Free Red Hat Certified Engineer (RHCE) exam for Red Hat Enterprise Linux 8 Exam EX294 Exam Practice Test

Install and configure ansibleUser bob has been created on your control node. Give him the appropriate permissions on the control node. Install the necessary packages to run ansible on the control node.Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements:* The roles path should include /home/bob/ansible/roles, as well as any other path that may be required for the course of the sample exam.* The inventory file path is /home/bob/ansible/inventory.* Ansible should be able to manage 10 hosts at a single time.* Ansible should connect to all managed nodes using the bob user.Create an inventory file for the following five nodes:Configure these nodes to be in an inventory file where node1 is a member of group dev. nodc2 is a member of group test, nodc3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

• Explanation: In/home/sandy/ansible/ansible.cfg [defaults] inventory=/home/sandy/ansible/inventory roles_path=/home/sandy/ansible/roles remote_user= sandy host_key_checking=false [privilegeescalation] become=true become_user=root become_method=sudo become_ask_pass=false In /home/sandy/ansible/inventory [dev] node 1 .example.com [test] node2.example.com [proxy] node3 .example.com [prod] node4.example.com node5 .example.com [webservers:children] prod

Create a file called adhoc.sh in /home/sandy/ansible which will use adhoc commands to set up a new repository. The name of the repo will be 'EPEL' the description 'RHEL8' the baseurl is 'https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rmp' there is no gpgcheck, but you should enable the repo.* You should be able to use an bash script using adhoc commands to enable repos. Depending on your lab setup, you may need to make this repo 'state=absent' after you pass this task.

• Explanation: chmod 0777 adhoc.sh vim adhoc.sh #I/bin/bash ansible all -m yum_repository -a 'name=EPEL description=RHEL8 baseurl=https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rmp gpgcheck=no enabled=yes'

Create an ansible vault password file called lock.yml with the password reallysafepw in the /home/sandy/ansible directory. In the lock.yml file define two variables. One is pw_dev and the password is 'dev' and the other is pw_mgr and the password is 'mgr' Create a regular file called secret.txt which contains the password for lock.yml.

• Explanation: ansible-vault create lock.yml New Vault Password: reallysafepw Confirm: reallysafepw

Create user accounts--------------------------> A list of users to be created can be found in the file called user_list.ymlsave to /home/admin/ansible/--> Using the password vault created elsewhere in this exam, create a playbook calledcreate_user.ymlthat creates user accounts as follows:--> Users with a job description of developer should be:--> created on managed nodes in the 'dev' and 'test' host groups assigned thepassword from the 'dev_pass'variable and these user should be member of supplementary group 'devops'.--> Users with a job description of manager should be:--> created on managed nodes in the 'prod' host group assigned the password fromthe 'mgr_pass' variableand these user should be member of supplementary group 'opsmgr'--> Passwords should use the 'SHA512' hash format. Your playbook should work usingthe vault password filecreated elsewhere in this exam.while practising you to create these file hear. But in exam have to download as perquestation.user_list.yml file consist:---user:- name: user1job: developer- name: user2job: manager

• Explanation: Solution as: # pwd /home/admin/ansible # wget http://classroom.example.com/user_list.yml # cat user_list.yml # vim create_user.yml --- - name: hosts: all vars_files: - ./user_list.yml - ./vault.yml tasks: - name: creating groups group: name: '{{ item }}' state: present loop: - devops - opsmgr - name: creating user user: name: '{{ item.name }}' state: present groups: devops password: '{{ dev_pass|password_hash ('sha512') }}' loop: '{{ user }}' when: (inventory_hostname in groups['dev'] or inventory_hostname in groups['test']) and item.job == 'developer' - name: creating user user: name: '{{ item.name }}' state: present groups: opsmgr password: '{{ mgr_pass|password_hash ('sha512') }}' loop: '{{ user }}' when: inventory_hostname in groups['prod'] and item.job == 'manager' :wq! # ansible-playbook create_user.yml ---vault-password-file=password.txt ---syntax-check # ansible-playbook create_user.yml ---vault-password-file=password.txt

Create a playbook called timesvnc.yml in /home/sandy/ansible using rhel system role timesync. Set the time to use currently configured nip with the server 0.uk.pool.ntp.org. Enable burst. Do this on all hosts.

