Faisal is an experienced IT professional with around 7 years in infrastructure and 3 years in DevOps, specializing in Azure, Azure DevOps, Terraform, Ansible, Kubernetes. Certified as an Azure Solutions Architect, focusing on cloud infrastructure and automation, ensuring efficient and scalable solutions. 

All posts by Faisal Hashem - DevOps Expert

Faisal Hashem

Author title

Title category

Get all the latest content on Infrastructure as Code, DevOps, Spacelift features & news directly to your inbox!

Level up your IaC knowledge. Stay up to date with educational devops guides & news in infrastructure as code, cloud & more!

Managing Infrastructure at Scale | Spacelift Blog

Product

Why Spacelift

How it Works

Enterprise Deployment Options

Spacelift platform

Terraform

Ansible

OpenTofu

See all integrations

Integrations

vs Terraform Cloud

vs Terraform Enterprise

vs Atlantis

vs Generic CI/CD

Compare

Register now

622-backstage-integration

backstage integration

Introducing Backstage Integration

Solutions

Scale your infrastructure safely and efficiently with an end-to-end workflow

productivity

Productivity

productivity-2

IaC at Scale

Standardize and control infrastructure provisioning and configuration

cicd

CICD

cicd-2

Infrastructure Governance

Implement and automate secure, collaborative workflows

team

Team

team-2

Collaboration

Make it easy for developers to provision and configure with a single workflow

speed-2

Speed

speed-3

Developer Velocity

By Initiative

CI/CD for Infrastructure

Drift Detection

Achieve Terraform at Scale

OpenTofu Migration

By Use Case

Request a meeting

Enjoy an action-packed day at AWS Summit London 2024, where the latest in cloud innovation comes to life.

audit-ready-infra-mission-guide

audit ready infra mission guide

The Guide to Audit-Ready Infrastructure

Docs

Pricing

Resources

Learn more about Spacelift and infrastructure best practices

blog

Blog

blog-2

partners

Partners

partners-2

events

Events

events-2

eBooks, webinars, cheat sheets and tools to get you started

cheatsheets

Cheatsheets

cheatsheets-3

Resource Library

users

Users

users-2

Case Studies

Essential content and resources to help you achieve IaC excellence

chat-3

media guide

chat-hover

media guide hover

Mission Guides

539-infra-automation-report-1

539.infra automation report

The Infrastructure Automation Report, 2025

Contact Us

About Us

Careers

Accessibility

About

cheatsheets-2

Test

See more

Test webinar name

How it works

Open Tofu

Kubernetes

388-terraform-yamlencode

terraform yamlencode

Using Terraform YAML Functions: Yamldecode & Yamlencode

applepodcasts

spotify

missionctrl

Welcome to missionCTRL, a show dedicated to exploring the frontiers of modern DevOps. Listen (or watch) as we sit down with the practitioners who are pushing the boundaries of development

Want to level up your Ansible knowledge? Explore our tutorials and step-by-step guides written by Ansible experts. Learn Ansible best practices and solutions to the most difficult problems.

Ansible Guides and Tutorials | Spacelift Blog

Ansible is an open-source automation tool that is used throughout DevOps practices to manage IT infrastructure. The platform is primarily known to simplify any repetitive tasks, configuration management, application deployment, orchestration, cloud provisioning, security and compliance tasks. Ansible is a configuration management tool and not a IaC (Infrastructure as Code) tool. The automation tasks are written in Ansible’s declarative language (YAML) throughout its playbooks. 
One of the key features of Ansible is the use of its various modules. <a href="https://spacelift.io/blog/ansible-modules" target="_blank" rel="noopener">Ansible modules</a> are units of code that can execute system commands or control system resources. They can be executed directly on remote hosts or through playbooks. Users can also write their own custom modules. 
 In this article, we will be focusing on the copy module.
We will cover:
<ol>
<li style="font-weight: 400;" aria-level="1"><a href="https://spacelift.io/blog/ansible-copy#what-is-the-ansible-copy-module">What is the Ansible copy module?</a></li>
<li style="font-weight: 400;" aria-level="1"><a href="https://spacelift.io/blog/ansible-copy#ansible-copy-module-examples">Ansible copy module examples</a></li>
<li style="font-weight: 400;" aria-level="1"><a href="https://spacelift.io/blog/ansible-copy#ansible-copy-module-options">Ansible copy module options</a></li>
<li style="font-weight: 400;" aria-level="1"><a href="https://spacelift.io/blog/ansible-copy#ansible-copy-module-vs-templates">Ansible copy module vs templates</a></li>
</ol>

