two step process to become root

[Brad Van Orden]

I'm looking for suggestions on how to add a two step login/switch to root to work within ansible.  I'm restricted to logining in to a server with my normal sid.  After that is accomplished, I then use su to switch to another account (giving a password when prompted).  From there, I can use sudo to switch to root.  Trying to wrap my head around putting that into practice within ansible.  Suggestions would be greatly appreciated.  :)

Regards,

Brad

[Jonathan Lozada De La Matta]

https://docs.ansible.com/ansible/latest/user_guide/become.html

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/8ec58472-2160-4243-8143-54393279639b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Jonathan lozada de la matta

AUTOMATION PRACTICE

 

[Brad Van Orden]

Yes, I've been reading that.  Not really clear.  Maybe (setting ansible_become_pass in the inventory file):

- name: switch to intermediate user
  command: cat /dev/null
  become: yes
  become_method: su
  become_user: sid-other
- name: switch to root
  command: cat /dev/null
  become: yes
  become_method: sudo
  become_user: root

Would that achieve what I am looking for and then run every subsequent command as root?

Regards,

Brad

[Brian Coca]

No, each task happens in it's own session, setting the environment in
task1 does not affect task2.

Ansible does not support the scheme you have as it requires 2
privilege escalation systems into every execution, they are not
currently 'stackable'.



--
----------
Brian Coca

[Brad Van Orden]

OK.  Thanks for the feedback!  :)

[Dilson Tomé]

You can use become to change to this generic user and set sudo in your commands.

_
Dilson Tomé Rainov
Linkedin: https://br.linkedin.com/in/dilsontome
Cel: +55-11-98013-7803

--