{"id":42840,"date":"2022-12-31T19:00:00","date_gmt":"2023-01-18T22:01:58","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/"},"modified":"2024-04-29T07:51:48","modified_gmt":"2024-04-28T23:51:48","slug":"%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/","title":{"rendered":"\u4f7f\u7528Ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eAzure\u4e0a\u7684Windows Server 2019"},"content":{"rendered":"

\u9996\u5148<\/h2>\n

\u6700\u8fd1\u6709\u673a\u4f1a\u4f7f\u7528 Ansible \u5e76\u89e6\u6478 Windows Server\uff0c\u6240\u4ee5\u4e3a\u4e86\u5907\u5fd8\u8d77\u89c1\uff0c\u6211\u51b3\u5b9a\u5199\u4e00\u7bc7\u6587\u7ae0\u3002\u5177\u4f53\u6765\u8bf4\uff0c\u6211\u5c06\u4f7f\u7528 Azure Cloudshell \u4e0a\u7684 Ansible \u901a\u8fc7 WinRM\uff08\u901a\u8fc7https\uff1a5986\u7aef\u53e3\uff09\u8fde\u63a5\u5230 Azure \u4e0a\u7684 Windows Server 2019\uff0c\u5e76\u4ecb\u7ecd\u5982\u4f55\u4f7f\u7528 win_shell \u6a21\u5757\u6267\u884c\u4e3b\u673a\u540d\u548c\u7b80\u5355\u7684 PowerShell\u3002\u6b64\u5916\uff0c\u6211\u5c06\u4f7f\u7528\u8bc1\u4e66\u4f5c\u4e3a WinRM \u7684\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5\u3002<\/p>\n

\u672c\u6587\u6240\u8ff0\u7684\u6267\u884c\u7ed3\u679c\u7b49\u5185\u5bb9\u4ec5\u9650\u4e8e\u64b0\u5199\u65f6\u70b9\uff082022\u5e743\u670816\u65e5\uff09\u7684\u4fe1\u606f\u3002<\/div>\n
\u4e3a\u4e86\u65b9\u4fbf\u8d77\u89c1\uff0c\u5728\u9a8c\u8bc1\u76ee\u7684\u4e0b\u4f5c\u4e3a\u6267\u884c\u73af\u5883\uff0c\u6211\u4eec\u4f7f\u7528\u4e86Azure Cloudshell\u3002
\n\u5728\u4f7f\u7528\u4e4b\u524d\uff0c\u8bf7\u52a1\u5fc5\u6ce8\u610f\u5b89\u5168\u8981\u6c42\u7b49\u3002<\/div>\n

\u524d\u63d0\u6761\u4ef6<\/h2>\n
    \n
  • \n
      \u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u5bfe\u8c61VM\u7b49\u306f\u4ee5\u4e0b\u306e\u901a\u308aAzure\u4e0a\u306b\u4f5c\u6210\u6e08<\/ul>\n<\/li>\n<\/ul>\n

      Windows (Windows Server 2019 Datacenter)
      \n\u30d1\u30d6\u30ea\u30c3\u30af IP \u30a2\u30c9\u30ec\u30b9\u4ed8\u4e0e
      \n\u30e6\u30fc\u30b6\u30fc\u306fazureuser\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u306fP@ssword1234<\/p>\n

      Azure NSG\uff08 network security group \uff09\u306b\u3066 Ansible \u5b9f\u884c\u74b0\u5883\u3088\u308a\u3001\u5bfe\u8c61 VM \u3078 TCP\uff1a5986 \u306e\u63a5\u7d9a\u3092\u8a31\u53ef<\/p>\n

      curl ifconfig.io \u7b49\u3067\u9001\u4fe1\u5143\u306e\u30b0\u30ed\u30fc\u30d0\u30eb IP \u3092\u53d6\u5f97\u3057\u3001\u4e8b\u524d\u306b\u63a5\u7d9a\u53ef\u80fd\u306a\u3088\u3046\u306b\u8a2d\u5b9a<\/p>\n

      Ansible \u53ca\u3073 OpenSSL \u5b9f\u884c\u74b0\u5883\u306f\u3001Azure Cloudshell \u3092\u5229\u7528<\/p>\n

      Ansible \u3084\u3001pywinrm \u7b49\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306b\u3064\u3044\u3066\u306f\u3001\u3053\u306e\u8a18\u4e8b\u3067\u306f\u89e6\u308c\u307e\u305b\u3093
      \nWinRM \u306e\u8a8d\u8a3c\u65b9\u6cd5\u3068\u3057\u3066\u3001Certificate \u3092\u5229\u7528<\/p>\n

      2. \u8fd0\u884c\u73af\u5883<\/h2>\n
      $ <\/span>ansible --version<\/span>\r\nansible 2.10.2\r\n  config file =<\/span> None\r\n  configured module search path =<\/span> [<\/span>'\/home\/takuya\/.ansible\/plugins\/modules'<\/span>, '\/usr\/share\/ansible\/plugins\/modules'<\/span>]<\/span>\r\n  ansible python module location =<\/span> \/opt\/ansible\/lib\/python3.7\/site-packages\/ansible\r\n  executable location =<\/span> \/opt\/ansible\/bin\/ansible\r\n  python version =<\/span> 3.7.3 (<\/span>default, Jul 25 2020, 13:03:44)<\/span> [<\/span>GCC 8.3.0]\r\n$ <\/span>\r\n$ <\/span>openssl version\r\nOpenSSL 1.1.1d  10 Sep 2019\r\n$ <\/span>\r\n<\/code><\/pre>\n
      3.\u9884\u5148\u51c6\u5907<\/h2>\n
      \u5728\u4e8b\u524d\u51c6\u5907\u9636\u6bb5\uff0c\u6211\u4eec\u5c06\u8fdb\u884c\u4ee5\u4e0b\u64cd\u4f5c\u3002<\/p>\n
        \u5728Windows Server\uff08\u53d7\u63a7\u865b\u64ec\u6a5f\uff09\u4e0a\u9032\u884c\u5404\u7a2e\u8a2d\u5b9a\uff0c\u4ee5\u5275\u5efa\u7528\u65bc\u5c07\u6191\u8b49\u6620\u5c04\u5230\u672c\u5730\u7528\u6236\u7684\u8a8d\u8b49\u8b49\u66f8\u3002<\/ol>\n
        3.1. \u521b\u5efa\u7528\u4e8e\u5c06\u8bc1\u4e66\u6620\u5c04\u5230\u672c\u5730\u7528\u6237\u7684\u8bc1\u660e\u4e66\uff0c\u4ee5\u8fdb\u884c\u8ba4\u8bc1\u3002<\/h3>\n
        \u9996\u5148\uff0c\u5728Azure Cloud Shell\u4e2d\uff0c\u6839\u636eAnsible\u5b98\u65b9\u6587\u6863\u7684\u53c2\u8003\uff0c\u4f7f\u7528OpenSSL\u521b\u5efa\u7528\u4e8e\u8bc1\u4e66\u8ba4\u8bc1\u7684\u8bc1\u4e66\u5bf9\u3002<\/p>\n
        \u8bf7\u6ce8\u610f\uff0c\u5728\u6620\u5c04\u76ee\u6807\u4e2d\u5c06\u7528\u6237\u540dazureuser\u66ff\u6362\u4e3a\u5b9e\u9645\u73af\u5883\u4e2d\u7684\u7528\u6237\u540d\u3002<\/div>\n