• Explanation: Solution as:

Create a file called requirements.yml in /home/sandy/ansible/roles to install two roles. The source for the first role is geerlingguy.haproxy and geerlingguy.php. Name the first haproxy-role and the second php-role. The roles should be installed in /home/sandy/ansible/roles.

• Explanation: in /home/sandy/ansible/roles vim requirements.yml Run the requirements file from the roles directory: ansible-galaxy install -r requirements.yml -p /home/sandy/ansible/roles

Create and run an Ansible ad-hoc command.--> As a system administrator, you will need to install software on the managednodes.--> Create a shell script called yum-pack.sh that runs an Ansible ad-hoc command tocreate yum-repository on each of the managed nodes as follows:--> repository1-----------1. The name of the repository is EX4072. The description is 'Ex407 Description'4. GPG signature checking is enabledrelease6. The repository is enabled--> repository2-----------1. The name of the repository is EXX4072. The description is 'Exx407 Description'4. GPG signature checking is enabledrelease6. The repository is enabled

• Explanation: Solution as: # pwd /home/admin/ansible # vim yum-pack.sh #!/bin/bash ansible all -m yum_repository -a 'name=EX407 description='Ex407 Description' baseurl=http://content.example.com/rhel8.0/x86_64/dvd/BaseOS/ gpgcheck=yes gpgkey=http://content.example.com/rhel8.0/x86_64/dvd/RPM-GPG-KEY-redhat-release enabled=yes' ansible all -m yum_repository -a 'name=EXX407 description='Exx407 Description' baseurl=http://content.example.com/rhel8.0/x86_64/dvd/AppStream/ gpgcheck=yes gpgkey=http://content.example.com/rhel8.0/x86_64/dvd/RPM-GPG-KEY-redhat-release enabled=yes' :!wq # chmod +x yum-pack.sh # bash yum-pack.sh # ansible all -m command -a 'yum repolist all'

Modify file content.------------------------Create a playbook called /home/admin/ansible/modify.yml as follows:* The playbook runs on all inventory hosts* The playbook replaces the contents of /etc/issue with a single line of text asfollows:--> On hosts in the dev host group, the line reads: ''Development''--> On hosts in the test host group, the line reads: ''Test''--> On hosts in the prod host group, the line reads: ''Production''

• Explanation: Solution as: # pwd /home/admin/ansible # vim modify.yml --- - name: hosts: all tasks: - name: copy: content: 'Development' dest: /etc/issue when: inventory_hostname in groups['dev'] - name: copy: content: 'Test' dest: /etc/issue when: inventory_hostname in groups['test'] - name: copy: content: 'Production' dest: /etc/issue when: inventory_hostname in groups['prod'] :wq # ansible-playbook modify.yml ---syntax-check # ansible-playbook modify.yml

Create a playbook called issue.yml in /home/sandy/ansible which changes the file /etc/issue on all managed nodes: If host is a member of (lev then write 'Development' If host is a member of test then write 'Test' If host is a member of prod then write 'Production'

• Explanation: Solution as:

Create a role called sample-apache in /home/sandy/ansible/roles that enables and starts httpd, enables and starts the firewall and allows the webserver service. Create a template called index.html.j2 which creates and serves a message from /var/www/html/index.html Whenever the content of the file changes, restart the webserver service.Welcome to [FQDN] on [IP]Replace the FQDN with the fully qualified domain name and IP with the ip address of the node using ansible facts. Lastly, create a playbook in /home/sandy/ansible/ called apache.yml and use the role to serve the index file on webserver hosts.

• Explanation: /home/sandy/ansible/apache.yml /home/sandy/ansible/roles/sample-apache/tasks/main.yml /home/sandy/ansible/roles/sample-apache/templates/index.html.j2 In /home/sandy/ansible/roles/sample-apache/handlers/main.yml