ansible 批量添加免密碼信任

一、生成密鑰對

ssh-keygen 
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:x4GMdUhaRwmn1JOy1zjLC3kEaN/cqjErTvVxYm06zfQ root@localhost.localdomain
The key's randomart image is:
+---[RSA 2048]----+
|       o*==o     |
|      oB+*=      |
|     .o.+*.=     |
|        o.Boo    |
|        S=*+=    |
|       .=+=X .   |
|      .  B+.o E  |
|     .. o ..     |
|     ...         |
+----[SHA256]-----+

二、指定遠程機器及密碼

• 關掉key驗證

  vi /etc/ansible/ansible.cnf
  host_key_checking = False

• 指定機器和密碼

vi /etc/ansible/hosts

[test]
192.168.10.51
192.168.10.52

[test:vars]
ansible_ssh_pass="123456"

三、發送公鑰到目標機器

ansible test -m copy -a "src=/root/.ssh/id_rsa.pub dest=/root/.ssh/authorized_keys mode=600"

四、驗證

ansible test -m shell -a "whoami"
192.168.10.52 | SUCCESS | rc=0 >>
root

192.168.10.51 | SUCCESS | rc=0 >>
root