        # Set the name of the local user that will have the key mapped to\r\nUSERNAME=\"azureuser\"\r\n\r\ncat > openssl.conf << EOL\r\ndistinguished_name = req_distinguished_name\r\n[req_distinguished_name]\r\n[v3_req_client]\r\nextendedKeyUsage = clientAuth\r\nsubjectAltName = otherName:1.3.6.1.4.1.311.20.2.3;UTF8:$USERNAME@localhost\r\nEOL\r\n\r\nexport OPENSSL_CONF=openssl.conf\r\nopenssl req -x509 -nodes -days 3650 -newkey rsa:2048 -out cert.pem -outform PEM -keyout cert_key.pem -subj \"\/CN=$USERNAME\" -extensions v3_req_client\r\nrm openssl.conf\r\n# \u8a3c\u660e\u66f8\u306e\u30da\u30a2(`cert_key.pem`,`cert.pem`)\u304c\u4f5c\u6210\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\r\nls -altr\r\n# \u6b21\u306e Windows Server \u5074\u3067\u306e\u30de\u30c3\u30d4\u30f3\u30b0\u3067\u5229\u7528\u3059\u308b\u305f\u3081\u3001pem \u30d5\u30a1\u30a4\u30eb\u3092ZIP\u3067\u5727\u7e2e\u3057\u3066\u3001Cloudshell \u304b\u3089\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u3066\u304a\u304f\r\nzip pem.zip *.pem\r\n<\/code><\/pre>\n
        $ USERNAME<\/span>=<\/span>\"azureuser\"<\/span>\r\n$ <\/span>\r\n$ <\/span>cat<\/span> ><\/span> openssl.conf <<<\/span> EOL<\/span>\r\n> distinguished_name = req_distinguished_name\r\n> [req_distinguished_name]\r\n> [v3_req_client]\r\n> extendedKeyUsage = clientAuth\r\n> subjectAltName = otherName:1.3.6.1.4.1.311.20.2.3;UTF8:<\/span>$USERNAME<\/span>@localhost\r\n> EOL\r\n<\/span>$ <\/span>\r\n$ <\/span>export OPENSSL_CONF=openssl.conf\r\ntakuya@Azure:~\/wwwwork<\/span>$ <\/span>openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -out cert.pem -outform PEM -keyout cert_key.pem -subj \"\/CN=<\/span>$USERNAME<\/span>\" -extensions v3_req_client\r\nGenerating a RSA private key\r\n...............+++++\r\n............+++++\r\nwriting new private key to 'cert_key.pem'\r\n-----\r\n<\/span>$ <\/span>rm openssl.conf\r\n<\/span>$ <\/span>ls -altr\r\ntotal 16\r\ndrwxr-xr-x 39 takuya takuya 4096 Mar 16 03:29 ..\r\n-rw-r--r--  1 takuya takuya 1099 Mar 16 03:38 cert.pem\r\n-rw-------  1 takuya takuya 1708 Mar 16 03:38 cert_key.pem\r\ndrwxr-xr-x  2 takuya takuya 4096 Mar 16 03:38 .\r\n<\/span>$ <\/span>zip pem.zip *.pem\r\n  adding: cert_key.pem (deflated 23%)\r\n  adding: cert.pem (deflated 25%)\r\n$\r\n<\/span><\/code><\/pre>\n
        3.2 \u5728 Windows Server\uff08\u53d7\u63a7\u5236\u7684\u865a\u62df\u673a\uff09\u4e0a\u8fdb\u884c\u5404\u79cd\u8bbe\u7f6e\u3002<\/h3>\n
        \u4e0b\u4e00\u6b65\uff0c\u60a8\u53ef\u4ee5\u4f7f\u7528RDP\u7b49\u65b9\u5f0f\uff0c\u8fde\u63a5\u5230Azure\u4e0a\u7684Windows Server\uff0c\u5e76\u8fdb\u884c\u4ee5\u4e0b\u8bbe\u7f6e\u3002<\/p>\n
          \n
        1. \n
            \u542f\u7528WinRM<\/ol>\n<\/li>\n<\/ol>\n
             <\/p>\n
              \n
            1. \n
                \u5173\u8054\u8bc1\u4e66\u548c\u672c\u5730\u8d26\u6237<\/ol>\n<\/li>\n<\/ol>\n
                 <\/p>\n
                  \u542f\u7528WinRM\u7684\u8bc1\u4e66\u8ba4\u8bc1<\/ol>\n
                  3.2.1. \u6fc0\u6d3bWinRM\u7b49<\/h4>\n
                  \u6839\u636e Ansible \u5b98\u65b9\u6587\u6863\uff0c\u5728 Windows Server \u4e0a\u7684 Powershell\uff08\u4ee5\u4e0b\u7b80\u79f0 Powershell\uff0c\u5fc5\u987b\u4ee5\u7ba1\u7406\u5458\u6a21\u5f0f\u8fd0\u884c\uff09\u4e2d\u8fd0\u884c ConfigureRemotingForAnsible.ps1\uff0c\u4ee5\u4f7f\u5176\u80fd\u901a\u8fc7 https\uff08\u7aef\u53e3\uff1a5896\uff09\u8fdb\u884c WinRM \u8fde\u63a5\u53ef\u7528\u3002<\/p>\n
                  $url<\/span> =<\/span> \"https:\/\/raw.githubusercontent.com\/ansible\/ansible\/devel\/examples\/scripts\/ConfigureRemotingForAnsible.ps1\"<\/span>\r\n$file<\/span> =<\/span> \"<\/span>$<\/span>env<\/span>:<\/span>temp<\/span>\\ConfigureRemotingForAnsible.ps1\"<\/span>\r\n\r\n(<\/span>New-Object<\/span> -TypeName<\/span> System.Net.WebClient<\/span>)<\/span>.<\/span>DownloadFile<\/span>(<\/span>$url<\/span>,<\/span> $file<\/span>)<\/span>\r\n\r\npowershell.exe<\/span> -ExecutionPolicy<\/span> ByPass<\/span> -File<\/span> $file<\/span>\r\n\r\nwinrm<\/span> enumerate<\/span> winrm\/config\/Listener<\/span>\r\n<\/code><\/pre>\n
                  3.2.2. \u8bc1\u660e\u4e66\u4e0e\u672c\u5730\u8d26\u6237\u7684\u5173\u8054<\/h4>\n
                  \u63a5\u4e0b\u6765\uff0c\u5c06\u5df2\u521b\u5efa\u7684\u8bc1\u4e66\u914d\u5bf9 ZIP \u6587\u4ef6pem.zip\u4e0a\u4f20\u81f3Windows Server\uff0c\u5e76\u5728\u684c\u9762\u4e0a\u89e3\u538bZIP\u6587\u4ef6\u3002<\/p>\n
                  C:\\Users\\azureuser\\Desktop\\pem\\\u3078\u8a3c\u660e\u66f8\u306e\u30da\u30a2(cert_key.pem,cert.pem)\u3092\u914d\u7f6e<\/p>\n
                  \u63a5\u4e0b\u6765\uff0c\u8fd0\u884c\u4ee5\u4e0b PowerShell \u547d\u4ee4\uff0c\u5bf9\u8bc1\u4e66\u5bf9\u8fdb\u884c\u5bfc\u5165\uff0c\u5e76\u8fdb\u884c\u4e0e\u672c\u5730\u5e10\u6237\u7684\u6620\u5c04\u3002\uff08Ansible \u5b98\u65b9\u6587\u6863\uff09<\/p>\n
