ansible 批量添加免密码信任

Posted 2020-12-05

1、生成密钥对

ssh-keygen 
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:x4GMdUhaRwmn1JOy1zjLC3kEaN/cqjErTvVxYm06zfQ [email protected]
The key‘s randomart image is:
+---[RSA 2048]----+
|       o*==o     |
|      oB+*=      |
|     .o.+*.=     |
|        o.Boo    |
|        S=*+=    |
|       .=+=X .   |
|      .  B+.o E  |
|     .. o ..     |
|     ...         |
+----[SHA256]-----+

2、指定远程机器及密码

• 关掉key验证

  vi /etc/ansible/ansible.cnf
  host_key_checking = False

• 指定机器和密码

vi /etc/ansible/hosts

[test]
192.168.10.51
192.168.10.52

[test:vars]
ansible_ssh_pass="123456"

3、发送公钥到目标机器

ansible test -m copy -a "src=/root/.ssh/id_rsa.pub dest=/tmp/authorized_keys mode=600"

4、验证

ansible test -m shell -a "whoami"
192.168.10.52 | SUCCESS | rc=0 >>
root

192.168.10.51 | SUCCESS | rc=0 >>
root