password_hash 函式取得雜湊值,否則會將明文 '123qwe' 存入 /etc/shadow 中,而無法使用。經過運算的結果要以雙大括號括起來取其結果,而整串文字要用雙引號括起來,如下顯示:
[deyu1@kvm19 ansible]$ vim users.yml
[deyu1@kvm19 ansible]$ cat users.yml
---
- hosts: dev
tasks:
- name: Ensure group "sharegrp" exists
group:
name: sharegrp
state: present
- name: Add user 'james'
user:
name: james
groups: sharegrp
password: "{{ '123qwe' | password_hash('sha512') }}"
[deyu1@kvm19 ansible]$ ansible-playbook users.yml PLAY [dev] ********************************************************************* TASK [Gathering Facts] ********************************************************* ok: [kvm11] TASK [Ensure group "sharegrp" exists] ****************************************** ok: [kvm11] TASK [Add user 'james'] ******************************************************** changed: [kvm11] PLAY RECAP ********************************************************************* kvm11 : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
[deyu1@kvm19 ansible]$ ssh james@kvm11 james@kvm11's password: Last login: Mon Mar 16 20:32:03 2020
[james@kvm11 ~]$ exit logout Connection to kvm11 closed.