ansible使用sudo

Posted 2021-02-08 effortsing

方式一、

1、配置资源清单inventory文件

[[email protected] ~]#
cat >/etc/ansible/hosts <<EOF
[k8s]
192.168.0.92 ansible_ssh_port=22 ansible_ssh_user=k8s ansible_ssh_pass=‘123‘ ansible_become_pass=‘123456‘
EOF


解释：

ansible_ssh_pass=‘123‘         是客户端普通用户的密码
ansible_become_pass=‘123456‘   是客户端root用户的密码



2、Ansile客户端禁止root直接远程登陆，并创建普通用户ywbz

[[email protected] ~]# grep -n "PermitRootLogin" /etc/ssh/sshd_config 
PermitRootLogin no
[[email protected] ~]# systemctl restart sshd
[[email protected] ~]# useradd k8s
[[email protected] ~]# echo ‘123‘ | passwd --stdin k8s
Changing password for user k8s.
passwd: all authentication tokens updated successfully.
[[email protected] ~]# 


3、服务端测试执行命令

[[email protected] root]$ ansible test3 -m shell -a ‘chmod +x /home/*‘


4、但是无法创建用户



方式二、


1、给客户端普通用户配置sudo权限


2、配置主机组

cat >/etc/ansible/hosts<<EOF
[k8s]
192.168.0.92 

[test3]
192.168.0.93  


3、执行

sudo ansible k8s -m shell -a ‘chmod +x /home/*‘