How does sudo work in ansible?

Question

linux

Good day, colleagues, please tell me how sudo works in ansible and what is its difference, if I use sudo directly in the console, I
execute in the console
[[email protected] opt]$ sudo mkdir /opt/test
It runs successfully, but when using the command directly with ansible:

[[email protected] opt]$ ansible servers -m file -a "dest=/opt/test  mode=755" -k -u user -b

An error occurs

"module_stdout": "Sorry, user user is not allowed to execute '/bin/sh -c echo BECOME-SUCCESS-qvlcsrrsgixvikeamiollrbbnyxljoxl

I do have limited sudo to /bin/sh and /bin/bash commands, the question is,
what is the difference between my local sudo and ansible?
sudo rights

sudo -l
    (ALL) NOPASSWD: ALL, !/bin/sh, !/bin/tcsh, !/bin/csh, !/bin/zsh, !/bin/ksh, !/bin/bash, !/usr/bin/sudo, !/bin/su, !/usr/bin/mc
    (root) NOPASSWD: ALL
    (root) NOPASSWD: ALL, !/bin/sh, !/bin/tcsh, !/bin/csh, !/bin/zsh, !/bin/ksh, !/bin/bash, !/usr/bin/sudo, !/bin/su, !/usr/bin/mc, !/usr/bin/chattr, !/usr/bin/screen, !/usr/bin/tmux

Answer 1

Before running your command, ansible checks that sudo actually works. And this test fails. Matter does not reach mkdir at all.

Answer 2

It is better to throw ansible ssh key from under root.
You go into ubuntu, do su - or sudo -s become root and shove the ansible key. There will be less headaches.

Answer 3

You can disable sudo in ansible and run as that user.
Or enable sudo, but give this user sudo rights.

Answer 4

Such an error can occur if the user does not have all rights via sudo , but only to run certain commands, ansible creates a temporary file with its commands in / tmp and runs it, and not directly / bin / sh