[toc]

## A0. instructor - su, day*4, 9:30-17:30

hand

|  ID  | URL                                            |              NAME               |
| :--: | ---------------------------------------------- | :-----------------------------: |
|  1   | https://typoraio.cn<br>https://www.marktext.cc |         Markdown 编辑器         |
|  2   | https://excalidraw.com<br>https://handraw.top  | 手绘网络画图<br />\*.excalidraw |

## A1. 学习准备

- 电子教材 <=- 邮件

- 培训环境

  - 地址	https://rol-cn.ole.redhat.com/rol/app/login/local
    帐号，密码 <=- 邮件

   - 时间：`45` 天


## A2. 培训环境

​	<kbd>加入</kbd> / <kbd>实验</kbd> / `workstation` <kbd>打开控制台</kbd>

​	==student==%==student==

## A3. 建议

1. 更改分辨率
2. 全屏
3. 两显示器

## A4. Linux 小技巧

> 命令选项 
>
> - ==-==字母
>
> - ==--==单词

| STEP | TITLE                 | COMMENTS                                                     |
| :--: | --------------------- | ------------------------------------------------------------ |
|  1   | word                  | [ansible](https://www.themoviedb.org/movie/80274-ender-s-game?language=zh-CN) |
|  2   | ans<kbd>Tab</kbd>     | $ anible<kbd>Tab</kbd><kbd>Tab</kbd>                         |
|  3   | man CMD<br>CMD --help | $ man ansible<br>$ ansible --help<br>$ ansible -h<br><br>\*$ ansible-navigator doc<br/> $ ansible-doc<br>https://docs.ansible.com |
|  4   | echo $?               | $ echo $?<br>0 == ok                                         |

## A5. vimrc

> - /etc/vimrc
>
> - ~/.vimrc
>
>   
>
> 列出所有选项
>
> ```bash
> $ vim
> set all
> ```

|  ID  |  Short  |     Long     | Comments                   |
| :--: | :-----: | :----------: | -------------------------- |
|  1   |   nu    |    number    | 行号                       |
|  2   |  ts=2   |   tabstop    | tab -=> space*2            |
|  2   |   et    |  expandtab   | 显示2空格，保存文件中2空格 |
|  3   |  sw=2   |  shiftwidth  | >, <                       |
|  4   |   cuc   | cursorcolumn | 光标列                     |
|  5   |    -    |   `paste`    | 粘贴                       |
|  6   | ft=yaml |   filetype   | 指明文件类型，语法高亮显示 |

```bash
$ cat > ~/.vimrc >/dev/null<<EOF
set nu ts=2 et sw=2 cuc paste ft=yaml
EOF

$ sudo tee -a /etc/vimrc >/dev/null<<EOF
set number  tabstop=2 expandtab  shiftwidth=2  cursorcolumn  paste   filetype=yaml
EOF
```

## A6. yaml, yml

> - 第一行 `---`，可以省略
> - 只能使用空格，不支持 <kbd>Tab</kbd>
> - 每个级别对齐，空格缩进（两空格）
> - Key:<kbd>space</kbd>value

## A7. ansible-navigator

> - openshfit  -=> oc
> - K8s -=> kubectl
> - Ceph -=> ceph

|  ID  | NEW（container）              | OLD                      |
| :--: | ----------------------------- | ------------------------ |
|  1   | $ ansible-navigator run X.yml | $ ansible-playbook X.yml |
|  2   | $ ansible-navigator inventory | $ ansible-inventory      |
|  3   | $ ansible-navigator config    | $ ansible-config         |

