ansible 批量升级sudo

ansible 批量升级sudo

1从sudo官方网站下载对应的升级包
https://www.sudo.ws/download.html

2配置ansible yum源
[root@k8s ansible]# cat /etc/yum.repos.d/ansible.repo
[ansible]
name=ansible
baseurl=https://mirror.tuna.tsinghua.edu.cn/epel/7/x86_64/
gpgcheck=0

3 创建一个账号
useradd -d /home/admin -m admin
passwd admin
passwd -x -1 admin

4 在/home/admin/下配置：
vim ansible.cfg
[defaults]
host_key_checking = False #这个主要是ssh首次登录需要输入yes确认，设置后可不用输入yes
inventory = /home/admin/hosts
[privilege_escalation] #登陆后su切换root
become=True
become_method=su
become_user=root
become_ask_pass=False
[paramiko_connection]
[ssh_connection]
[persistent_connection]
[accelerate]
[selinux]
[colors]
[diff]

vim hosts
###############nbm ip#####################
[team1]
192.168.30.[20:25] ansible_ssh_user=“tom” ansible_ssh_pass=“qwer1234” ansible_ssh_port=22 ansible_su_pass=“qwer1234”
[team2]
192.168.30.[26:30] ansible_ssh_user=“tom” ansible_ssh_pass=“qwer1234” ansible_ssh_port=22 ansible_su_pass=“qwer1234”
[team3]
192.168.30.[31:35] ansible_ssh_user=“tom” ansible_ssh_pass=“qwer1234” ansible_ssh_port=22 ansible_su_pass=“qwer1234”
[team4]
192.168.30.[35:40] ansible_ssh_user=“tom” ansible_ssh_pass=“qwer1234” ansible_ssh_port=22 ansible_su_pass=“qwer1234”

[test:children]
team1
team2
team3
team4

5 批量复制文件并执行升级。或者编写好playbook再执行。
ansible -m copy -a “src=/home/admin/sudo-1.9.6-2.el7.x86_64.rpm dest=/tmp/” test
ansible -m shell -a “rpm -Uvh /tmp/sudo-1.9.6-2.el7.x86_64.rpm” test