반응형
Ansible shell, command, yum, user 모듈
Ansible에서 모듈 사용법
shell 모듈
$ ansible db1 -m shell -a "free -h"
db1 | CHANGED | rc=0 >>
total used free shared buff/cache available
Mem: 3.8G 162M 2.7G 540K 997M 3.4G
Swap: 0B 0B 0B
command 모듈
$ ansible db1 -m command -a "cat /etc/passwd"
db1 | CHANGED | rc=0 >>
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
...
ec2-user:x:1000:1000:EC2 Default User:/home/ec2-user:/bin/bash
apache:x:48:48:Apache:/usr/share/httpd:/sbin/nologin
yum 모듈
$ ansible db1 -m yum -a "name=httpd state=present"
db1 | SUCCESS => {
"ansible_facts": {
"pkg_mgr": "yum"
},
"changed": false,
"msg": "",
"rc": 0,
"results": [
"httpd-2.4.46-1.amzn2.x86_64 providing httpd is already installed"
]
}
user 모듈
- 패스워드 평문으로 입력
ansible db1 -m user -b -K -a "user=a_username password=a_password"
$ ansible db1 -m user -b -K -a "user=a_username password=a_password"
BECOME password:
[WARNING]: The input password appears not to have been hashed. The 'password' argument must be encrypted for this module to work properly.
db1 | CHANGED => {
"changed": true,
"comment": "",
"create_home": true,
"group": 1001,
"home": "/home/a_username",
"name": "a_username",
"password": "NOT_LOGGING_PASSWORD",
"shell": "/bin/bash",
"state": "present",
"system": false,
"uid": 1001
}
$ ansible db1 -m command -a "cat /etc/passwd" | grep a_username
a_username:x:1001:1001::/home/a_username:/bin/bash
$ cat /etc/shadow
...
a_username:a_password:18774:0:99999:7:::
- 패스워드 암호화
ansible db1 -m user -b -K -a "user=b_username password={{'b_password'|password_hash('sha512')}}"
$ ansible db1 -m user -b -K -a "user=b_username password={{'b_password'|password_hash('sha512')}}"
BECOME password:
db1 | CHANGED => {
"append": false,
"changed": true,
"comment": "",
"group": 1002,
"home": "/home/b_username",
"move_home": false,
"name": "b_username",
"password": "NOT_LOGGING_PASSWORD",
"shell": "/bin/bash",
"state": "present",
"uid": 1002
}
$ cat /etc/shadow
...
a_username:a_password:18774:0:99999:7:::
b_username:$6$HbM2JvTsgnslgrHT$hUVk06b3EamCaTRnghtSv0YZO9uUKcpoAdn8ls6SQ1:18774:0:99999:7:::
https://docs.ansible.com/ansible/2.8/modules/user_module.html?highlight=user
728x90
반응형
'퍼블릭 클라우드' 카테고리의 다른 글
[RDS] DB import(복구) 시 에러 (0) | 2021.06.07 |
---|---|
[Ansible] lineinfile 모듈 (0) | 2021.05.27 |
[Ansible] Amazon Linux에 Ansible 설치하기 (0) | 2021.05.27 |
[aws] EC2 이미지 빌더(EC2 Image Builder) (0) | 2021.05.20 |
[aws] 웹 애플리케이션 방화벽(WAF-CloudFront) 구성 (0) | 2021.05.20 |