Everything You Need to Pass: RedHat EX407

Create a file called adhoc.sh in /home/sandy/ansible which will use adhoc commands to set up a new repository. The name of the repo will be 'EPEL' the description 'RHEL8' the baseurl is 'https://dl.fedoraproject.org/pub/epel/epel -release -latest -8.noarch.rmp' there is no gpgcheck, but you should enable the repo. * You should be able to use an bash script using adhoc commands to enable repos. Depending on your lab setup, you may need to make this repo "state=absent" after you pass this task. Solution chmod 0777 adhoc.sh vim adhoc.sh #I/bin/bash ansible all -m yum_repository -a 'name=EPEL description=RHEL8 baseurl= https://dl.fedoraproject.org/pub/epel/epel -release -latest -8.noarch.rmp gpgcheck=no enabled=yes'

Create a file called packages.yml in /home/sandy/ansible to install some packages for the following hosts. On dev, prod and webservers install packages httpd, mod_ssl, and mariadb. On dev only install the development tools package. Also, on dev host update all the packages to the latest. Solution Solution as: Questions and Answers PDF 4/21 ** NOTE 1 a more acceptable answer is likely 'present' since it's not asking to install the latest state: present ** NOTE 2 need to update the development node - name: update all packages on development node yum: name: '*' state: lat est

Create a role called sample -apache in /home/sandy/ansible/roles that enables and starts httpd, enables and starts the firewall and allows the webserver service. Create a template called index.html.j2 which creates and serves a message from /var/www/html/index.html Whenever the content of the file changes, restart the webserver service. Welcome to [FQDN] on [IP] Replace the FQDN with the fully qualified domain name and IP with the ip address of the node using ansible facts. Lastly, create a playbook in /home/sandy/ansible/ called apache.yml and use the role to serve the index file on webserver hosts. Solution /home/sandy/ansible/apache.yml Questions and Answers PDF 5/21 /home/sandy/ansible/roles/sample -apache/tasks/main.yml Questions and Answers PDF 6/21 /home/sandy/ansible/roles/sample -apache/templates/index.html.j2 In /home/sandy/ansible/roles/sample -apache/handlers/main.yml Questions and Answers PDF 7/21

Create a file called requirements.yml in /home/sandy/ansible/roles to install two roles. The source for the first role is geerlingguy.haproxy and geerlingguy.php. Name the first haproxy -role and the second php-role. The roles should be installed in /home/sandy/ansible/roles. Solution in /home/sandy/ansible/roles vim requirements.yml Run the requirements file from the roles directory: ansible -galaxy install -r requirements.yml -p /home/sandy/ansible/roles

Create a file called requirements.yml in /home/sandy/ansible/r oles a file called role.yml in /home/sandy/ansible/. The haproxy -role should be used on the proxy host. And when you curl http://node3.example.com it should display "Welcome to node4.example.com " and when you curl again "Welcome to node5.example.com " The php-role should be used on the prod host. Solution Solution as: Questions and Answers PDF 8/21 Check the proxy host by curl http://node3.example.com

Install and configure ansible User bob has been created on your control node. Give him the appropriate permissions on the control node. Install the necessary packages to run ansible on the control node. Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements: • The roles path should include /home/bob/ansible/roles, as well as any other path that may be required for the course of the sample exam. • The inventory file path is /home/bob/ansible/inventory. • Ansible should be able to manage 10 hosts at a single time. • Ansible should connect to all managed nodes using the bob user. Create an inventory file for the following five nodes: nodel.example.com node2.example.com node3.example.com node4.example.com node5.example.com Configure these nodes to be in an inventory file where node1 is a member of group dev. nodc2 is a member of group test, nodc3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers. Solution In/home/sandy/ansible/ansible.cfg [defaults] inventory=/home/sandy/ansible/inventory roles_path=/home/sandy/ansible/roles remote_user= sandy host_key_checking=false [privilegeescalation] become=true become_user=root become_method=sudo become_ask_pass=false In /home/sandy/ansible/inventory [dev] node 1 . example.com [test] Questions and Answers PDF 3/21 node2.example.com [proxy] node3 . example.com [prod] node 4.example.com node5 . example.com [webservers:children] prod