配置互信

  1. # 创建ansible用户
  2. [root@node1 ~]# useradd ansibleuser && echo "123456" | passwd --stdin ansibleuser
  4. # 授权sudo权限
  5. [root@node1 ~]# usermod -g root ansibleuser 
  6. [root@node1 ~]# echo 'ansibleuser ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers && grep 'ansibleuser' /etc/sudoers
  8. # 管理机创建公钥
  9. [root@node1 ~]# su - ansibleuser
  10. [ansibleuser@node1 ~]$ ssh-keygen -t rsa
  11. Generating public/private rsa key pair.
  12. Enter file in which to save the key (/home/ansibleuser/.ssh/id_rsa): 
  13. Created directory '/home/ansibleuser/.ssh'.
  14. Enter passphrase (empty for no passphrase): 
  15. Enter same passphrase again: 
  16. Your identification has been saved in /home/ansibleuser/.ssh/id_rsa.
  17. Your public key has been saved in /home/ansibleuser/.ssh/id_rsa.pub.
  18. The key fingerprint is:
  19. 6a:f5:60:9a:2a:ba:49:6a:13:0b:fe:50:9f:a4:8e:2a ansibleuser@node1
  20. The key's randomart image is:
  21. +--[ RSA 2048]----+
  22. |                 |
  23. |                 |
  24. |                 |
  25. |                 |
  26. |   . .  S        |
  27. |... + .* o       |
  28. |ooo. o=   .      |
  29. |E*=  o           |
  30. |X+o+.            |
  31. +-----------------+
  33. # 传输公钥
  34. [ansibleuser@node1 ~]$ ssh-copy-id -i /home/ansibleuser/.ssh/id_rsa.pub ansibleuser@'172.18.15.182'
  35. The authenticity of host '172.18.15.182 (172.18.15.182)' can't be established.
  36. ECDSA key fingerprint is 39:19:5d:bf:17:97:31:48:63:70:ec:8c:8a:d2:9f:f9.
  37. Are you sure you want to continue connecting (yes/no)? yes
  38. /bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
  39. /bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
  40. ansibleuser@172.18.15.182's password: 
  42. Number of key(s) added: 1
  44. Now try logging into the machine, with:   "ssh 'ansibleuser@172.18.15.182'"
  45. and check to make sure that only the key(s) you wanted were added.
  47. # 测试连接
  48. [ansibleuser@node1 ~]$ ssh 172.18.15.182
  49. Last login: Wed Oct 14 01:01:20 2020 from 172.18.15.183
  50. [ansibleuser@node3 ~]$ exit
  51. logout
  52. Connection to 172.18.15.182 closed.
  53. [ansibleuser@node1 ~]$

安装ansible

  1. yum install ansible
  2. 或者
  3. pip install ansible

检验ansible

  1. [ansibleuser@node1 ~]$ sudo vim /etc/ansible/hosts 
  2. [dbservers]
  3. 172.18.15.182
  4. 172.18.15.183

image.png