FWIW, I got this idea from *you* :-) - reference: https://groups.google.com/d/msg/ansible-project/AOt-5fgBzho/hEDnnOrJkC8J However, I've never seen an implementation of it or a working example that's been tested. I think someone posted an example where they had "-F ~/.ssh/config" but since that's the default ssh config file (ssh will use ~/.ssh/config whether or not your specify it with the -F flag) it doesn't really test whether it's working or not. :-)
J On Friday, May 23, 2014 10:39:52 AM UTC-5, Slim Slam wrote: > > That didn't make a difference. > I know that ansible is using that ansible.cfg file because I can put a > "remote_user = xxx" line > at the end of it and ansible uses that. > > It would be helpful if someone could simply add "ssh_args= -F sshconfig" > to an ansible.cfg > file and show some output that proves that Ansible is using it. > > J > > On Friday, May 23, 2014 10:09:32 AM UTC-5, Michael DeHaan wrote: >> >> Hmm. >> >> So that's definitely OpenSSH by default. >> >> Commands to ssh config are arbitrary and are handled here: >> >> >> https://github.com/ansible/ansible/blob/devel/lib/ansible/runner/connection_plugins/ssh.py#L60 >> >> Can you try specifying a full path to your SSH config file? Might be a >> case of relative path. >> >> >> >> >> On Fri, May 23, 2014 at 9:00 AM, Slim Slam <[email protected]> wrote: >> >>> I'm running ansible 1.6.1 on MacOSX 10.9.3. The target systems are >>> CentOS 6. >>> >>> J >>> >>> >>> On Friday, May 23, 2014 7:31:58 AM UTC-5, Michael DeHaan wrote: >>> >>>> Ansible will use your SSH config when using the ssh (not paramiko) >>>> transport, perhaps it's not finding it for some reason. >>>> >>>> paramiko would be the default if you were running from RHEL/CentOS 6 or >>>> before, where OpenSSH is not new enough to support ControlMaster, and >>>> paramiko is therefore still faster. (review for everyone: accelerate mode >>>> is the performance option there, since pipeling is OpenSSH only). >>>> >>>> Let's start with what OS you are running form as that may highlight >>>> that transport question. If not, we can ask other questions. >>>> >>>> >>>> >>>> On Thu, May 22, 2014 at 6:12 PM, Slim Slam <[email protected]> wrote: >>>> >>>>> Ansible 1.6.1 >>>>> >>>>> I'm trying to set things up so that I can specify a bastion host as a >>>>> gateway >>>>> to my other machines. >>>>> >>>>> I'd like Ansible to use an SSH config file that I keep in git. >>>>> >>>>> So, I have a file named "sshconfig" with: >>>>> >>>>> Host * >>>>> >>>>> ServerAliveInterval 60 >>>>> >>>>> TCPKeepAlive yes >>>>> >>>>> ProxyCommand ssh 55.232.102.151 'nc %h %p' >>>>> >>>>> ControlMaster auto >>>>> >>>>> >>>>> Where 55.232.102.151 is the bastion IP address. >>>>> >>>>> >>>>> My ansible.cfg file looks like: >>>>> >>>>> >>>>> [defaults] >>>>> >>>>> transport = ssh >>>>> >>>>> ssh_args = -F sshconfig -o ControlPersist=15m >>>>> >>>>> >>>>> If I run "ssh -F sshconfig [email protected]" it uses the bastion >>>>> server as expected. >>>>> >>>>> But Ansible doesn't ever seem to use my "sshconfig" file (I don't see >>>>> anything about >>>>> >>>>> it in the verbose output, nor the bastion IP address). ' >>>>> >>>>> >>>>> Does ssh_args actually permit "-F sshconfig" or does it only allow "-o >>>>> param=something" options? >>>>> >>>>> >>>>> J >>>>> >>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "Ansible Project" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> To post to this group, send email to [email protected]. >>>>> >>>>> To view this discussion on the web visit https://groups.google.com/d/ >>>>> msgid/ansible-project/25b6293f-28b7-4e45-9f52- >>>>> 0cf4b53383f2%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/25b6293f-28b7-4e45-9f52-0cf4b53383f2%40googlegroups.com?utm_medium=email&utm_source=footer> >>>>> . >>>>> For more options, visit https://groups.google.com/d/optout. >>>>> >>>> >>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Ansible Project" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To post to this group, send email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/ansible-project/6fd8af45-ae09-45dc-9167-fd492db99dd0%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/6fd8af45-ae09-45dc-9167-fd492db99dd0%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> >>> For more options, visit https://groups.google.com/d/optout. >>> >> >> -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/f4ec2561-a925-47a7-99e5-7116db810100%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
