安裝Ansible

brew install ansible

建立自己的playbooks

cd /Users/wangzhen/works/oneDriver/OneDrive/Developer
mkdir playbooks

## 建立hosts
在playbooks目錄下建立一個名叫hosts的檔案，這個檔案將作為inventory檔案。在hosts檔案中寫入下面內容：

testserver ansible_ssh_host=192.168.3.175 ansible_ssh_port=22 ansible_ssh_user=root

驗證ansible連線testserver

讓我們告訴Ansible連線到名為testserver的伺服器（在inventory的hosts檔案中描述並引入ping模組）

LS-MacBook-Pro:playbooks wangzhen$ ansible testserver -i hosts -m ping 

The authenticity of host '192.168.3.175 (192.168.3.175)' can't be established. 

RSA key fingerprint is SHA256:gzfyP+1OOYtxE+/fwFxzk+QiWe/28zSigo96sepjmGM. 

Are you sure you want to continue connecting (yes/no)? yes 

testserver | UNREACHABLE! => { 

    "changed": false,  

    "msg": "Failed to connect to the host via ssh: Warning: Permanently added '192.168.3.175' (RSA) to the list of known hosts.\r\nPermission denied (publickey,gssapi-keyex,gssapi-with-mic,password).\r\n",  

    "unreachable": true 

}
 

此問題的處理方法

很明顯是因為沒有遠端伺服器的祕鑰導致。
1、在macbook本地生成rsa公鑰

localhost:.ssh wangzhen$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/Users/wangzhen/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /Users/wangzhen/.ssh/id_rsa.
Your public key has been saved in /Users/wangzhen/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:wQ0bsfp182PpXdY92wehXkGnVnMmrwT9sovmwd/U2zQ

[email protected]
The key’s randomart image is:
+—[RSA 2048]—-+
| +. . |
| . * . +.=|
| = . o Oo|
| . . B o|
| . S . o+ * |
| . . o.o=.+|
| . .oo=EO|
| +=.BX|
| o. oo*|
+—-[SHA256]—–+

2、將此公鑰內容拷貝到被管理linux伺服器的authorized_keys檔案中

[[email protected] .ssh]# vi authorized_keys
[[email protected] .ssh]# cat authorized_keys
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMMePzV7ZRSiKId5z/oA9cAw2MBvXGTL6Pu7ZVcb3TYrRL2NRIfireXWZimWwwWFmfCpd6Xx5G9PyhQXsaV5bw+RwgasyChEoTo6NOpqKlvjoV6NefLhB4r2x0z/T4KCm+NTZd5aUqFGhJbzj+mIBV9XeeGM4rhASoUCeHNS2MeYtBi/df32KRwlTaXkeWOYUOIE3jnHC4+UmZbDSNgo+2BkNN1CmuxHCBF3LHYmjCwnKx4F4CZ5Ohl3haVXUZ8oFcQxSaAzfwr4wMJcNR3A/d6Mojric5tIH97tEwv1gbGzo0xGJLJXdHxS7QCJiBeFkltF3oPHC8Y7O+Ge1N+KbH [email protected]

再次執行ansible測試，連線成功

LS-MacBook-Pro:playbooks wangzhen$ ansible testserver -i hosts -u root -m ping
testserver | SUCCESS => {
“changed”: false,
“ping”: “pong”
}