Ansible Password 변경 Playbook

1. Playbook

---
- hosts: "{{ Target }}"
  gather_facts: no
  tasks:
    - user:
        name: "{{ Name }}"
        password: "{{ Password | password_hash('sha512') }}"

 

Ex)

ansible-playbook -e Target=VM -e Name=name -e Password="password" change_password.yml

2. Ad-hoc

ansible all -m user -a 'name=name password="password"'

 

https://docs.ansible.com/ansible/latest/collections/ansible/builtin/user_module.html

update_password

옵션을 default로 always로 갖고 있기 때문에 업데이트가 된다.

 

근데, 이렇게 하면 Password 평문이 History에 남는다.

mkpasswd 명령어를 사용해서,

TEST@ubuntu:~$ mkpasswd -m sha-512
Password:
$6$1ufJCJwxlA7Xd4US$WzV/G7dWsURTZfDXjyQcUJrs85.7nRVhaCckCPsNN/1X8cezX4fy7fUd0qoxWPK/yj8A58yMu2/nzU89esjxS/

TEST@ubuntu:~$ ansible all -m user -a 'name=name password="$6$1ufJCJwxlA7Xd4US$WzV/G7dWsURTZfDXjyQcUJrs85.7nRVhaCckCPsNN/1X8cezX4fy7fUd0qoxWPK/yj8A58yMu2/nzU89esjxS/"'

이런 식으로도 사용 가능하다.