                  \u8bf7\u66ff\u6362\u76ee\u6807\u6620\u5c04\u7528\u6237\u540dazureuser\u548c\u5bc6\u7801P@ssword1234\u4e3a\u5b9e\u9645\u73af\u5883\u4e2d\u7684\u51ed\u8bc1\u3002<\/div>\n
                  $cert<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Security.Cryptography.X509Certificates.X509Certificate2<\/span>\r\n$cert<\/span>.<\/span>Import<\/span>(<\/span>\"C:\\Users\\azureuser\\Desktop\\pem\\cert.pem\"<\/span>)<\/span>\r\n$store_name<\/span> =<\/span> [<\/span>System.Security.Cryptography.X509Certificates.StoreName<\/span>]::<\/span>Root<\/span>\r\n$store_location<\/span> =<\/span> [<\/span>System.Security.Cryptography.X509Certificates.StoreLocation<\/span>]::<\/span>LocalMachine<\/span>\r\n$store<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Security.Cryptography.X509Certificates.X509Store<\/span> -ArgumentList<\/span> $store_name<\/span>,<\/span> $store_location<\/span>\r\n$store<\/span>.<\/span>Open<\/span>(<\/span>\"MaxAllowed\"<\/span>)<\/span>\r\n$store<\/span>.<\/span>Add<\/span>(<\/span>$cert<\/span>)<\/span>\r\n$store<\/span>.<\/span>Close<\/span>()<\/span>\r\n\r\n$cert<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Security.Cryptography.X509Certificates.X509Certificate2<\/span>\r\n$cert<\/span>.<\/span>Import<\/span>(<\/span>\"C:\\Users\\azureuser\\Desktop\\pem\\cert.pem\"<\/span>)<\/span>\r\n$store_name<\/span> =<\/span> [<\/span>System.Security.Cryptography.X509Certificates.StoreName<\/span>]::<\/span>TrustedPeople<\/span>\r\n$store_location<\/span> =<\/span> [<\/span>System.Security.Cryptography.X509Certificates.StoreLocation<\/span>]::<\/span>LocalMachine<\/span>\r\n$store<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Security.Cryptography.X509Certificates.X509Store<\/span> -ArgumentList<\/span> $store_name<\/span>,<\/span> $store_location<\/span>\r\n$store<\/span>.<\/span>Open<\/span>(<\/span>\"MaxAllowed\"<\/span>)<\/span>\r\n$store<\/span>.<\/span>Add<\/span>(<\/span>$cert<\/span>)<\/span>\r\n$store<\/span>.<\/span>Close<\/span>()<\/span>\r\n\r\n$username<\/span> =<\/span> \"azureuser\"<\/span>\r\n$password<\/span> =<\/span> ConvertTo-SecureString<\/span> -String<\/span> \"P@ssword1234\"<\/span> -AsPlainText<\/span> -Force<\/span>\r\n$credential<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Management.Automation.PSCredential<\/span> -ArgumentList<\/span> $username<\/span>,<\/span> $password<\/span>\r\n\r\n$thumbprint<\/span> =<\/span> (<\/span>Get-ChildItem<\/span> -Path<\/span> cert:\\LocalMachine\\root<\/span> |<\/span> Where-Object<\/span> {<\/span> $_<\/span>.<\/span>Subject<\/span> -eq<\/span> \"CN=<\/span>$username<\/span>\"<\/span> })<\/span>.<\/span>Thumbprint<\/span>\r\nNew-Item<\/span> -Path<\/span> WSMan:\\localhost\\ClientCertificate<\/span> `\r\n<\/span>     -Subject<\/span> \"<\/span>$username<\/span>@localhost\"<\/span> `\r\n<\/span>     -URI<\/span> *<\/span> `\r\n<\/span>     -Issuer<\/span> $thumbprint<\/span> `\r\n<\/span>     -Credential<\/span> $credential<\/span> `\r\n<\/span>     -Force<\/span>\r\n<\/code><\/pre>\n
                  PS<\/span> C:\\Users\\azureuser<\/span>><\/span> $cert<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Security.Cryptography.X509Certificates.X509Certificate2<\/span>\r\n>><\/span> $cert<\/span>.<\/span>Import<\/span>(<\/span>\"C:\\Users\\azureuser\\Desktop\\pem\\cert.pem\"<\/span>)<\/span>\r\n>><\/span> $store_name<\/span> =<\/span> [<\/span>System.Security.Cryptography.X509Certificates.StoreName<\/span>]::<\/span>Root<\/span>\r\n>><\/span> $store_location<\/span> =<\/span> [<\/span>System.Security.Cryptography.X509Certificates.StoreLocation<\/span>]::<\/span>LocalMachine<\/span>\r\n>><\/span> $store<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Security.Cryptography.X509Certificates.X509Store<\/span> -ArgumentList<\/span> $store_name<\/span>,<\/span> $store_location<\/span>\r\n>><\/span> $store<\/span>.<\/span>Open<\/span>(<\/span>\"MaxAllowed\"<\/span>)<\/span>\r\n>><\/span> $store<\/span>.<\/span>Add<\/span>(<\/span>$cert<\/span>)<\/span>\r\n>><\/span> $store<\/span>.<\/span>Close<\/span>()<\/span>\r\n>><\/span>\r\nPS<\/span> C:\\Users\\azureuser<\/span>><\/span>\r\nPS<\/span> C:\\Users\\azureuser<\/span>><\/span>\r\n>><\/span> $cert<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Security.Cryptography.X509Certificates.X509Certificate2<\/span>\r\n>><\/span> $cert<\/span>.