##  A8. 相关网址

|  ID  | URL                                                          | COMMENTS    |
| :--: | ------------------------------------------------------------ | ----------- |
|  1   | https://www.redhat.com/zh/services/training/do374-developing-advanced-automation-red-hat-ansible-automation-platform | 红帽课程    |
|  2   | https://docs.ansible.com/ansible/latest/index.html           | ansible手册 |
|  3   | https://developers.redhat.com/                               | 开发者帐号  |
|  4   | https://galaxy.ansible.com/                                  | 集合、角色  |
|  5   | https://rime.im/                                             | 输入法      |

|  ID  | URL                                |              ACCOUNT              |                 COMMENTS                  |
| :--: | ---------------------------------- | :-------------------------------: | :---------------------------------------: |
|  1   | https://hub.lab.example.com        | admin%redhat<br>student%redhat123 | ⾃动化中⼼<br />(LAN: galaxy.ansible.com) |
|  2   | https://controller.lab.example.com |           admin%redhat            |  ⾃动化控制器<br />(ansible Tower / AWX)  |
|  3   | https://git.lab.example.com        |        student%Student@123        |                                           |

## A9. 环境

```bash
$ dnf provides ansible-navigator
$ sudo dnf -y install ansible-navigator

$ podman login hub.lab.example.com -u admin -p redhat

$ ansible-navigator welcome \
  --eei hub.lab.example.com/ee-supported-rhel8:latest
```

​		:config <kbd>esc</kbd>
​		:images <kbd>esc</kbd>

​		<kbd>esc</kbd>

```bash
$ cat > inventory <<EOF
localhost
servera
EOF

交互模式
$ ansible-navigator inventory \
  -i inventory \
  --eei hub.lab.example.com/ee-supported-rhel8:latest

回显
$ ansible-navigator inventory \
	-i inventory \
  --eei hub.lab.example.com/ee-supported-rhel8:latest \
  -m stdout \
  --graph

镜像拉取策略
$ ansible-navigator inventory \
	-i inventory \
  --eei hub.lab.example.com/ee-supported-rhel8:latest \
  -m stdout \
  --graph \
  --pp missing
```

```bash
$ ansible servera -i inventory -m ping

-m command 默认模块名
$ ansible servera -i inventory -m command -a whoami
$ ansible servera -i inventory -a whoami

-m shell 支持特殊符号
$ ansible servera -i inventory -m shell -a "id; whoami"
```

```bash
-u == cfg/remote_user
$ ansible servera -i inventory -a whoami \
  -u root
```

```bash
-K == ask sudo password
$ ansible servera i inventory -a whoami \
  -b \
  -K
ВЕCOME password: `student`

$ ansible servera i inventory -a whoami \
  -b \
  -e ansible_become_password=student
```

```bash
$ vim test.yml
```

```yaml
- hosts: servera
  tasks:
  - ping:
  - command: whoami
```

```yaml
- hosts: servera
  tasks:
  - ansible.builtin.ping:
  - ansible.builtin.command: whoami
```

```bash
$ ansible-navigator run test.yml \
	-i inventory \
  --eei hub.lab.example.com/ee-supported-rhel8:latest
```

```bash
$ ls test*.json

$ ansible-navigator replay test-artifact-2024-01-22T06:06:02.279606+00:00.json \
  --eei hub.lab.example.com/ee-supported-rhel8:latest \
  -m stdout
```

```bash
$ ansible-navigator doc -t connection -l \
  --eei hub.lab.example.com/ee-supported-rhel8:latest \
  -m stdout

$ ansible-navigator doc -t connection ssh \
  --eei ee-supported-rhel8 \
  -m stdout
```

```bash
$ ansible-navigator doc -l \
  --eei ee-supported-rhel8 \
  -m stdout

$ ansible-navigator doc command ssh \
  --eei ee-supported-rhel8 \
  -m stdout
```

https://docs.ansible.com/
	[Modules and plugins index](https://docs.ansible.com/ansible/latest/collections/all_plugins.html)
		[Index of all Modules](https://docs.ansible.com/ansible/latest/collections/index_module.html)

- command
- ping



```bash
$ ansible --version
ansible [core 2.13.4]
config file = `/home/student/develop-navigator/ansible.cfg`

$ cat inventory
```

```bash
$ ansible-navigator inventory --graph \
  -eei hub.lab.example.com/ee-supported-rhel8:latest \
  -m stdout \
  --pp missing
  
@all:
  |--@ungrouped:
  |--@web:
  |  |--@servera:
  |  |  |--servera.lab.example.com
```

