2021-04-26

背景介绍，批量给公司已经创建的上千台服务器创建新的用户，同时给账号加上sudo、nopassword权限，以后这些账号密码分别交给dba、业务运维、开发人员、测试人员和其他人员

---
- hosts: test
  gather_facts: False
  remote_user: newband
  become: yes
  become_method: sudo
  become_user: root
  tasks:
  - name: create users
    user:
      name: "{{ item.name }}"
      password: "{{ item.passwd | password_hash('sha512') }}"
      uid: "{{ item.uid }}"
      state: present
    loop:
      - { name: dba, passwd: 'dbauser1201', uid: 1201 }
      - { name: ops, passwd: 'opsuser1202', uid: 1202 }
      - { name: dev, passwd: 'devuser1203', uid: 1203 }
      - { name: sit, passwd: 'situser1204', uid: 1204 }
      - { name: guest, passwd: 'guest1205', uid: 1205 }
  - name: modify sudoers
    blockinfile：
      path: /etc/sudoers
      block: |
        opsuser ALL=(ALL) NOPASSWD: ALL
        devuser ALL=(ALL) NOPASSWD: ALL
        situser ALL=(ALL) NOPASSWD: ALL
        dbauser ALL=(ALL) NOPASSWD: ALL
        opsuser ALL=(ALL) NOPASSWD: ALL
     # state: present
      
备注：用newband 账户登陆，切到root执行操作
blockinfile模块功能
blockinfile模块可以帮助我们在指定的文件中插入"一段文本"，这段文本是被标记过的，
换句话说就是，我们在这段文本上做了记号，以便在以后的操作中可以通过"标记"找到这段文本，然后修改或者删除它

参考文档https://blog.csdn.net/weixin_44791884/article/details/105034095?ops_request_misc=%257B%2522request%255Fid%2522%253A%2522161939728316780366552528%2522%252C%2522scm%2522%253A%252220140713.130102334..%2522%257D&request_id=161939728316780366552528&biz_id=0&utm_medium=distribute.pc_search_result.none-task-blog-2~all~sobaiduend~default-2-105034095.first_rank_v2_pc_rank_v29&utm_term=blockinfile+%E6%A8%A1%E5%9D%97%E4%BD%BF%E7%94%A8+%E5%9C%A8+playbook+%E4%B8%AD%E4%BD%BF%E7%94%A8