Ansible 配置文件，由浅入深的全方位指南

root@code-server:~# ansible --version
ansible [core 2.17.10]
  config file = /etc/ansible/ansible.cfg
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /root/.local/pipx/venvs/ansible-core/lib/python3.10/site-packages/ansible
  ansible collection location = /root/.ansible/collections:/usr/share/ansible/collections
  executable location = /root/.local/bin/ansible
  python version = 3.10.12 (main, Feb  4 2025, 14:57:36) [GCC 11.4.0] (/root/.local/pipx/venvs/ansible-core/bin/python)
  jinja version = 3.1.6
  libyaml = True
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.

root@code-server:~# grep -E '^\[' /etc/ansible/ansible.cfg
[defaults]
[inventory]
[privilege_escalation]
[paramiko_connection]
[ssh_connection]
[persistent_connection]
[accelerate]
[selinux]
[colors]
[diff]
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.

[defaults]
# 定义库存文件路径（支持多个文件或目录）
inventory = ./inventory/
# 默认远程用户（可被 playbook 覆盖）
remote_user = admin
# 是否收集主机 facts 信息
gathering = smart
# 是否检查主机 SSH 密钥
host_key_checking = False
# 并发进程数（提升执行速度）
forks = 50
# 日志记录路径
log_path = /var/log/ansible.log
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.

[privilege_escalation]
# 是否启用 sudo/su 提权
become = True
# 提权使用的命令（sudo/su/doas）
become_method = sudo
# 提权后的用户（默认 root）
become_user = root
# 是否询问 sudo 密码
become_ask_pass = False
1.
2.
3.
4.
5.
6.
7.
8.
9.

[ssh_connection]
# 启用 SSH 管道加速（减少连接次数）
pipelining = True
# 超时时间（单位秒）
timeout = 30
# 启用 ControlPersist 长连接
control_path = %(directory)s/ansible-ssh-%%h-%%p-%%r
1.
2.
3.
4.
5.
6.
7.

[persistent_connection]
# 连接保持时间（秒）
connect_timeout = 30
# 命令超时时间
command_timeout = 60
1.
2.
3.
4.
5.

[inventory]
enable_plugins = host_list,yaml,ini
# 启用动态库存缓存
cache = yes
# 缓存过期时间（秒）
cache_plugin = jsonfile
cache_timeout = 3600
1.
2.
3.
4.
5.
6.
7.

[colors]
# 自定义输出颜色（如成功、错误状态）
highlight = white
verbose = blue
error = red
1.
2.
3.
4.
5.

[defaults]
fact_caching = jsonfile
fact_caching_connection = /tmp/ansible_facts
1.
2.
3.

[defaults]
library = /usr/share/ansible/custom_modules/
1.
2.

[defaults]
environment = {"http_proxy": "http://proxy.example.com:8080"}
1.
2.

[defaults]
fact_caching = jsonfile
fact_caching_connection = /tmp/ansible_facts
inventory      = ./inventory
fork           = 20
ask_pass       = False
remote_user    =  root
log_path       = /var/log/ansible.log
host_key_checking = False
ansible_python_interpreter = /usr/bin/python3.9
[privilege_escalation]
become = True
become_method = sudo
become_user = root
become_ask_pass = False
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.