linuxea:ansible使用synchronize普通用户权限问题 1,首先已经做好了密钥认证[gitlab-runner@Linuxea-VM-Node_10_10_240_145 root]$ ssh root@10.10.240.203 [root@Linuxea-VM-Node203 ~]# [root@Linuxea-VM-Node203 ~]# exit 登出 Connection to 10.10.240.203 closed.切换到普通用户推送出现问题[gitlab-runner@Linuxea-VM-Node_10_10_240_145 root]$ ansible 10.10.240.203 -m synchronize -a 'src=/home/gitlab-runner/123.txt dest=/data/wwwroot/' An exception occurred during task execution. To see the full traceback, use -vvv. The error was: OSError: [Errno 13] Permission denied: '.' 10.10.240.203 | FAILED! => { "msg": "Unexpected failure during module execution.", "stdout": "" }查看详情[gitlab-runner@Linuxea-VM-Node_10_10_240_145 root]$ ansible 10.10.240.203 -m synchronize -a 'src=/home/gitlab-runner/123.txt dest=/data/wwwroot/' -vvv ansible 2.5.3 config file = /etc/ansible/ansible.cfg configured module search path = [u'/home/gitlab-runner/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python2.7/site-packages/ansible executable location = /usr/bin/ansible python version = 2.7.5 (default, Apr 11 2018, 07:36:10) [GCC 4.8.5 20150623 (Red Hat 4.8.5-28)] Using /etc/ansible/ansible.cfg as config file Parsed /etc/ansible/hosts inventory source with ini plugin META: ran handlers Using module file /usr/lib/python2.7/site-packages/ansible/modules/files/synchronize.py The full traceback is: Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ansible/executor/task_executor.py", line 138, in run res = self._execute() File "/usr/lib/python2.7/site-packages/ansible/executor/task_executor.py", line 561, in _execute result = self._handler.run(task_vars=variables) File "/usr/lib/python2.7/site-packages/ansible/plugins/action/synchronize.py", line 414, in run result.update(self._execute_module('synchronize', module_args=_tmp_args, task_vars=task_vars)) File "/usr/lib/python2.7/site-packages/ansible/plugins/action/__init__.py", line 720, in _execute_module self._make_tmp_path() File "/usr/lib/python2.7/site-packages/ansible/plugins/action/__init__.py", line 255, in _make_tmp_path tmpdir = self._remote_expand_user(remote_tmp, sudoable=False) File "/usr/lib/python2.7/site-packages/ansible/plugins/action/__init__.py", line 590, in _remote_expand_user data = self._low_level_execute_command(cmd, sudoable=False) File "/usr/lib/python2.7/site-packages/ansible/plugins/action/__init__.py", line 915, in _low_level_execute_command os.chdir(self._loader.get_basedir()) OSError: [Errno 13] Permission denied: '.' 10.10.240.203 | FAILED! => { "msg": "Unexpected failure during module execution.", "stdout": "" }删掉之前的目录，重新推送创建[gitlab-runner@Linuxea-VM-Node_10_10_240_145 ~]$ ansible linuxea -m synchronize -a 'src=/home/gitlab-runner/123.txt dest=/data/wwwroot/' -vvv ansible 2.5.3 config file = /etc/ansible/ansible.cfg configured module search path = [u'/home/gitlab-runner/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python2.7/site-packages/ansible executable location = /usr/bin/ansible python version = 2.7.5 (default, Apr 11 2018, 07:36:10) [GCC 4.8.5 20150623 (Red Hat 4.8.5-28)] Using /etc/ansible/ansible.cfg as config file Parsed /etc/ansible/hosts inventory source with ini plugin META: ran handlers Using module file /usr/lib/python2.7/site-packages/ansible/modules/files/synchronize.py Using module file /usr/lib/python2.7/site-packages/ansible/modules/files/synchronize.py <10.10.240.202> ESTABLISH LOCAL CONNECTION FOR USER: gitlab-runner <10.10.240.202> EXEC /bin/sh -c 'echo ~root && sleep 0' <10.10.240.203> ESTABLISH LOCAL CONNECTION FOR USER: gitlab-runner <10.10.240.203> EXEC /bin/sh -c 'echo ~root && sleep 0' <10.10.240.203> EXEC /bin/sh -c '( umask 77 && mkdir -p "` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-161212317664020 `" && echo ansible-tmp-1528855639.99-161212317664020="` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-161212317664020 `" ) && sleep 0' <10.10.240.202> EXEC /bin/sh -c '( umask 77 && mkdir -p "` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-180372546287702 `" && echo ansible-tmp-1528855639.99-180372546287702="` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-180372546287702 `" ) && sleep 0' 10.10.240.203 | UNREACHABLE! => { "changed": false, "msg": "Authentication or permission failure. In some cases, you may have been able to authenticate and did not have permissions on the target