## A10. frp-内网穿透

官网 https://gofrp.org/zh-cn/
示例 https://gofrp.org/zh-cn/docs/examples/ssh/

> 外币信用卡，申请 aws 1年 免费云主机
>
> - 亚太地区(东京)
> - 安全组放行端口: 
>   - 53/tcp, 53/udp
>   - 374/tcp

- 1. AWS(aws.opensu.org)-frps

  ```bash
  # var
  FRP_FILE=frp_0.61.2_linux_amd64
  
  # download
  wget https://github.com/fatedier/frp/releases/download/v0.61.2/${FRP_FILE}.tar.gz
  
  # extract
  tar -xf ${FRP_FILE}.tar.gz
  
  # program
  sudo mv ${FRP_FILE}/frps /usr/local/sbin/
  
  # configure
  sudo tee /etc/frps.toml >/dev/null<<EOF
  bindPort = 53
  EOF
  
  # service unit
  sudo tee /lib/systemd/system/frps.service >/dev/null<<EOF
  [Unit]
  Description = frp server
  After = network.target  systemd-user-sessions.service
  [Service]
  Type = simple
  ExecStart = /usr/local/sbin/frps -c /etc/frps.toml
  [Install]
  WantedBy = multi-user.target
  EOF
  
  # service start
  sudo systemctl enable --now frps
  ```

  2. workstation-frpc

  ```bash
  # var
  FRP_FILE=frp_0.61.2_linux_amd64
  
  # download from china
  wget  https://hub.gitmirror.com/https://github.com/fatedier/frp/releases/download/v0.61.2/${FRP_FILE}.tar.gz
  
  # extract
  tar -xf ${FRP_FILE}.tar.gz
  
  # program
  sudo mv ${FRP_FILE}/frpc /usr/local/bin/
  
  # configure
  sudo tee /etc/frpc.toml >/dev/null<<EOF
  serverAddr = "aws.opensu.org"
  serverPort = 53
  [[proxies]]
  name = "ssh"
  type = "tcp"
  localIP = "127.0.0.1"
  localPort = 22
  remotePort = 374
  EOF
  
  # service unit
  sudo tee /lib/systemd/system/frpc.service >/dev/null<<EOF
  [Unit]
  Description = frp client
  After = network.target  systemd-user-sessions.service
  [Service]
  Type = simple
  ExecStart = /usr/local/bin/frpc -c /etc/frpc.toml
  [Install]
  WantedBy = multi-user.target
  EOF
  
  # service start
  setenforce 0
  sudo systemctl enable --now frpc
  ```

- 🖥️ 物理机

  ```bash
  ssh -o Port=374 student@aws.opensu.org
  ```

## A10.1 网页可以直接打开

1. 🖥️ 物理机：本地端口转发

   >ssh -D == socket5 代理

   ```bash
   # windows: `cmd` -=> 以管理员身份运行
   # macOS: sudo
   
   # 开启 socket 代理
   sudo ssh -o Port=374 -fND 8374 student@aws.opensu.org
   
   sudo netstat -anl | grep 8374
   :<<EOF
   tcp4       0      0  `127.0.0.1.8374`   *.*   LISTEN
   EOF
   ```

2. 🖥️ 物理机：本地浏览器 chrome 设置

   > 代理指向 socks 代理
   >
   > - 服务器：`127.0.0.1`
   > - 端口：`8374`


3. 🖥️ 物理机：访问测试
   https://hub.lab.example.com
   https://controller.lab.example.com

## A10.2 流量分流

> 使用 自动配置代理 PAC

1. 🖥️ 物理机
   代理 / 自动配置代理 /
     代理配置文件 URL https://opensu.org:8443/Redhat/pacs/proxy-374.pac

1. 🖥️ 物理机

   https://hub.lab.example.com
   https://controller.lab.example.com

## A11. delegate

```yaml
---
- name: Delegation Example
  hosts: demo.lab.example.com
  become: false
  tasks:
  - name: Get system information
    ansible.builtin.command: uname -a
    register: managed_host
  - name: Display demo system information
    ansible.builtin.debug:
    var: managed_host

- name: Delegation Example
  hosts: host.lab.example.com
  become: false
  tasks:
  - name: Get system information
    ansible.builtin.command: uname -a
    register: delegated
  - name: Display localhost system information
    ansible.builtin.debug:
    var: delegated
```

