批量拷贝公钥到新上架机器的方式
兼容性提示:
- 在ubuntu20.04上工作良好;
CentOS8上安装比较繁琐(CentOS8默认仓库中没有sshpass这个包)
authorized_key这个模块在ansible开源高版本中不可用,需安装2.10.*版本
,命令如下
python3.8 -m pip install ansible==2.10.7 -i https://mirrors.aliyun.com/pypi/simple/
新服务器上架后,需要配置公钥、修改密码,可用ansible-playbook批量修改:
# 安装依赖包
# sudo apt install sshpass
# 拷贝root公钥到远程主机root用户,远程机器上的huzhenwei用户需要在sudo组里
sudo -H ansible-playbook /etc/ansible/playbooks/user-root.yml -u huzhenwei -k --become-user=root --become-method=sudo -K -e group=组名
# 拷贝root和huzhenwei公钥到远程主机huzhenwei用户
sudo -H ansible-playbook /etc/ansible/playbooks/user-huzhenwei.yml -e group=组名 -e ansible_ssh_user=root
上述操作会提示输入密码,如下:
SSH password:
BECOME password[defaults to SSH password]:
playbook片段如下:
- name: "add root id_rsa.pub to authorized_key"
authorized_key:
user: huzhenwei
key: "{{ lookup('file', '/root/.ssh/id_rsa.pub')}}"
path: "/home/huzhenwei/.ssh/authorized_keys"
manage_dir: yes
state: present
exclusive: no
tags: ssh-copy-id_root
- name: "add huzhenwei id_rsa.pub to authorized_key"
authorized_key:
user: huzhenwei
key: "{{ lookup('file', '/home/huzhenwei/.ssh/id_rsa.pub')}}"
path: "/home/huzhenwei/.ssh/authorized_keys"
manage_dir: yes
state: present
exclusive: no
tags: ssh-copy-id_lotus
若要修改各机器的密码,可参考这个链接:
https://blog.csdn.net/huzhenwei/article/details/120787662