Free Red Hat Certified Engineer (RHCE) exam for Red Hat Enterprise Linux 8 Exam EX294 Exam Practice Test

Create an empty encrypted file called myvault.yml in /home/sandy/ansible and set the password to notsafepw. Rekey the password to iwejfj2221.

• Explanation: ansible-vault create myvault.yml Create new password: notsafepw Confirm password: notsafepw ansible-vault rekey myvault.yml Current password: notsafepw New password: iwejfj2221 Confirm password: iwejfj2221

Create a playbook called issue.yml in /home/sandy/ansible which changes the file /etc/issue on all managed nodes: If host is a member of (lev then write 'Development' If host is a member of test then write 'Test' If host is a member of prod then write 'Production'

• Explanation: Solution as:

In /home/sandy/ansible/ create a playbook called logvol.yml. In the play create a logical volume called Iv0 and make it of size 1500MiB on volume group vgO If there is not enough space in the volume group print a message 'Not enough space for logical volume' and then make a 800MiB Iv0 instead. If the volume group still doesn't exist, create a message 'Volume group doesn't exist' Create an xfs filesystem on all Iv0 logical volumes. Don't mount the logical volume.

• Explanation: Solution as:

Install and configure ansibleUser sandy has been created on your control node with the appropriate permissions already, do not change or modify ssh keys. Install the necessary packages to run ansible on the control node. Configure ansible.cfg to be in folder /home/sandy/ansible/ansible.cfg and configure to access remote machines via the sandy user. All roles should be in the path /home/sandy/ansible/roles. The inventory path should be in /home/sandy/ansible/invenlory.You will have access to 5 nodes.node3.example.comConfigure these nodes to be in an inventory file where node I is a member of group dev. nodc2 is a member of group test, node3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

• Explanation: In/home/sandy/ansible/ansible.cfg [defaults] inventory=/home/sandy/ansible/inventory roles_path=/home/sandy/ansible/roles remote_user= sandy host_key_checking=false [privilegeescalation] become=true become_user=root become_method=sudo become_ask_pass=false In /home/sandy/ansible/inventory [dev] node 1 .example.com [test] node2.example.com [proxy] node3 .example.com [prod] node4.example.com node5 .example.com [webservers:children] prod

Create a playbook called regulartasks.yml which has the system that append the date to /root/datefile every day at noon. Name is job 'datejob'

• Explanation: Solution as:

Use Ansible Galaxy with a requirements file called /home/admin/ansible/roles/install.yml to download and install roles to /home/admin/ansible/roles from thefollowing URLs:http:// classroom.example.com /role1.tar.gz The name of this role should be balancerhttp:// classroom.example.com /role2.tar.gz The name of this role should be phphello

• Explanation: Solution as: # pwd /home/admin/ansible/roles # vim install.yml --- - src: http://classroom.example.com/role1.tar.gz name: balancer - src: http://classroom.example.com/role2.tar.gz name: phphello :wq! # pwd /home/admin/ansible # ansible-galaxy install -r roles/install.yml -p roles

Create a role called apache in '/home/admin/ansible/roles' with the followingrequirements:--> The httpd package is installed, enabled on boot, and started.--> The firewall is enabled and running with a rule to allow access to the web server.--> template file index.html.j2 is used to create the file /var/www/html/index.htmlwith the output:Welcome to HOSTNAME on IPADDRESS--> Where HOSTNAME is the fqdn of the managed node and IPADDRESS is the IP-Address ofthe managed node.note: you have to create index.html.j2 file.--> Create a playbook called httpd.yml that uses this role and the playbook runs onhosts in the webservers host group.

