ssh-keygen -t rsa -b 2048 -N '' -f ~/.ssh/id_rsa
ssh-copy-id -i ~/.ssh/id_rsa.pub <user>@<ip-host>

vi /etc/ansible/ansible.cfg 
host_key_checking = False

ansible <host-pattern> -m authorized_key -a "user=root key='{{ lookup('file','/root/.ssh/id_rsa.pub')}}' path='/root/.ssh/authorized_keys' manage_dir=no exclusive=no state=<present,absent>" --ask-pass -c paramiko

ansible 127.0.0.1 -m debug -a "msg='{{ a }}'" --extra-vars "a=1 b=2" # KV
ansible 127.0.0.1 -m debug -a "msg='{{ a }}'" --extra-vars '{a: 1}' # JSON
ansible -i hosts clickhouse -m debug -a "msg='{{ fs_db_cluster }}'"
ansible -i <inventory> --connection=<local,ssh> <host-pattern> -m ping
ansible <host-pattern> -m ping
ansible -i hosts all -m command -a "xxx"
ansible -i hosts all -m shell -a "xxx.sh >> xxx.log" chdir=<work_dir>
ansible <ip> -m raw -a 'hostname' # 不需要python环境
ansible <host-pattern> -m copy -a 'src=<file_path> dest=<file_path> owner=<user> group=<group> backup=yes'
ansible <host-pattern> -m fetch -a "src=<file_path> dest=<file_path> flat=yes" # 参数flat根据/后缀确定目录
ansible <host-pattern> -m file -a "path=<file_path> owner=<user> group=<group> state=<directory,link> mode=0644 recurse=yes"
ansible <host-pattern> -m service -a "name=<name> enabled=<yes,no> state=<stared,stoped,restarted,reloaded>"

ansible-playbook --syntax-check xxx.yaml # 检测语法
ansible-playbook -C xxx.yaml # 测试运行

ansible-doc blockinfile

ansible-playbook --list-tags xxx.yaml

ansible-playbook --tags tagged xxx.yaml

ansible-playbook --skip-tags tagged xxx.yaml

ansible-playbook --tags untagged xxx.yaml

ansible-playbook --skip-tags untagged xxx.yaml