How can I change root password via ansible to ~30 hosts?

Question

I need to update more than 30 hosts the root password. I read that I can user user module for that... but I'm doing something wrong.

Can you drop some help here ?

Answer 1

Typo in above yaml file .

- name: Password rollover
  user:
      name: "{{ lookup('env', 'USER') }}"   ## Should not have "-"
      update_password: always
      password: "{{ lookup('env', 'PASSWORD') }}"

Answer 2

I came across a similar situation and what I did to solve it was a playbook like this:

Filename: password_rollover.yml

---

- name: Password rollover
  user:
    - name: "{{ lookup('env', 'USER') }}"
      update_password: always
      password: "{{ lookup('env', 'PASSWORD') }}"

You use it passing those env variables:

USER=root PASSWORD=newpass ansible-playbook --limit group password_rollover.yml -b