The Ansible Copy module allows you to copy files and recursive directories from a local machine (Ansible control node) to a remote machine. It&#8217;s mainly used to move files from one location to another, but it can also handle more complex situations like making sure files have not changed before moving, creating backups, and checking that files are correct after copying.
During the copying process, the Ansible copy module allows you to:
<ul>
<li>Back up the original file before it is copied over</li>
<li>Check if the file/directory already exists to prevent replacement (idempotency)</li>
<li>Assign the file/directory access to a specific user/group with restricted or open permissions</li>
<li>Move files within a remote machine</li>
<li>Perform in-line content changes on existing files in the remote host</li>
<li>Apply conditional logic</li>
</ul>
<h3>What is the difference between synchronize and copy in Ansible?</h3>
Other Ansible modules, such as the synchronize module, also perform file/directory transfers. The synchronize module uses the rsync protocol to transfer and sync multiple files or directories between the controller and remote machines. It is better for moving large sets of files and directories, while the copy module is more suitable for smaller sets of data.
<h3>What is the difference between copy and fetch module in Ansible?</h3>
Ansible fetch is another module that is similar to the copy module. This module is used to copy files from remote machines to your Ansible control node (remote to local). For example, if you have a config file on a remote server and you want to grab that file and move it over to your Ansible control node, you would use the fetch module. Refer to the <a href="https://docs.ansible.com/ansible/latest/collections/ansible/builtin/copy_module.html" target="_blank" rel="nofollow noopener">Ansible documentation</a> for more details.

Let&#8217;s look at some use-case examples.
<h3>Example 1: Copy files and directories from local to remote</h3>
The simplest use-case of the copy module is to perform a copy over from the Ansible control node to the remote machine. You will need to state the source location as a file location on the ansible control node, and the destination will be the specific location with the file name on your remote machine. 
By default, the copied over files will receive the permissions of <code>644 (-rw-r — r — )</code>, and the copied over directories will receive the permissions of <code>755 (drwxr-xr-x)</code>. This is based on your unmask value on your Linux system, which by default is <code>022</code>. If it was modified at some point, the default values for your files and directories might be different. 
Here is a simple example of using the Ansible copy module for copying over a text file to the remote host:

The first example below will copy over a directory along with all of its files and sub-directories to a non-existing directory on the remote machine. 
The second example will copy over just the contents in the source directory to an existing directory in the remote location. 
Note <code>become: true</code>, this is due to copying to a location that requires elevated sudo rights <code>(/opt/)</code>. Copying over to <code>/tmp</code> would not require sudo rights (<code>become: true</code>).

<h3>Example 2: Copy files and directories from local to remote with permissions</h3>
It is highly recommended and one of <a href="https://spacelift.io/blog/ansible-best-practices" target="_blank" rel="noopener">Ansible’s best practices</a> to add Permissions using the copy function. This will ensure the same version of the file or directory with the exact same permissions is assigned across all your remote hosts. It is important to maintain uniformity in scripts, configuration files, and binary files across different environments. 
However, it’s just as important to make sure you don’t assign the wrong permissions to sensitive files as it can expose them to unauthorized access. 
For the most part, you will always use this format of the Ansible copy module:

<h3>Example 3: Move files within the remote machine</h3>
The Ansible copy module also allows you to move a file within a remote location from one directory to another. You just need to apply the parameter <code>remote_src: yes</code>. 
It’s important to note that this will only work for files and not directories. This step will also not work if <code>become</code> is not set to true, and it requires elevated permissions since you are moving over files from a source location that is not your Ansible control node.

