ansible.builtin.sh shell – POSIX shell (/bin/sh)

admin_users

list / elements=string

list of users to be expected to have admin privileges. This is used by the controller to determine how to share temporary files between the remote user and the become user.

Default: ["root", "toor"]

Configuration:

• INI entry:

  [defaults]
  admin_users = root, toor
  

• Environment variable: ANSIBLE_ADMIN_USERS
• Variable: ansible_admin_users

async_dir

string

Directory in which ansible will keep async job information

Default: "~/.ansible_async"

Configuration:

• INI entry:

  [defaults]
  async_dir = ~/.ansible_async
  

• Environment variable: ANSIBLE_ASYNC_DIR
• Variable: ansible_async_dir

common_remote_group

string

added in ansible-base 2.10

Checked when Ansible needs to execute a module as a different user.

If setfacl and chown both fail and do not let the different user access the module’s files, they will be chgrp’d to this group.

In order for this to work, the remote_user and become_user must share a common group and this setting must be set to that group.

Configuration:

• INI entry:

  [defaults]
  common_remote_group = VALUE
  

• Environment variable: ANSIBLE_COMMON_REMOTE_GROUP
• Variable: ansible_common_remote_group

environment

list / elements=dictionary

List of dictionaries of environment variables and their values to use when executing commands.

Default: [{}]

remote_tmp

string

Temporary directory to use on targets when executing tasks.

Default: "~/.ansible/tmp"

Configuration:

• INI entry:

  [defaults]
  remote_tmp = ~/.ansible/tmp
  

• Environment variable: ANSIBLE_REMOTE_TEMP
• Environment variable: ANSIBLE_REMOTE_TMP
• Variable: ansible_remote_tmp

system_tmpdirs

list / elements=string

List of valid system temporary directories on the managed machine for Ansible to validate remote_tmp against, when specific permissions are needed. These must be world readable, writable, and executable. This list should only contain directories which the system administrator has pre-created with the proper ownership and permissions otherwise security issues can arise.

When remote_tmp is required to be a system temp dir and it does not match any in the list, the first one from the list will be used instead.

Default: ["/var/tmp", "/tmp"]

Configuration:

• INI entry:

  [defaults]
  system_tmpdirs = /var/tmp, /tmp
  

• Environment variable: ANSIBLE_SYSTEM_TMPDIRS
• Variable: ansible_system_tmpdirs

world_readable_temp

boolean

added in ansible-base 2.10

This makes the temporary files created on the machine world-readable and will issue a warning instead of failing the task.

It is useful when becoming an unprivileged user.

Choices:

• false ← (default)
• true

Configuration:

• INI entry:

  [defaults]
  allow_world_readable_tmpfiles = false
  

• Environment variable: ANSIBLE_SHELL_ALLOW_WORLD_READABLE_TEMP
• Variable: ansible_shell_allow_world_readable_temp