Getting started with Ansible 05 - Running elevated ad-hoc Commands

[@osielramirez7274]

These videos are gold, they'll make launching testing environments so much easier and faster. Thank you for making these!

[@carloslizarralde4920]

so far this is the best series adds all the missing parts needed to really understand the tools that will help.

[@mysticjoe295]

While this is good, check out Jeff Geerlings ansible 101 series - far more comprehensive and supports an excellent book.

[@jagd1691]

Excellent Explanation. Best Video about Ansible on KZbin

[@farkhodazizov4199]

Thank you so much. God bless you and your family.

[@UnknownSend3r]

Brilliant explanation , imo you're the jay z of config management tutorials.

[@MarkusEicher70]

Thanks a lot Jay, that was pretty exciting. One thing I hope we will see later on in this series is how to use elevated privileges when the servers have different passwords for sudo. Great lessons so far! 👍

[@similoluwaokunowo5127]

I am currently on the 6th video in this series, and I must say you are a very incredible teacher. It takes a lot of effort and kindness to design such a structured course and publish it for free. Thank you very much 💗

[@LearnLinuxTV]

Wow, thank you! I really appreciate that.

[@RakeshShivayyaGuttedar]

This tutorial is absolutely more valuable than paid courses out there.Thank you for all your efforts !!

[@isaacmaag1294]

Love the tutorial. Could you make a terraform series as well?

[@davidraymond7420]

Nice video Jay, I’m totally new at Ansible, and I can see the potential to help me as sysadmin for my linux farm I need to managed. Thanks for sharing this 👍👌

[@mathewkargarzadeh3158]

Very Nice Jay. Thanks a million !!. Mat.

[@Awas79]

Absolutely love this series :D

[@brodierobson4490]

This is amazing content.

[@michaelfisher2821]

Great series so far, really easy to follow along in a lab. Also, does anyone else think Jay has a 'Better Call Saul' voice?

[@vialomur__vialomur5682]

such a great tutorial!

[@dzonsmit]

9:51 same here but I didn't install tmux previously, I guess it came preinstalled with my ubuntu servers 22.04. btw I would like to see Kubernetes series on your channel!

[@beydoin]

Great video! Thank you!

[@mlskksl]

At 3mins you said it should have returned with error but mine has the same success output with "- - become - -ask-become-pass" and without the longoptions

[@luistheitguy]

Great ! Awesome teacher !

[@andromachirozaki5753]

amazing

[@asaf158]

Great Ansible tutorial

[@jeffreyhiggason4004]

At 15:22 you show the command sudo apt dist-upgrade. Wouldn't the command be sudo apt-get dist-upgrade or sudo apt full-upgrade???? I didn't think that apt dist-upgrade would even work but obviously in your video it is...??

[@portiseremacunix]

Does your book cover this series?

[@brishavkuikel684]

Hi Jay !! I am using my main machine (wsl ubuntu on Win 11 ) as the workstation and using virtual box I have created a host VM. In my case without specifying -u i cannot connect to host, but you are not specifying any particular user and it is still able to connect to the host why is that ? pls help someone

[@davetweens7687]

Jay is the user he used on all 4 hosts. The default user in ssh is the current user .

[@davetweens7687]

You can use ~/ssh/config to set helpful defaults

[@grahammccann8554]

Thank you Jay, :-)

[@PS3456]

Jay- Great video and simple explanation. Question: Where do you get various -a parameters?

[@mysticjoe295]

Check the ansible docs. What he doesn’t explicitly show or explain is the -a params are the param: from the docs look at 6:50

[@harunaadoga]

Thank you!

[@kiki-vu9if]

great teacher!

[@quidquopro1185]

Is it not better to setup an ansible user on the servers that are allowed to run escalated commands?

[@DrazenMarjanovic]

Thanks a lot

[@glmchn]

Still awesome

[@omarshararhussein7705]

when I run ansible all -m apt -a update_cache=true --become --ask-become-pass i get WARNING updating cache and auto-installing missing dependency python apt followed by a failed error? any ideas anyone?

