I think what Michael meant was to specify the full path to the sshconfig file, ie. "-F /path/to/mysshconfig" instead of a relative path.
On Fri, May 23, 2014 at 11:30 AM, Slim Slam <[email protected]> wrote: > FWIW, I got this idea from *you* :-) - reference: > https://groups.google.com/d/msg/ansible-project/AOt-5fgBzho/hEDnnOrJkC8J > However, I've never seen an implementation of it or a working example > that's been tested. I think someone posted an > example where they had "-F ~/.ssh/config" but since that's the default ssh > config file (ssh will use ~/.ssh/config whether or not > your specify it with the -F flag) it doesn't really test whether it's > working or not. :-) > > J > > > On Friday, May 23, 2014 10:39:52 AM UTC-5, Slim Slam wrote: >> >> That didn't make a difference. >> I know that ansible is using that ansible.cfg file because I can put a >> "remote_user = xxx" line >> at the end of it and ansible uses that. >> >> It would be helpful if someone could simply add "ssh_args= -F sshconfig" >> to an ansible.cfg >> file and show some output that proves that Ansible is using it. >> >> J >> >> On Friday, May 23, 2014 10:09:32 AM UTC-5, Michael DeHaan wrote: >>> >>> Hmm. >>> >>> So that's definitely OpenSSH by default. >>> >>> Commands to ssh config are arbitrary and are handled here: >>> >>> https://github.com/ansible/ansible/blob/devel/lib/ >>> ansible/runner/connection_plugins/ssh.py#L60 >>> >>> Can you try specifying a full path to your SSH config file? Might be a >>> case of relative path. >>> >>> >>> >>> >>> On Fri, May 23, 2014 at 9:00 AM, Slim Slam <[email protected]> wrote: >>> >>>> I'm running ansible 1.6.1 on MacOSX 10.9.3. The target systems are >>>> CentOS 6. >>>> >>>> J >>>> >>>> >>>> On Friday, May 23, 2014 7:31:58 AM UTC-5, Michael DeHaan wrote: >>>> >>>>> Ansible will use your SSH config when using the ssh (not paramiko) >>>>> transport, perhaps it's not finding it for some reason. >>>>> >>>>> paramiko would be the default if you were running from RHEL/CentOS 6 >>>>> or before, where OpenSSH is not new enough to support ControlMaster, and >>>>> paramiko is therefore still faster. (review for everyone: accelerate mode >>>>> is the performance option there, since pipeling is OpenSSH only). >>>>> >>>>> Let's start with what OS you are running form as that may highlight >>>>> that transport question. If not, we can ask other questions. >>>>> >>>>> >>>>> >>>>> On Thu, May 22, 2014 at 6:12 PM, Slim Slam <[email protected]>wrote: >>>>> >>>>>> Ansible 1.6.1 >>>>>> >>>>>> I'm trying to set things up so that I can specify a bastion host as >>>>>> a gateway >>>>>> to my other machines. >>>>>> >>>>>> I'd like Ansible to use an SSH config file that I keep in git. >>>>>> >>>>>> So, I have a file named "sshconfig" with: >>>>>> >>>>>> Host * >>>>>> >>>>>> ServerAliveInterval 60 >>>>>> >>>>>> TCPKeepAlive yes >>>>>> >>>>>> ProxyCommand ssh 55.232.102.151 'nc %h %p' >>>>>> >>>>>> ControlMaster auto >>>>>> >>>>>> >>>>>> Where 55.232.102.151 is the bastion IP address. >>>>>> >>>>>> >>>>>> My ansible.cfg file looks like: >>>>>> >>>>>> >>>>>> [defaults] >>>>>> >>>>>> transport = ssh >>>>>> >>>>>> ssh_args = -F sshconfig -o ControlPersist=15m >>>>>> >>>>>> >>>>>> If I run "ssh -F sshconfig [email protected]" it uses the bastion >>>>>> server as expected. >>>>>> >>>>>> But Ansible doesn't ever seem to use my "sshconfig" file (I don't see >>>>>> anything about >>>>>> >>>>>> it in the verbose output, nor the bastion IP address). ' >>>>>> >>>>>> >>>>>> Does ssh_args actually permit "-F sshconfig" or does it only allow >>>>>> "-o param=something" options? >>>>>> >>>>>> >>>>>> J >>>>>> >>>>>> >>>>>> -- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "Ansible Project" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to [email protected]. >>>>>> To post to this group, send email to [email protected]. >>>>>> >>>>>> To view this discussion on the web visit https://groups.google.com/d/ >>>>>> msgid/ansible-project/25b6293f-28b7-4e45-9f52-0cf4b53383f2% >>>>>> 40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/25b6293f-28b7-4e45-9f52-0cf4b53383f2%40googlegroups.com?utm_medium=email&utm_source=footer> >>>>>> . >>>>>> For more options, visit https://groups.google.com/d/optout. >>>>>> >>>>> >>>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Ansible Project" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To post to this group, send email to [email protected]. >>>> To view this discussion on the web visit https://groups.google.com/d/ >>>> msgid/ansible-project/6fd8af45-ae09-45dc-9167- >>>> fd492db99dd0%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/6fd8af45-ae09-45dc-9167-fd492db99dd0%40googlegroups.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>> >>> -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/f4ec2561-a925-47a7-99e5-7116db810100%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/f4ec2561-a925-47a7-99e5-7116db810100%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAMFyvFgRhDNcfQnYeX4bD2iTLj_JkfKwuLxOH-pCXxHimyVb4g%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
