在 Ansible 角色中,我这样做:
- name: update trusted ca
shell: "{{ in_ca_dict[ansible_os_family]['update']['shell'] }}"
跟:
package_name: ca-certificates
RedHat:
path:
6: /usr/local/share/ca-certificates
7: /etc/pki/ca-trust/source/anchors
update:
shell: /bin/update-ca-trust
Debian:
path: /usr/local/share/ca-certificates
update:
shell: /usr/sbin/update-ca-certificates
cache: "no"
但ansible-lint
通过molecule
告诉我:
[ANSIBLE0013] Use shell only when shell functionality is required
什么时候需要外壳功能,什么时候不需要?
应该如何替代方式,我的代码对我来说似乎很好。
我刚刚替换
shell:
跟
command:
这是文档: https://blog.confirm.ch/ansible-modules-shell-vs-command/
我解决了这个问题