{"id":554565,"date":"2022-02-11T18:48:43","date_gmt":"2022-02-11T10:48:43","guid":{"rendered":"http:\/\/4563.org\/?p=554565"},"modified":"2022-02-11T18:48:43","modified_gmt":"2022-02-11T10:48:43","slug":"ansible-sudo-su-%e4%b8%8d%e6%94%af%e6%8c%81-5","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=554565","title":{"rendered":"ansible sudo su &#8211; \u4e0d\u652f\u6301"},"content":{"rendered":"<div>\n<div>\n<div>\n<h1> ansible sudo su &#8211; \u4e0d\u652f\u6301 <\/h1>\n<p> <\/p>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : leiuu <\/span>  <span><i><\/i> 37<\/span> <\/div>\n<div> <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div isfirst=\"1\"> <\/p>\n<p>\u8bf7\u6559 ansible \u5927\u4f6c\u4eec\u3002<\/p>\n<p>\u7b2c\u4e00\u6b21\u63a5\u89e6 ansible \u3002<\/p>\n<p>\u9700\u6c42\u5982\u4e0b\uff1a<\/p>\n<p>\u5047\u8bbe\u6211\u7684\u7528\u6237\u53ea\u80fd\u662f\u65e0\u5bc6\u7801\u5207\u6362\u5230 root \uff0c\u600e\u4e48\u7528 ansible ad-hoc \u65b9\u5f0f\u8fdc\u7a0b\u6267\u884c\u9700\u8981 root \u7684\u547d\u4ee4\u3002<\/p>\n<p>\u6211 foo \u7528\u6237\u6743\u9650\uff1a<\/p>\n<pre><code>foo ALL=(ALL) NOPASSWD: \/bin\/su <\/code><\/pre>\n<p>\u8ba1\u5212\u6267\u884c\uff08\u6279\u91cf\u66f4\u65b0 hosts \u6587\u4ef6\uff09\uff1a<\/p>\n<pre><code>ansible --private-key xxx -u foo all -m copy -a \"src=\/etc\/hosts dest=\/etc\/hosts\" -become --become-user root --become-method 'sudo' <\/code><\/pre>\n<p>\u62a5\u9519\uff1a<\/p>\n<pre><code>1.2.3.4 | FAILED! =&gt; {     \"msg\": \"Missing sudo password\" } <\/code><\/pre>\n<p>\u8c37\u6b4c\u7684\u65b9\u6cd5\u57fa\u672c\u8bd5\u8fc7\u4e86\u4e0d\u592a\u594f\u6548\u3002\u636e\u8bf4 playbook \u53ef\u4ee5\uff0c\u4f46\u662f\u76ee\u524d\u60f3\u4e86\u89e3 ad-hoc \u65b9\u5f0f\u662f\u5426\u80fd\u76f4\u63a5\u652f\u6301\u3002<\/p>\n<\/p><\/div>\n<div> <b>\u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (<span>4<\/span>) <\/div>\n<div> <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<ul>\n<li data-pid=\"7036114\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : leishi1313 <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>  <\/span> <\/div>\n<\/p><\/div>\n<div> -K \uff1f <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"7036115\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : sunyi382499496 <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>  <\/span> <\/div>\n<\/p><\/div>\n<div> \u4f60\u53ef\u4ee5\u5c1d\u8bd5\u4e00\u4e0b\u5728 ansible.cfg \u91cc\u9762\u52a0\u5165<br \/>[privilege_escalation]<br \/>become_exe = &#8216;sudo su -&#8216;<br \/>\u7136\u540e\u628a &#8211;become-method \u2018sudo\u2019 \u6362\u6210 &#8211;become-method \u2018su\u2019 <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"7036116\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u4e3b<\/span> <span>\u8cc7\u6df1\u5927\u4f6c : leiuu <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>  <\/span> <\/div>\n<\/p><\/div>\n<div> @leishi1313 \u4f7f\u7528 sudo su &#8211; \u5207\u6362 root \u6ca1\u6709\u5bc6\u7801\uff0c\u5982\u679c root \u6709\u5bc6\u7801 -K \u53ef\u80fd\u53ef\u4ee5\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n<li data-pid=\"7036117\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u4e3b<\/span> <span>\u8cc7\u6df1\u5927\u4f6c : leiuu <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>  <\/span> <\/div>\n<\/p><\/div>\n<div> @sunyi382499496 <\/div>\n<\/p><\/div>\n<\/li>\n<li>\n","protected":false},"excerpt":{"rendered":"<p>ansible sudo su &#038;&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/554565"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=554565"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/554565\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=554565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=554565"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=554565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}