<\/span>Import<\/span>(<\/span>\"C:\\Users\\azureuser\\Desktop\\pem\\cert.pem\"<\/span>)<\/span>\r\n>><\/span> $store_name<\/span> =<\/span> [<\/span>System.Security.Cryptography.X509Certificates.StoreName<\/span>]::<\/span>TrustedPeople<\/span>\r\n>><\/span> $store_location<\/span> =<\/span> [<\/span>System.Security.Cryptography.X509Certificates.StoreLocation<\/span>]::<\/span>LocalMachine<\/span>\r\n>><\/span> $store<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Security.Cryptography.X509Certificates.X509Store<\/span> -ArgumentList<\/span> $store_name<\/span>,<\/span> $store_location<\/span>\r\n>><\/span> $store<\/span>.<\/span>Open<\/span>(<\/span>\"MaxAllowed\"<\/span>)<\/span>\r\n>><\/span> $store<\/span>.<\/span>Add<\/span>(<\/span>$cert<\/span>)<\/span>\r\n>><\/span> $store<\/span>.<\/span>Close<\/span>()<\/span>\r\nPS<\/span> C:\\Users\\azureuser<\/span>><\/span>\r\nPS<\/span> C:\\Users\\azureuser<\/span>><\/span> $username<\/span> =<\/span> \"azureuser\"<\/span>\r\n>><\/span> $password<\/span> =<\/span> ConvertTo-SecureString<\/span> -String<\/span> \"P@ssword1234\"<\/span> -AsPlainText<\/span> -Force<\/span>\r\n>><\/span> $credential<\/span> =<\/span> New-Object<\/span> -TypeName<\/span> System.Management.Automation.PSCredential<\/span> -ArgumentList<\/span> $username<\/span>,<\/span> $password<\/span>\r\nPS<\/span> C:\\Users\\azureuser<\/span>><\/span>\r\nPS<\/span> C:\\Users\\azureuser<\/span>><\/span> $thumbprint<\/span> =<\/span> (<\/span>Get-ChildItem<\/span> -Path<\/span> cert:\\LocalMachine\\root<\/span> |<\/span> Where-Object<\/span> {<\/span> $_<\/span>.<\/span>Subject<\/span> -eq<\/span> \"CN=<\/span>$username<\/span>\"<\/span> })<\/span>.<\/span>Thumbprint<\/span>\r\n>><\/span> New-Item<\/span> -Path<\/span> WSMan:\\localhost\\ClientCertificate<\/span> `\r\n<\/span>>><\/span>      -Subject<\/span> \"<\/span>$username<\/span>@localhost\"<\/span> `\r\n<\/span>>><\/span>      -URI<\/span> *<\/span> `\r\n<\/span>>><\/span>      -Issuer<\/span> $thumbprint<\/span> `\r\n<\/span>>><\/span>      -Credential<\/span> $credential<\/span> `\r\n<\/span>>><\/span>      -Force<\/span>\r\n>><\/span>\r\n\r\n\r\n   WSManConfig:<\/span> Microsoft.WSMan.Management\\WSMan::localhost\\ClientCertificate<\/span>\r\n\r\nType<\/span>            Keys<\/span>                                Name<\/span>\r\n----<\/span>            ----<\/span>                                ----<\/span>\r\nContainer<\/span>       {<\/span>URI<\/span>=*<\/span>,<\/span> Issuer<\/span>=<\/span>F6652B7E0DD09FB81...<\/span> ClientCertificate_1870013346<\/span>\r\n\r\n\r\n<\/code><\/pre>\n
                  3.2.3. \u542f\u7528 WinRM \u7684\u8bc1\u4e66\u8ba4\u8bc1\u3002<\/h4>\n
                  \u6700\u540e\uff0c\u901a\u8fc7PowerShell\u542f\u7528WinRM\u7684\u8bc1\u4e66\u8ba4\u8bc1\u5e76\u786e\u8ba4WinRM\u7684\u76d1\u542c\u5668\u548c\u914d\u7f6e\u60c5\u51b5\u3002\u81f3\u6b64\uff0cWindows Server\u7684\u51c6\u5907\u5de5\u4f5c\u5b8c\u6210\u3002<\/p>\n
                  winrm<\/span> set<\/span> winrm\/config\/service\/Auth<\/span> '@{Certificate=\"true\"}'<\/span>\r\n\r\nwinrm<\/span> enumerate<\/span> winrm\/config\/Listener<\/span>\r\n\r\nwinrm<\/span> get<\/span> winrm\/config<\/span>\r\n<\/code><\/pre>\n
                  PS<\/span> C:\\Users\\azureuser<\/span>><\/span> winrm<\/span> set<\/span> winrm\/config\/service\/Auth<\/span> '@{Certificate=\"true\"}'<\/span>\r\nAuth<\/span>\r\n    Basic<\/span> =<\/span> true<\/span>\r\n    Kerberos<\/span> =<\/span> true<\/span>\r\n    Negotiate<\/span> =<\/span> true<\/span>\r\n    Certificate<\/span> =<\/span> true<\/span>\r\n    CredSSP<\/span> =<\/span> false<\/span>\r\n    CbtHardeningLevel<\/span> =<\/span> Relaxed<\/span>\r\n\r\nPS<\/span> C:\\Users\\azureuser<\/span>><\/span> winrm<\/span> enumerate<\/span> winrm\/config\/Listener<\/span>\r\nListener<\/span>\r\n    Address<\/span> =<\/span> *<\/span>\r\n    Transport<\/span> =<\/span> HTTP<\/span>\r\n    Port<\/span> =<\/span> 5985<\/span>\r\n    Hostname<\/span>\r\n    Enabled<\/span> =<\/span> true<\/span>\r\n    URLPrefix<\/span> =<\/span> wsman<\/span>\r\n    CertificateThumbprint<\/span>\r\n    ListeningOn<\/span> =<\/span> 127.0<\/span>.<\/span>0<\/span>.<\/span>1<\/span>,<\/span> 172.18<\/span>.<\/span>0<\/span>.<\/span>4<\/span>,<\/span> ::<\/span>1<\/span>,<\/span> fe80::10de:125d:29e4:eb5a<\/span>%<\/span>6<\/span>\r\n\r\nListener<\/span>\r\n    Address<\/span> =<\/span> *<\/span>\r\n    Transport<\/span> =<\/span> HTTPS<\/span>\r\n    Port<\/span> =<\/span> 5986<\/span>\r\n    Hostname<\/span> =<\/span> win001<\/span>\r\n    Enabled<\/span> =<\/span> true<\/span>\r\n    URLPrefix<\/span> =<\/span> wsman<\/span>\r\n    CertificateThumbprint<\/span> =<\/span> 624371<\/span>D7DBFE6B80FB902C379155B84E2AD2FBCA<\/span>\r\n    ListeningOn<\/span> =<\/span> 127.0<\/span>.<\/span>0<\/span>.<\/span>1<\/span>,<\/span> 172.18<\/span>.<\/span>0<\/span>.