我希望從 /etc/passwd 中提取用戶列表，然後 grep 他們的 crontab 檔案以查找已停用的（註釋：^#）作業。
進階步驟是：
- 從 /etc/passwd 取得使用者名稱陣列（“my_users”）
- 對步驟 1 中指定的檔案執行 grep (/var/spool/cron/{{my_users}})
- 使用“調試”列印結果。
我很感激任何建議，這是我到目前為止所得到的：
- name: ANSIBLE PLAYBOOK - disabled cronjob check
hosts: "{{ variable_host | default('testvm') }}"
remote_user: admin
gather_facts: no
become: yes
tasks:
- getent:
database: passwd
- name: set_fact
debugger: on_failed
ansible.builtin.set_fact:
my_users: "{{ getent_passwd|dict2items|json_query('[?contains(value,`/bin/bash`)].key') }}"
cacheable: yes
- name: set_fact_2
ansible.builtin.set_fact:
array_length: "{{ my_users|length }}"
- debug:
msg: "Debugging 2: {{ my_users|length }}"
- name: Get disabled cron jobs
debugger: always
loop: "{{ my_users }}"
ansible.builtin.lineinfile:
path: "/var/spool/cron/{{ my_users }}"
regexp: "^#"
這是有問題的輸出，這並不完全符合我的預期：
任務[取得停用的cron 作業]************************************************ ****** ******************************************** ********** **************************************** ************** ********************************** 失敗： [testvm] (item=n2disk) => {" ansible_loop_var": "item", "changed": false, "item": "n2disk", "msg": "line is required with state=present"} 失敗: [ testvm] (item=cento) => {"ansible_loop_var ": "item", "changed": false, "item": "cento", "msg": "line is required with state=present"} 失敗: [testvm ] (item=admin) => {"ansible_loop_var" : "item", "changed": false, "item": "admin", "msg": "line is required with state=present"} 失敗: [testvm] (item=nprobe) => {"ansible_loop_var": "item", "changed": false, "item": "nprobe", "msg": "line is required with state=present"} 失敗: [testvm] ( item=root) => {"ansible_loop_var": " item", "changed": false, "item": "root", "msg": "line is required with state=present"} failed: [testvm] (item =backup) => {"ansible_loop_var": "item ", "changed": false, "item": "backup", "msg": "line is required with state=present"}
答案1
作為提示，請參閱下面如何建立包含所有 crontab 資訊的字典
- 宣告變數
cron_tabs_path: /var/cron/tabs
cron_users: "{{ cron_user.files|map(attribute='path')|
map('basename')|list }}"
cron_tabs: "{{ cron_tab.results|map(attribute='stdout')|
map('community.general.jc', 'crontab')|list }}"
cron_tabs_dict_all: "{{ dict(ansible_play_hosts|
zip(ansible_play_hosts|
map('extract', hostvars, ['cron_tabs_dict']))) }}"
- 尋找所有 crontab 檔案（cron_用戶）
- find:
paths: "{{ cron_tabs_path }}"
register: cron_user
- 讀取所有 crontab
- command: "crontab -u {{ item }} -l"
register: cron_tab
loop: "{{ cron_users }}"
- 建立使用者及其 crontab 的字典
- set_fact:
cron_tabs_dict: "{{ dict(cron_users|zip(cron_tabs)) }}"
例如，給定遠端主機 test_11 和 test_13 上的 crontab
shell> ssh admin@test_11 sudo crontab -u admin -l
#Ansible: test_1
5 12 * * * echo test 1
#Ansible: test_5
5 14 * * * echo test 5
#Ansible: test_4
5 13 * * * echo test 4
shell> ssh admin@test_11 sudo crontab -u alice -l
#Ansible: test_2
5 13 * * * echo test 2
shell> ssh admin@test_11 sudo crontab -u bob -l
#Ansible: test_3
5 14 * * * echo test 3
shell> ssh admin@test_13 sudo crontab -u admin -l
#Ansible: test_1
5 12 * * * echo test 1
#Ansible: test_4
5 13 * * * echo test 4
#Ansible: test_5
5 14 * * * echo test 5
劇本
shell> cat pb.yml
- hosts: test_11,test_13
vars:
cron_tabs_path: /var/cron/tabs
cron_tabs: "{{ cron_tab.results|map(attribute='stdout')|
map('community.general.jc', 'crontab')|list }}"
cron_users: "{{ cron_user.files|map(attribute='path')|
map('basename')|list }}"
cron_tabs_dict_all: "{{ dict(ansible_play_hosts|
zip(ansible_play_hosts|
map('extract', hostvars, ['cron_tabs_dict']))) }}"
tasks:
- find:
paths: "{{ cron_tabs_path }}"
register: cron_user
- debug:
var: cron_users
- command: "crontab -u {{ item }} -l"
register: cron_tab
loop: "{{ cron_users }}"
- debug:
var: cron_tabs
- set_fact:
cron_tabs_dict: "{{ dict(cron_users|zip(cron_tabs)) }}"
- debug:
var: cron_tabs_dict|to_yaml
- debug:
var: cron_tabs_dict_all|to_yaml
run_once: true
給出
cron_tabs_dict_all:
test_11:
admin:
schedule:
- command: echo test 1
day_of_month: ['*']
day_of_week: ['*']
hour: ['12']
minute: ['5']
month: ['*']
- command: echo test 5
day_of_month: ['*']
day_of_week: ['*']
hour: ['14']
minute: ['5']
month: ['*']
- command: echo test 4
day_of_month: ['*']
day_of_week: ['*']
hour: ['13']
minute: ['5']
month: ['*']
variables: []
alice:
schedule:
- command: echo test 2
day_of_month: ['*']
day_of_week: ['*']
hour: ['13']
minute: ['5']
month: ['*']
variables: []
bob:
schedule:
- command: echo test 3
day_of_month: ['*']
day_of_week: ['*']
hour: ['14']
minute: ['5']
month: ['*']
variables: []
test_13:
admin:
schedule:
- command: echo test 1
day_of_month: ['*']
day_of_week: ['*']
hour: ['12']
minute: ['5']
month: ['*']
- command: echo test 4
day_of_month: ['*']
day_of_week: ['*']
hour: ['13']
minute: ['5']
month: ['*']
- command: echo test 5
day_of_month: ['*']
day_of_week: ['*']
hour: ['14']
minute: ['5']
month: ['*']
variables: []
使用獲取讀取/etc/passwd
- getent:
database: passwd