Linux教科書_LinuCレベル2Version10.0対応#

1
# ブロックデバイスを一覧表示する
2
lsblk

1
journalctl -b
2
dmesg

1
# メンテナンスモード
2
systemctl isolate rescue.target
3
systemctl rescue
4
# 緊急モード
5
systemctl isolate emergency.target
6
systemclt emergency

1
[tomo@localhost system]$ cat multi-user.target.wants/postfix.service
2
[Unit]
3
Description=Postfix Mail Transport Agent
4
After=syslog.target network.target
5
Conflicts=sendmail.service exim.service
6

7
[Service]
8
Type=forking
9
PIDFile=/var/spool/postfix/pid/master.pid
10
EnvironmentFile=-/etc/sysconfig/network
11
ExecStartPre=-/usr/libexec/postfix/aliasesdb
12
ExecStartPre=-/usr/libexec/postfix/chroot-update
13
ExecStart=/usr/sbin/postfix start
14
ExecReload=/usr/sbin/postfix reload
15
ExecStop=/usr/sbin/postfix stop
16

17
[Install]
18
WantedBy=multi-user.target
19

20
# systemd-deltaコマンド 設定ファイルの差分を出力
21
[tomo@localhost system]$ systemd-delta
22
[EXTENDED]   /run/systemd/system/user-0.slice → /run/systemd/system/user-0.slice.d/50-After-systemd-logind\x2eservice.conf
23
[EXTENDED]   /run/systemd/system/user-0.slice → /run/systemd/system/user-0.slice.d/50-TasksMax.conf
24
[EXTENDED]   /run/systemd/system/user-0.slice → /run/systemd/system/user-0.slice.d/50-Description.conf
25
[EXTENDED]   /run/systemd/system/user-0.slice → /run/systemd/system/user-0.slice.d/50-After-systemd-user-sessions\x2eservice.conf
26
[EXTENDED]   /run/systemd/system/session-2.scope → /run/systemd/system/session-2.scope.d/50-After-systemd-user-sessions\x2eservice.conf
27
[EXTENDED]   /run/systemd/system/session-2.scope → /run/systemd/system/session-2.scope.d/50-After-systemd-logind\x2eservice.conf
28
[EXTENDED]   /run/systemd/system/session-2.scope → /run/systemd/system/session-2.scope.d/50-Description.conf
29
[EXTENDED]   /run/systemd/system/session-2.scope → /run/systemd/system/session-2.scope.d/50-Slice.conf
30
[EXTENDED]   /run/systemd/system/session-2.scope → /run/systemd/system/session-2.scope.d/50-SendSIGHUP.conf
31
[EXTENDED]   /run/systemd/system/session-2.scope → /run/systemd/system/session-2.scope.d/50-TasksMax.conf
32
[EXTENDED]   /run/systemd/system/session-6.scope → /run/systemd/system/session-6.scope.d/50-Slice.conf
33
[EXTENDED]   /run/systemd/system/session-6.scope → /run/systemd/system/session-6.scope.d/50-TasksMax.conf
34
[EXTENDED]   /run/systemd/system/session-6.scope → /run/systemd/system/session-6.scope.d/50-After-systemd-user-sessions\x2eservice.conf
35
[EXTENDED]   /run/systemd/system/session-6.scope → /run/systemd/system/session-6.scope.d/50-After-systemd-logind\x2eservice.conf
36
[EXTENDED]   /run/systemd/system/session-6.scope → /run/systemd/system/session-6.scope.d/50-Description.conf
37
[EXTENDED]   /run/systemd/system/session-6.scope → /run/systemd/system/session-6.scope.d/50-SendSIGHUP.conf
38
[EQUIVALENT] /etc/systemd/system/default.target → /usr/lib/systemd/system/default.target
39
[EXTENDED]   /run/systemd/system/session-3.scope → /run/systemd/system/session-3.scope.d/50-After-systemd-logind\x2eservice.conf
40
[EXTENDED]   /run/systemd/system/session-3.scope → /run/systemd/system/session-3.scope.d/50-SendSIGHUP.conf
41
[EXTENDED]   /run/systemd/system/session-3.scope → /run/systemd/system/session-3.scope.d/50-TasksMax.conf
42
[EXTENDED]   /run/systemd/system/session-3.scope → /run/systemd/system/session-3.scope.d/50-Description.conf
43
[EXTENDED]   /run/systemd/system/session-3.scope → /run/systemd/system/session-3.scope.d/50-Slice.conf
44
[EXTENDED]   /run/systemd/system/session-3.scope → /run/systemd/system/session-3.scope.d/50-After-systemd-user-sessions\x2eservice.conf
45
[EXTENDED]   /run/systemd/system/user-1000.slice → /run/systemd/system/user-1000.slice.d/50-After-systemd-logind\x2eservice.conf
46
[EXTENDED]   /run/systemd/system/user-1000.slice → /run/systemd/system/user-1000.slice.d/50-Description.conf
47
[EXTENDED]   /run/systemd/system/user-1000.slice → /run/systemd/system/user-1000.slice.d/50-TasksMax.conf
48
[EXTENDED]   /run/systemd/system/user-1000.slice → /run/systemd/system/user-1000.slice.d/50-After-systemd-user-sessions\x2eservice.conf
49

50
27 overridden configuration files found.

