下面是:
- hosts: ppe32
tasks:
- name: update apt cache
apt:
update_cache=yes
- name: make sure aide is installed and latest
apt:
name=aide
state=latest
- name: make sure fail2ban is installed and latest
apt:
name=fail2ban
state=latest
- name: make sure iptables-persistent is installed and latest
apt:
name=iptables-persistent
state=latest
- name: make sure python-pyopenssl is installed and latest
apt:
name=python-pyopenssl
state=latest
- name: generate private key
openssl_privatekey:
path=/etc/ssl/certs/privkey.pem
state=present
- name: generate csr
openssl_csr:
common_name={{ inventory_hostname }}
country_name=fr
path=/etc/ssl/certs/ansible.csr
privatekey_path=/etc/ssl/certs/privkey.pem
- name: generate certificate
openssl_certificate:
csr_path=/etc/ssl/certs/ansible.csr
state=present
has_expired=no
path=/etc/ssl/certs/cert.crt
subject={{ inventory_hostname }}
- name: insert fail2ban conf
template:
src=jail.j2
dest=/etc/fail2ban/jail.d/ssh.conf
notify:
- restart fail2ban
- name: insert iptables-persistent conf
template:
src=iptables.j2
dest=/etc/iptables/rules.v4
notify:
- restart iptables-persistent
handlers:
- name: restart fail2ban
service:
name=fail2ban
state=restarted
- name: restart iptables-persistent
service:
name=iptables-persistent
state=restarted请记住,这是一项正在进行的工作,我只是在运行"ansible-playbook playbook.yml -i hosts check“时试图解决这个错误:
错误!任务中未检测到任何操作。这通常表示拼写错误的模块名或不正确的模块路径。 错误似乎出现在'/root/web-sec.yml':第27行第5列中,但可能在文件的其他地方,这取决于具体的语法问题。 冒犯的界限似乎是:
错误似乎出现在'/root/web-sec.yml':第27行第5列中,但可能在文件的其他地方,这取决于具体的语法问题。
冒犯的界限似乎是:
发布于 2017-12-12 10:26:11
您使用哪一种版本的“Ansible”?
私钥是在Ansible 2.3中引入的,而企业社会责任是在Ansible 2.4中引入的
https://stackoverflow.com/questions/47769936
复制相似问题