Free Red Hat Certified Specialist in Advanced Automation: Ansible Best Practices Exam EX447 Exam Practice Test

Create a file called adhoc.sh in /home/sandy/ansible which will use adhoc commands to set up a new repository. The name of the repo will be 'EPEL' the description 'RHEL8' the baseurl is 'https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rmp' there is no gpgcheck, but you should enable the repo.* You should be able to use an bash script using adhoc commands to enable repos. Depending on your lab setup, you may need to make this repo 'state=absent' after you pass this task.

• Explanation: chmod 0777 adhoc.sh vim adhoc.sh #I/bin/bash ansible all -m yum_repository -a 'name=EPEL description=RHEL8 baseurl=https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rmp gpgcheck=no enabled=yes'

Using the Simulation Program, perform the following tasks:1. Use an ansible ad-hoc command, check the connectivity of your servers.2. Use an ad-hoc ansible command, find the free space of your servers.3. Use an ad-hoc ansible command, find out the memory usage of your servers.4. Do an ls -l on the targets /var/log/messages file.5. Tail the contents of the targets /var/log/messages file.

• Explanation: 1. ansible all -m ping 2. ansible all -a '/bin/df -h' 3. ansible all -a '/usr/bin/free' 4. ansible all -a 'ls -l /var/log/messages' 5. ansible local -b -a 'tail /var/log/messages'

Create a playbook /home/bob/ansible/timesync.yml that runs on hosts in the webservers host group and does the following:* Uses the timesync RHEL system role.* Sets the ntp server to 0.uk.pool.ntp.org* Sets the timezone to UTC

• Explanation: Solution as:

Create a playbook called timesvnc.yml in /home/sandy/ansible using rhel system role timesync. Set the time to use currently configured nip with the server 0.uk.pool.ntp.org. Enable burst. Do this on all hosts.

• Explanation: Solution as:

Create a playbook called issue.yml in /home/sandy/ansible which changes the file /etc/issue on all managed nodes: If host is a member of (lev then write 'Development' If host is a member of test then write 'Test' If host is a member of prod then write 'Production'

• Explanation: Solution as:

Install and configure ansibleUser sandy has been created on your control node with the appropriate permissions already, do not change or modify ssh keys. Install the necessary packages to run ansible on the control node. Configure ansible.cfg to be in folder /home/sandy/ansible/ansible.cfg and configure to access remote machines via the sandy user. All roles should be in the path /home/sandy/ansible/roles. The inventory path should be in /home/sandy/ansible/invenlory.You will have access to 5 nodes.node3.example.comConfigure these nodes to be in an inventory file where node I is a member of group dev. nodc2 is a member of group test, node3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

• Explanation: In/home/sandy/ansible/ansible.cfg [defaults] inventory=/home/sandy/ansible/inventory roles_path=/home/sandy/ansible/roles remote_user= sandy host_key_checking=false [privilegeescalation] become=true become_user=root become_method=sudo become_ask_pass=false In /home/sandy/ansible/inventory [dev] node 1 .example.com [test] node2.example.com [proxy] node3 .example.com [prod] node4.example.com node5 .example.com [webservers:children] prod

Create an ansible vault password file called lock.yml with the password reallysafepw in the /home/sandy/ansible directory. In the lock.yml file define two variables. One is pw_dev and the password is 'dev' and the other is pw_mgr and the password is 'mgr' Create a regular file called secret.txt which contains the password for lock.yml.

• Explanation: ansible-vault create lock.yml New Vault Password: reallysafepw Confirm: reallysafepw

Create a file called requirements.yml in /home/sandy/ansible/roles a file called role.yml in /home/sandy/ansible/. The haproxy-role should be used on the proxy host. And when you curl http://node3.example.com it should display 'Welcome to node4.example.com' and when you curl again 'Welcome to node5.example.com' The php-role should be used on the prod host.

• Explanation: Solution as: Check the proxy host by curl http://node3.example.com

In /home/sandy/ansible/ create a playbook called logvol.yml. In the play create a logical volume called Iv0 and make it of size 1500MiB on volume group vgO If there is not enough space in the volume group print a message 'Not enough space for logical volume' and then make a 800MiB Iv0 instead. If the volume group still doesn't exist, create a message 'Volume group doesn't exist' Create an xfs filesystem on all Iv0 logical volumes. Don't mount the logical volume.

• Explanation: Solution as:

Using the Simulation Program, perform the following tasks:Ad-Hoc Ansible Commands (Number Two) Task:1. Use the ad-hoc command to make sure php is installed.2. Use the ad-hoc command to make sure that php is installed and is the latest version.3. Use the ad-hoc command to make sure that httpd is installed.4. Use the ad-hoc command to remove httpd from the servers.

• Explanation: 1. ansible all -b -m yum -a 'name=php state=present' 2. ansible all -b -m yum -a 'name=php state=latest' 3. ansible all -b -m yum -a 'name=httpd state=latest' 4. ansible all -b -m yum -a 'name=httpd state=absent'