ansible免密登录 {#articleContentId}

需求： 管理机 批量 推送到 被管理机

以root用户登录到主控端机器,ssh-keygen生成密钥对,通过ssh-copy-id 远程主机,将公钥拷贝到远程主机

ssh-copy-id -i ~/.ssh/id_rsa.pub root@10.0.0.7

第一步：在管理机上取消 验证（不输入yes ）

ssh-keygen 生成秘钥
vim /etc/ansible/ansible.cfg
host_key_checking = False

第2 步骤： 配置主机清单

第三步： 配置main.yml

ansible-galaxy init ssh
[root@m01 /etc/ansible/roles/ssh/tasks]#cat main.yml

name: Non secret authentication
authorized_key:
user:root
key: "{{ lookup('file', '/root/.ssh/id_rsa.pub') }}"

state: present

第4步： 配置site

执行：

ansible-playbook  /etc/ansible/roles/site.yml

参考： ansible 免密登陆汇总

#####批量推送#######

批量推送公钥到远程机器

将以下文件命名为:push.ssh.ymal

  - hosts: tencent
user: root

tasks:

 - name: ssh-copy

   authorized_key: user=root key="{{ lookup('file', '/root/.ssh/id_rsa.pub') }}"

   tags:

     - sshkey

执行推送命令

ansible-playbook ssh.ymal

方案2：

#!/bin/bash
rpm -q expect >/dev/null
if [ $? -ne 0 ]
then
  yum install -y expect &>/dev/null
fi
if [ ! -f /root/.ssh/id_rsa.pub ]
then
/usr/bin/expect <<AAA
set timeout 10

spawn ssh-keygen
expect {
"rsa):" { send "\r"; exp_continue }
"passphrase):" { send "\r"; exp_continue }
"again:" { send "\r" }
}
expect eof
AAA
fi
for i in {6,7,8,31,41,51}
do
/usr/bin/expect <<AAA
set timeout 10
spawn ssh-copy-id 10.0.0.$i
expect {
"yes/no" { send "yes\r"; exp_continue }
"password:" { send "1\r" }
}
expect eof
AAA
done
#####attention expect 里面是双引号

方案3：

#!/bin/bash
#变量优化
ROOT_PASS="1"
USER_NAME="root"
USER_PASS="1"
HOST_LIST="192.168.100.201 192.168.100.202 192.168.100.110 192.168.100.203"
#管理主机创建用户密钥对
su - $USER_NAME -c " cd /root && echo ""   | ssh-keygen -t rsa"
PUB_KEY="cat /$USER_NAME/.ssh/id_rsa.pub"
#利用ssh非免密环境在所有主机创建用户
for host in  $HOST_LIST; do
sshpass -p$ROOT_PASS ssh -o StrictHostKeyChecking=no root@$host "useradd $USER_NAME"
sshpass -p$ROOT_PASS ssh -o StrictHostKeyChecking=no root@$host "echo  "$USER_PASS" | passwd --stdin  $USER_NAME"
sshpass -p$ROOT_PASS ssh -o StrictHostKeyChecking=no root@$host "mkdir -p  /$USER_NAME/.ssh"
sshpass -p$ROOT_PASS ssh -o StrictHostKeyChecking=no root@$host "echo $PUB_KEY > /$USER_NAME/.ssh/authorized_keys"
sshpass -p$ROOT_PASS ssh -o StrictHostKeyChecking=no root@$host "chmod 600 /$USER_NAME/.ssh/authorized_keys"
sshpass -p$ROOT_PASS ssh -o StrictHostKeyChecking=no root@$host "chown -R $USER_NAME:$USER_NAME /$USER_NAME/.ssh"
done
#利用ssh非免密管理主机将公钥写入到所有主机authorized.keys