将 SSH 密钥部署到服务器答案

【问题标题】：deploying SSH keys to servers将 SSH 密钥部署到服务器
【发布时间】：2016-08-20 21:55:11
【问题描述】：

我有以下剧本：

---
 - name: provision toms keys
    hosts: ssh4.demo.com
    tasks:
     - name: ensure user tom is present
       user: name=tom state=present

     - name: ensure private key and public one are present
       copy: src=ssh_keys/tom dest=/.ssh mode=0600
       with_items:
         - id_rsa.pub
         - id_rsa

 - name: provision toms public keys
    hosts: ssh1.demo.com

    sudo: yes

    tasks:

     - user: name=tom comment="Add tom" group=staff

     - name: Placing key
       authorized_key: user=tom key="{{ lookup('file', 'ssh_keys/tom/id_rsa.pub') }}"

我有一个本地目录，其中包含我的 ssh 公钥和私钥，如下所示：

./ssh_keys
./ssh_keys/david
./ssh_keys/david/id_rsa
./ssh_keys/david/id_rsa.pub
./ssh_keys/fred
./ssh_keys/fred/id_rsa
./ssh_keys/fred/id_rsa.pub
./ssh_keys/joe
./ssh_keys/joe/id_rsa
./ssh_keys/joe/id_rsa.pub
./ssh_keys/paul
./ssh_keys/paul/id_rsa
./ssh_keys/paul/id_rsa.pub
./ssh_keys/peter
./ssh_keys/peter/id_rsa
./ssh_keys/peter/id_rsa.pub
./ssh_keys/tom
./ssh_keys/tom/id_rsa
./ssh_keys/tom/id_rsa.pub

我需要创建一些可用于将密钥推送到主机字段中定义的各种主机的剧本。

但是，.ssh 密钥目录创建不正确。即在 id_rsa 和 id_rsa.pub 目录下创建了一个名为 tom 的目录。

例如

 /home/tom/.ssh/id_rsa/tom/id_rsa

有人对此有很好的示例剧本吗？

【问题讨论】：

标签： ssh ansible ssh-keys

【解决方案1】：

试试：

 ---
 - name: provision toms keys
    hosts: ssh4.demo.com
    tasks:
     - name: ensure user tom is present
       user: name=tom state=present

     - name: ensure private key and public one are present
       copy: src=ssh_keys/tom/ dest=/.ssh mode=0600

你可以用'tom/'复制整个目录tom或tom的内容。复制完整目录时也不需要指定文件。

【讨论】：