:
         path: "{{ cleanup_path }}"
         state: absent
   

2. 记录操作日志：

   - name: Log deletion details
     ansible.builtin.debug:
       msg: "Deleted directory {{ item }}"
     loop: "{{ deleted_dirs }}"
   

3. 测试模式（Dry-run）：

   ansible-playbook playbook.yml --check  # 模拟执行，不实际操作
   

---

通过合理使用 Ansible 的文件管理模块和条件判断，可以实现安全、灵活的自动化清理任务！ 🧹
官方文档参考：Ansible File Module

---