Ansible Playbook中lineinfile模块insertafter失效及正则问题排查

运行以下Ansible Playbook时遇到两个问题：

• lineinfile模块的insertafter参数未生效，无法插入指定内容
• replace模块的正则表达式未按预期修改行内容

目标文件（inputs.conf）内容 #

# May require to run as root on some platforms.
[script://./bin/sshdChecker.sh]
disabled = true
interval = 3600
source = Unix:SSHDConfig
sourcetype = Unix:SSHDConfig


# May require to run as root on some platforms.
[script://./bin/update.sh]
disabled = true
interval = 86400
source = Unix:Update
sourcetype = Unix:Update


[script://./bin/uptime.sh]
disabled = true
interval = 86400
source = Unix:Uptime
sourcetype = Unix:Uptime


[script://./bin/version.sh]
disabled = true
interval = 86400
source = Unix:Version
sourcetype = Unix:Version


# This script may need to be modified to point to the VSFTPD configuration file.
[script://./bin/vsftpdChecker.sh]
disabled = true
interval = 86400
source = Unix:VSFTPDConfig
sourcetype = Unix:VSFTPDConfig

原Playbook内容 #

---
- name: changing line in file
  hosts: host
  become: true

  tasks:

    - name: change
      replace:
        path: /opt/splunkforwarder/etc/apps/Splunk_TA_nix/defaults/inputs.conf
        regexp: 'disabled = false'
        replace: 'disabled = true'
        backup: yes

    - name: insert
      ansible.builtin.lineinfile:
         path: /opt/splunkforwarder/etc/apps/Splunk_TA_nix/defaults/inputs.conf
           #regexp: '\[script://.*]'
           #search_string: '[script://.*]'
         insertafter: '#[script://.*]'
         line: 'index=linux'
         state: present
      with_items:
        - script://./bin/vmstat_metric.sh
        - script://./bin/update.sh
        - script://./bin/uptime.sh
        - script://./bin/version.sh
        - script://./bin/vsftpdChecker.sh

问题分析与修正方案 #

1. replace模块问题 #

原正则'disabled = false'仅匹配值为false的行，但目标文件中所有disabled的值都是true，导致替换操作完全不执行。

修正后的replace任务：

- name: 确保所有disabled字段设置为true
  replace:
    path: /opt/splunkforwarder/etc/apps/Splunk_TA_nix/defaults/inputs.conf
    regexp: '^disabled = .*'
    replace: 'disabled = true'
    backup: yes

• 正则^disabled = .*匹配所有以disabled =开头的行，不管后面的值是什么，都会统一替换为disabled = true，确保配置一致。

2. lineinfile模块问题 #

• insertafter正则错误：原正则'#[script://.*]'试图匹配#后直接跟[script://...]的行，但目标文件中没有这类行，导致无法定位插入位置。
• 未使用循环变量：with_items中定义了多个script路径，但任务未引用item变量，相当于重复执行5次相同操作，且无法定位到每个目标块。
• 遗漏目标块：循环列表中缺少原文件存在的sshdChecker.sh。

修正后的lineinfile任务：

- name: 在指定script配置块后插入index=linux
  ansible.builtin.lineinfile:
    path: /opt/splunkforwarder/etc/apps/Splunk_TA_nix/defaults/inputs.conf
    regexp: '^\[{{ item }}\]'
    insertafter: '^\[{{ item }}\]'
    line: 'index=linux'
    state: present
  loop:
    - script://./bin/sshdChecker.sh
    - script://./bin/update.sh
    - script://./bin/uptime.sh
    - script://./bin/version.sh
    - script://./bin/vsftpdChecker.sh

• 通过loop遍历每个script路径，用{{ item }}构建匹配配置块头的正则^\[{{ item }}\]，精准定位到每个[script://...]行。
• insertafter设置为相同的正则，确保在每个配置块头的下一行插入index=linux。
• 补充了原文件中存在的sshdChecker.sh块，避免遗漏。

内容的提问来源于stack exchange，提问作者Jawad Khan