1
journalctl -b
2
journalctl -f
3
journalctl -n 10
4
journalctl -p err
5
-p, --priority=
6
           Filter output by message priorities or priority ranges. Takes either a single numeric or textual log level (i.e. between 0/"emerg" and 7/"debug"), or a range of numeric/text log levels in the
7
           form FROM..TO. The log levels are the usual syslog log levels as documented in syslog(3), i.e.  "emerg" (0), "alert" (1), "crit" (2), "err" (3), "warning" (4), "notice" (5), "info" (6),
8
           "debug" (7). If a single log level is specified, all messages with this log level or a lower (hence more important) log level are shown. If a range is specified, all messages within the range are
9
           shown, including both the start and the end value of the range. This will add "PRIORITY=" matches for the specified priorities.
10

11
journalctl -r
12
# よく使うことになるのはこれだけと思う
13
journalctl -u postfix.service

1
[root@localhost etc]# mount
2
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime,seclabel)
3
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
4
devtmpfs on /dev type devtmpfs (rw,nosuid,seclabel,size=4515168k,nr_inodes=1128792,mode=755)
5
securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
6
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,seclabel)
7
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,seclabel,gid=5,mode=620,ptmxmode=000)
8
tmpfs on /run type tmpfs (rw,nosuid,nodev,seclabel,mode=755)
9
tmpfs on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,seclabel,mode=755)
10
cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd)
11
pstore on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime)
12
cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,devices)
13
cgroup on /sys/fs/cgroup/net_cls,net_prio type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,net_prio,net_cls)
14
cgroup on /sys/fs/cgroup/hugetlb type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,hugetlb)
15
cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,cpuset)
16
cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,cpuacct,cpu)
17
cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,memory)
18
cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,perf_event)
19
cgroup on /sys/fs/cgroup/pids type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,pids)
20
cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,blkio)
21
cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,seclabel,freezer)
22
configfs on /sys/kernel/config type configfs (rw,relatime)
23
/dev/mapper/centos-root on / type xfs (rw,relatime,seclabel,attr2,inode64,noquota)
24
selinuxfs on /sys/fs/selinux type selinuxfs (rw,relatime)
25
systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=22,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=10915)
26
debugfs on /sys/kernel/debug type debugfs (rw,relatime)
27
mqueue on /dev/mqueue type mqueue (rw,relatime,seclabel)
28
fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime)
29
hugetlbfs on /dev/hugepages type hugetlbfs (rw,relatime,seclabel)
30
/dev/sda1 on /boot type xfs (rw,relatime,seclabel,attr2,inode64,noquota)
31
sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw,relatime)
32
tmpfs on /run/user/1000 type tmpfs (rw,nosuid,nodev,relatime,seclabel,size=906448k,mode=700,uid=1000,gid=1000)
33
gvfsd-fuse on /run/user/1000/gvfs type fuse.gvfsd-fuse (rw,nosuid,nodev,relatime,user_id=1000,group_id=1000)
34
tmpfs on /run/user/0 type tmpfs (rw,nosuid,nodev,relatime,seclabel,size=906448k,mode=700)
35

36

37
# マウント
38
mount /dev/sdb1 /data
39
mount -o remount /data

1
# スワップ領域作成
2
mkswap -c /dev/sda3
3

4
[root@localhost etc]# dd if=/dev/zero of=/tmp/swapfile bs=1M count=500
5
500+0 レコード入力
6
500+0 レコード出力
7
524288000 バイト (524 MB) コピーされました、 0.539949 秒、 971 MB/秒
8
[root@localhost etc]# mkswap /tmp/swapfile
9
スワップ空間バージョン1を設定します、サイズ = 511996 KiB
10
ラベルはありません, UUID=2b778452-5107-43a0-8f90-03fb310b6c19
11
[root@localhost etc]# chmod 600 /tmp/swapfile
12
[root@localhost etc]# ll /tmp/swapfile
13
-rw-------. 1 root root 524288000 11月 21 18:59 /tmp/swapfile
14

15
[root@localhost etc]# swapon /tmp/swapfile
16
[root@localhost etc]# swapon -s
17
Filename                                Type            Size    Used    Priority
18
/dev/dm-1                               partition       839676  0       -2
19
/tmp/swapfile                           file    511996  0       -3
20
[root@localhost etc]# cat /proc/swaps
21
Filename                                Type            Size    Used    Priority
22
/dev/dm-1                               partition       839676  0       -2
23
/tmp/swapfile                           file            511996  0       -3
24

25

26
[root@localhost etc]# swapoff /tmp/swapfile
27
[root@localhost etc]# swapon -s
28
Filename                                Type            Size    Used    Priority
29
/dev/dm-1                               partition       839676  0       -2

1
# ブロックデバイス確認
2
lsblk
3
[root@localhost etc]# lsblk -p
4
NAME                        MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
5
/dev/sda                      8:0    0    8G  0 disk
6
tq/dev/sda1                   8:1    0    1G  0 part /boot
7
mq/dev/sda2                   8:2    0    7G  0 part
8
  tq/dev/mapper/centos-root 253:0    0  6.2G  0 lvm  /
9
  mq/dev/mapper/centos-swap 253:1    0  820M  0 lvm  [SWAP]
10
/dev/sr0                     11:0    1 1024M  0 rom
11

12
# ext2/ext3/ext4ファイルシステムの作成
13
mke2fs
14

15

16
# mke2fsコマンドのデフォルト値
17
[root@localhost etc]# cat /etc/mke2fs.conf
18
[defaults]
19
        base_features = sparse_super,filetype,resize_inode,dir_index,ext_attr
20
        default_mntopts = acl,user_xattr
21
        enable_periodic_fsck = 0
22
        blocksize = 4096
23
        inode_size = 256
24
        inode_ratio = 16384
25

