fixed become:s
This commit is contained in:
+18
-14
@@ -27,13 +27,13 @@
|
|||||||
tasks:
|
tasks:
|
||||||
|
|
||||||
- name: Update repositories
|
- name: Update repositories
|
||||||
|
become: true
|
||||||
ansible.builtin.apt:
|
ansible.builtin.apt:
|
||||||
become: yes
|
|
||||||
update_cache: yes
|
update_cache: yes
|
||||||
|
|
||||||
- name: Install bootstrap packages
|
- name: Install bootstrap packages
|
||||||
|
become: true
|
||||||
ansible.builtin.apt:
|
ansible.builtin.apt:
|
||||||
become: yes
|
|
||||||
state: latest
|
state: latest
|
||||||
pkg:
|
pkg:
|
||||||
- bash
|
- bash
|
||||||
@@ -44,24 +44,24 @@
|
|||||||
- python3-virtualenv
|
- python3-virtualenv
|
||||||
|
|
||||||
- name: Create system group hpf-sudo for normal sudo users
|
- name: Create system group hpf-sudo for normal sudo users
|
||||||
|
become: true
|
||||||
ansible.builtin.group:
|
ansible.builtin.group:
|
||||||
become: yes
|
|
||||||
name: hpf-sudo
|
name: hpf-sudo
|
||||||
state: present
|
state: present
|
||||||
system: true
|
system: true
|
||||||
gid: 700
|
gid: 700
|
||||||
|
|
||||||
- name: Create system group hpf-sudo-np for special sudo users that don't require a password
|
- name: Create system group hpf-sudo-np for special sudo users that don't require a password
|
||||||
|
become: true
|
||||||
ansible.builtin.group:
|
ansible.builtin.group:
|
||||||
become: yes
|
|
||||||
name: hpf-sudo-np
|
name: hpf-sudo-np
|
||||||
state: present
|
state: present
|
||||||
system: true
|
system: true
|
||||||
gid: 701
|
gid: 701
|
||||||
|
|
||||||
- name: Make sure /etc/sudoers.d exists
|
- name: Make sure /etc/sudoers.d exists
|
||||||
|
become: true
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
become: yes
|
|
||||||
path: /etc/sudoers.d
|
path: /etc/sudoers.d
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
@@ -69,8 +69,8 @@
|
|||||||
mode: u=rwx,go=
|
mode: u=rwx,go=
|
||||||
|
|
||||||
- name: Get /etc/sudoers.d/hpf
|
- name: Get /etc/sudoers.d/hpf
|
||||||
|
become: true
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
become: yes
|
|
||||||
src: etc/sudoers.d/hpf
|
src: etc/sudoers.d/hpf
|
||||||
dest: /etc/sudoers.d/hpf
|
dest: /etc/sudoers.d/hpf
|
||||||
owner: root
|
owner: root
|
||||||
@@ -80,8 +80,8 @@
|
|||||||
validate: /usr/sbin/visudo -csf %s
|
validate: /usr/sbin/visudo -csf %s
|
||||||
|
|
||||||
- name: Make sure /etc/skel/.profile.d exists
|
- name: Make sure /etc/skel/.profile.d exists
|
||||||
|
become: true
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
become: yes
|
|
||||||
path: /etc/skel/.profile.d
|
path: /etc/skel/.profile.d
|
||||||
state: directory
|
state: directory
|
||||||
owner: root
|
owner: root
|
||||||
@@ -89,8 +89,8 @@
|
|||||||
mode: u=rwx,go=
|
mode: u=rwx,go=
|
||||||
|
|
||||||
- name: Get /etc/skel/.profile.d/ansible-venv.sh
|
- name: Get /etc/skel/.profile.d/ansible-venv.sh
|
||||||
|
become: true
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
become: yes
|
|
||||||
src: etc/skel/.profile.d/ansible-venv.sh
|
src: etc/skel/.profile.d/ansible-venv.sh
|
||||||
dest: /etc/skel/.profile.d/ansible-venv.sh
|
dest: /etc/skel/.profile.d/ansible-venv.sh
|
||||||
owner: root
|
owner: root
|
||||||
@@ -99,8 +99,8 @@
|
|||||||
backup: true
|
backup: true
|
||||||
|
|
||||||
- name: Get /etc/skel/.profile
|
- name: Get /etc/skel/.profile
|
||||||
|
become: true
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
