ansible使用普通用户身份认证 切换root权限执行剧本(Ubuntu系统)

Posted 2022-12-05 我的紫霞辣辣

ansible在Ubuntu系统批量安装cybereason

将cybereason的deb包上传到ansible-server主机

mkdir /etc/ansible/ansible-playbook/
mkdir /data
cd /data
rz -E /data/cybereason-sensor-20.1.401.0-1.x86_64_ensoc-capitaland_ensoc-capitaland-r.cybereason.net_443_ACTIVE_NORMAL_deb.deb

配置ansible主配置文件

vim /etc/ansible/hosts 
[all:vars]
##----Linux
ansible_user="nana"
ansible_password='Na123***'
ansible_become=yes
ansible_become_user=root
ansible_become_method=sudo
ansible_sudo_password='Na123***'

[vm]
cn036 ansible_host='10.171.110.66' environments='PROD'
cn038 ansible_host='10.171.110.88' environments='PROD'

创建安装cybereason服务的yaml文件

cd /etc/ansible/ansible-playbook/
vim cybereason-sensor.yml
- hosts: all
  tasks:
    - name: Create data storage path
      shell: mkdir /data

    - name: Transmit compressed packet
      copy: src=/data/cybereason-sensor-20.1.401.0-1.x86_64_ensoc-capitaland_ensoc-capitaland-r.cybereason.net_443_ACTIVE_NORMAL_deb.deb dest=/data

    - name: Installation services
      shell: dpkg -i /data/cybereason-sensor-20.1.401.0-1.x86_64_ensoc-capitaland_ensoc-capitaland-r.cybereason.net_443_ACTIVE_NORMAL_deb.deb

    - name: Start service
      service: name=cybereason-sensor state=started enabled=yes

模拟执行剧本，执行剧本文件内容

如何执行剧本:
# 第一个步骤:检查剧本语法格式
ansible-playbook --syntax-check cybereason-sensor.yml
# 第二个步骤:模拟执行剧本
ansible-playbook -C cybereason-sensor.yml
# 第三个步骤:直接执行剧本
ansible-playbook cybereason-sensor.yml

查看cybereason服务是否启动完成

# 查看cybereason服务是否启动完成
ansible all -m shell -a "service cybereason-sensor status"