directory. Consider changing the remote tmp path in ansible.cfg to a path rooted in \"/tmp\". Failed command was: ( umask 77 && mkdir -p \"` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-161212317664020 `\" && echo ansible-tmp-1528855639.99-161212317664020=\"` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-161212317664020 `\" ), exited with result 1", "unreachable": true } 10.10.240.202 | UNREACHABLE! => { "changed": false, "msg": "Authentication or permission failure. In some cases, you may have been able to authenticate and did not have permissions on the target directory. Consider changing the remote tmp path in ansible.cfg to a path rooted in \"/tmp\". Failed command was: ( umask 77 && mkdir -p \"` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-180372546287702 `\" && echo ansible-tmp-1528855639.99-180372546287702=\"` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-180372546287702 `\" ), exited with result 1", "unreachable": true }可以看到这里报错 "msg": "Authentication or permission failure. In some cases, you may have been able to authenticate and did not have permissions on the target directory. Consider changing the remote tmp path in ansible.cfg to a path rooted in \"/tmp\". Failed command was: ( umask 77 && mkdir -p \"` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-180372546287702 `\" && echo ansible-tmp-1528855639.99-180372546287702=\"` echo /root/.ansible/tmp/ansible-tmp-1528855639.99-180372546287702 `\" ), exited with result 1", 将配置文件中remote_tmp = ~/.ansible/tmp 修改 remote_tmp = /tmp/.ansible/tmp，这里主要是权限问题切换root用户修改后在来推送验证一下已经ok

Saltstack帮助说明 SaltStack@Master: salt-key -hActions:-l ARG, --list=ARG 显示指定状态的key(支持正则表-L, --list-all 显示所有public keys-a ACCEPT, --accept=ACCEPT 接受指定等待认证的key(-A, --accept-all 接受所有等待认证的key-r REJECT, --reject=REJECT 拒绝指定等待认证的key(-R, --reject-all 拒绝所有等待认证的key--include-all 显示所有状态的key(包含-p PRINT, --print=PRINT 打印指定的public key(-P, --print-all 打印所有的public key-d DELETE, --delete=DELETE 删除指定key-D, --delete-all 删除所有的key-f FINGER, --finger=FINGER 显示指定key的指纹信息-F, --finger-all 显示所有key的指纹信息Options:--version 查看SaltStack程序的版本号--versions-report 查看SaltStack程序以及依赖包的版本号-h, --help 查看帮助信息-c CONFIG_DIR, --config-dir=CONFIG_DIR 指定配置文件目录-t TIMEOUT, --timeout=TIMEOUT 指定Timeout时间(默认是5s)--hard-crash 捕捉到original异常不退出(默认关闭-s, --static 以组的形式返回所有Minion的数据--async 异步执行-v, --verbose verbose模式--show-timeout 显示minion timeout状态--show-jid 显示任务jid-b BATCH, --batch=BATCH 按照百分比执行任务-a EAUTH, --auth=EAUTH, --eauth=EAUTH, --external-auth=指定外部认证方式-T, --make-token 生成Master token--return=RETURNER 指定SaltStack return-d, --doc 查看指定模块或者所有模块文档--args-separator=ARGS_SEPARATOR 设置多个传参直接分隔符--summary 显示汇总信息--username=USERNAME 指定外部认证用户名--password=PASSWORD 指定外部认证密码所有日志相关参数：Logging Options:-l LOG_LEVEL, --log-level=LOG_LEVEL 指定日志级别--log-file=LOG_FILE 指定日志记录文件所有操作目标参数：Target Options:-E, --pcre 正则匹配-L, --list 列表匹配-G, --grain grains匹配--grain-pcre grains加正则匹配-N, --nodegroup 组匹配-R, --range 范围匹配-C, --compound 综合匹配(指定多个匹配)-I, --pillar pillar值匹配-S, --ipcidr minions网段地址匹配所有输出参数：Output Options:--out=OUTPUT, --output=OUTPUT 指定输出格式--out-file=OUTPUT_FILE 指定输出文件--no-color, --no-colour 关闭所有颜色显示--force-color, --force-colour 强制输出颜色显示--state-output=STATE_OUTPUT 指定states输出格式SaltStack@Minion: rpm -ql salt-minion/etc/rc.d/init.d/salt-minion #salt minion服务启动脚本/etc/salt/minion #salt minion配置文件/usr/bin/salt-call #salt call拉取命令/usr/bin/salt-minion #salt minion 服务命令salt命令的output与log的相关参数。SaltStack@Minion: salt-call -hOptions:--version 查看SaltStack程序的版本号--versions-report 查看SaltStack程序以及依赖包的版本号-h, --help 查看帮助信息-c CONFIG_DIR, --config-dir=CONFIG_DIR 指定配置文件目录--hard-crash 扑捉到original异常不退出(默认关闭-g, --grains 返回的信息生成grains-m MODULE_DIRS, --module-dirs=MODULE_DIRS 指定自定义模块目-d, --doc, --documentation 查看指定模块或者所有模块文档--master=MASTER 指定SaltStack Master--return=RETURNER 指定SaltStack return--local 运行masterless模式--file-root=FILE_ROOT 指定file-root目录--pillar-root=PILLAR_ROOT 指定pillar-root目录--retcode-passthrough 显示salt-call命令返回状态--metadata 打印metadata信息--id=ID 指定一个minion ID--skip-grains 不加载grains信息--refresh-grains-cache 强制刷新grains信息·max_open_files——可以根据Master将Minion数量进行适当的调整。·timeout——可以根据Master和Minion的网络状况适当调整。·auto_accept和autosign_file——在大规模部署Minion的时候可以设置自动签证。.max_open_files——可以根据Master将Minion数量进行适当的调整。·timeout——可以根据Master和Minion的网络状况适当调整。·auto_accept和autosign_file——在大规模部署Minion的时候可以设置自动签证。