26
[fs_types]
27
        ext3 = {
28
                features = has_journal
29
        }
30
        ext4 = {
31
                features = has_journal,extent,huge_file,flex_bg,uninit_bg,dir_nlink,extra_isize,64bit
32
                inode_size = 256
33
        }
34
        ext4dev = {
35
                features = has_journal,extent,huge_file,flex_bg,uninit_bg,dir_nlink,extra_isize
36
                inode_size = 256
37
                options = test_fs=1
38
        }
39
        rhel6_ext4 = {
40
                features = has_journal,extent,huge_file,flex_bg,uninit_bg,dir_nlink,extra_isize
41
                inode_size = 256
42
                enable_periodic_fsck = 1
43
                default_mntopts = ""
44
        }
45
        small = {
46
                blocksize = 1024
47
                inode_size = 128
48
                inode_ratio = 4096
49
        }
50
        floppy = {
51
                blocksize = 1024
52
                inode_size = 128
53
                inode_ratio = 8192
54
        }
55
        big = {
56
                inode_ratio = 32768
57
        }
58
        huge = {
59
                inode_ratio = 65536
60
        }
61
        news = {
62
                inode_ratio = 4096
63
        }
64
        largefile = {
65
                inode_ratio = 1048576
66
                blocksize = -1
67
        }
68
        largefile4 = {
69
                inode_ratio = 4194304
70
                blocksize = -1
71
        }
72
        hurd = {
73
             blocksize = 4096
74
             inode_size = 128
75
        }
76

77

78

79
# mkfsコマンドによるファイルシステム作成
80
mkdf -t ext3 /dev/sdc1

1
# カーネルが認識しているネットワークデバイスを確認
2
lspci | grep -i eth
3
journalctl -b | grep -i eth | grep enp

1
# データリンク層
2
ip link show
3
# IPアドレス
4
ip addr show
5
# ルーティングテーブル
6
ip route show
7
# ARPキャッシュ
8
ip neigh show
9

10

11
ip -s link show enp0s3
12

13
# add でパラメータ設定する
14
ip addr add 192.168.11.10/24 dev enp0s3
15

16
#### ifconfigコマンド
17
# ipコマンド以前に広く使われていたコマンド
18
ifconfig
19
ifconfig -a
20

21
ifconfig enp0s3 192.168.120.27 netmask 255.255.255.0
22
ifconfig enp0s3 up
23
# まとめて指定も可能
24
ifconfig enp0s3 192.168.120.27 netmask 255.255.255.0 up
25

26
#### ARP
27
# MACアドレスとIPアドレスを変換するプロトコル
28
# 自分のIPアドレス/MACアドレスと相手のIPアドレスが含まれたパケットをブロードキャストして、指定されたIPアドレスを持つ相手がこのパケットを受け取ると、自分のMACアドレスを返す
29
# 一度取得した情報は、ARPキャッシュと呼ばれるテーブルに一定期間キャッシュされる

1
iwconfig

1
route
2
netstat -r
3
# 情報は同じ物が出力される
4

5
[root@localhost etc]# netstat -r
6
Kernel IP routing table
7
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
8
default         buffalo.setup   0.0.0.0         UG        0 0          0 enp0s3
9
192.168.11.0    0.0.0.0         255.255.255.0   U         0 0          0 enp0s3
10
192.168.122.0   0.0.0.0         255.255.255.0   U         0 0          0 virbr0
11
[root@localhost etc]# route
12
Kernel IP routing table
13
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
14
default         buffalo.setup   0.0.0.0         UG    100    0        0 enp0s3
15
192.168.11.0    0.0.0.0         255.255.255.0   U     100    0        0 enp0s3
16
192.168.122.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0

1
nmcli
2

3
# NetworkManagerの状態確認
4
nmcli general status
5

6
# ネットワークインターフェースの設定ファイル
7
cat /etc/sysconfig/network-scripts/ifcfg-enp0s3

1
tar cvf
2
tar xvf
3
tar tvf
4
gzip
5
gunzip
6
bzip
7
bunzip

1
# OP,形式と拡張子
2
# -j bzip -> bz2
3
# -z gzip -> gz
4
# -J xz - xz
5

6
# このコマンドをあわせて使う使い方は必要に応じて調べるで良さそう
7
dump
8
restore
9

10
# テープドライブを操作するコマンド
11
mt
12

13
# ネットワーク経由でのバックアップ
14
rsync

1
top
2
htop
3
vmstat
4
iostat
5
iotop
6
sar
7
uptime # システムの稼働時間やログインユーザー数、平均負荷などが表示される。topコマンドの１行目とほぼ同じ
8
w # 現在ログインしているユーザと各ユーザのプロセス情報が表示される

