Transparent passphrase key authentication

Question

I have a server on which various downloadable books in host groups will be launched in my infrastructure. I saw various questions about this, and ultimately it was kind of use ssh-agent and ssh-addto initially add a key and enter a passphrase. But there are conflicting discussions that say that you cannot do anything with user input when setting up the server using ansible (i.e., repeat input when prompted).

So, if I automate an indispensable server and you need to add keys, for me there is no way to authenticate using a passphrase for any subsequent ansible-playbookruns from this server to the appropriate machines.

Do I need to use a secure key with a passphrase with an accessible playbook without human intervention?

Answer 1

No, it defeats the goal of using a password-protected private key, bypassing the password entry step. If you use any other method to authenticate a user with whom you are sure, then you can use a private key that is not password protected, but then you will need to have very good processes for managing your private key.

ssh-agent , , , , , , .