How to switch a user per task or set of tasks?

by

With Ansible 1.9 or later

Ansible uses the become, become_user, and become_method directives to achieve privilege escalation. You can apply them to an entire play or playbook, set them in an included playbook, or set them for a particular task.

- name: checkout repo
  git: repo=https://github.com/some/repo.git version=master dest={{ dst }}
  become: yes
  become_user: some_user

You can use become_with to specify how the privilege escalation is achieved, the default being sudo.

The directive is in effect for the scope of the block in which it is used (examples).

See Hosts and Users for some additional examples and Become (Privilege Escalation) for more detailed documentation.

In addition to the task-scoped become and become_user directives, Ansible 1.9 added some new variables and command line options to set these values for the duration of a play in the absence of explicit directives:

As of Ansible 2.0.2.0, the older sudo/sudo_user syntax described below still works, but the deprecation notice states, “This feature will be removed in a future release.”

Previous syntax, deprecated as of Ansible 1.9 and scheduled for removal:

- name: checkout repo
  git: repo=https://github.com/some/repo.git version=master dest={{ dst }}
  sudo: yes
  sudo_user: some_user

More Related Contents:

  1. ansible command to list all known hosts
  2. How to use Ansible’s with_item with a variable?
  3. How can I use Ansible nested variable?
  4. Using set_facts and with_items together in Ansible
  5. Using Ansible set_fact to create a dictionary from register results
  6. Ansible fails with /bin/sh: 1: /usr/bin/python: not found
  7. Only check whether a line present in a file (ansible)
  8. How to loop over this dictionary in Ansible?
  9. How to get the first element of a list from the output of setup module in Ansible?
  10. In Ansible, how to combine variables from separate files into one array?
  11. Whats the difference between ansible ‘raw’, ‘shell’ and ‘command’?
  12. Specify sudo password for Ansible
  13. How do I register a variable and persist it between plays targeted on different nodes?
  14. Why does Ansible show “ERROR! no action detected in task” error?
  15. How can a user with SSH keys authentication have sudo powers in Ansible? [duplicate]
  16. How can I make Ansible interpret a variable inside a variable?
  17. Ansible: How to iterate over a role with an array?
  18. Ansible stdout Formatting
  19. How to join a list of strings in Ansible?
  20. ansible run command on remote host in background
  21. How to set environmental variables using Ansible
  22. ERROR! ‘fail’ is not a valid attribute for a Play
  23. How to set host_key_checking=false in ansible inventory file?
  24. Ansible with_subelements
  25. Ansible with a bastion host / jump box? [duplicate]
  26. How can I use a condition to set a variable value in Ansible?
  27. How can I copy files between two managed nodes using Ansible?
  28. Ansible – Save registered variable to file
  29. Rundeck integration with Ansible through plugin
  30. Accessing inventory host variable in Ansible playbook

Leave a Comment