bash – ansible回答mysql_secure_installation

>每次运行你的剧本时,剧本总会返回’已更改’,这不是你想要的
>编写任务更灵活：您可以根据设置添加,删除,更改和调整您想要执行的操作
>你可以在这个过程中学习

基本上,mysql_secure_installation执行此操作：

>设置root密码
>删除匿名用户
>删除根远程访问
>删除测试数据库

假设你已经设置了mysql_root_password,并添加了python-mysqldb,如下所示：

- name: Adds Python MySQL support on Debian/Ubuntu
      apt: pkg="python-mysqldb" state=present
      when: ansible_os_family == 'Debian'

    - name: Adds Python MySQL support on RedHat/CentOS
      yum: name=MySQL-python state=present
      when: ansible_os_family == 'RedHat'

这可以这样完成：

>设置root密码

- name: Sets the root password 
  mysql_user: user=root password="{{ mysql_root_password }}" host=localhost

>删除匿名用户

- name: Deletes anonymous MySQL server user for ansible_fqdn
  mysql_user: user="" host="{{ ansible_fqdn }}" state="absent"

- name: Deletes anonymous MySQL server user for localhost
  mysql_user: user="" state="absent"

>删除根远程访问

- name: Secures the MySQL root user for IPV6 localhost (::1)
  mysql_user: user="root" password="{{ mysql_root_password }}" host="::1"

- name: Secures the MySQL root user for IPV4 localhost (127.0.0.1)
  mysql_user: user="root" password="{{ mysql_root_password }}" host="127.0.0.1"

- name: Secures the MySQL root user for localhost domain (localhost)
  mysql_user: user="root" password="{{ mysql_root_password }}" host="localhost"

- name: Secures the MySQL root user for server_hostname domain
  mysql_user: user="root" password="{{ mysql_root_password }}" host="{{ ansible_fqdn }}"

>删除测试数据库

- name: Removes the MySQL test database
  mysql_db: db=test state=absent

这应该做到这一点.请注意,我快速浏览了一下系统中的mysql_secure_installation.我可能跳过了某些内容,或者其他版本中可能还有其他步骤. YMMV！