[@paragb2008]

Good video

[@CodeCraftedByLucas]

Hi everyone I decided to make adduser server1, server2 and server3 with the same ip address on same ubuntu setup I think. When you run the "ansible all -m apt -a upgrade=dist --become --ask-become-pass" on the main UNIX user it cannot do that for all because the apt-get update is already running for one server so it will only run for server1 but not for the other server2 and 3 since only one dist update can be installed at once. You could run separately "ansible server1@192.168.x.x -m apt -a upgrade=dist --become --ask-become-pass". I wanted to share this for those who are interested.

[@mihai6564]

nice video

[@DavidBenOtto]

What's the name of the tool you're using to navigate between servers?

[@davetweens7687]

Tmux

[@abibatadesina4412]

Thank you for the wonderful video series. what is sudo password please?

[@osada96]

I wonder if there is any way to run that ad-hoc commands by using cron with -- become --become-ask-pass? In other words, how to cron all these commands without manual entering passwords?

[@davetweens7687]

Yes but you can use an ssh key with no passphrase direct to the root user and not use becomes or sudo at all which is a security risk.

[@davetweens7687]

I'm sure that you can use some sort of credentials on ansible too but I'm not an ansible expert. Which is why I'm watching these videos 😊

[@davetweens7687]

I think the link above is what you eant

[@NameCallingIsWeak]

Great series, thank you. Minor quibble, if you can pronounce the Phil Collins hit "Sussudio" you can also pronounce "sudo" correctly.

[@NameCallingIsWeak]

su-DO, "doh" like Homer Simpson

[@GC-qe8vc]

It's supposed to stand for "superuser do" so it's pronounced with "do" as do in doing something.

[@miyalys]

As G C says, here from the inventor: kzbin.info/www/bejne/gpKkqJ9pfbNomtU

[@jantje01k]

what if your servers have different pass ?

[@praecorloth]

A couple of things you might consider: 1. A service account with a single password across your servers 2. If you do ansible --help, there are options for a vault password file. Jay might go into this in a later video. Not sure, still making my way through the series now. But this option might let you specify usernames, passwords, and hosts.

[@jantje01k]

@@praecorloth He did make a video about Ansible Vault, but not with multiple passwords for different hosts

[@praecorloth]

Hrm. Well, I'm not an Ansible expert. So without knowing all of the tools available with Ansible right now, the best tools to I can think of for this issue would be defining hosts in multiple groups based on any servers that have a common password, and then have your playbooks look at the facts variables to identify which modules need to be used based on maybe what OS is installed, or what software is installed, etc. Looking at some of the documentation for Ansible vault, it looks like you can call up some of those secrets with a variable. If that's the case, then maybe you can pass that secret in the playbook, and have one password for revealing those secrets. I don't know, though, haven't had a chance to play with it yet.

[@alphabasic1759]

The command is sudo, … not suooooo

[@MrSandshadow]

0:10 I would belive you if your face wasnt as emotionless as your voice was dead inside. xD I know we engineers are not best performers...

[@jannahiaali5606]

bloody wasted time, just directly use sudo, and follow Ansible documents to work quickly!!

[@robothtml]

Ubuntu 22.04 Cloud Init VM running inside of ProxMox I ran into some confusion following this video. Running the following command did not require the become password. ansible all -m apt -a name=tmux --become I can even add "--ask-become-pass" and type in the incorrect password and it's still working. The cause: # cat /etc/sudoers.d/90-cloud-init-users # Created by cloud-init v. 24.1.3-0ubuntu3.3 on Fri, 19 Jul 2024 19:38:22 +0000 # User rules for username username ALL=(ALL) NOPASSWD:ALL I commented out the line and rebooted the VM. It appears to have resolved the issue.

[@ziaurrehman4738]

Is Become password jay@workstation password?