<h3>Example 4: Copy inline content into a specific file</h3>
In certain situations, you don’t want to manage the files in your Ansible control node and would rather paste that specific content over to the file in the remote machine. Ansible’s copy inline content feature does just that.
Using the <code>content</code> parameter of the copy module, you can define the contents of a file inline within an <a href="https://spacelift.io/blog/ansible-playbooks" target="_blank" rel="noopener">Ansible playbook</a>. This can be very useful for creating or modifying files directly on the remote systems without the need to manage a separate file on the control node. This method also allows you to insert variables directly into the content you are copying over to the file in the remote machine. 
In the following example, I am using the copy content parameter to add <code>tomcat-users</code> to the <code>tomcat-users.xml</code> file in my remote machine using the specified variables. 
Note: In a real-world situation, you would not expose the secret in plain text on the file but would preferably use a secrets manager/vault. This is just for demonstration purposes.

<h3>Example 5: Copy with conditional statements</h3>
Like anything in code, logic and conditions are the key to a successful deployment. We will always encounter situations where we need the playbook run to fit our needs. We can accomplish that through Ansible’s conditional statements, which allow us to control whether specific tasks should get executed based on the conditions. 
For example, you might be concerned about specific files being deployed to the wrong environment. In that case, you can place conditions for specific environments (Dev, QA, UAT, Prod) for that copy job to be triggered. This is one of many methods to deliver files to specific environments.
The same concept applies to different OS versions, security conditions to be met for sensitive files, package dependencies, etc. Conditional statements are a powerful way to ensure that file transfers are efficient, secure, and relevant. You can maintain finer control over your infrastructure, reduce unnecessary data transfers, and ensure each machine receives exactly what it needs based on environment or state. This brings more flexibility to handle complex environments with diverse requirements. 
Below is an example of conditional copying using Ansible.

<h3>Example 6: Copy files with sudo permissions</h3>
I briefly went over this during the copying files over with the permissions section, but here, I will dive a little deeper and give more examples of when we should be using this. 
For the most part, all Linux systems are tightly locked down. To make any changes to the root directory, setting permissions on files/directories, modifying system files, placing scripts under root, etc., requires you to have elevated permissions. If you don&#8217;t, I highly recommend re-evaluating your Linux environment&#8217;s security structure. 
There are two ways to go about using sudo permissions in your playbooks.
<ul>
<li style="font-weight: 400;" aria-level="1">Assign <code>become:true</code> on the entire playbook &#8211; it is not recommended since you don&#8217;t always need elevated rights to perform certain Ansible tasks. </li>
<li style="font-weight: 400;" aria-level="1">Place the <code>become: true</code> on the specific task that requires elevated rights. This keeps things more secure and utilizes sudo rights when needed instead of blindly giving the entire playbook sudo rights. </li>
</ul>
The following example covers using sudo permissions on copying over a config file to the root directory:

<ul>
<li><a href="https://spacelift.io/blog/spacelift-ansible-integration-beta" target="_blank" rel="noopener">How to better manage Ansible and overcome challenges</a></li>
<li><a href="https://spacelift.io/blog/using-terraform-and-ansible-together" target="_blank" rel="noopener">Using Terraform and Ansible together</a></li>
<li><a href="https://spacelift.io/blog/ansible-best-practices" target="_blank" rel="noopener"><span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;44 Ansible Best Practices to Follow [Tips &amp; Tricks]&quot;}" data-sheets-userformat="{&quot;2&quot;:513,&quot;3&quot;:{&quot;1&quot;:0},&quot;12&quot;:0}">44 Ansible best practices to follow</a></li>
</ul>

The Ansible Copy module has a few other parameters that should be used throughout your playbook to help you standardize your deployment and prevent any errors. 
<h3>1) Checksum</h3>
With Checksum, you can ensure idempotency to prevent redundant copy tasks from kicking off. This is useful if you want to prevent unnecessary network traffic and save more time during playbook run. You would specify the source path of the file on the Ansible control node, and Ansible will verify the local files checksum against the Checksum of the file at the destination path in the remote machine. Therefore, if the checksums match, Ansible will not copy the file. 
<h3>2) Backup</h3>
Backup is another parameter that is helpful if you want to prevent overwriting the existing file on the remote machine and capturing a backup of the file before the copy task is run. This is essential for preserving the previous state of a file and allowing an easy rollback if new configs cause any errors. 
<h3>3) Validate</h3>
The Validate parameter runs after the copy task is completed. This checks the integrity of the file you just copied over and makes sure it&#8217;s functional.
Below is an example of using all these options.

