Role : sshuttle

Installs sshuttle as a system service

Requirements

SSH connectivity to a remote host where tunnel will e established Linux Host

Role Variables

• sshuttle_user: The user under which the service will run
• sshuttle_group: The group under which the service will run
• sshuttle_package: name of the sshuttle package to install
• sshuttle_hosts: a dictionary od remote servers and their resolved subnets. This will be converted to json for the service configuration file

  sshuttle_hosts:
    "{{ remote_hostname }}":
      - 10.0.0.0/24
      - 172.16.0.0/24
      - 192.168.0.0.0/24
  

• sshuttle_options: Options from manpage to describe the sshuttle connections in shuttle.py.
• sshuttle_args: Options from manpage to describe additional arguments in shuttle.py.
• ssh_cmd_args: Options from manpage to describe the ssh command in shuttle.py.
• remote_auth: true/false, if true role will attempt to authorize user to remote tunnel host. Default is false.
• remote_ip: IP address of the remote host through which sshuttle will connect.
• remote_user: Username that can be used to authorize with remote_host.
• remote_hostname: name for the remote host entry in your .ssh/config.

Example Playbooks

Run without creating ssh config file:

- name: Converge
  hosts: all
  vars:
    remote_hostname: "remote-host"
    remote_auth: false
  tasks:
    - name: "Include ansible-role-sshuttle"
      include_role:
        name: "ansible-role-sshuttle"

Run and create remote auth setup(creating .ssh/config and adding authorized key to remote host). Ansible will perform add_host as group remote:

- name: Converge
  hosts: all
  vars:
    remote_ip: "10.0.0.1"
    remote_user: "user that can auth with remote system"
    remote_password: "{{ remote_auth_password }}"
    remote_hostname: "remote-host"
    remote_auth: true
  tasks:
    - name: "Include ansible-role-sshuttle"
      include_role:
        name: "ansible-role-sshuttle"

- name: Remote_auth
  hosts: remote
  vars:
    remote_ip: "10.0.0.1"
    remote_user: "user that can auth with remote system"
    remote_password: "{{ remote_auth_password }}"
    remote_hostname: "remote-host"
    remote_auth: true
  tasks:
    - name: "Include ansible-role-sshuttle"
      include_role:
        name: "ansible-role-sshuttle"
        tasks_from: remote_auth

License

MIT

Author Information

Jared Zieche