weareinteractive / ansible-ssh Goto Github PK

ansible 2.7.1
config file = /etc/ansible/ansible.cfg
configured module search path = [u'/home/lukas/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
ansible python module location = /usr/lib/python2.7/dist-packages/ansible
executable location = /usr/bin/ansible
python version = 2.7.15rc1 (default, Apr 15 2018, 21:51:34) [GCC 7.3.0]

- hosts: all
  roles:
    - mrlesmithjr.chrony
    - franklinkim.ssh
  vars:
    chrony_local_stratum: 10
    chrony_ntp_servers:
      - server: 'time.google.com'
        options:
        - option: 'iburst'
        - option: 'minpoll'
          val: 8
      - server: '0.de.pool.ntp.org'
        options:
        - option: 'iburst'
        - option: 'minpoll'
          val: 8
      - server: '0.fr.pool.ntp.org'
        options:
        - option: 'iburst'
        - option: 'minpoll'
          val: 8
      - server: '0.at.pool.ntp.org'
        options:
        - option: 'iburst'
        - option: 'minpoll'
          val: 8
    ssh_password_authentication: 'no'

PLAY [all] **********************************************************************************************************************************************************************************
TASK [Gathering Facts] **********************************************************************************************************************************************************************
ok: [host.example.de]
TASK [mrlesmithjr.chrony : debian | Installing Chrony] **************************************************************************************************************************************
ok: [host.example.de]
TASK [mrlesmithjr.chrony : config_chrony | Configuring Chrony] ******************************************************************************************************************************
ok: [host.example.de]
TASK [franklinkim.ssh : Installing packages] ************************************************************************************************************************************************
[DEPRECATION WARNING]: Invoking "apt" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and specifying `pkg: {{ item }}`, 
please use `pkg: [u'openssh-server', u'openssh-client']` and remove the loop. This feature will be removed in version 2.11. Deprecation warnings can be disabled by setting 
deprecation_warnings=False in ansible.cfg.
ok: [host.example.de] => (item=[u'openssh-server', u'openssh-client'])
TASK [franklinkim.ssh : Configuring sshd] ***************************************************************************************************************************************************
ok: [host.example.de]
TASK [franklinkim.ssh : Registering known hosts] ********************************************************************************************************************************************
getaddrinfo ssh_known_hosts: Temporary failure in name resolution
failed: [host.example.de] (item=ssh_known_hosts) => {"changed": false, "item": "ssh_known_hosts", "msg": "No key specified when adding a host"}
to retry, use: --limit @/home/lukas/git/ansible/basics.retry
PLAY RECAP **********************************************************************************************************************************************************************************
host.example.de         : ok=5    changed=0    unreachable=0    failed=1   

ssh_config:
  # Our preferences; note OSCAP recommend no to root
  PermitRootLogin: 'yes'
  PubkeyAuthentication: 'yes'
  PasswordAuthentication: 'no'
  # Defaults:
  ChallengeResponseAuthentication: "no"
  UsePAM: "yes"
  X11Forwarding: "no"
  PrintMotd: "no"
  AcceptEnv: LANG LC_*
  Subsystem: sftp /usr/lib/openssh/sftp-server
  # OSCAP recommendations
  ClientAliveInterval: 300
  ClientAliveCountMax: 0
  # We have an ssh v2 only version, but it fails us anyway...
  Protocol: 2

# Ansible managed


Subsystem sftp /usr/lib/openssh/sftp-server
PubkeyAuthentication yes
UsePAM yes
PrintMotd no

Port 22

PasswordAuthentication yes
PermitRootLogin yes
AcceptEnv LANG LC_*
X11Forwarding yes
ChallengeResponseAuthentication no

# Managing SSH config per OSCAP
ssh_port: [22]
ssh_protocol: 2
ssh_password_authentication: 'no'
ssh_config:
  # Our preferences; note OSCAP recommend no to root
  [... etc ...]

+++ after: /home/kgoetz/.ansible/tmp/ansible-local-36635k7Dvt/tmpR3UYxD/sshd_config.j2
@@ -8,7 +8,7 @@
 
 Port 22
 
-PasswordAuthentication yes
+PasswordAuthentication no
 PermitRootLogin yes
 AcceptEnv LANG LC_*
 X11Forwarding yes

changed: [...]

ERROR! no action detected in task. This often indicates a misspelled module name, or incorrect module path.

The error appears to have been in '/Users/kgoetz/server-configuration-management/tproles/franklinkim.ssh/tasks/known_hosts.yml': line 3, column 3, but may
be elsewhere in the file depending on the exact syntax problem.

The offending line appears to be:


- name: Registering known hosts
  ^ here

 ansible-playbook --version
ansible-playbook 2.2.1.0
  config file = /Users/kgoetz/server-configuration-management/ansible.cfg
  configured module search path = ['/opt/local/share/ansible', './library']

---
- hosts: all
  sudo: yes
  roles:
    - franklinkim.apt
    - franklinkim.timezone
    - franklinkim.users
    #- franklinkim.users-oh-my-zsh
    - franklinkim.sudo
    - franklinkim.ssh
  vars_files:
    - vars/ssh.yml
    - vars/users.yml
    - vars/apt.yml
  vars:
    timezone: 'America/Los Angeles'

---
ssh_port:
  - 22
ssh_permit_root_login: 'no'
ssh_pubkey_authentication: 'yes'
ssh_password_authentication: 'yes'
ssh_known_hosts:
  - github.com

---
ssh_port:
  - 22
ssh_permit_root_login: 'no'
ssh_pubkey_authentication: 'yes'
ssh_password_authentication: 'yes'
ssh_known_hosts: []