login - ansible remote_user 作为 root

Question

我想开始使用 ansible，但有一件简单的事情我没有得到:

flipl@sun ~ % ansible -vvvv -m ping t420
SUDO password: 
<t420.beach.lan> ESTABLISH CONNECTION FOR USER: flipl
<t420.beach.lan> REMOTE_MODULE ping
<t420.beach.lan> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/home/flipl/.ansible/cp/ansible-ssh-%h-%p-%r" -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 t420.beach.lan /bin/sh -c 'mkdir -p $HOME/.ansible/tmp/ansible-tmp-1454775840.71-251439732457316 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1454775840.71-251439732457316 && echo $HOME/.ansible/tmp/ansible-tmp-1454775840.71-251439732457316'
<t420.beach.lan> PUT /tmp/tmp1fqFHM TO /home/flipl/.ansible/tmp/ansible-tmp-1454775840.71-251439732457316/ping
<t420.beach.lan> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/home/flipl/.ansible/cp/ansible-ssh-%h-%p-%r" -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 t420.beach.lan /bin/sh -c 'LANG=C LC_CTYPE=C /usr/bin/python /home/flipl/.ansible/tmp/ansible-tmp-1454775840.71-251439732457316/ping; rm -rf /home/flipl/.ansible/tmp/ansible-tmp-1454775840.71-251439732457316/ >/dev/null 2>&1'
t420.beach.lan | success >> {
"changed": false, 
"ping": "pong"
}

flipl@sun ~ % su -
Password: 
Last login: Sa Feb  6 17:22:40 CET 2016 on pts/0

[root@sun ~]# ansible -vvvv -m ping t420 -u flipl
SUDO password: 
<t420.beach.lan> ESTABLISH CONNECTION FOR USER: flipl
<t420.beach.lan> REMOTE_MODULE ping
<t420.beach.lan> EXEC ssh -C -tt -vvv -o ControlMaster=auto -o ControlPersist=60s -o ControlPath="/root/.ansible/cp/ansible-ssh-%h-%p-%r" -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=flipl -o ConnectTimeout=10 t420.beach.lan /bin/sh -c 'mkdir -p $HOME/.ansible/tmp/ansible-tmp-1454775858.05-125216053853458 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1454775858.05-125216053853458 && echo $HOME/.ansible/tmp/ansible-tmp-1454775858.05-125216053853458'
t420.beach.lan | FAILED => SSH Error: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
while connecting to 192.168.0.100:22
It is sometimes useful to re-run the command using -vvvv, which prints SSH debug output to help diagnose the issue.

我在使用 ansible 时是否遗漏了一些特别的东西？

我想要实现的目标是只有 root 才能执行 playbook(为什么会有 SUDO 密码提示，但没关系，我在里面放了什么)。出于安全考虑，不允许通过 ssh 进行 root 访问。
所以我想尝试以 root 身份执行 playbooks/ansible 命令，使用带有客户端登录的 ssh 并再次成为 root 以进行软件包安装。

但正如你所看到的，我已经遇到了简单任务的问题:(

我已经尝试编辑我的库存文件:

[t420]
flipl@t420.beach.kan
t420.beach.lan ansible_ssh_user=flipl

任何帮助将不胜感激!

谢谢，
pwe

Answer 1

您是否已将您的公钥添加到远程服务器中的授权文件中？