Connect to host - SSH Tunnel

[Fabricio Cruz]

Hello,

I currently have a host that is accessed saw ssh tunnel, I need to manage that host with ansible. How can I do that?

To connect to the host I use the command: ssh -N -R 10000: localhost: 22 user@hostX.

I added this command on a .sh file and run:

ssh -t user@otherserver "./file.sh"

Thanks.

[Brian Coca]

just setup this info in your hosts file:

hostx ansible_ssh_host=localhost:10000

then ansible will use the existing tunnel every time to get to hostx



--
Brian Coca

[Fabricio Cruz]

Hello

Thanks for your reply, my scenario is as follows:

hostA --- used as a bridge to access the hostX (local machine).

HostC --- ansible server you need to manage hostX, perform installations and upgrades using ansible.

It is possible ?

Thank you so much.

--
You received this message because you are subscribed to a topic in the Google Groups "Ansible Project" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/ansible-project/_J9nWHVzIPg/unsubscribe.
To unsubscribe from this group and all its topics, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAJ5XC8%3DJqBcSuaKEwA8mpoVt6NG2ovsA2tBtmwQ6Y0%3DiWfgOcw%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.

[Brian Coca]

yes, just setup the tunnel and then use ansible as I mentioned in my
previous email.

you can even use ansible to setup the tunnel with a play on the hostC


--
Brian Coca

[Tim Fletcher]

Would using a netcat tunnel work for you?

We had a similar setup were I used to work and used ssh config to automate the tunnel usage.

Host targethoust
    HostName targethost
    User myuser
    ProxyCommand ssh proxyhost nc %h %p 2> /dev/null

http://backdrift.org/transparent-proxy-with-ssh

You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.

To post to this group, send email to ansible...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAPav1BvskznFx2sNuqTRb%3Di-h_SfAAq%3Di5j%3Dr85WPUtKn1tcVg%40mail.gmail.com.

[Alex Leonhardt]

Never really looked into it, but if/when using netcat, does that mean that from your proxy host / bastion to the target host, the connection is in clear text? I would assume that to be the case?

Alex

To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/56807E40.2020102%40night-shade.org.uk.

[Tim Fletcher]

No the tunnel is setup from the bastion to the target to carry a second ssh connection from workstation to target. 

--

Sent from a mobile device

Tim Fletcher

To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CACSH3MtSkL3jUNtjNZ6BN3aq9iU3WvdBQVS6TM8bMQieWemSfA%40mail.gmail.com.