## A12. ssh client


| &nbsp;&nbsp; <b>ID</b> &nbsp;&nbsp; | &nbsp;&nbsp; Windows&nbsp;&nbsp; | &nbsp;&nbsp; <img width='28' src='https://simpleicons.org/icons/apple.svg'> &nbsp;&nbsp;<br>&nbsp;&nbsp;macOS&nbsp;&nbsp; | &nbsp;&nbsp; <img width='28' src='https://simpleicons.org/icons/linux.svg'> &nbsp;&nbsp;<br>&nbsp;&nbsp;Linux&nbsp;&nbsp; | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>NAME</b>  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <b>COMMENT</b>  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |
| :---------------------------------: | :------------------------------: | :----------------------------------------------------------: | :----------------------------------------------------------: | :----------------------------------------------------------- | ------------------------------------------------------------ |
|                  1                  |        :heavy_check_mark:        |                      :heavy_minus_sign:                      |                      :heavy_minus_sign:                      | &nbsp;&nbsp;&nbsp;&nbsp;<img width='38' src='https://mobaxterm.mobatek.net/img/moba/xterm_logo.png'> [MobaXterm](https://mobaxterm.mobatek.net/) | &nbsp;&nbsp;&nbsp;&nbsp;免费（限制）和收费                   |
|                  2                  |        :heavy_check_mark:        |                      :heavy_minus_sign:                      |                      :heavy_minus_sign:                      | &nbsp;&nbsp;&nbsp;&nbsp;<img width='38' src='http://k8s.ruitong.cn:8080/Software/ssh_client/images/XSHELL.png'> [XSHELL](https://www.xshell.com/zh/xshell/) | &nbsp;&nbsp;&nbsp;&nbsp;家庭、学生免费                       |
|                  3                  |        :heavy_check_mark:        |                      :heavy_check_mark:                      |                      :heavy_check_mark:                      | &nbsp;&nbsp;&nbsp;&nbsp;<img width='38' src='http://k8s.ruitong.cn:8080/Software/ssh_client/images/WindTerm.png'> [WindTerm](https://github.com/kingToolbox/WindTerm) | &nbsp;&nbsp;&nbsp;&nbsp;开源，github                         |
|                  4                  |        :heavy_check_mark:        |                      :heavy_check_mark:                      |                      :heavy_check_mark:                      | [Tabby](https://tabby.sh/)                                   | &nbsp;&nbsp;&nbsp;&nbsp;开源，github                         |
|                  5                  |        :heavy_check_mark:        |                      :heavy_check_mark:                      |                      :heavy_check_mark:                      | &nbsp;&nbsp;&nbsp;&nbsp;<img width='38' src='http://k8s.ruitong.cn:8080/Software/ssh_client/images/Hyper.png'> [Hyper](https://hyper.is/) | &nbsp;&nbsp;&nbsp;&nbsp;开源，github                         |
|                  6                  |        :heavy_check_mark:        |                      :heavy_check_mark:                      |                      :heavy_check_mark:                      | &nbsp;&nbsp;&nbsp;&nbsp;<img width='38' src='http://k8s.ruitong.cn:8080/Software/ssh_client/images/SecureCRT.png'> [SecureCRT](https://securecrtfx.cn/SecureCRT/) | &nbsp;&nbsp;&nbsp;&nbsp;收费                                 |
|                  7                  |        :heavy_minus_sign:        |                      :heavy_check_mark:                      |                      :heavy_minus_sign:                      | &nbsp;&nbsp;&nbsp;&nbsp;<img width='38' src='http://k8s.ruitong.cn:8080/Software/ssh_client/images/iTerm2.png'> [iTerm2](https://iterm2.com/) | &nbsp;&nbsp;&nbsp;&nbsp;免费                                 |