Create by PERjham /
Requirements
You will need five RHEL 8 virtual machines to be able to successfully complete all questions.
One VM will be configured as an Ansible control node. Other four VMs will be used to apply playbooks to
solve the sample exam questions. The following FQDNs will be used throughout the sample exam.
• controller.example.com – Ansible control node
• node1.example.com – managed host
• node2.example.com – managed host
• node3.example.com – managed host
• node4.example.com – managed host
There are a couple of requiremens that should be met before proceeding further:
• controller.example.com server has passwordless SSH access to all managed servers (using the
root user).
• node2.example.com server and node3.example.com have a 2GB secondary /dev/vdb disk
attached.
• node4.example.com server has a 512MB secondary /dev/vdb and a 1GB terciary /dev/vdc disk
attached.
• There are no regular users created on any of the servers.
TASK 1: Ansible Installation and Configuration
Install ansible package on the controller node (including any dependencies) and configure the following:
• Create a regular user ansible with the password of redhat. Use this user for all sample exam tasks
and playbooks, unless you are working on the task that requires creating the automation user on
inventory hosts. You have root access to all five servers.
• All playbooks and other Ansible configuration that you create for this sample exam should be
stored in /home/automation/plays.
Create a configuration file /home/automation/plays/ansible.cfg to meet the following requirements:
• The roles path should include /home/automation/plays/roles, as well as any other path that may
be required for the course of the sample exam.
• The inventory file path is /home/automation/plays/inventory.
• Privilege escalation is disabled by default.
• Ansible should be able to manage 10 hosts at a single time.
• Ansible should connect to all managed nodes using the automation user.
Create an inventory file /home/automation/plays/inventory with the following:
• node1.example.com is a member of the proxy host group.
• node2.example.com is a member of the webserver host group.
This study source was downloaded by 100000850872992 from CourseHero.com on 04-09-2023 03:23:55 GMT -05:00
https://www.coursehero.com/file/101949343/RHCE-EX294-v10pdf/
, • node3.example.com is a member of the webserver host group.
• node4.example.com is a member of the database host group
• haproxy group is a member of the frontend group.
• webserver and database group are member of the backend group.
TASK 2: Configure Repository I
Create a playbook with the name 02-ftp-repo.yml to set up the controller host as a repository
host. Make sure this host meets the following requirements, which must be done by the play.
• The RHEL 8 installation ISO is loop-mounted on the directory /ftp_repo.
• The firewalld service is enabled.
• The vsftpd service is started as well as enabled and allows anonymous user access to the
/ftp_repo directory.
TASK 3: Configure Repository II
Create a playbook with the name 03-http-repo.yml to set up the controller host as a repository
host. Make sure this host meets the following requirements, which must be done by the play.
• /http_repo exists and has all the content of the ISO.
• The firewalld service is enabled.
• The httpd service is started as well as enabled, brinds /http_repo as Document Root.
TASK 4: Ad-Hoc Commands I
Create a script with the name 04-setuphosts.sh that uses ad hoc commands to complete
configuration on the managed servers. This includes:
• Creating a user with the name ansible.
• Creating a sudo configuration that allows user ansible to run tasks with root privileges.
• Create ssh key par in the user ansible.
• Configure the ssh key that allows connect through ssh with no password for user ansible.
• Using an ad-hoc command to call the appropriate module to test connectivity to the remote hosts
• Installing Python.
After running the adhoc script, you should be able to SSH into all inventory hosts using the automation
user without password, as well as a run all privileged commands.
TASK 5: Ad-Hoc Commands II
Create a script with the name 05-configure-repos.sh that configures the managed servers as repository
clients to the repository server that you have set up in the previous tasks (2 and 3). This script must use
adhoc commands and perform the following tasks:
• Disable any currently existing repository.
• Enable access to the BaseOS repository on controller.example.com through ftp.
This study source was downloaded by 100000850872992 from CourseHero.com on 04-09-2023 03:23:55 GMT -05:00
https://www.coursehero.com/file/101949343/RHCE-EX294-v10pdf/
Requirements
You will need five RHEL 8 virtual machines to be able to successfully complete all questions.
