Ansible双反斜杠转义问题：Azure文件共享映射失败排查

使用ansible.windows.win_powershell模块自动化映射Azure网络文件共享到虚拟机时，执行Playbook任务出现New-PSDrive报错：The network resource type is not correct，且DisplayRoot显示为\\\\storageaccount.file.core.windows.net\\fs。直接在虚拟机上手动执行相同脚本可正常运行，推测是-Root参数的双反斜杠转义问题，但尝试多种写法均无效。

任务代码 #

- name: "Map network file share"
  ansible.windows.win_powershell:
    script: |
      $connectTestResult = Test-NetConnection -ComputerName host.file.core.windows.net -Port 445
      if ($connectTestResult.TcpTestSucceeded) {
          # Save the password so the drive will persist on reboot
          cmd.exe /C "cmdkey /add:`"<placeholder>`" /user:`"localhost\host`" /pass:`"`""
          # Mount the drive
          New-PSDrive -Name Z -PSProvider FileSystem -Root "\\storageaccount.file.core.windows.net\fs" -Persist
      }
      else {
          Write-Error -Message "Unable to reach the Azure storage account via port 445. Check to make sure your organization or ISP is not blocking port 445, or use Azure P2S VPN, Azure S2S VPN, or Express Route to tunnel SMB traffic over a different port."
      }

已尝试的转义写法 #

"\\storageaccount.file.core.windows.net\fs"
'\\storageaccount.file.core.windows.net\fs'
`"\\storageaccount.file.core.windows.net\fs`"
\"\\storageaccount.file.core.windows.net\fs'\"

解决方法 #

问题根源在于Ansible的YAML解析和PowerShell的字符串转义双重处理导致路径异常，可通过以下两种方式解决：

方法1：用单引号包裹PowerShell路径 #

在PowerShell脚本中使用单引号定义-Root路径，避免YAML与PowerShell的双重转义干扰：

- name: "Map network file share"
  ansible.windows.win_powershell:
    script: |
      $connectTestResult = Test-NetConnection -ComputerName host.file.core.windows.net -Port 445
      if ($connectTestResult.TcpTestSucceeded) {
          cmd.exe /C "cmdkey /add:`"<placeholder>`" /user:`"localhost\host`" /pass:`"`""
          # 单引号包裹路径，跳过PowerShell转义处理
          New-PSDrive -Name Z -PSProvider FileSystem -Root '\\storageaccount.file.core.windows.net\fs' -Persist
      }
      else {
          Write-Error -Message "Unable to reach the Azure storage account via port 445. Check to make sure your organization or ISP is not blocking port 445, or use Azure P2S VPN, Azure S2S VPN, or Express Route to tunnel SMB traffic over a different port."
      }

方法2：YAML中使用四重反斜杠 #

YAML会先解析一次反斜杠，PowerShell再解析一次，因此需要用四重反斜杠表示最终的双反斜杠路径：

# 修改New-PSDrive行的Root参数
New-PSDrive -Name Z -PSProvider FileSystem -Root "\\\\storageaccount.file.core.windows.net\\fs" -Persist

额外注意事项 #

• 确保cmdkey命令中的<placeholder>替换为实际的存储账户FQDN（如storageaccount.file.core.windows.net）
• 验证存储账户的访问密钥或身份配置正确，排除权限问题导致的映射失败

内容的提问来源于stack exchange，提问作者Christian Townsend