8# ansible-mini-project ansible all --key-file ~/.ssh/ansible -i inventory -m ping

ansible all :

It runs Ansible on all hosts defined in the inventory file.

--key-file ~/.ssh/ansible :

It specifies the SSH private key (~/.ssh/ansible) to authenticate with remote hosts instead of using a password.

-i inventory :

Defines the inventory file which contains a list of target hosts or groups that Ansible should manage.

Once You define the ansible configuration file under your workspace directory , it will override the main default configuration file under /etc/ansible.

The new ansible.cfg file will contain the global settings that control how Ansible operates such as inventory path, ssh private key path..

The above configuration will be useful while interacting with ansible instead of typing:

ansible all --key-file ~/.ssh/ansible -i inventory -m ping

you only now need :

ansible all -m ping

ansible all -m gather_facts:

• When ansible connects to a server, it actually pulls a list of information of that server and it includes the information about their OS, CPU, the environment variables...
• This command will output all infos related to any server that the ansible worksatation has connected to.
• Using option --limit @ip_address_of_server: example: *ansible all -m gather_facts --limit 192.168.100.149

Note

Before creating a playbook i manipulated some commands: ansible all -m apt -a name=vim-nox --become --ask-become-pass *Runs on all hosts in the inventory. *Uses the apt module to install the vim-nox package *Requests sudo privileges (--become) *Prompts for the sudo password (--ask-become-pass)

ansible all -m apt -a "name=snapd state=latest" --become --ask-become-pass using " " to pass more than one argument

---

on workstation : after sshing the servers

ls -la .ssh on worksation

using keys in ssh connection because it is more secure

ssh-keygen -t ed25519 -C "ansible" =>generating and u can check with ls -la .ssh

ssh-copy-id -i ~/.ssh/id_ed25519.pub @ipof worker

eval $(ssh-agent) -->doesnt not require passphrase again during the session

-->permanently alias ssha='eval $(ssh-agent) && ssh-add' then type ssha ----> nano .bashrc and add the alias above into that file

ad-hoc Commands

ansible all -m apt -a update_cache=true --become --ask-become-pass

ansible all -m apt -a "name=snapd state=latest" --become --ask-become-pass

ansible all -m gather_facts ansible-galaxy init my_role