使用预定义的用户名和密码运行 Ansible playbook 任务

Question

这是我的 ansible 脚本的代码。

---
- hosts: "{{ host }}"
  remote_user: "{{ user }}"
  ansible_become_pass: "{{ pass }}"
  tasks:
    - name: Creates directory to keep files on the server
      file: path=/home/{{ user }}/fabric_shell state=directory

    - name: Move sh file to remote
      copy:

        src: /home/pankaj/my_ansible_scripts/normal_script/installation/install.sh
        dest: /home/{{ user }}/fabric_shell/install.sh



    - name: Execute the script
      command: sh /home/{{ user }}/fabric_shell/install.sh
      become: yes

我正在使用命令运行 ansible playbook>>> ansible-playbook send_run_shell.yml --extra-vars "user=sakshi host=192.168.0.238 pass=Welcome01".

但我不知道为什么会出错

ERROR! 'ansible_become_pass' is not a valid attribute for a Play

The error appears to have been in '/home/pankaj/go/src/shell_code/send_run_shell.yml': line 2, column 3, but may
be elsewhere in the file depending on the exact syntax problem.

The offending line appears to be:

---
- hosts: "{{ host }}"
  ^ here
We could be wrong, but this one looks like it might be an issue with
missing quotes.  Always quote template expression brackets when they
start a value. For instance:

    with_items:
      - {{ foo }}

Should be written as:

    with_items:
      - "{{ foo }}"

请指导，我做错了什么。

提前致谢...

Answer 1

ansible_become_pass 是一个连接参数，可以设置为变量：

---
- hosts: "{{ host }}"
  remote_user: "{{ user }}"
  vars:
    ansible_become_pass: "{{ pass }}"
  tasks:
    # ...

也就是说，您也可以将 remote_user 移动到变量中（参考整个 list of connection parameters），将其保存到单独的 host_vars- 或 group_vars-file 并使用 Ansible Vault 加密。

Answer 2

看看这个线程thread 和Ansible Page。我建议这样使用become_user：

- hosts: all
  tasks:
    - include_tasks: task/java_tomcat_install.yml
      when: activity == 'Install'
      become: yes
      become_user: "{{ aplication_user }}"

尝试不要使用pass=Welcome01，

当与远程机器对话时，Ansible 默认假定您使用的是 SSH 密钥。鼓励使用 SSH 密钥，但也可以在需要时通过提供选项 --ask-pass 使用密码验证。如果使用 sudo 功能并且当 sudo 需要密码时，还需要提供 --ask-become-pass（以前 --ask-sudo-pass 已被弃用）。