ansible-playbook之修改ssh端口和limits参数控制

最新推荐文章于 2024-09-12 16:58:53 发布

weixin_33756418

最新推荐文章于 2024-09-12 16:58:53 发布

阅读量1.2k

点赞数

CC 4.0 BY-SA版权

文章标签：运维

原文链接：https://yq.aliyun.com/articles/460632

本文介绍如何使用Ansible自动化配置工具来批量修改SSH端口、设置防火墙及调整limits.conf文件中的限制，包括文件描述符数量、进程数及栈大小等关键参数。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

一、描述

拿到一批机器，需要做首先是修改ssh端口，防火墙配置，以及limits.conf控制文件描述符，进程数，栈大小等。

二、剧本如下：

---

    - hosts: "{{ host }}"

      remote_user: "{{ user }}"

      gather_facts: false
 
      tasks:

          - name: Modify ssh port 69410

            lineinfile:

                dest: /etc/ssh/{{ item }}

                regexp: '^Port 69410'

                insertafter: '#Port 22'

                line: 'Port 69410'
 
            with_items:

                - sshd_config

                - ssh_config

            tags:

                - sshport
 
          - name: Set sysctl file limiits
#            pam_limits: domain='*' limit_type=`item`.`limit_type` limit_item=`item`.`limit_item` value=`item`.`value` 

            pam_limits:

                dest: "{{ item.dest }}"

                domain: '*'

                limit_type: "{{ item.limit_type }}"

                limit_item: "{{ item.limit_item }}"

                value: "{{ item.value }}"

            with_items:

                - { dest: '/etc/security/limits.conf',limit_type: 'soft',limit_item: 'nofile', value: '655350' }

                - { dest: '/etc/security/limits.conf',limit_type: 'hard',limit_item: 'nofile', value: '655350'}

                - { dest: '/etc/security/limits.conf',limit_type: 'soft',limit_item: 'nproc', value: '102400' }

                - { dest: '/etc/security/limits.conf',limit_type: 'hard',limit_item: 'nproc', value: '102400' }

                - { dest: '/etc/security/limits.conf',limit_type: 'soft',limit_item: 'sigpending', value: '255377' }

                - { dest: '/etc/security/limits.conf',limit_type: 'hard',limit_item: 'sigpending', value: '255377' }

                - { dest: '/etc/security/limits.d/90-nproc.conf', limit_type: 'soft',limit_item: 'nproc', value: '262144' }

                - { dest: '/etc/security/limits.d/90-nproc.conf', limit_type: 'hard',limit_item: 'nproc', value: '262144' }
 
            tags:

                - setlimits