# Setting ansible\_sudo\_pass in ansible.cfg?

**URL:** <https://forum.ansible.com/t/setting-ansible-sudo-pass-in-ansible-cfg/17656>\
**Category:** Ansible Project\
**Created:** [March 3, 2015, 12:30pm UTC](https://forum.ansible.com/t/setting-ansible-sudo-pass-in-ansible-cfg/17656 "2015-03-03T12:30:36Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Simon\_Munoz](https://avatars.discourse-cdn.com/v4/letter/s/a4c791/32.png) [@Simon\_Munoz](https://forum.ansible.com/u/Simon_Munoz)\
**Post date:** [March 3, 2015, 12:30pm UTC](https://forum.ansible.com/t/setting-ansible-sudo-pass-in-ansible-cfg/17656/1 "2015-03-03T12:30:36Z")

</div>

Hi all,

is it possible to set ansible\_sudo\_pass in /etc/ansible/ansible.cfg to avoid having to enter the sudo pass in a group of local clients?

Thanks in advance, Simon.

---

<div class="post-metadata">

**Author:** ![Dario\_Zanzico](https://avatars.discourse-cdn.com/v4/letter/d/7ea924/32.png) [@Dario\_Zanzico](https://forum.ansible.com/u/Dario_Zanzico)\
**Post date:** [March 3, 2015, 12:36pm UTC](https://forum.ansible.com/t/setting-ansible-sudo-pass-in-ansible-cfg/17656/2 "2015-03-03T12:36:36Z")

</div>

> Hi all,
> 
> is it possible to set ansible\_sudo\_pass in /etc/ansible/ansible.cfg to  
> avoid having to enter the sudo pass in a group of local clients?

i think you can set it in the inventory:  
[all:vars]  
ansible\_sudo\_pass=

> Thanks in advance, Simon.

dario

---

<div class="post-metadata">

**Author:** ![Chris\_Church1](https://avatars.discourse-cdn.com/v4/letter/c/ac8455/32.png) [@Chris\_Church1](https://forum.ansible.com/u/Chris_Church1)\
**Post date:** [March 3, 2015, 6:03pm UTC](https://forum.ansible.com/t/setting-ansible-sudo-pass-in-ansible-cfg/17656/3 "2015-03-03T18:03:27Z")

</div>

It’s not possible in ansible.cfg, but could be set in inventory for all hosts, e.g.

---

<div class="post-metadata">

**Author:** ![Mirko\_Friedenhagen](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@Mirko\_Friedenhagen](https://forum.ansible.com/u/Mirko_Friedenhagen)\
**Post date:** [March 3, 2015, 7:50pm UTC](https://forum.ansible.com/t/setting-ansible-sudo-pass-in-ansible-cfg/17656/4 "2015-03-03T19:50:50Z")

</div>

For a bit more security, you might try something I outlined here:

[http://serverfault.com/a/672769/274263](http://serverfault.com/a/672769/274263)

and here:

[https://gist.github.com/mfriedenhagen/e488235d732b7becda81](https://gist.github.com/mfriedenhagen/e488235d732b7becda81)

It uses the python-keyring module to ask your local password safe.  
Regards Mirko