SSH Keys or Ask-pass opinion

Archives Ansible Project
1

I currently have a set of VMs I'm testing Ansible on and use SSH keys to automate the authentication process. I'm admittedly a bit old-school and prefer using something like ask-sudo-pass and running the tasks as a sudo user. I just wanted to get an opinion on pros/cons of using Keys versus prompting for the pass?

What is everyone else doing? It seems to make sense to automate via keys, but I seem to fallback to prompting for a password.

-James

2

I use keys AND prompt for sudo password. My machines don’t allow password logins.

I’m also in the process of removing ‘shared’ users for logins.

3

That’s a solid strategy. I’m most likely going to disable password auth via ssh and stick to keys as well. But I think I’ll run everything as a sudo user and prompt for sudo password as you do.