centos9test1 (192.168.48.132):<\/strong> The third node from which the user\u00a0needs to access the managed nodes via SSH without password<\/li>\n<\/ul>\nLet us generate an SSH key pair in centos9test1<\/strong><\/p>\n[root@centos9test1 ~]#<\/strong> ssh-keygen<\/p>\n====== ===
\nGenerating public\/private rsa key pair.<\/em>
\nEnter file in which to save the key (\/root\/.ssh\/id_rsa):<\/em>
\nEnter passphrase (empty for no passphrase):<\/em>
\nEnter same passphrase again:<\/em>
\nYour identification has been saved in \/root\/.ssh\/id_rsa<\/em>
\nYour public key has been saved in \/root\/.ssh\/id_rsa.pub<\/em>
\nThe key fingerprint is:<\/em>
\nSHA256:FF5ZmUOAI20Vrn5SIV\/1135yB5gGuSBgolAlKajWL9s root@centos9test1<\/em>
\nThe key’s randomart image is:<\/em>
\n+—[RSA 3072]—-+<\/em>
\n|o.+o+. ..o*Boo. |<\/em>
\n|+..+ o.*+o.++ ..|<\/em>
\n|o.. ++oo.=.. +|<\/em>
\n|.. . . +.+ o.|<\/em>
\n|. . S o . =|<\/em>
\n| . . . . oo|<\/em>
\n| + o . |<\/em>
\n| . E o |<\/em>
\n| |<\/em>
\n+—-[SHA256]—–+<\/em><\/p>\n===== ==<\/p>\n
Find the public key generated by the user root:<\/p>\n
[root@centos9test1 ~]#<\/strong> cat .ssh\/id_rsa.pub<\/p>\n====== ===
\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCyXyorAlyk7HlHBAGoHpWAnouzWJv6WNOHIWL0bKuIb57cz1Hj63h9aBr61co\/4009InESRLByW+LU6ON8pjoxYeJ0FyvojDAgx3WZzs+7eIna\/3Avzp6tfVOKcZebiUoqWW5oDZgXLC6ICKbuxuOLEKXYp5\/i3oYCBgpyYVhiqeohBQIMKggRuHIl\/ARfr9pvbSJacqhqrB7Jfhf3VvuUGMfPglV\/+c0Io1vDerfOqtMqZxjwRAkOc0sMsdRqLfIdU7uGq4EC2tvKeo+oWxbTFxwzGRWrW27zhUyT9jYslge9wHoKrPa17dxEUEGjYLosdjQI\/trcCIzGgFUmWlHb2DMGPN69HYTsoHymzz6wN+5lEQ8Y3KFL2I38TM16dRdzQhReZ15uhl3j4Yz\/Y5MWlDHGxDpDj\/ABkbvtAnJIgiZPLLxThzoroxqn8Ayt7WZENEt3tqs+i+1xZelA7EHYJ5Y5xzrJnWLL82GBXhvIbPYX3Z3QfqpE+l1dkPocDDU= root@centos9test1<\/em><\/p>\n==== ===<\/p>\n
Let us copy the above public key of centos9test1\u00a0<\/strong>to a folder in the ansible server<\/p>\n[root@centos9vm ~]#<\/strong> cat pubkeys\/ssh_public_key<\/p>\n==== ===
\nssh-rsa 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 root@centos9test1<\/em><\/p>\n==== ===<\/p>\n
Let us create a playbook and execute it.<\/p>\n
[root@centos9vm ~]#<\/strong> cat authorized_keys.yml<\/p>\n==== ==
\n– – –<\/em>
\n– name: Playbook to add ssh key to authorized_keys file<\/em>
\n hosts: 192.168.48.129<\/em>
\n tasks:<\/em>
\n – name: Task to add ssh key to authorized_keys file<\/em>
\n ansible.posix.authorized_key:<\/em>
\n user: shiju<\/em>
\n state: present<\/em>
\n key: “{{ lookup(‘ansible.builtin.file’, ‘pubkeys\/ssh_public_key’) }}”<\/em><\/p>\n==== ===<\/p>\n
[root@centos9vm ~]#<\/strong> ansible-navigator run -m stdout authorized_keys.yml<\/p>\n==== ===<\/p>\n
PLAY [Playbook to add ssh key to authorized_keys file] *************************<\/em><\/p>\nTASK [Gathering Facts] *********************************************************<\/em><\/p>\nok: [192.168.48.129]<\/em><\/p>\nTASK [Task to add ssh key to authorized_keys file] *****************************<\/em>
\nchanged: [192.168.48.129]<\/em><\/p>\nPLAY RECAP *********************************************************************<\/em>
\n192.168.48.129 : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0<\/em><\/p>\n==== ===<\/p>\n
Now let us go to centos9test1 (192.168.48.132)\u00a0<\/strong>and see if we can ssh to\u00a0192.168.48.129<\/strong> as\u00a0shiju<\/strong> without getting prompted to enter the password.<\/p>\n[root@centos9test1 ~]#<\/strong> ssh shiju@192.168.48.129<\/p>\n==== ===
\nLast login: Thu May 2 15:42:36 2024 from 192.168.48.132<\/em>
\n[shiju@centosMYOBvm ~]$<\/em><\/p>\n===== ==<\/p>\n","protected":false},"excerpt":{"rendered":"
In order for a user to ssh to a remote node, usually some form of authentication such as user credentials, SSH keys, etc are required. […]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32,21,3],"tags":[],"class_list":["post-1322","post","type-post","status-publish","format-standard","hentry","category-ansible","category-devops","category-linux"],"_links":{"self":[{"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=\/wp\/v2\/posts\/1322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1322"}],"version-history":[{"count":13,"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=\/wp\/v2\/posts\/1322\/revisions"}],"predecessor-version":[{"id":1339,"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=\/wp\/v2\/posts\/1322\/revisions\/1339"}],"wp:attachment":[{"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1322"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/shijuvarghese.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}