Prepare for Your Red Hat Certified Engineer (RHCE) Exam with Updated EX294 Dumps (V9.02) – Pass with Confidence

1. Create a file called specs.empty in home/bob/ansible on the local machine as follows:

HOST=

MEMORY=

BIOS=

VDA_DISK_SIZE=

VDB_DISK_SIZE=

Create the playbook /home/bob/ansible/specs.yml which copies specs.empty to all remote nodes' path /root/specs.txt. Using the specs.yml playbook then edit specs.txt on the remote machines to reflect the appropriate ansible facts.

2. Create an ansible vault password file called lock.yml with the password reallysafepw in the /home/sandy/ansible directory. In the lock.yml file define two variables. One is pw_dev and the password is 'dev' and the other is pw_mgr and the password is 'mgr' Create a regular file called secret.txt which contains the password for lock.yml.

3. Topic 1, LAB SETUP

You will need to set up your lab by creating 5 managed nodes and one control node.

So 6 machines total. Download the free RHEL8 iso from Red Hat Developers website.

***Control node you need to set up***

You need to create some static ips on your managed nodes then on the control node set them up in

the /etc/hosts file as follows:

vim /etc/hosts

10.0.2.21 node1.example.com

10.0.2.22 node2.example.com

10.0.2.23 node3.example.com

10.0.2.24 node4.example.com

10.0.2.25 node5.example.com

yum -y install ansible

useradd ansible

echo password | passwd --stdin ansible

echo "ansible ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/ansible

su - ansible; ssh-keygen

ssh-copy-id node1.example.com

ssh-copy-id node2.example.com

ssh-copy-id node3.example.com

ssh-copy-id node4.example.com

ssh-copy-id node5.example.com

***Each manage node setup***

First, add an extra 2GB virtual harddisk to each control node 1,2,3. Then add an extra hard disk to control node 4. Do not add an extra hard disk to node 5. When you start up these machines the extra disks should be automatically located at /dev/sdb (or /dev/vdb depending on your hypervisor).

useradd ansible

echo password | passwd --stdin ansible

echo "ansible ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/ansible

Note python3 should be installed by default, however if it is not then on both the control node and managed nodes you can install it also set the default python3 if you are having trouble with python2

being the default.

yum -y install python3

alternatives --set python /usr/bin/python3

All machines need the repos available. You did this in RHSC

A To set up locally you just need to do the same for each machine. Attach the rhel8 iso as a disk to virtualbox, kvm or whatever hypervisor you are using (this will be /dev/sr0). Then inside the machine:

mount /dev/sr0 to /mnt

Then you will have all the files from the iso in /mnt.

mkdir /repo

cp -r /mnt /repo

vim /etc/yum.repos.d/base.repo

Inside this file:

[baseos]

name=baseos

baseurl=file:///repo/BaseOS

gpgcheck=0

Also the appstream

vim /etc/yum.repos.d/appstream.repo

Inside this file:

[appstream]

name=appstream

baseurl=file:///repo/AppStream

gpgcheck=0

Install and configure ansible

User bob has been created on your control node. Give him the appropriate permissions on the control node. Install the necessary packages to run ansible on the control node.

Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements:

• The roles path should include /home/bob/ansible/roles, as well as any other path that may be required for the course of the sample exam.

• The inventory file path is /home/bob/ansible/inventory.

• Ansible should be able to manage 10 hosts at a single time.

• Ansible should connect to all managed nodes using the bob user.

Create an inventory file for the following five nodes:

nodel.example.com

node2.example.com

node3.example.com

node4.example.com

node5.example.com

Configure these nodes to be in an inventory file where node1 is a member of group dev. nodc2 is a member of group test, nodc3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

4. Create a file called requirements.yml in /home/sandy/ansible/roles to install two roles. The source for the first role is geerlingguy.haproxy and geerlingguy.php. Name the first haproxy-role and the second php-role. The roles should be installed in /home/sandy/ansible/roles.

5. Create the users in the file usersjist.yml file provided. Do this in a playbook called users.yml located at /home/sandy/ansible. The passwords for these users should be set using the lock.yml file from TASK7. When running the playbook, the lock.yml file should be unlocked with secret.txt file from TASK 7.

All users with the job of 'developer' should be created on the dev hosts, add them to the group

devops, their password should be set using the pw_dev variable. Likewise create users with the job of 'manager' on the proxy host and add the users to the group 'managers', their password should be set using the pw_mgr variable.

6. Create a file called adhoc.sh in /home/sandy/ansible which will use adhoc commands to set up a new repository. The name of the repo will be 'EPEL' the description 'RHEL8' the baseurl is 'https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rmp' there is no gpgcheck, but you should enable the repo.

* You should be able to use an bash script using adhoc commands to enable repos. Depending on your lab setup, you may need to make this repo "state=absent" after you pass this task.

7. Create a jinja template in /home/sandy/ansible/ and name it hosts.j2. Edit this file so it looks like the one below. The order of the nodes doesn't matter. Then create a playbook in /home/sandy/ansible called hosts.yml and install the template on dev node at /root/myhosts

8. Create a role called sample-apache in /home/sandy/ansible/roles that enables and starts httpd, enables and starts the firewall and allows the webserver service. Create a template called index.html.j2 which creates and serves a message from /var/www/html/index.html Whenever the content of the file changes, restart the webserver service.

Welcome to [FQDN] on [IP]

Replace the FQDN with the fully qualified domain name and IP with the ip address of the node using ansible facts. Lastly, create a playbook in /home/sandy/ansible/ called apache.yml and use the role to serve the index file on webserver hosts.

9. Create a file called packages.yml in /home/sandy/ansible to install some packages for the following hosts. On dev, prod and webservers install packages httpd, mod_ssl, and mariadb. On dev only install the development tools package. Also, on dev host update all the packages to the latest.

10. Create a file called requirements.yml in /home/sandy/ansible/roles a file called role.yml in /home/sandy/ansible/. The haproxy-role should be used on the proxy host. And when you curl http://node3.example.com it should display "Welcome to node4.example.com" and when you curl again