<\/span>4<\/span>,<\/span> ::<\/span>1<\/span>,<\/span> fe80::10de:125d:29e4:eb5a<\/span>%<\/span>6<\/span>\r\n\r\nPS<\/span> C:\\Users\\azureuser<\/span>><\/span> winrm<\/span> get<\/span> winrm\/config<\/span>\r\nConfig<\/span>\r\n    MaxEnvelopeSizekb<\/span> =<\/span> 500<\/span>\r\n    MaxTimeoutms<\/span> =<\/span> 60000<\/span>\r\n    MaxBatchItems<\/span> =<\/span> 32000<\/span>\r\n    MaxProviderRequests<\/span> =<\/span> 4294967295<\/span>\r\n    Client<\/span>\r\n        NetworkDelayms<\/span> =<\/span> 5000<\/span>\r\n        URLPrefix<\/span> =<\/span> wsman<\/span>\r\n        AllowUnencrypted<\/span> =<\/span> false<\/span>\r\n        Auth<\/span>\r\n            Basic<\/span> =<\/span> true<\/span>\r\n            Digest<\/span> =<\/span> true<\/span>\r\n            Kerberos<\/span> =<\/span> true<\/span>\r\n            Negotiate<\/span> =<\/span> true<\/span>\r\n            Certificate<\/span> =<\/span> true<\/span>\r\n            CredSSP<\/span> =<\/span> false<\/span>\r\n        DefaultPorts<\/span>\r\n            HTTP<\/span> =<\/span> 5985<\/span>\r\n            HTTPS<\/span> =<\/span> 5986<\/span>\r\n        TrustedHosts<\/span>\r\n    Service<\/span>\r\n        RootSDDL<\/span> =<\/span> O:NSG:BAD:P<\/span>(<\/span>A<\/span>;;<\/span>GA<\/span>;;;<\/span>BA<\/span>)(<\/span>A<\/span>;;<\/span>GR<\/span>;;;<\/span>IU<\/span>)<\/span>S:P<\/span>(<\/span>AU<\/span>;<\/span>FA<\/span>;<\/span>GA<\/span>;;;<\/span>WD<\/span>)(<\/span>AU<\/span>;<\/span>SA<\/span>;<\/span>GXGW<\/span>;;;<\/span>WD<\/span>)<\/span>\r\n        MaxConcurrentOperations<\/span> =<\/span> 4294967295<\/span>\r\n        MaxConcurrentOperationsPerUser<\/span> =<\/span> 1500<\/span>\r\n        EnumerationTimeoutms<\/span> =<\/span> 240000<\/span>\r\n        MaxConnections<\/span> =<\/span> 300<\/span>\r\n        MaxPacketRetrievalTimeSeconds<\/span> =<\/span> 120<\/span>\r\n        AllowUnencrypted<\/span> =<\/span> false<\/span>\r\n        Auth<\/span>\r\n            Basic<\/span> =<\/span> true<\/span>\r\n            Kerberos<\/span> =<\/span> true<\/span>\r\n            Negotiate<\/span> =<\/span> true<\/span>\r\n            Certificate<\/span> =<\/span> true<\/span>\r\n            CredSSP<\/span> =<\/span> false<\/span>\r\n            CbtHardeningLevel<\/span> =<\/span> Relaxed<\/span>\r\n        DefaultPorts<\/span>\r\n            HTTP<\/span> =<\/span> 5985<\/span>\r\n            HTTPS<\/span> =<\/span> 5986<\/span>\r\n        IPv4Filter<\/span> =<\/span> *<\/span>\r\n        IPv6Filter<\/span> =<\/span> *<\/span>\r\n        EnableCompatibilityHttpListener<\/span> =<\/span> false<\/span>\r\n        EnableCompatibilityHttpsListener<\/span> =<\/span> false<\/span>\r\n        CertificateThumbprint<\/span>\r\n        AllowRemoteAccess<\/span> =<\/span> true<\/span>\r\n    Winrs<\/span>\r\n        AllowRemoteShellAccess<\/span> =<\/span> true<\/span>\r\n        IdleTimeout<\/span> =<\/span> 7200000<\/span>\r\n        MaxConcurrentUsers<\/span> =<\/span> 2147483647<\/span>\r\n        MaxShellRunTime<\/span> =<\/span> 2147483647<\/span>\r\n        MaxProcessesPerShell<\/span> =<\/span> 2147483647<\/span>\r\n        MaxMemoryPerShellMB<\/span> =<\/span> 2147483647<\/span>\r\n        MaxShellsPerUser<\/span> =<\/span> 2147483647<\/span>\r\n\r\nPS<\/span> C:\\Users\\azureuser<\/span>><\/span>\r\n<\/code><\/pre>\n
                  4. Ansible Playbook\u53ca\u5176\u4ed6\u793a\u4f8b\u4ee3\u7801<\/h2>\n
                  \u672c\u6b21\u9a8c\u8bc1\u4e2d\u4f7f\u7528\u7684Playbook\u7b49\u5982\u4e0b\u6240\u793a\u3002<\/p>\n
                  \u901a\u8fc7WinRM\uff08\u4f7f\u7528https:5986\u7aef\u53e3\uff09\u8fde\u63a5\u5230Windows Server 2019\uff0c\u5728\u8ba4\u8bc1\u65b9\u6cd5\u4e0a\uff0c\u4f7f\u7528\u8bc1\u4e66\u4f5c\u4e3a\u5e93\u5b58\u6587\u4ef6\uff0c\u5e76\u5229\u7528win_shell\u6a21\u5757\u6267\u884c\u4e3b\u673a\u540d\u548c\u7b80\u5355\u7684powershell\u547d\u4ee4\u7684\u793a\u4f8b\u3002<\/p>\n
                  \u8bf7\u6ce8\u610f\uff0c\u5c06YOUR_VM_IP_ADDRESS\uff08Windows VM\u7684\u5168\u5c40IP\u5730\u5740\uff09\u548cYOUR_CERT_FULL_PATH\uff08\u4f8b\u5982\uff1a\/home\/yourname\/.ssh\/\u7b49\uff09\u66ff\u6362\u4e3a\u9002\u5408\u60a8\u73af\u5883\u7684\u6b63\u786e\u6570\u503c\u3002<\/div>\n
                  win<\/span>:<\/span>\r\n  hosts<\/span>:<\/span>\r\n    win001<\/span>:<\/span>\r\n      ansible_host<\/span>:<\/span> YOUR_VM_IP_ADDRESS<\/span>\r\n  vars<\/span>:<\/span>\r\n    ansible_winrm_server_cert_validation<\/span>:<\/span> ignore<\/span>\r\n    ansible_connection<\/span>:<\/span> winrm<\/span>\r\n# Below are the settings for the certificate<\/span>\r\n    ansible_winrm_cert_pem<\/span>:<\/span> \/YOUR_CERT_FULL_PATH\/cert.pem<\/span>\r\n    ansible_winrm_cert_key_pem<\/span>:<\/span> \/YOUR_CERT_FULL_PATH\/cert_key.pem<\/span>\r\n    ansible_winrm_transport<\/span>:<\/span> certificate<\/span>\r\n# Below are the settings for the ntlm<\/span>\r\n#    ansible_winrm_transport: ntlm<\/span>\r\n#    ansible_user: YOUR_VM_USERNAME<\/span>\r\n#    ansible_password: YOUR_VM_PASSWORD<\/span>\r\n#    ansible_winrm_scheme: https<\/span>\r\n#    ansible_port: 5986<\/span>\r\n<\/code><\/pre>\n
