ansible批量向客户端推送公钥，实现免密登录

Posted 2021-03-06

1.安装ansible

yum -y install ansible

2.配置将客户端信息加到ansible得hosts配置文件中

3.ansible服务端配置生成公钥，执行以下命令然后一直回车即可。

ssh-keygen -t rsa

4.配置ansible剧本文件push-ssh.yml

- hosts: ssh_host
  tasks:
    - name: Transfer file from ServerA to ServerBC
      copy:
        src: /root/.ssh/id_rsa.pub
        dest: /root/.ssh/
        mode: 0600
    - name: Rename client ssh file
      command: mv /root/.ssh/id_rsa.pub /root/.ssh/authorized_keys
    - name: change direction .ssh to 700
      command: chmod 700 /root/.ssh

备注：客户端保存服务端公钥文件名是：authorized_keys（权限位600），且.ssh目录的权限为700

5.使用ansible-playbook命令执行以上push-ssh.yml剧本文件看效果

6.验证ssh登录客户端是否免密。