1
# CPU使用率の測定
2
ps
3
ps aux: システムで使用されているすべてのプロセスを表示
4

5
# 開いているファイルやポートの確認
6
lsof
7
# /var/log/messagesファイルを開いているプロセスを検索
8
[root@localhost top]# lsof /var/log/messages
9
COMMAND    PID USER   FD   TYPE DEVICE SIZE/OFF     NODE NAME
10
abrt-watc  914 root    4r   REG  253,0   718793 10468097 /var/log/messages
11
rsyslogd  1338 root    7w   REG  253,0   718793 10468097 /var/log/messages
12
# プロセス名が開いているファイルを表示
13
[root@localhost top]# lsof -p `pidof rsyslogd`
14
COMMAND   PID USER   FD      TYPE             DEVICE SIZE/OFF     NODE NAME
15
rsyslogd 1338 root  cwd       DIR              253,0      224       64 /
16
rsyslogd 1338 root  rtd       DIR              253,0      224       64 /
17
rsyslogd 1338 root  txt       REG              253,0   663976  3172893 /usr/sbin/rsyslogd
18
rsyslogd 1338 root  mem       REG               0,19  8388608     8307 /run/log/journal/4f887155365a419b9cb02e497221d5a4/system.journal
19
rsyslogd 1338 root  mem       REG              253,0    68192   176358 /usr/lib64/libbz2.so.1.0.6
20
rsyslogd 1338 root  mem       REG              253,0    99944   176516 /usr/lib64/libelf-0.176.so
21
rsyslogd 1338 root  mem       REG              253,0   402384   383771 /usr/lib64/libpcre.so.1.2.0
22
rsyslogd 1338 root  mem       REG              253,0    19896   176626 /usr/lib64/libattr.so.1.1.0
23
rsyslogd 1338 root  mem       REG              253,0   338672  1300052 /usr/lib64/libdw-0.176.so
24
rsyslogd 1338 root  mem       REG              253,0   109976   383691 /usr/lib64/libresolv-2.17.so
25
rsyslogd 1338 root  mem       REG              253,0    19384   176460 /usr/lib64/libgpg-error.so.0.10.0
26
rsyslogd 1338 root  mem       REG              253,0   535064   176472 /usr/lib64/libgcrypt.so.11.8.2
27
rsyslogd 1338 root  mem       REG              253,0    61752   270256 /usr/lib64/liblz4.so.1.8.3
28
rsyslogd 1338 root  mem       REG              253,0   157424   176353 /usr/lib64/liblzma.so.5.2.2
29
rsyslogd 1338 root  mem       REG              253,0   155744   176263 /usr/lib64/libselinux.so.1
30
rsyslogd 1338 root  mem       REG              253,0  1136944   383671 /usr/lib64/libm-2.17.so
31
rsyslogd 1338 root  mem       REG              253,0    20048   176631 /usr/lib64/libcap.so.2.22
32
rsyslogd 1338 root  mem       REG              253,0   203688  1300065 /usr/lib64/libsystemd.so.0.6.0
33
rsyslogd 1338 root  mem       REG              253,0    25024  5817422 /usr/lib64/rsyslog/imjournal.so
34
rsyslogd 1338 root  mem       REG              253,0    38048  5817429 /usr/lib64/rsyslog/imuxsock.so
35
rsyslogd 1338 root  mem       REG              253,0    24432  5817430 /usr/lib64/rsyslog/lmnet.so
36
rsyslogd 1338 root  mem       REG              253,0  2156272   383663 /usr/lib64/libc-2.17.so
37
rsyslogd 1338 root  mem       REG              253,0    88720       85 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
38
rsyslogd 1338 root  mem       REG              253,0    20064   176270 /usr/lib64/libuuid.so.1.3.0
39
rsyslogd 1338 root  mem       REG              253,0    40896  1245966 /usr/lib64/libfastjson.so.4.0.0
40
rsyslogd 1338 root  mem       REG              253,0    15424  1299766 /usr/lib64/libestr.so.0.0.0
41
rsyslogd 1338 root  mem       REG              253,0    43712   383693 /usr/lib64/librt-2.17.so
42
rsyslogd 1338 root  mem       REG              253,0    19248   383669 /usr/lib64/libdl-2.17.so
43
rsyslogd 1338 root  mem       REG              253,0   142144   383689 /usr/lib64/libpthread-2.17.so
44
rsyslogd 1338 root  mem       REG              253,0    90248   176266 /usr/lib64/libz.so.1.2.7
45
rsyslogd 1338 root  mem       REG              253,0   163312   383656 /usr/lib64/ld-2.17.so
46
rsyslogd 1338 root    0r      CHR                1,3      0t0     1028 /dev/null
47
rsyslogd 1338 root    1w      CHR                1,3      0t0     1028 /dev/null
48
rsyslogd 1338 root    2w      CHR                1,3      0t0     1028 /dev/null
49
rsyslogd 1338 root    3r  a_inode               0,10        0     6415 inotify
50
rsyslogd 1338 root    4u     unix 0xffff8e7135db5940      0t0    23333 socket
51
rsyslogd 1338 root    5r      REG               0,19  8388608     8307 /run/log/journal/4f887155365a419b9cb02e497221d5a4/system.journal
52
rsyslogd 1338 root    6w      REG              253,0    18803  8671877 /var/log/cron
53
rsyslogd 1338 root    7w      REG              253,0   718793 10468097 /var/log/messages
54
rsyslogd 1338 root    8w      REG              253,0    20795 10468098 /var/log/secure
55
rsyslogd 1338 root    9w      REG              253,0     1639 10468099 /var/log/maillog
56

