自动化-ansible安装

ansible安装

 ansible不是c/s架构，使用的是sshd远程，所以只需在一台机器安装即可

 

实验机两台：

host1：192.168.2.251

host2：192.168.2.252

 

1：host1使用Yum安装前，需要安装下epel扩展源

[root@ghs ~]#yum -y install ansible

 

说明：

报错提示："msg": "Aborting, target uses selinux but python bindings (libselinux-python) aren't installed!"

解决方法：yum -y install libselinux-python

2：安装完成后，host1生成秘钥对，将公钥放置在远程机器上

[root@ghs ~]# ssh-keygen

Generating public/private rsa key pair.

Enter file in which to save the key (/root/.ssh/id_rsa):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /root/.ssh/id_rsa.

Your public key has been saved in /root/.ssh/id_rsa.pub.

The key fingerprint is:

41:d1:e2:6b:12:d7:d6:9c:77:0d:5c:d5:a0:49:89:5f root@ghs

The key's randomart image is:

+--[ RSA 2048]----+

|        oo ..o.o=|

|       .. o..oE .|

|       ..o +oo ..|

|      . o.o = . o|

|       oSo   . . |

|      . o        |

|       o         |

|                 |

|                 |

+-----------------+

 

[root@ghs ~]# cat /root/.ssh/id_rsa.pub

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt9yV5D4MlhzDY+olyDmJmmNqOZUoGa9Ik6LKvofQC+5Ze2IYFknT8Gv388AVkh5dN511SpXA1qUrbOTkcOR9fVRXdyYOxnRDYGFbZDvTQ2N94xrvFlPobhUNcHLagVMIKY33AVV690s9Dg33XGwC3Wwx2Rwh73uAAAE08JjCAtApu8uc21yM96FuOkraMhJHsr54XJ9wtQFK1nPqqjXJv/eeLFanJ99Jr1VncSBj2TYOQafVvXJ4Xy/m3xoUWSQBtUaqNTAbersxWLboqECPxwJ/uJGntXVk/kLtz0bCzYhWF9Jy0RCrgqkjU5i7pzsdTYg3Q/sgOeJ5Yn3FuYKpRw== root@ghs

 

 

4：在host2把host1生成的公钥加本地authorized_keys文件，实现免密登录

[root@ghs2 ~]# vim /root/.ssh/authorized_keys

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt9yV5D4MlhzDY+olyDmJmmNqOZUoGa9Ik6LKvofQC+5Ze2IYFknT8Gv388AVkh5dN511SpXA1qUrbOTkcOR9fVRXdyYOxnRDYGFbZDvTQ2N94xrvFlPobhUNcHLagVMIKY33AVV690s9Dg33XGwC3Wwx2Rwh73uAAAE08JjCAtApu8uc21yM96FuOkraMhJHsr54XJ9wtQFK1nPqqjXJv/eeLFanJ99Jr1VncSBj2TYOQafVvXJ4Xy/m3xoUWSQBtUaqNTAbersxWLboqECPxwJ/uJGntXVk/kLtz0bCzYhWF9Jy0RCrgqkjU5i7pzsdTYg3Q/sgOeJ5Yn3FuYKpRw== root@ghs

 

 

5：设置权限为600，关闭selinux

[root@ghs2 ~]# chmod 600 /root/.ssh/authorized_keys

[root@ghs2 ~]# setenforce 0

 

 

6：:测试免密是否能ssh

[root@ghs ~]# ssh 192.168.2.252

The authenticity of host 'ghs.com (192.168.2.252)' can't be established.

RSA key fingerprint is cb:54:0d:43:50:6c:a2:20:6e:1f:8a:67:df:16:a5:08.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added 'ghs.com' (RSA) to the list of known hosts.

Last login: Sat Jul 22 09:20:39 2017 from 192.168.2.251

[root@ghs2 ~]#

ok