我正在尝试编写一个简单的 Ansible 剧本,请查看下面的片段。使用 Ansible 2.4.0.0、Ubuntu 17.04、Python 2.7.13。这是我第一次使用 Ansible 和 Playbook,所以请不要太苛刻。我做错了什么?
剧本.yml
---
- name: install packages
hosts: dbservers
become: yes
become_method: sudo
become_user: user
tasks:
- name: Update repositories cache and install "python-minimal" package
apt:
name: python-minimal
update_cache: yes
主机文件
---
[dbservers]
db ansible_host=127.0.0.1 ansible_port=22 ansible_user=user ansible_ssh_pass=pass ansible_become_pass=pass ansible_become_user=user
命令:ansible-playbook -i hosts playbook.yml -vvv
上面的命令返回以下错误:
The full traceback is:
File "/tmp/ansible_yozgsn/ansible_module_apt.py", line 287, in <module>
import apt
fatal: [db]: FAILED! => {
"changed": false,
"cmd": "apt-get update",
"failed": true,
"invocation": {
"module_args": {
"allow_unauthenticated": false,
"autoclean": false,
"autoremove": false,
"cache_valid_time": 0,
"deb": null,
"default_release": null,
"dpkg_options": "force-confdef,force-confold",
"force": false,
"force_apt_get": false,
"install_recommends": null,
"name": "python-minimal",
"only_upgrade": false,
"package": [
"python-minimal"
],
"purge": false,
"state": "present",
"update_cache": true,
"upgrade": null
}
},
"msg": "W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)nE: Could not open lock file /var/lib/apt/lists/lock - open (13: Permission denied)nE: Unable to lock directory /var/lib/apt/lists/nW: Problem unlinking the file /var/cache/apt/pkgcache.bin - RemoveCaches (13: Permission denied)nW: Problem unlinking the file /var/cache/apt/srcpkgcache.bin - RemoveCaches (13: Permission denied)",
"rc": 100,
"stderr": "W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)nE: Could not open lock file /var/lib/apt/lists/lock - open (13: Permission denied)nE: Unable to lock directory /var/lib/apt/lists/nW: Problem unlinking the file /var/cache/apt/pkgcache.bin - RemoveCaches (13: Permission denied)nW: Problem unlinking the file /var/cache/apt/srcpkgcache.bin - RemoveCaches (13: Permission denied)n",
"stderr_lines": [
"W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)",
"E: Could not open lock file /var/lib/apt/lists/lock - open (13: Permission denied)",
"E: Unable to lock directory /var/lib/apt/lists/",
"W: Problem unlinking the file /var/cache/apt/pkgcache.bin - RemoveCaches (13: Permission denied)",
"W: Problem unlinking the file /var/cache/apt/srcpkgcache.bin - RemoveCaches (13: Permission denied)"
],
"stdout": "Reading package lists...n",
"stdout_lines": [
"Reading package lists..."
]
}
编辑:如果我通过SSH连接到同一台机器,我可以手动更新apt-cache并使用同一用户(使用sudo)安装软件包。如果我在剧本中运行命令"whoami",它会返回预期的结果(用户名)。
如果您的用户具有 sudo 访问权限,请使用 become:
-
tasks:
- name: Update repositories cache and install "python-minimal" package
become: yes
apt:
name: python-minimal
update_cache: yes
我认为你混淆了become_user
和remote_user
. remote_user
是 Ansible 将用于 ssh 到服务器的用户,become_user
是 Ansible 将在服务器上切换到并运行任务的用户。 您可以在 Ansible 的文档中找到有关become_user
和remote_user
的更多信息。
因此,这里发生的事情是您的 playbook 正在尝试成为"用户"用户并安装包。 它不是以 root 身份安装软件包,这是您需要的。 要解决此问题,您可以从剧本中删除become_user
参数(become_user
默认值为 root),也可以向任务添加become_user
参数。
- name: Update repositories cache and install "python-minimal" package
apt:
name: python-minimal
update_cache: yes
become_user: root