                  -<\/span> hosts<\/span>:<\/span> win<\/span>\r\n  gather_facts<\/span>:<\/span> false<\/span>\r\n  tasks<\/span>:<\/span>\r\n        -<\/span> win_shell<\/span>:<\/span> \"<\/span>{{<\/span> item<\/span> }}\"<\/span>\r\n          with_items<\/span>:<\/span>\r\n            -<\/span> '<\/span>hostname'<\/span>\r\n            -<\/span> |<\/span>\r\n              $date = Get-date<\/span>\r\n              $date<\/span>\r\n          register<\/span>:<\/span> command_results<\/span>\r\n        -<\/span> debug<\/span>:<\/span> var=command_results.results<\/span>\r\n<\/code><\/pre>\n
                  [defaults]<\/span>\r\nhost_key_checking<\/span>=<\/span>false<\/span>\r\nvalidate_certs<\/span>=<\/span>False<\/span>\r\nlog_path<\/span>=<\/span>.\/ansible.log<\/span>\r\n<\/code><\/pre>\n
                  5. \u6267\u884c\u7ed3\u679c(\u793a\u4f8b)<\/h2>\n
                  \u5728 Azure Cloudshell \u4e2d\uff0c\u51c6\u5907\u793a\u4f8b\u4ee3\u7801\u5e76\u521b\u5efa\u4e86\u5df2\u914d\u5bf9\u7684\u8bc1\u4e66\u6587\u4ef6\uff08’cert_key.pem’\uff0c’cert.pem’\uff09\uff0c\u5c06\u5b83\u4eec\u653e\u7f6e\u5728 Ansible \u7684\u6e05\u5355\u6587\u4ef6 inventory.yml \u4e2d\u7684 YOUR_CERT_FULL_PATH\uff08\u4f8b\u5982\uff1a\/home\/yourname\/.ssh\/\u7b49\uff09\u4f4d\u7f6e\u3002<\/p>\n
                  \u4ee5\u4e0b\u662f\u4eceCloudshell\u4e2d\u6267\u884cansible-playbook -i inventory.yml demo-win.yml\u7684\u793a\u4f8b\u7ed3\u679c\u3002<\/p>\n
                  $ansible<\/span>-playbook<\/span> -i<\/span> inventory.yml demo-win.yml \r\n\r\nPLAY [<\/span>win] **************************************************************************************************************************************************************************************<\/span>\r\n\r\nTASK [<\/span>win_shell] ********************************************************************************************************************************************************************************<\/span>\r\nchanged: [<\/span>win001] =><\/span> (<\/span>item<\/span>=<\/span>hostname<\/span>)<\/span>\r\nchanged: [<\/span>win001] =><\/span> (<\/span>item<\/span>=<\/span>$date<\/span> =<\/span> Get-date\r\n$date<\/span>\r\n)<\/span>\r\n\r\nTASK [<\/span>debug] ************************************************************************************************************************************************************************************<\/span>\r\nok: [<\/span>win001] =><\/span> {<\/span>\r\n    \"command_results.results\"<\/span>: [<\/span>\r\n        {<\/span>\r\n            \"ansible_loop_var\"<\/span>: \"item\"<\/span>,\r\n            \"changed\"<\/span>: true<\/span>,\r\n            \"cmd\"<\/span>: \"hostname\"<\/span>,\r\n            \"delta\"<\/span>: \"0:00:00.421907\"<\/span>,\r\n            \"end\"<\/span>: \"2022-03-17 02:11:15.905737\"<\/span>,\r\n            \"failed\"<\/span>: false<\/span>,\r\n            \"item\"<\/span>: \"hostname\"<\/span>,\r\n            \"rc\"<\/span>: 0,\r\n            \"start\"<\/span>: \"2022-03-17 02:11:15.483829\"<\/span>,\r\n            \"stderr\"<\/span>: \"\"<\/span>,\r\n            \"stderr_lines\"<\/span>: []<\/span>,\r\n            \"stdout\"<\/span>: \"win001<\/span>\\r\\n<\/span>\"<\/span>,\r\n            \"stdout_lines\"<\/span>: [<\/span>\r\n                \"win001\"<\/span>\r\n            ]<\/span>\r\n        }<\/span>,\r\n        {<\/span>\r\n            \"ansible_loop_var\"<\/span>: \"item\"<\/span>,\r\n            \"changed\"<\/span>: true<\/span>,\r\n            \"cmd\"<\/span>: \"<\/span>$date<\/span> = Get-date<\/span>\\n<\/span>$date<\/span>\"<\/span>,\r\n            \"delta\"<\/span>: \"0:00:00.421894\"<\/span>,\r\n            \"end\"<\/span>: \"2022-03-17 02:11:18.123249\"<\/span>,\r\n            \"failed\"<\/span>: false<\/span>,\r\n            \"item\"<\/span>: \"<\/span>$date<\/span> = Get-date<\/span>\\n<\/span>$date<\/span>\\n<\/span>\"<\/span>,\r\n            \"rc\"<\/span>: 0,\r\n            \"start\"<\/span>: \"2022-03-17 02:11:17.701354\"<\/span>,\r\n            \"stderr\"<\/span>: \"\"<\/span>,\r\n            \"stderr_lines\"<\/span>: []<\/span>,\r\n            \"stdout\"<\/span>: \"<\/span>\\r\\n<\/span>Thursday, March 17, 2022 2:11:18 AM<\/span>\\r\\n\\r\\n\\r\\n<\/span>\"<\/span>,\r\n            \"stdout_lines\"<\/span>: [<\/span>\r\n                \"\"<\/span>,\r\n                \"Thursday, March 17, 2022 2:11:18 AM\"<\/span>,\r\n                \"\"<\/span>,\r\n                \"\"<\/span>\r\n            ]<\/span>\r\n        }<\/span>\r\n    ]<\/span>\r\n}<\/span>\r\n\r\nPLAY RECAP **************************************************************************************************************************************************************************************<\/span>\r\nwin001                     : ok<\/span>=<\/span>2    changed<\/span>=<\/span>1    unreachable<\/span>=<\/span>0    failed<\/span>=<\/span>0    skipped<\/span>=<\/span>0    rescued<\/span>=<\/span>0    ignored<\/span>=<\/span>0   \r\n\r\n$<\/span>\r\n<\/code><\/pre>\n
