Question

我在AWS上有一台CentOS机器，我打算安装 httpd ，这需要我们成为root用户。我使用become_method : sudo以root身份工作，但我仍无法解决它。

这是我的剧本：

---
- hosts : aws
  connection : ssh
  remote_user : centos
  become_method : sudo
  gather_facts : yes
  tasks :
  - name : Connect to the remote host and executing yum updates
    yum : name=* state=latest
  - name : Installing HTTPD Server
    yum : name=httpd state=latest
  - name : Deploy the static website
    copy : src=../files/index.html dest=/var/www/html/index.html owner=centos group=centos mode=0655 backup=yes
  - name : Restart the HTTPD Service
    service: name=httpd state=restarted
  - name : Wait for the HTTPD port 80 to be listening
    wait_for : host=ec2-54-152-85-197.compute-1.amazonaws.com
  - name : Installing WGET to test the site
    yum : name=wget state=latest
  - name : Test the site
    shell : /usr/bin/wget http://localhost
    register : site_result
  - name : Display the site output results
    debug : var=site_result

通过这样做，我遇到了以下错误：

TASK [Connect to the remote host and executing yum updates] ********************
task path: /home/centos/Playbooks/example/example_playbook.yaml:8
Using module file /usr/lib/python2.7/site-packages/ansible-2.2.0-py2.7.egg/ansible/modules/core/packaging/os/yum.py
<ec2-54-152-85-197.compute-1.amazonaws.com> ESTABLISH SSH CONNECTION FOR USER: centos
<ec2-54-152-85-197.compute-1.amazonaws.com> SSH: EXEC ssh -q -C -o ControlMaster=auto -o ControlPersist=60s -o 'IdentityFile="/home/centos/AnsibleKeyPair.pem"' -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=centos -o ConnectTimeout=10 -o ControlPath=/home/centos/.ansible/cp/ansible-ssh-%h-%p-%r ec2-54-152-85-197.compute-1.amazonaws.com '/bin/sh -c '"'"'/usr/bin/python && sleep 0'"'"''
fatal: [ec2-54-152-85-197.compute-1.amazonaws.com]: FAILED! => {
"changed": true,
"failed": true,
"invocation": {
    "module_args": {
        "conf_file": null,
        "disable_gpg_check": false,
        "disablerepo": null,
        "enablerepo": null,
        "exclude": null,
        "install_repoquery": true,
        "list": null,
        "name": [
            "*"
        ],
        "state": "latest",
        "update_cache": false,
        "validate_certs": true
    },
    "module_name": "yum"
},
"msg": "You need to be root to perform this command.\n",
"rc": 1,
"results": [
    "Loaded plugins: fastestmirror\n"
]
}

Answer 1

你已经足够接近，为了让Ansible升级为root，你需要将become: yes添加到你的剧本中。

- hosts: aws
  connection: ssh
  remote_user: centos
  become_method: sudo
  become: yes
  gather_facts: yes
  tasks:
  [...]

作为备注，您无需明确指定：connection become_method gather_facts，它们都将默认为这些值。

修改

默认情况下，CentOS提供Default: requiretty，因此您有2种方法可以修复它：

在requiretty档案
中注明sudoers行
禁用pipelining在您的剧本中添加pipelinig: no

无法使用Ansible playbook在我的远程计算机上安装httpd

1 个答案: