OpenCloudOS Server 7通过pip3安装ansible和pywinrm访问Windows机器

yum update -y
yum install libffi-devel -y 
yum -y install zlib-devel bzip2-devel openssl-devel ncurses-devel sqlite-devel readline-devel tk-devel gcc make

python3 -m pip install --upgrade pip （这一句有点慢耐心等待）
pip3 config set global.index-url http://mirrors.tencentyun.com/pypi/simple
pip3 config set global.trusted-host mirrors.tencentyun.com

wget http://windows-1251783334.cos.ap-shanghai.myqcloud.com/openssl-1.1.1k.tar.gz -O openssl-1.1.1k.tar.gz
wget http://mirrors.aliyun.com/pub/OpenBSD/OpenSSH/portable/openssh-9.7p1.tar.gz -O openssh-9.7p1.tar.gz

echo "PermitRootLogin yes" >> /etc/ssh/sshd_config 

wget http://windows-1251783334.cos.ap-shanghai.myqcloud.com/Python-3.8.19.tgz -O Python-3.8.19.tgz
tar zxvf Python-3.8.19.tgz
cd Python-3.8.19

wget http://windows-1251783334.cos.ap-shanghai.myqcloud.com/Python-3.12.4.tgz -O Python-3.12.4.tgz
tar zxvf Python-3.12.4.tgz
cd Python-3.12.4

./configure --with-openssl=/opt/openssl -with-openssl-rpath=auto
make -j && make altinstall

fallocate -l 2048M /swapfile
chmod 600 /swapfile
mkswap /swapfile
swapon /swapfile
echo "/swapfile none swap sw 0 0" >> /etc/fstab
mount -a
free -m

rm -rf /usr/bin/python3
rm -rf /usr/bin/pip3
ln -s /usr/local/bin/python3.8 /usr/bin/python3
ln -s /usr/local/bin/pip3.8 /usr/bin/pip3
python3 -m pip install --upgrade pip

rm -rf /usr/bin/python3
rm -rf /usr/bin/pip3
ln -s /usr/local/bin/python3.12 /usr/bin/python3
ln -s /usr/local/bin/pip3.12 /usr/bin/pip3
python3 -m pip install --upgrade pip

pip3 install --root-user-action=ignore --ignore-installed pywinrm[credssp]
pip3 install --root-user-action=ignore --ignore-installed ansible
上面2句可以合并成一句：
pip3 install --root-user-action=ignore --ignore-installed pywinrm[credssp] ansible

pip3 list |grep ansible
pip3 list |grep pywinrm
pip3 list |grep credssp

ansible            6.7.0
ansible-core       2.13.13
pywinrm            0.4.3
requests-credssp   2.0.0

ansible            10.1.0
ansible-core       2.17.1
pywinrm            0.4.3
requests-credssp   2.0.0

[windows]
119.45.62.115
[windows:vars]
ansible_ssh_user="Administrator"
ansible_ssh_pass="密码"
ansible_connection="winrm"
ansible_ssh_port=5985

[windows]
119.45.62.115
[windows:vars]
ansible_user="Administrator"
ansible_password="密码"
ansible_connection="winrm"
ansible_port=5985

ansible 119.45.62.115 -m win_ping -e 'ansible_python_interpreter=/usr/bin/python3'

119.45.62.115 | UNREACHABLE! => {
    "changed": false,
    "msg": "basic: auth method basic requires a username",
    "unreachable": true
}

119.45.62.115 | UNREACHABLE! => {
    "changed": false,
    "msg": "basic: auth method basic requires a password",
    "unreachable": true
}

119.45.62.115 | UNREACHABLE! => {
    "changed": false,
    "msg": "basic: HTTPSConnectionPool(host='119.45.62.115', port=5986): Max retries exceeded with url: /wsman (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7f96c15c9970>: Failed to establish a new connection: [Errno 111] Connection refused'))",
    "unreachable": true
}

grep -v -E '(^#|^$)' /etc/ansible/hosts

/etc/ansible/hosts内容如下即可（不指定5985端口的话，不能注释最后2句）
[windows]
119.45.62.115
[windows:vars]
ansible_user="Administrator"
ansible_password="密码"
ansible_connection="winrm"
#ansible_port=5985
ansible_winrm_transport=basic
ansible_winrm_server_cert_validation=ignore


如果注释最后2句的话，则必须指定5985端口
[windows]
119.45.62.115
[windows:vars]
ansible_user="Administrator"
ansible_password="密码"
ansible_connection="winrm"
ansible_port=5985
#ansible_winrm_transport=basic
#ansible_winrm_server_cert_validation=ignore

openssl s_client -connect 119.45.62.115:5985
openssl s_client -connect 119.45.62.115:5986

net user Administrator "密码"
wmic useraccount where "name='Administrator'" set PasswordExpires=FALSE

Set-ExecutionPolicy Unrestricted -Scope LocalMachine -Force -ErrorAction Ignore

# Don't set this before Set-ExecutionPolicy as it throws an error
$ErrorActionPreference = "stop"

# Remove HTTP listener
#Remove-Item -Path WSMan:\Localhost\listener\listener* -Recurse

# Create a self-signed certificate to let ssl work
$Cert = New-SelfSignedCertificate -CertstoreLocation Cert:\LocalMachine\My -DnsName "packer"
New-Item -Path WSMan:\LocalHost\Listener -Transport HTTPS -Address * -CertificateThumbPrint $Cert.Thumbprint -Force

# WinRM
write-output "Setting up WinRM"
write-host "(host) setting up WinRM"

# Configure WinRM to allow unencrypted communication, and provide the
# self-signed cert to the WinRM listener.
cmd.exe /c winrm quickconfig -q
cmd.exe /c winrm set "winrm/config/service" '@{AllowUnencrypted="true"}'
cmd.exe /c winrm set "winrm/config/client" '@{AllowUnencrypted="true"}'
cmd.exe /c winrm set "winrm/config/service/auth" '@{Basic="true"}'
cmd.exe /c winrm set "winrm/config/client/auth" '@{Basic="true"}'
cmd.exe /c winrm set "winrm/config/service/auth" '@{CredSSP="true"}'
cmd.exe /c winrm set "winrm/config/listener?Address=*+Transport=HTTPS" "@{Port=`"5986`";Hostname=`"packer`";CertificateThumbprint=`"$($Cert.Thumbprint)`"}"

# Make sure appropriate firewall port openings exist
cmd.exe /c netsh advfirewall firewall set rule group="remote administration" new enable=yes
cmd.exe /c netsh firewall add portopening TCP 5986 "Port 5986"
cmd.exe /c netsh firewall add portopening TCP 5985 "Port 5985"

# Restart WinRM, and set it so that it auto-launches on startup.
cmd.exe /c net stop winrm
cmd.exe /c sc config winrm start= auto
cmd.exe /c net start winrm

#执行完这段Powershell后要重启机器
#执行完这段Powershell后要重启机器
#执行完这段Powershell后要重启机器