proxmox
SSH Connections With Ansible – How To Create & Share SSH Keys
SSH Connections With Ansible – How To Create & Share SSH Keys
#SSH #Connections #Ansible #Create #Share #SSH #Keys
“Jim’s Garage”
In this video, the second of the Ansible mini-series, I show how to connect to remote machines using existing SSH keys, and also how to create and share new keys.
GitHub Commands:
Ansible…
source
To see the full content, share this page by clicking one of the buttons below |
Hi Jim, great start to the series! As a suggestion for a future route – I've taken this one step further at work and ditched winrm as a connection method, and changed all our Windows hosts to be ssh connected using powershell as the default shell… It's a great way of leveraging the power of Ansible in the Windows world without the complexity and flakeyness of winrm!
Gives us Ansible configuration control over our Windows fleet, with the benefit that you can elevate the user account used but also set it to not be allowed to log on locally or remotely! SSH doesn't count as either, so an added layer of security. You can also lock or disable the password at the Windows level and only allow a certificate login at the openSSH level…
It's magic!
Thanks you. For this curse you have started. My question is, I am planning on implementing Ansible on proxmox cluster. I have created one VM and one CT on this I will be practicing, I follow your instructions I had no problem copying the ssh key to the VM, but to the CT I could only copy it and modify the sshd_config permitrootlogin to yes. the key is on the root folder in the CT. for some reason in the CT is looking for the same folder that was created for the VM when I send the ping. Thank you
I've watched a lot of videos on the topic and used Ansible for various scenarios, but it's always good to get a new point of view. Yours is always a good one.
Thanks Jim! You keep helping me push my homelab to a better place 😊😉
I appreciate your taking the time to teach good security practices. In this instance, Least Privilege is a crucial security best practice that really needs to become second nature for folks.
big up jim the king of the lab
Great ssh overview!
This is awesome. Thanks!
14:30: You can also utilize the ssh-agent (ssh-add /path/to/private.key) (or PuTTY's Pageant agent, maybe?). This will allow Ansible to use the key without asking for a passphrase every time but still keeps your key safe!