Run Shell Commands with command & shell

Because command runs without a shell, it ignores pipes, redirects and variables like $HOME. That keeps it predictable and safe.

The shell module runs your command through a real shell on the host, so pipes, redirects and variables all work.

When your command uses a pipe or redirect, reach for shell. The command module would just treat | as a plain argument.

Only the shell module expands variables. Use it when your command relies on something like $HOME or $PATH.

Reach for command by default and use shell only when you truly need shell features. Less shell means fewer surprises.

Both modules accept chdir to change into a directory before running, which is cleaner than cd inside the command.

The creates option skips the command if a given file already exists, a simple way to avoid repeating work.

Both modules report changed on every run, since Ansible cannot know what your raw command did. Prefer real modules when one exists.

Treat shell and command as escape hatches. If a dedicated module like service or package fits, use it instead for safer results.

Use command for plain commands and shell when you need pipes or variables. Remember, both always report changed. 🖥️