ansible config parameter

# ansible config parameter

---

## ansible config

# cat ansible.cfg |grep -v ^$|grep -v ^#

```shell

[defaults]
  inventory      = /etc/ansible/hosts
  #默认hosts配置的位置

#library = /usr/share/my_modules/
  # 自定义的lib库存放目录
  
  remote_tmp = $HOME/.ansible/tmp
  # 临时文件远程主机存放目录
  local_tmp = $HOME/.ansible/tmp
  # 临时文件本地存放目录

forks = 5
  # 开启的并发数
  poll_interval = 15
  # 轮询时间间隔
  sudo_user = root
  # sudo用户

ask_sudo_pass = False
  #ansible命令是否询问ssh密码

ask_pass      = False
  #ansible命令时是否询问sudo密码
  remote_port    = 22

host_key_checking = False
  #关闭第一次使用连接输入命令提示

log_path = /var/log/ansible.log
  # log 存放的路径

scp_if_ssh = smart  # sftp 优先
  scp_if_ssh = smart  # scp 默认
  # ansible执行的时候需要把临时模块拷贝到客户端，而默认的拷贝方式是通过tftp来的方式拷贝的,
  #输出日志到文件

[privilege_escalation]
  become=True
  become_method=sudo
  become_user=tester
  become_ask_pass=False
  # 普通启用提权

[paramiko_connection]

[ssh_connection]
  ssh_args =  -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no
  ssh_args = -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o IdentitiesOnly=yes -o ControlMaster=auto -o ControlPersist=60s
  #ssh连接时避免首次连接时让输入yes/no部分的提示

[accelerate]
  [selinux]
  [colors]

```

在被管理的节点主机上修改 sudo 权限的用户

```
  # chmod u+w sudor
  # vim /etc/sudoers
  # chmod u-w sudor
```

```
  ## Allow root to run any commands anywhere 
  root    ALL=(ALL)       ALL
  tester  ALL=(ALL)       ALL

```