#402 Bastillion suitable as an ansible jump server?

[Anonymous]

Originally created by: niccolox

hi

is Bastillion suitable as a bastion jump server to run Ansible?

i.e. Ansible controller (laptop) runs Ansible plays via SSH > Bastillion > private network of servers controlled by Ansible controller

or is SSH on Bastillion restricted to web shell only?

[Anonymous]

Originally posted by: nkadel

"Jump servers" for ansible are typically an SSH port forwarding for the SSH command line, without interactive graphical access. Bastillion provides a useful console-like access to a live SSH session, even with an X session enabled to provide UNIX based graphical access.

So "no", it's not really the right tool for ansible access. If you need that, look into the enforceable options of SSHD running on a distinct port, and of tuning the client and authorized_keys settings to support your needs.