become: yes
|
|
||||||
src: etc/skel/.profile
|
src: etc/skel/.profile
|
||||||
dest: /etc/skel/.profile
|
dest: /etc/skel/.profile
|
||||||
owner: root
|
owner: root
|
||||||
@@ -109,16 +109,16 @@
|
|||||||
backup: true
|
backup: true
|
||||||
|
|
||||||
- name: Create the hpf-ans group
|
- name: Create the hpf-ans group
|
||||||
|
become: true
|
||||||
ansible.builtin.group:
|
ansible.builtin.group:
|
||||||
become: yes
|
|
||||||
name: hpf-ans
|
name: hpf-ans
|
||||||
state: present
|
state: present
|
||||||
system: true
|
system: true
|
||||||
gid: 800
|
gid: 800
|
||||||
|
|
||||||
- name: Create the hpf-ans user
|
- name: Create the hpf-ans user
|
||||||
|
become: true
|
||||||
ansible.builtin.user:
|
ansible.builtin.user:
|
||||||
become: yes
|
|
||||||
name: hpf-ans
|
name: hpf-ans
|
||||||
state: present
|
state: present
|
||||||
system: true
|
system: true
|
||||||
@@ -130,18 +130,21 @@
|
|||||||
shell: /usr/bin/bash
|
shell: /usr/bin/bash
|
||||||
|
|
||||||
- name: Make sure pip is up to date
|
- name: Make sure pip is up to date
|
||||||
|
become: false
|
||||||
ansible.builtin.pip:
|
ansible.builtin.pip:
|
||||||
name: pip
|
name: pip
|
||||||
virtualenv: $HOME/.ansible-venv
|
virtualenv: $HOME/.ansible-venv
|
||||||
extra_args: --upgrade
|
extra_args: --upgrade
|
||||||
|
|
||||||
- name: Make sure ansible is up to date
|
- name: Make sure ansible is up to date
|
||||||
|
become: false
|
||||||
ansible.builtin.pip:
|
ansible.builtin.pip:
|
||||||
name: ansible
|
name: ansible
|
||||||
virtualenv: $HOME/.ansible-venv
|
virtualenv: $HOME/.ansible-venv
|
||||||
extra_args: --upgrade
|
extra_args: --upgrade
|
||||||
|
|
||||||
- name: Make sure /home/hpf-ans/bin exists
|
- name: Make sure /home/hpf-ans/bin exists
|
||||||
|
become: false
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: $HOME/bin
|
path: $HOME/bin
|
||||||
state: directory
|
state: directory
|
||||||
@@ -150,8 +153,9 @@
|
|||||||
mode: u=rwx,go=
|
mode: u=rwx,go=
|
||||||
|
|
||||||
- name: Get /home/hpf-ans/bin/ansible-pull.sh
|
- name: Get /home/hpf-ans/bin/ansible-pull.sh
|
||||||
|
become: false
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: home/hpf_ans/bin/ansible-pull.sh
|
src: home/hpf-ans/bin/ansible-pull.sh
|
||||||
dest: $HOME/bin/ansible-pull.sh
|
dest: $HOME/bin/ansible-pull.sh
|
||||||
owner: hpf-ans
|
owner: hpf-ans
|
||||||
group: hpf-ans
|
group: hpf-ans
|
||||||
@@ -159,8 +163,8 @@
|
|||||||
backup: true
|
backup: true
|
||||||
|
|
||||||
- name: Make sure log directory exists
|
- name: Make sure log directory exists
|
||||||
|
become: true
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
become: yes
|
|
||||||
path: /var/log/ansible-pull.sh
|
path: /var/log/ansible-pull.sh
|
||||||
state: directory
|
state: directory
|
||||||
owner: hpf-ans
|
owner: hpf-ans
|
||||||
@@ -168,9 +172,9 @@
|
|||||||
mode: ug=rwx,o=
|
mode: ug=rwx,o=
|
||||||
|
|
||||||
# - name: Create ansible-pull.sh crontab entry
|
# - name: Create ansible-pull.sh crontab entry
|
||||||
|
# become: true
|
||||||
# ansible.builtin.cron:
|
# ansible.builtin.cron:
|
||||||
# name: "ansible-pull"
|
# name: "ansible-pull"
|
||||||
# minute: "*/27"
|
# minute: "*/27"
|
||||||
# job: $HOME/bin/ansible-pull.sh
|
# job: $HOME/bin/ansible-pull.sh
|
||||||
# backup: true
|
# backup: true
|
||||||
# become: no
|
|
||||||
|
|||||||
Reference in New Issue
Block a user