                  6. \u53c2\u8003\u6587\u4ef6<\/h2>\n
                  \u4ee5\u4e0b\u662f\u53c2\u8003\u6587\u4ef6<\/p>\n
                    \n
                  • \n
                      https:\/\/docs.ansible.com\/ansible\/2.9_ja\/installation_guide\/intro_installation.html<\/ul>\n<\/li>\n<\/ul>\n
                       <\/p>\n
                        \n
                      • \n
                          https:\/\/docs.ansible.com\/ansible\/2.9_ja\/user_guide\/windows_setup.html<\/ul>\n<\/li>\n<\/ul>\n
                           <\/p>\n
                            \n
                          • \n
                              https:\/\/docs.ansible.com\/ansible\/2.9_ja\/user_guide\/windows_winrm.html<\/ul>\n<\/li>\n<\/ul>\n
                               <\/p>\n
                                \n
                              • \n
                                  https:\/\/docs.ansible.com\/ansible\/2.9_ja\/user_guide\/windows_usage.html<\/ul>\n<\/li>\n<\/ul>\n
                                   <\/p>\n
                                    \n
                                  • \n
                                      https:\/\/docs.microsoft.com\/ja-jp\/troubleshoot\/windows-client\/system-management-components\/errors-when-you-run-winrm-commands<\/ul>\n<\/li>\n<\/ul>\n
                                       <\/p>\n
                                        https:\/\/docs.microsoft.com\/ja-jp\/azure\/developer\/ansible\/<\/ul>\n
                                        \u6700\u540e<\/h2>\n
                                        \u4eca\u56de\u306f\u3001\u672c\u5f53\u306b\u4e45\u3057\u3076\u308a\u306e Ansible \u3068\u3044\u3046\u3053\u3068\u3082\u3042\u308a\u3001\u516c\u5f0f\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3084\u3001\u904e\u53bb\u306b\u66f8\u3044\u305f\u81ea\u5206\u306e\u8a18\u4e8b\u7b49\u3092\u53c2\u7167\u3057\u306a\u304c\u3089\u3068\u3001\u624b\u63a2\u308a\u3067\u306e\u691c\u8a3c\u3068\u306a\u308a\u307e\u3057\u305f\u3002\u3002\u3002<\/p>\n
                                        \u307e\u305f\u3001\u4ee5\u524d\u3088\u308a\u3082\u3001\u60c5\u5831\u304c\u5897\u3048\u305f\u3068\u306f\u3044\u3048\u3001\u672a\u3060\u306b Ansible * Windows \u306e\u4e8b\u4f8b\u306f\u3001\u3084\u306f\u308a\u5c11\u306a\u3044\u306a\u301c\u3068\u3044\u3046\u5370\u8c61\u3067\u3057\u305f\u3002<\/p>\n
                                        \u306a\u304a\u3001\u4eca\u56de\u521d\u3081\u3066\u3001Windows Server \u3078\u306e Certificate \u8a8d\u8a3c\u3092\u8a66\u3057\u3066\u307f\u3066
                                        \n\u4e8b\u524d\u6e96\u5099\u3068\u3057\u3066\u8a3c\u660e\u66f8\u30da\u30a2\u306e\u4f5c\u6210\u3068\u3001\u305d\u306e\u5f8c\u306e\u30ed\u30fc\u30ab\u30eb\u30e6\u30fc\u30b6\u30fc\u3068\u306e\u30da\u30a2\u30ea\u30f3\u30b0\u7b49\u3001\u6163\u308c\u306a\u3044\u3068\u5206\u304b\u308a\u3065\u3089\u3044\u90e8\u5206\u3082\u591a\u304f\uff08\u516c\u5f0f\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306e\u901a\u308a\u3067\u306f\u3042\u308a\u307e\u3059\u304c…\uff09\u3001\u6577\u5c45\u304c\u9ad8\u304f\u611f\u3058\u307e\u3057\u305f\u304c\u3001\u8a2d\u5b9a\u5f8c\u306f\u3001Linux\u3068\u540c\u69d8\u306b\u3001\u30a4\u30f3\u30d9\u30f3\u30c8\u30ea\u30d5\u30a1\u30a4\u30eb\u3078\u8a3c\u660e\u66f8\u306e\u914d\u7f6e\u5834\u6240\u306e\u307f\u306e\u8a18\u8f09\u3067\u826f\u3044\uff08\u30e6\u30fc\u30b6\u30fc\u540d\u3084\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u8a18\u8f09\u304c\u4e0d\u8981\uff09\u3068\u3044\u3046\u306e\u306f\u3001\u30b3\u30fc\u30c9\u7ba1\u7406\u7b49\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u89b3\u70b9\u304b\u3089\u3082\u826f\u3055\u305d\u3046\u3068\u611f\u3058\u307e\u3057\u305f\u3002<\/p>\n
                                        \u8bf7\u9075\u5faa Ansible \u5b98\u65b9\u6587\u6863\u4e2d\u6240\u8ff0\u7684\u8ba4\u8bc1\u9009\u9879\uff0c\u8bc1\u4e66\u8ba4\u8bc1\u4ec5\u9002\u7528\u4e8e\u672c\u5730\u7528\u6237\uff0c\u65e0\u6cd5\u7528\u4e8e\u57df\u7528\u6237\u3002<\/div>\n