57

58
### メモリ及びスワップ使用量の測定
59
# メモリ使用率を測定するには、先に上げたtop,sadc/sarコマンドなどが利用できる他freeコマンドも利用できる
60
# Linuxは、使われていない物理メモリをできるだけキャッシュに割り当てようとします。
61
# そのため、Linuxの起動時間が長くなればなるほど、Mem行のfree列の値は小さくなっていきます。
62
# その値が小さくても、キャッシュに割り当てられているサイズが大きいのであれば、実際にメモリが足りないわけではない、ということに注意してください。
63
# available列を見ると、おおよその利用可能なメモリ量がわかります。スワップはディスクの一部を仮想的なメモリとして利用する機能です。
64
# システムの物理メモリが不足するとスワップが行われます。スワップ領域が継続的に使われるようであれば、システムのパフォーマンスが低下します。
65
# そのため、システムが利用しているメモリ量を把握することは必要です。前記の例ではスワップは利用されていませんが、スワップが頻繁に利用されるようなら、
66
# 不要なサービスを停止させるか、メモリの増設を検討する必要があります。freeコマンド以上に詳細なメモリの情報を得るには、/proc/meminfoを参照します。
67

68

69
### ディスク使用量の測定
70
df
71

72
### ネットワークトラフィックの測定
73
netstat -s
74
ss -s
75

76
netserver
77
netperf
78
iptables
79
iftop
80

81
# この辺詳細ちょっとおいきれてないので後で振り返り

1
[root@localhost 1340]# cat /etc/ansible/ansible.cfg
2
# config file for ansible -- https://ansible.com/
3
# ===============================================
4

5
# nearly all parameters can be overridden in ansible-playbook
6
# or with command line flags. ansible will read ANSIBLE_CONFIG,
7
# ansible.cfg in the current working directory, .ansible.cfg in
8
# the home directory or /etc/ansible/ansible.cfg, whichever it
9
# finds first
10

11
[defaults]
12

13
# some basic default values...
14

15
#inventory      = /etc/ansible/hosts
16
#library        = /usr/share/my_modules/
17
#module_utils   = /usr/share/my_module_utils/
18
#remote_tmp     = ~/.ansible/tmp
19
#local_tmp      = ~/.ansible/tmp
20
#plugin_filters_cfg = /etc/ansible/plugin_filters.yml
21
#forks          = 5
22
#poll_interval  = 15
23
#sudo_user      = root
24
#ask_sudo_pass = True
25
#ask_pass      = True
26
#transport      = smart
27
#remote_port    = 22
28
#module_lang    = C
29
#module_set_locale = False
30

31
# plays will gather facts by default, which contain information about
32
# the remote system.
33
#
34
# smart - gather by default, but don't regather if already gathered
35
# implicit - gather by default, turn off with gather_facts: False
36
# explicit - do not gather by default, must say gather_facts: True
37
#gathering = implicit
38

39
# This only affects the gathering done by a play's gather_facts directive,
40
# by default gathering retrieves all facts subsets
41
# all - gather all subsets
42
# network - gather min and network facts
43
# hardware - gather hardware facts (longest facts to retrieve)
44
# virtual - gather min and virtual facts
45
# facter - import facts from facter
46
# ohai - import facts from ohai
47
# You can combine them using comma (ex: network,virtual)
48
# You can negate them using ! (ex: !hardware,!facter,!ohai)
49
# A minimal set of facts is always gathered.
50
#gather_subset = all
51

52
# some hardware related facts are collected
53
# with a maximum timeout of 10 seconds. This
54
# option lets you increase or decrease that
55
# timeout to something more suitable for the
56
# environment.
57
# gather_timeout = 10
58

59
# Ansible facts are available inside the ansible_facts.* dictionary
60
# namespace. This setting maintains the behaviour which was the default prior
61
# to 2.5, duplicating these variables into the main namespace, each with a
62
# prefix of 'ansible_'.
63
# This variable is set to True by default for backwards compatibility. It
64
# will be changed to a default of 'False' in a future release.
65
# ansible_facts.
66
# inject_facts_as_vars = True
67

68
# additional paths to search for roles in, colon separated
69
#roles_path    = /etc/ansible/roles
70

71
# uncomment this to disable SSH key host checking
72
#host_key_checking = False
73

74
# change the default callback, you can only have one 'stdout' type  enabled at a time.
75
#stdout_callback = skippy
76

77

78
## Ansible ships with some plugins that require whitelisting,
79
## this is done to avoid running all of a type by default.
80
## These setting lists those that you want enabled for your system.
81
## Custom plugins should not need this unless plugin author specifies it.
82

83
# enable callback plugins, they can output to stdout but cannot be 'stdout' type.
84
#callback_whitelist = timer, mail
85

86
# Determine whether includes in tasks and handlers are "static" by
87
# default. As of 2.0, includes are dynamic by default. Setting these
88
# values to True will make includes behave more like they did in the
89
# 1.x versions.
90
#task_includes_static = False
91
#handler_includes_static = False
92

93
# Controls if a missing handler for a notification event is an error or a warning
94
#error_on_missing_handler = True
95

96
# change this for alternative sudo implementations
97
#sudo_exe = sudo
98

99
# What flags to pass to sudo
100
# WARNING: leaving out the defaults might create unexpected behaviours
101
#sudo_flags = -H -S -n
102

103
# SSH timeout
104
#timeout = 10
105

106
# default user to use for playbooks if user is not specified
107
# (/usr/bin/ansible will use current user as default)
108
#remote_user = root
109

110
# logging is off by default unless this path is defined
111
# if so defined, consider logrotate
112
#log_path = /var/log/ansible.log
113