One VM will be configured as an Ansible control node. Other four VMs will be used to apply playbooks to
solve the sample exam questions. The following FQDNs will be used throughout the sample exam.
• controller.example.com – Ansible control node
• node1.example.com – managed host
• node2.example.com – managed host
• node3.example.com – managed host
• node4.example.com – managed host
There are a couple of requiremens that should be met before proceeding further:
• controller.example.com server has passwordless SSH access to all managed servers (using the
root user).
• node2.example.com server and node3.example.com have a 2GB secondary /dev/vdb disk
attached.
• node4.example.com server has a 512MB secondary /dev/vdb and a 1GB terciary /dev/vdc disk
attached.
• There are no regular users created on any of the servers.
TASK 1: Ansible Installation and Configuration
Install ansible package on the controller node (including any dependencies) and configure the following:
• Create a regular user ansible with the password of redhat. Use this user for all sample exam tasks
and playbooks, unless you are working on the task that requires creating the automation user on
inventory hosts. You have root access to all five servers.
• All playbooks and other Ansible configuration that you create for this sample exam should be
stored in /home/automation/plays.
Create a configuration file /home/automation/plays/ansible.cfg to meet the following requirements:
• The roles path should include /home/automation/plays/roles, as well as any other path that may
be required for the course of the sample exam.
• The inventory file path is /home/automation/plays/inventory.
• Privilege escalation is disabled by default.
• Ansible should be able to manage 10 hosts at a single time.
• Ansible should connect to all managed nodes using the automation user.
Create an inventory file /home/automation/plays/inventory with the following:
• node1.example.com is a member of the proxy host group.
• node2.example.com is a member of the webserver host group.
This study source was downloaded by 100000850872992 from CourseHero.com on 04-09-2023 03:23:55 GMT -05:00
https://www.coursehero.com/file/101949343/RHCE-EX294-v10pdf/
, • node3.example.com is a member of the webserver host group.
• node4.example.com is a member of the database host group
• haproxy group is a member of the frontend group.
• webserver and database group are member of the backend group.
TASK 2: Configure Repository I
Create a playbook with the name 02-ftp-repo.yml to set up the controller host as a repository
host. Make sure this host meets the following requirements, which must be done by the play.
• The RHEL 8 installation ISO is loop-mounted on the directory /ftp_repo.
• The firewalld service is enabled.
• The vsftpd service is started as well as enabled and allows anonymous user access to the
/ftp_repo directory.
TASK 3: Configure Repository II
Create a playbook with the name 03-http-repo.yml to set up the controller host as a repository
host. Make sure this host meets the following requirements, which must be done by the play.
• /http_repo exists and has all the content of the ISO.
• The firewalld service is enabled.
• The httpd service is started as well as enabled, brinds /http_repo as Document Root.
TASK 4: Ad-Hoc Commands I
Create a script with the name 04-setuphosts.sh that uses ad hoc commands to complete
configuration on the managed servers. This includes:
• Creating a user with the name ansible.
• Creating a sudo configuration that allows user ansible to run tasks with root privileges.
• Create ssh key par in the user ansible.
• Configure the ssh key that allows connect through ssh with no password for user ansible.
• Using an ad-hoc command to call the appropriate module to test connectivity to the remote hosts
• Installing Python.
After running the adhoc script, you should be able to SSH into all inventory hosts using the automation
user without password, as well as a run all privileged commands.
TASK 5: Ad-Hoc Commands II
Create a script with the name 05-configure-repos.sh that configures the managed servers as repository
clients to the repository server that you have set up in the previous tasks (2 and 3). This script must use
adhoc commands and perform the following tasks:
• Disable any currently existing repository.
• Enable access to the BaseOS repository on controller.example.com through ftp.
This study source was downloaded by 100000850872992 from CourseHero.com on 04-09-2023 03:23:55 GMT -05:00
https://www.coursehero.com/file/101949343/RHCE-EX294-v10pdf/