                                          \u305d\u306e\u4ed6\u3001Azure Cloudshell \u4e0a\u3067 Ansible \u304c\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5229\u7528\u53ef\u80fd\u306a\u306e\u306f\u4fbf\u5229\u3067\u3057\u305f\u3002<\/ul>\n
                                          \u4ee5\u4e0a\u5c31\u662f\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
                                          \u9996\u5148 \u6700\u8fd1\u6709\u673a\u4f1a\u4f7f\u7528 Ansible \u5e76\u89e6\u6478 Windows Server\uff0c\u6240\u4ee5\u4e3a\u4e86\u5907\u5fd8\u8d77\u89c1\uff0c\u6211\u51b3\u5b9a\u5199\u4e00\u7bc7\u6587\u7ae0 […]<\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-42840","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u4f7f\u7528Ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eAzure\u4e0a\u7684Windows Server 2019 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eazure\u4e0a\u7684windows-server-2019\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528Ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eAzure\u4e0a\u7684Windows Server 2019\" \/>\n<meta property=\"og:description\" content=\"\u9996\u5148 \u6700\u8fd1\u6709\u673a\u4f1a\u4f7f\u7528 Ansible \u5e76\u89e6\u6478 Windows Server\uff0c\u6240\u4ee5\u4e3a\u4e86\u5907\u5fd8\u8d77\u89c1\uff0c\u6211\u51b3\u5b9a\u5199\u4e00\u7bc7\u6587\u7ae0 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eazure\u4e0a\u7684windows-server-2019\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-18T22:01:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-28T23:51:48+00:00\" \/>\n<meta name=\"author\" content=\"\u5b87, \u534e\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u5b87, \u534e\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/\",\"name\":\"\u4f7f\u7528Ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eAzure\u4e0a\u7684Windows Server 2019 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-01-18T22:01:58+00:00\",\"dateModified\":\"2024-04-28T23:51:48+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528Ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eAzure\u4e0a\u7684Windows Server 2019\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458\",\"name\":\"\u5b87, \u534e\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g\",\"caption\":\"\u5b87, \u534e\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yuhua\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528Ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eAzure\u4e0a\u7684Windows Server 2019 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eazure\u4e0a\u7684windows-server-2019\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528Ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eAzure\u4e0a\u7684Windows Server 2019","og_description":"\u9996\u5148 \u6700\u8fd1\u6709\u673a\u4f1a\u4f7f\u7528 Ansible \u5e76\u89e6\u6478 Windows Server\uff0c\u6240\u4ee5\u4e3a\u4e86\u5907\u5fd8\u8d77\u89c1\uff0c\u6211\u51b3\u5b9a\u5199\u4e00\u7bc7\u6587\u7ae0 […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eazure\u4e0a\u7684windows-server-2019\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-01-18T22:01:58+00:00","article_modified_time":"2024-04-28T23:51:48+00:00","author":"\u5b87, \u534e","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u5b87, \u534e","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"7 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/","name":"\u4f7f\u7528Ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eAzure\u4e0a\u7684Windows Server 2019 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-01-18T22:01:58+00:00","dateModified":"2024-04-28T23:51:48+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528Ansible\u901a\u8fc7\u8bc1\u4e66\u8ba4\u8bc1\u8fde\u63a5\u548c\u63a7\u5236\u4f4d\u4e8eAzure\u4e0a\u7684Windows Server 2019"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458","name":"\u5b87, \u534e","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g","caption":"\u5b87, \u534e"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yuhua\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8ansible%e9%80%9a%e8%bf%87%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81%e8%bf%9e%e6%8e%a5%e5%92%8c%e6%8e%a7%e5%88%b6%e4%bd%8d%e4%ba%8eazure%e4%b8%8a%e7%9a%84windows-server-2019%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/42840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=42840"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/42840\/revisions"}],"predecessor-version":[{"id":83990,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/42840\/revisions\/83990"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=42840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=42840"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=42840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}