• Explanation: Solution as: ---------- # pwd /home/admin/ansible/roles/ # ansible-galaxy init apache # vim apache/vars/main.yml --- # vars file for apache http_pkg: httpd firewall_pkg: firewalld http_srv: httpd firewall_srv: firewalld rule: http webpage: /var/www/html/index.html template: index.html.j2 :wq! # vim apache/tasks/package.yml --- - name: Installing packages yum: name: - '{{http_pkg}}' - '{{firewall_pkg}}' state: latest :wq! # vim apache/tasks/service.yml --- - name: start and enable http service service: name: '{{http_srv}}' enabled: true state: started - name: start and enable firewall service service: name: '{{firewall_srv}}' enabled: true state: started :wq! # vim apache/tasks/firewall.yml --- - name: Adding http service to firewall firewalld: service: '{{rule}}' state: enabled permanent: true immediate: true :wq! # vim apache/tasks/webpage.yml --- - name: creating template file template: src: '{{template}}' dest: '{{webpage}}' notify: restart_httpd !wq # vim apache/tasks/main.yml # tasks file for apache - import_tasks: package.yml - import_tasks: service.yml - import_tasks: firewall.yml - import_tasks: webpage.yml :wq! # vim apache/templates/index.html.j2 Welcome to {{ ansible_facts.fqdn }} on {{ ansible_facts.default_ipv4.address }} # vim apache/handlers/main.yml --- # handlers file for apache - name: restart_httpd service: name: httpd state: restarted :wq! # cd .. # pwd /home/admin/ansible/ # vim httpd.yml --- - name: Including apache role hosts: webservers pre_tasks: - name: pretask message debug: msg: 'Ensure webserver configuration' roles: - ./roles/apache post_tasks: - name: Check webserver uri: url: 'http://{{ ansible_facts.default_ipv4.address }}' return_content: yes status_code: 200 :wq! # ansible-playbook httpd.yml ---syntax-check # ansible-playbook httpd.yml # curl http://serverx

Create a playbook called balance.yml as follows:* The playbook contains a play that runs on hosts in balancers host group and usesthe balancer role.--> This role configures a service to loadbalance webserver requests between hostsin the webservers host group.curl--> When implemented, browsing to hosts in the balancers host group (for exampleWelcome to node3.example.com on 192.168.10.z--> Reloading the browser should return output from the alternate web server:Welcome to node4.example.com on 192.168.10.a* The playbook contains a play that runs on hosts in webservers host group and usesthe phphello role.--> When implemented, browsing to hosts in the webservers host group with the URL /hello.php should produce the following output:Hello PHP World from FQDN--> where FQDN is the fully qualified domain name of the host. For example,Hello PHP World from node3.example.comfollowing output:Hello PHP World from node4.example.com

• Explanation: Solution as: # pwd /home/admin/ansible/ # vim balancer.yml --- - name: Including phphello role hosts: webservers roles: - ./roles/phphello - name: Including balancer role hosts: balancer roles: - ./roles/balancer :wq! # ansible-playbook balancer.yml --syntax-check # ansible-playbook balancer.yml

Create a file called adhoc.sh in /home/sandy/ansible which will use adhoc commands to set up a new repository. The name of the repo will be 'EPEL' the description 'RHEL8' the baseurl is 'https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rmp' there is no gpgcheck, but you should enable the repo.* You should be able to use an bash script using adhoc commands to enable repos. Depending on your lab setup, you may need to make this repo 'state=absent' after you pass this task.

• Explanation: chmod 0777 adhoc.sh vim adhoc.sh #I/bin/bash ansible all -m yum_repository -a 'name=EPEL description=RHEL8 baseurl=https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rmp gpgcheck=no enabled=yes'

Create and run an Ansible ad-hoc command.--> As a system administrator, you will need to install software on the managednodes.--> Create a shell script called yum-pack.sh that runs an Ansible ad-hoc command tocreate yum-repository on each of the managed nodes as follows:--> repository1-----------1. The name of the repository is EX4072. The description is 'Ex407 Description'4. GPG signature checking is enabledrelease6. The repository is enabled--> repository2-----------1. The name of the repository is EXX4072. The description is 'Exx407 Description'4. GPG signature checking is enabledrelease6. The repository is enabled

• Explanation: Solution as: # pwd /home/admin/ansible # vim yum-pack.sh #!/bin/bash ansible all -m yum_repository -a 'name=EX407 description='Ex407 Description' baseurl=http://content.example.com/rhel8.0/x86_64/dvd/BaseOS/ gpgcheck=yes gpgkey=http://content.example.com/rhel8.0/x86_64/dvd/RPM-GPG-KEY-redhat-release enabled=yes' ansible all -m yum_repository -a 'name=EXX407 description='Exx407 Description' baseurl=http://content.example.com/rhel8.0/x86_64/dvd/AppStream/ gpgcheck=yes gpgkey=http://content.example.com/rhel8.0/x86_64/dvd/RPM-GPG-KEY-redhat-release enabled=yes' :!wq # chmod +x yum-pack.sh # bash yum-pack.sh # ansible all -m command -a 'yum repolist all'