50 lines
1.3 KiB
YAML
50 lines
1.3 KiB
YAML
---
|
|
- name: Ensure host distribution is supported
|
|
ansible.builtin.import_role:
|
|
name: compatcheck
|
|
vars:
|
|
compatcheck_supported_distributions:
|
|
- name: debian
|
|
version_min: 11
|
|
- name: ubuntu
|
|
version_min: 22
|
|
- name: fedora
|
|
version_min: 39
|
|
|
|
- name: Ensure sudo is installed
|
|
ansible.builtin.package:
|
|
name: sudo
|
|
|
|
- name: Fail if removing the current user
|
|
ansible.builtin.fail:
|
|
msg: Refusing to delete the user used to run this play
|
|
when:
|
|
- item.name == ansible_user_id
|
|
- item.state is defined
|
|
- item.state == 'absent'
|
|
loop: "{{ users }}"
|
|
become: false
|
|
|
|
- name: Ensure users in correct state
|
|
ansible.builtin.user:
|
|
name: "{{ item.name }}"
|
|
password: "{{ item.password }}"
|
|
shell: "{{ item.shell | default('/bin/bash') }}"
|
|
groups:
|
|
- sudo
|
|
state: "{{ item.state | default('present') }}"
|
|
loop: "{{ users }}"
|
|
|
|
- name: Set ssh authorized keys for users
|
|
ansible.posix.authorized_key:
|
|
user: "{{ item.name }}"
|
|
key: "{{ item.ssh_pubkey }}"
|
|
when: item.state | default('present') == 'present'
|
|
loop: "{{ users }}"
|
|
|
|
- name: Disable login as root with ssh key
|
|
ansible.builtin.file:
|
|
path: /root/.ssh/authorized_keys
|
|
state: absent
|
|
when: ansible_user | default('') != 'root'
|