Modify ssh connection arguments that ansible uses.

Archives Ansible Project
1

The below ssh connection by ansible fails to connect to remote hosts

ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o ‘IdentityFile=“/app/ssh_keys/id_rsa”’ -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ‘User=“root”’ -o ConnectTimeout=10 -o StrictHostKeyChecking=no -o ControlPath=/home/ansibleuser/.ansible/cp/6abdc12511 -tt 10.9.88.205 ‘id mwweb || id webadm || ls -ld /web’

whereas when i remove the below two arguments from ssh my connection succeeds

  1. -tt
  2. -o ControlPath=/home/ansibleuser/.ansible/cp/6abdc12511

Working ssh command to be constructed by ansible.

ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o ‘IdentityFile=“/app/ssh_keys/id_rsa”’ -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ‘User=“root”’ -o ConnectTimeout=10 -o StrictHostKeyChecking=no 10.9.88.205 ‘id mwweb || id webadm || ls -ld /web’

This requirement (customized ssh command) is for a specific playbook for specific target hosts that is supplied as arguments to my ansible playbook below. I dont wish to modify the existing ssh configuration at OS:

  • name: Play 2- Configure Source nodes
    hosts: all
    user: root
    ignore_errors: yes
    gather_facts: false
    tasks:

  • name: Get HTTPD userid on server
    raw: id mwweb || id webadm || ls -ld /web

  • name: Get OHS userid on server
    raw: id mwweb

The above playbook runs using this command:

ansible-playbook -i 10.9.88.205, -f 5 testpython.yml -vvvv

I’m using jenkin’s ansible plugin to trigger the above playbook.

Can you please suggest for the below:

can i disable -tt and ControlPath by modifying playbook code? This is my first preference. Please suggest?

If modifying the playbook wont help then how can i disable both ssh args using ansible parameters?

I was able to disable -tt using below:

ansible-playbook -i 10.9.88.205, -f 5 testpython.yml -e ansible_ssh_use_tty=no -vvvv
But, there is no way to could find to disable ControlPath despite passing -e control_path=“”

Reference: https://docs.ansible.com/ansible/latest/plugins/connection/ssh.html

I want the solution of disabling both ssh arguments -tt and -o ControlPath in the playbook testpython.yml or in ansible-playbook command-line.

Can you please suggest?

2

https://docs.ansible.com/ansible/latest/user_guide/intro_inventory.html#connecting-to-hosts-behavioral-inventory-parameters

3

@Dick thank you for the link but i have been through that before.

There is no details on how we can modify my playbook testpython.yml or any command-line parameters for disabling ControlPath like we have use_tyy

Can you further guide and help me with changes to my playbook or to the ansible-playbook command-line ?

4

IIRC ControlPath is the SSH configuration option that makes pipelining work.
So you could try to disable that:
https://docs.ansible.com/ansible/latest/reference_appendices/config.html#ansible-pipelining

5

@Dick

I tried the below " ansible_ssh_pipelining: no " in my playbook but the -o ControlPath still remains.

  • name: Play 2- Configure Source nodes
    hosts: all
    user: root
    ignore_errors: yes
    gather_facts: false
    vars:
    ansible_ssh_pipelining: no

tasks:

  • name: Get HTTPD userid on server
    raw: id mwweb || id webadm || ls -ld /web

  • name: Get OHS userid on server
    raw: id mwweb

I’m sorry but i’m new to this. Kindly suggest

6

@Dick

ANSIBLE_SSH_ARGS=“” ansible-playbook -i 10.9.88.205, -f 5 testpython.yml -e ansible_ssh_use_tty=no -vvvv works !! and i dont see the -o ControlPath anymore.

However, I stated in the original post I’m using anisble plugin inside Jenkins where i cannot find any option to specify ANSIBLE_SSH_ARGS=“” environment variable.

Adding ANSIBLE_SSH_ARGS=“” to playbook yml also does not work like below:

  • name: Play 2- Configure Source nodes
    hosts: all
    user: root
    ignore_errors: yes
    gather_facts: false

vars:
ansible_ssh_pipelining: no

ANSIBLE_SSH_ARGS=“”

tasks:

From the documentation, i felt passing ansible_ssh_arg=“” will work just how ansible_ssh_use_tty=no works but that too fails to remove -o ControlPath

ansible-playbook -i 10.9.88.205, -f 5 testpython.yml -e ansible_ssh_use_tty=no -e nsible_ssh_arg=“” -vvvv

Can you please suggest ?

7

I think this ^^ should be lower case, i.e.:

   vars:
     ansible_ssh_pipelining: no
     ansible_ssh_args: ""

8

Tried your suggestion but it does not work @Dick.

Please suggest.