ansible 批量添加互信

最新推荐文章于 2024-01-21 21:57:24 发布

原创最新推荐文章于 2024-01-21 21:57:24 发布 · 1.3k 阅读

1 ·

CC 4.0 BY-SA版权

自动化运维专栏收录该内容

7 篇文章

订阅专栏

本文详细介绍了如何使用Ansible批量添加互信的步骤，包括生成秘钥、关闭key验证、指定远程机器和密码、发送公钥到目标机器以及验证互信是否成功。通过这些步骤，可以高效管理多台服务器的权限设置。

1.生成秘钥

[root@pmm-monitor ~]# ssh-keygen 
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:tWwLhxlyj4HNHWzGPtPKxK+iCILEsDvOanfC3+i0Hk0 root@118slave
The key's randomart image is:
+---[RSA 2048]----+
|         o.      |
|       + .=.     |
|.     o *=o.     |
|o.     o X*..    |
|.o     ESo*=     |
|o.    o  +o..    |
|= o  o .  ..     |
|o+ =.o= . .      |
|+o. B*.o .       |sqlserver SERIALIZABLE
+----[SHA256]-----+

一路直接回车

2、指定远程机器及密码

关掉key验证

vi /etc/ansible/ansible.cnf
host_key_checking = False

3、指定机器和密码

vi /etc/ansible/hosts

[mysql]
56.56.56.82
56.56.56.78

[mysql:vars]
ansible_ssh_pass="123456"

4、发送公钥到目标机器

ansible mysql -m copy -a "src=/root/.ssh/id_rsa.pub dest=/tmp/authorized_keys mode=600"

5、验证

[root@pmm-monitor ~]# ansible mysql -m shell -a "du -sh /data/mysql/"
56.56.56.82 | CHANGED | rc=0 >>
128G	/data/mysql/


56.56.56.78 | CHANGED | rc=0 >>
365G	/data/mysql/