114
# default module name for /usr/bin/ansible
115
#module_name = command
116

117
# use this shell for commands executed under sudo
118
# you may need to change this to bin/bash in rare instances
119
# if sudo is constrained
120
#executable = /bin/sh
121

122
# if inventory variables overlap, does the higher precedence one win
123
# or are hash values merged together?  The default is 'replace' but
124
# this can also be set to 'merge'.
125
#hash_behaviour = replace
126

127
# by default, variables from roles will be visible in the global variable
128
# scope. To prevent this, the following option can be enabled, and only
129
# tasks and handlers within the role will see the variables there
130
#private_role_vars = yes
131

132
# list any Jinja2 extensions to enable here:
133
#jinja2_extensions = jinja2.ext.do,jinja2.ext.i18n
134

135
# if set, always use this private key file for authentication, same as
136
# if passing --private-key to ansible or ansible-playbook
137
#private_key_file = /path/to/file
138

139
# If set, configures the path to the Vault password file as an alternative to
140
# specifying --vault-password-file on the command line.
141
#vault_password_file = /path/to/vault_password_file
142

143
# format of string {{ ansible_managed }} available within Jinja2
144
# templates indicates to users editing templates files will be replaced.
145
# replacing {file}, {host} and {uid} and strftime codes with proper values.
146
#ansible_managed = Ansible managed: {file} modified on %Y-%m-%d %H:%M:%S by {uid} on {host}
147
# {file}, {host}, {uid}, and the timestamp can all interfere with idempotence
148
# in some situations so the default is a static string:
149
#ansible_managed = Ansible managed
150

151
# by default, ansible-playbook will display "Skipping [host]" if it determines a task
152
# should not be run on a host.  Set this to "False" if you don't want to see these "Skipping"
153
# messages. NOTE: the task header will still be shown regardless of whether or not the
154
# task is skipped.
155
#display_skipped_hosts = True
156

157
# by default, if a task in a playbook does not include a name: field then
158
# ansible-playbook will construct a header that includes the task's action but
159
# not the task's args.  This is a security feature because ansible cannot know
160
# if the *module* considers an argument to be no_log at the time that the
161
# header is printed.  If your environment doesn't have a problem securing
162
# stdout from ansible-playbook (or you have manually specified no_log in your
163
# playbook on all of the tasks where you have secret information) then you can
164
# safely set this to True to get more informative messages.
165
#display_args_to_stdout = False
166

167
# by default (as of 1.3), Ansible will raise errors when attempting to dereference
168
# Jinja2 variables that are not set in templates or action lines. Uncomment this line
169
# to revert the behavior to pre-1.3.
170
#error_on_undefined_vars = False
171

172
# by default (as of 1.6), Ansible may display warnings based on the configuration of the
173
# system running ansible itself. This may include warnings about 3rd party packages or
174
# other conditions that should be resolved if possible.
175
# to disable these warnings, set the following value to False:
176
#system_warnings = True
177

178
# by default (as of 1.4), Ansible may display deprecation warnings for language
179
# features that should no longer be used and will be removed in future versions.
180
# to disable these warnings, set the following value to False:
181
#deprecation_warnings = True
182

183
# (as of 1.8), Ansible can optionally warn when usage of the shell and
184
# command module appear to be simplified by using a default Ansible module
185
# instead.  These warnings can be silenced by adjusting the following
186
# setting or adding warn=yes or warn=no to the end of the command line
187
# parameter string.  This will for example suggest using the git module
188
# instead of shelling out to the git command.
189
# command_warnings = False
190

191

192
# set plugin path directories here, separate with colons
193
#action_plugins     = /usr/share/ansible/plugins/action
194
#become_plugins     = /usr/share/ansible/plugins/become
195
#cache_plugins      = /usr/share/ansible/plugins/cache
196
#callback_plugins   = /usr/share/ansible/plugins/callback
197
#connection_plugins = /usr/share/ansible/plugins/connection
198
#lookup_plugins     = /usr/share/ansible/plugins/lookup
199
#inventory_plugins  = /usr/share/ansible/plugins/inventory
200
#vars_plugins       = /usr/share/ansible/plugins/vars
201
#filter_plugins     = /usr/share/ansible/plugins/filter
202
#test_plugins       = /usr/share/ansible/plugins/test
203
#terminal_plugins   = /usr/share/ansible/plugins/terminal
204
#strategy_plugins   = /usr/share/ansible/plugins/strategy
205

206

207
# by default, ansible will use the 'linear' strategy but you may want to try
208
# another one
209
#strategy = free
210

211
# by default callbacks are not loaded for /bin/ansible, enable this if you
212
# want, for example, a notification or logging callback to also apply to
213
# /bin/ansible runs
214
#bin_ansible_callbacks = False
215

216

217
# don't like cows?  that's unfortunate.
218
# set to 1 if you don't want cowsay support or export ANSIBLE_NOCOWS=1
219
#nocows = 1
220

221
# set which cowsay stencil you'd like to use by default. When set to 'random',
222
# a random stencil will be selected for each task. The selection will be filtered
223
# against the `cow_whitelist` option below.
224
#cow_selection = default
225
#cow_selection = random
226

227
# when using the 'random' option for cowsay, stencils will be restricted to this list.
228
# it should be formatted as a comma-separated list with no spaces between names.
229
# NOTE: line continuations here are for formatting purposes only, as the INI parser
230
#       in python does not support them.
231
#cow_whitelist=bud-frogs,bunny,cheese,daemon,default,dragon,elephant-in-snake,elephant,eyes,\
232
#              hellokitty,kitty,luke-koala,meow,milk,moofasa,moose,ren,sheep,small,stegosaurus,\
233
#              stimpy,supermilker,three-eyes,turkey,turtle,tux,udder,vader-koala,vader,www
234

