diff --git a/fix-sudoers.yaml b/fix-sudoers.yaml new file mode 100644 index 0000000..677d56b --- /dev/null +++ b/fix-sudoers.yaml @@ -0,0 +1,6 @@ +--- +- name: "Fix ansible sudo stuff" + hosts: all + roles: + - ansible-sudo +... diff --git a/group_vars/all.yaml b/group_vars/all.yaml index f077a86..8748bce 100644 --- a/group_vars/all.yaml +++ b/group_vars/all.yaml @@ -1,4 +1,4 @@ --- ansible_become: true -ansible_user: ansible +ansible_user: tormakris ... diff --git a/roles/ansible-sudo/tasks/main.yaml b/roles/ansible-sudo/tasks/main.yaml new file mode 100644 index 0000000..1b642fe --- /dev/null +++ b/roles/ansible-sudo/tasks/main.yaml @@ -0,0 +1,17 @@ +--- +- name: Check if ansible is already nopasswd in sudoers + lineinfile: + state: absent + path: /etc/sudoers + regexp: "^ansible" + check_mode: true + changed_when: false + register: checkallowusers + +- name: Define ansible nopasswd in sudoers + lineinfile: + state: present + path: /etc/sudoers + line: "ansible ALL=(ALL:ALL) NOPASSWD" + when: checkallowusers.found == 0 +...