The Ansible Copy module provides many functionalities but does have some limitations. When we are running a copy task, it&#8217;s usually to copy a static file from one location to another. 
What do we do when we want to customize the file by injecting variables into it and copying it over? We can use the in-line content parameter to perform the variable injects. However, that also comes with limitations since the Ansible Copy content parameter is recommended for small amounts of data. Adding large amounts of text will make our playbooks overcrowded. 
This is when we can utilize the Ansible Template module, designed for transferring files that need to be dynamically modified or populated with variables before being copied over on the remote machine. 
The <a href="https://spacelift.io/blog/ansible-template" target="_blank" rel="noopener">Ansible Template</a> module uses Jinja2 templating language. You can copy your script or configuration file over to the .j2 template, and for variable substitution, replace all the areas of the template that need to be dynamic with variables. 
Now, you can pass in variables to any script or configuration file you want to copy to the remote machine. This is very useful when you have environment variables you want to pass into your script. 
Jinja templating can also be used for other scenarios outside of variable substitution, such as complex logic, loops, filters, and conditional statements. 
In the following example, I will go over a small Python script that needs to be environment-specific. I saved the script as a Jinja2 template and copied it over to the remote machine with the necessary variables. For more details, you can refer to the<a href="https://docs.ansible.com/ansible/latest/collections/ansible/builtin/template_module.html" target="_blank" rel="nofollow noopener"> Ansible documentation</a>.
Python script (this is saved as config.properties.py.j2 (jinja2 template)):

Ansible template module:

<a href="https://spacelift.io/" target="_blank" rel="noopener">Spacelift</a>’s vibrant ecosystem and excellent GitOps flow can greatly assist you in managing and orchestrating Ansible. By introducing Spacelift on top of Ansible, you can then easily create custom workflows based on pull requests and apply any necessary compliance checks for your organization.
Another great advantage of using Spacelift is that you can manage different infrastructure tools like Ansible, Terraform, Pulumi, AWS CloudFormation, and even Kubernetes from the same place and combine their <a href="https://docs.spacelift.io/concepts/stack/" target="_blank" rel="noopener">Stacks</a> with building workflows across tools.
Our latest Ansible enhancements solve three of the biggest challenges engineers face when they are using Ansible:
<ul>
<li aria-level="1">Having a centralized place in which you can run your playbooks</li>
<li aria-level="1">Combining IaC with configuration management to create a single workflow</li>
<li aria-level="1">Getting insights into what ran and where</li>
</ul>
Provisioning, configuring, governing, and even orchestrating your containers can be performed with a single workflow, separating the elements into smaller chunks to identify issues more easily.
Would you like to see this in action – or just want a tl;dr? Check out this video I put together showing you Spacelift’s new Ansible functionality:

yt-video-player-ansible-v2

If you want to learn more about using Spacelift with Ansible, check our <a href="https://docs.spacelift.io/vendors/ansible/" target="_blank" rel="noopener">documentation</a>, read our <a href="https://spacelift.io/blog/introducing-spacelifts-latest-ansible-functionality" target="_blank" rel="noopener">Ansible guide</a>, or <a href="https://spacelift.io/schedule-demo" target="_blank" rel="noopener">book a demo with one of our engineers</a>.

Ansible’s copy module is both flexible and powerful, making it a key tool in IT automation. It’s great for simple tasks like moving files from one location to another, but it can also handle more complex needs like making sure files have not changed before moving them using checksum, creating backups, and checking that files are correct and safe. This module is useful for different situations, whether it’s just copying over files as they are or ensuring that everything is secure and in the right place.

Managing large-scale playbook execution is hard. Spacelift enables you to automate Ansible playbook execution with visibility and control over resources, and seamlessly link provisioning and configuration workflows.

Ansible Vault: How to Securely Encrypt Sensitive Data

Ansible Delegate_to: Run Tasks on Delegated Host

Ansible Replace Module: How to Replace Strings & Lines

Paweł Piwosz

The copy module in Ansible and its use cases explained. See examples with files and directories on local and remote. Copy vs fetch vs sync.

Faisal Hashem

How to Use Ansible Copy Module [Examples]

Get the newsletter

No recent posts