一、系统环境和安装软件版本 1),系统安装 [root@centos6 ~]# cat /etc/issue CentOS release 6.5 (Final) [root@centos6 ~]# uname -r 2.6.32-431.el6.x86_64 2)4台主机Ansible(192.168.0.22)另外3台主机IP分别是(192.168.0.24,192.168.0.156和192.168.0.157) 3)安装YUM源 [root@centos6 ~]# rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm [root@centos6 ~]# yum install ansible -y [root@centos6 ~]# ansible --version ansible 2.4.2.0 config file = /etc/ansible/ansible.cfg configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python2.6/site-packages/ansible executable location = /usr/bin/ansible python version = 2.6.6 (r266:84292, Aug 18 2016, 15:13:37) [GCC 4.4.7 20120313 (Red Hat 4.4.7-17)] 二、在Ansible主机上配置 1)在推送主机上做ssh秘钥 [root@Ansible .ssh]# ssh-keygen -t rsa Generating public/private rsa key pair. Enter file in which to save the key (/root/.ssh/id_rsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /root/.ssh/id_rsa. Your public key has been saved in /root/.ssh/id_rsa.pub. The key fingerprint is: a3:08:ab:02:bf:7b:12:7d:d9:8f:9c:a9:67:38:53:a1 root@Ansible.localdomain The key's randomart image is: +--[ RSA 2048]----+ | |
---|---|
. | |
.. +S. | |
. .o..E.o. | |
.......+ = | |
..o . + B . | |
o o= .* |
+-----------------+
2)查看生成的秘钥。
[root@Ansible .ssh]# ls -a
. .. id_rsa id_rsa.pub
3)在Ansible上配置hosts
[root@Ansible ansible]#vim hosts
在内容最后加上如下内容:
[test]
192.168.0.24 ansible_user=root ansible_ssh_pass="hwg123"
192.168.0.156 ansible_user=root ansible_ssh_pass="hwg123"
192.168.0.157 ansible_user=root ansible_ssh_pass="hwg123"
4)接着创建push.ssh.ymal脚本
[root@Ansible ansible]# cat push.ssh.ymal
#Using alternate directory locations:
- hosts: test
remote_user: root
tasks:- name: copy ssh key
authorized_key:
user: root
key: "{{ lookup('file', '/root/.ssh/id_rsa.pub') }}"
5)需要修改ansible.cfg的#host_key_checking= False取消注释
[root@Ansible ansible]# vim ansible.cfg
host_key_checking = False
三、最后运行push.ssh.ymal
[root@Ansible ansible]# ansible-playbook push.ssh.ymal
- name: copy ssh key
PLAY [test] ****
TASK [Gathering Facts] *****
ok: [192.168.0.24]
ok: [192.168.0.157]
ok: [192.168.0.156]
TASK [ssh-copy] ****
changed: [192.168.0.157]
changed: [192.168.0.156]
changed: [192.168.0.24]
PLAY RECAP *****
192.168.0.156 : ok=2 changed=1 unreachable=0 failed=0
192.168.0.157 : ok=2 changed=1 unreachable=0 failed=0
192.168.0.24 : ok=2 changed=1 unreachable=0 failed=0
好了,Ansible主机端使用ssh root@192.168.0.24 看看需要密码不,不需要密码证明配置正确;或者使用ansible测试一下。
[root@Ansible ansible]# ansible test -m command -a "date"
192.168.0.157 | SUCCESS | rc=0 >>
Mon Apr 2 15:26:58 CST 2018
192.168.0.156 | SUCCESS | rc=0 >>
Mon Apr 2 15:26:58 CST 2018
192.168.0.24 | SUCCESS | rc=0 >>
Mon Apr 2 15:27:01 CST 2018
转载于:https://blog.51cto.com/hwg1227/2093803