环境信息:
A:192.168.21.194
B:192.168.21.226
ansible server:192.168.21.194
远程主机:192.168.21.226
目录结构:
1.远程主机的公钥记录到本地的known_hosts
ssh-keyscan 192.168.21.226 >> /root/.ssh/known_hosts
ssh在首次连接出现检查keys 的提示,通过设置
export ANSIBLE_HOST_KEY_CHECKING=False
2.执行ssh-keygen来生产本机的公钥和私钥
ssh-keygen -t rsa -b 2048 -P '' -f /root/.ssh/id_rsa
3.添加主机信息到hosts 主机清单中
# hosts
[master]
192.168.21.194 ansible_ssh_pass=caicloud2017
[nodes]
192.168.21.226 ansible_ssh_user=root ansible_ssh_pass=caicloud2017
ansible_ssh_pass
密码如果一样的话,这里就不需要定义了。在运行ansible-playbook
时 加上-k
参数,就可以输入登陆密码
4.配置playbook
ssh-addkey.yml
---
- hosts: all
gather_facts: no
tasks:
- name: install ssh key
authorized_key: user=root
key="{{ lookup('file', '/root/.ssh/id_rsa.pub') }}"
state=present
5.运行play-book
ansible-playbook -i hosts ssh-addkey.yml
这样,管理节点的公钥就会添加到节点得authorized_keys文件中,再把主机清单里的ansible_ssh_pass去掉,执行ansible all -m ping 就不需要密码了。