235
# don't like colors either?
236
# set to 1 if you don't want colors, or export ANSIBLE_NOCOLOR=1
237
#nocolor = 1
238

239
# if set to a persistent type (not 'memory', for example 'redis') fact values
240
# from previous runs in Ansible will be stored.  This may be useful when
241
# wanting to use, for example, IP information from one group of servers
242
# without having to talk to them in the same playbook run to get their
243
# current IP information.
244
#fact_caching = memory
245

246
#This option tells Ansible where to cache facts. The value is plugin dependent.
247
#For the jsonfile plugin, it should be a path to a local directory.
248
#For the redis plugin, the value is a host:port:database triplet: fact_caching_connection = localhost:6379:0
249

250
#fact_caching_connection=/tmp
251

252

253

254
# retry files
255
# When a playbook fails a .retry file can be created that will be placed in ~/
256
# You can enable this feature by setting retry_files_enabled to True
257
# and you can change the location of the files by setting retry_files_save_path
258

259
#retry_files_enabled = False
260
#retry_files_save_path = ~/.ansible-retry
261

262
# squash actions
263
# Ansible can optimise actions that call modules with list parameters
264
# when looping. Instead of calling the module once per with_ item, the
265
# module is called once with all items at once. Currently this only works
266
# under limited circumstances, and only with parameters named 'name'.
267
#squash_actions = apk,apt,dnf,homebrew,pacman,pkgng,yum,zypper
268

269
# prevents logging of task data, off by default
270
#no_log = False
271

272
# prevents logging of tasks, but only on the targets, data is still logged on the master/controller
273
#no_target_syslog = False
274

275
# controls whether Ansible will raise an error or warning if a task has no
276
# choice but to create world readable temporary files to execute a module on
277
# the remote machine.  This option is False by default for security.  Users may
278
# turn this on to have behaviour more like Ansible prior to 2.1.x.  See
279
# https://docs.ansible.com/ansible/become.html#becoming-an-unprivileged-user
280
# for more secure ways to fix this than enabling this option.
281
#allow_world_readable_tmpfiles = False
282

283
# controls the compression level of variables sent to
284
# worker processes. At the default of 0, no compression
285
# is used. This value must be an integer from 0 to 9.
286
#var_compression_level = 9
287

288
# controls what compression method is used for new-style ansible modules when
289
# they are sent to the remote system.  The compression types depend on having
290
# support compiled into both the controller's python and the client's python.
291
# The names should match with the python Zipfile compression types:
292
# * ZIP_STORED (no compression. available everywhere)
293
# * ZIP_DEFLATED (uses zlib, the default)
294
# These values may be set per host via the ansible_module_compression inventory
295
# variable
296
#module_compression = 'ZIP_DEFLATED'
297

298
# This controls the cutoff point (in bytes) on --diff for files
299
# set to 0 for unlimited (RAM may suffer!).
300
#max_diff_size = 1048576
301

302
# This controls how ansible handles multiple --tags and --skip-tags arguments
303
# on the CLI.  If this is True then multiple arguments are merged together.  If
304
# it is False, then the last specified argument is used and the others are ignored.
305
# This option will be removed in 2.8.
306
#merge_multiple_cli_flags = True
307

308
# Controls showing custom stats at the end, off by default
309
#show_custom_stats = True
310

311
# Controls which files to ignore when using a directory as inventory with
312
# possibly multiple sources (both static and dynamic)
313
#inventory_ignore_extensions = ~, .orig, .bak, .ini, .cfg, .retry, .pyc, .pyo
314

315
# This family of modules use an alternative execution path optimized for network appliances
316
# only update this setting if you know how this works, otherwise it can break module execution
317
#network_group_modules=eos, nxos, ios, iosxr, junos, vyos
318

319
# When enabled, this option allows lookups (via variables like {{lookup('foo')}} or when used as
320
# a loop with `with_foo`) to return data that is not marked "unsafe". This means the data may contain
321
# jinja2 templating language which will be run through the templating engine.
322
# ENABLING THIS COULD BE A SECURITY RISK
323
#allow_unsafe_lookups = False
324

325
# set default errors for all plays
326
#any_errors_fatal = False
327

328
[inventory]
329
# enable inventory plugins, default: 'host_list', 'script', 'auto', 'yaml', 'ini', 'toml'
330
#enable_plugins = host_list, virtualbox, yaml, constructed
331

332
# ignore these extensions when parsing a directory as inventory source
333
#ignore_extensions = .pyc, .pyo, .swp, .bak, ~, .rpm, .md, .txt, ~, .orig, .ini, .cfg, .retry
334

335
# ignore files matching these patterns when parsing a directory as inventory source
336
#ignore_patterns=
337

338
# If 'true' unparsed inventory sources become fatal errors, they are warnings otherwise.
339
#unparsed_is_failed=False
340

341
[privilege_escalation]
342
#become=True
343
#become_method=sudo
344
#become_user=root
345
#become_ask_pass=False
346

347
[paramiko_connection]
348

349
# uncomment this line to cause the paramiko connection plugin to not record new host
350
# keys encountered.  Increases performance on new host additions.  Setting works independently of the
351
# host key checking setting above.
352
#record_host_keys=False
353

