配置 ansible 控制节点

本文操作均基于amazon linux 2操作系统

创建ansible专属用户

创建ansible用户，并将用户创建到root组中，具备root权限

useradd ansible -m -s /bin/bash -g root -c "ansible control user"

---

检测用户所属组

[root@chqGrafana01ap ~]# groups ansible
ansible : root

[root@chqGrafana01ap ~]# cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
ansible:x:1002:0:ansible control user:/home/ansible:/bin/bash

---

为ansible用户设置密码

echo '$PASSWD' | passwd --stdin ansible

---

为ansible用户生成密钥对用于ssh互信

ssh-keygen -t rsa

---

将公钥授权给所有被控节点的ansible用户

#!/bin/bash
mkdir -p /home/ansible/.ssh
echo "<your_public_key>" >> /home/ansible/.ssh/authorized_keys
chown ansible:ansible /home/ansible/.ssh -R
chmod 700 /home/ansible/.ssh
chmod 600 /home/ansible/.ssh/authorized_keys

---

安装python3.9

sudo yum install gcc openssl-devel bzip2-devel libffi-devel 
cd /opt 
wget https://www.python.org/ftp/python/3.9.16/Python-3.9.16.tgz 
sudo tar xzf Python-3.9.16.tgz 
cd Python-3.9.16 
sudo ./configure --enable-optimizations 
sudo make altinstall 
python3.9 -V
cd /usr/local/bin
ln -s python3.9 python3

---

安装ansible

/usr/local/bin/python3 -m pip install --upgrade pip
su - ansible
python3 -m pip install --user ansible-core==2.14
ansible --version
python3 -m pip install --user argcomplete
activate-global-python-argcomplete --user

---