354
# by default, Ansible requests a pseudo-terminal for commands executed under sudo. Uncomment this
355
# line to disable this behaviour.
356
#pty=False
357

358
# paramiko will default to looking for SSH keys initially when trying to
359
# authenticate to remote devices.  This is a problem for some network devices
360
# that close the connection after a key failure.  Uncomment this line to
361
# disable the Paramiko look for keys function
362
#look_for_keys = False
363

364
# When using persistent connections with Paramiko, the connection runs in a
365
# background process.  If the host doesn't already have a valid SSH key, by
366
# default Ansible will prompt to add the host key.  This will cause connections
367
# running in background processes to fail.  Uncomment this line to have
368
# Paramiko automatically add host keys.
369
#host_key_auto_add = True
370

371
[ssh_connection]
372

373
# ssh arguments to use
374
# Leaving off ControlPersist will result in poor performance, so use
375
# paramiko on older platforms rather than removing it, -C controls compression use
376
#ssh_args = -C -o ControlMaster=auto -o ControlPersist=60s
377

378
# The base directory for the ControlPath sockets.
379
# This is the "%(directory)s" in the control_path option
380
#
381
# Example:
382
# control_path_dir = /tmp/.ansible/cp
383
#control_path_dir = ~/.ansible/cp
384

385
# The path to use for the ControlPath sockets. This defaults to a hashed string of the hostname,
386
# port and username (empty string in the config). The hash mitigates a common problem users
387
# found with long hostnames and the conventional %(directory)s/ansible-ssh-%%h-%%p-%%r format.
388
# In those cases, a "too long for Unix domain socket" ssh error would occur.
389
#
390
# Example:
391
# control_path = %(directory)s/%%h-%%r
392
#control_path =
393

394
# Enabling pipelining reduces the number of SSH operations required to
395
# execute a module on the remote server. This can result in a significant
396
# performance improvement when enabled, however when using "sudo:" you must
397
# first disable 'requiretty' in /etc/sudoers
398
#
399
# By default, this option is disabled to preserve compatibility with
400
# sudoers configurations that have requiretty (the default on many distros).
401
#
402
#pipelining = False
403

404
# Control the mechanism for transferring files (old)
405
#   * smart = try sftp and then try scp [default]
406
#   * True = use scp only
407
#   * False = use sftp only
408
#scp_if_ssh = smart
409

410
# Control the mechanism for transferring files (new)
411
# If set, this will override the scp_if_ssh option
412
#   * sftp  = use sftp to transfer files
413
#   * scp   = use scp to transfer files
414
#   * piped = use 'dd' over SSH to transfer files
415
#   * smart = try sftp, scp, and piped, in that order [default]
416
#transfer_method = smart
417

418
# if False, sftp will not use batch mode to transfer files. This may cause some
419
# types of file transfer failures impossible to catch however, and should
420
# only be disabled if your sftp version has problems with batch mode
421
#sftp_batch_mode = False
422

423
# The -tt argument is passed to ssh when pipelining is not enabled because sudo
424
# requires a tty by default.
425
#usetty = True
426

427
# Number of times to retry an SSH connection to a host, in case of UNREACHABLE.
428
# For each retry attempt, there is an exponential backoff,
429
# so after the first attempt there is 1s wait, then 2s, 4s etc. up to 30s (max).
430
#retries = 3
431

432
[persistent_connection]
433

434
# Configures the persistent connection timeout value in seconds.  This value is
435
# how long the persistent connection will remain idle before it is destroyed.
436
# If the connection doesn't receive a request before the timeout value
437
# expires, the connection is shutdown. The default value is 30 seconds.
438
#connect_timeout = 30
439

440
# The command timeout value defines the amount of time to wait for a command
441
# or RPC call before timing out. The value for the command timeout must
442
# be less than the value of the persistent connection idle timeout (connect_timeout)
443
# The default value is 30 second.
444
#command_timeout = 30
445

446
[accelerate]
447
#accelerate_port = 5099
448
#accelerate_timeout = 30
449
#accelerate_connect_timeout = 5.0
450

451
# The daemon timeout is measured in minutes. This time is measured
452
# from the last activity to the accelerate daemon.
453
#accelerate_daemon_timeout = 30
454

455
# If set to yes, accelerate_multi_key will allow multiple
456
# private keys to be uploaded to it, though each user must
457
# have access to the system via SSH to add a new key. The default
458
# is "no".
459
#accelerate_multi_key = yes
460

461
[selinux]
462
# file systems that require special treatment when dealing with security context
463
# the default behaviour that copies the existing context or uses the user default
464
# needs to be changed to use the file system dependent context.
465
#special_context_filesystems=nfs,vboxsf,fuse,ramfs,9p,vfat
466

467
# Set this to yes to allow libvirt_lxc connections to work without SELinux.
468
#libvirt_lxc_noseclabel = yes
469

470
[colors]
471
#highlight = white
472
#verbose = blue
473
#warn = bright purple
474
#error = red
475
#debug = dark gray
476
#deprecate = purple
477
#skip = cyan
478
#unreachable = red
479
#ok = green
480
#changed = yellow
481
#diff_add = green
482
#diff_remove = red
483
#diff_lines = cyan
484

485

486
[diff]
487
# Always print diff when running ( same as always running with -D/--diff )
488
# always = no
489

490
# Set how many context lines to show in diff
491
# context = 3