mirror of
https://github.com/pigmonkey/spark.git
synced 2026-07-23 08:01:29 +00:00
eb1d298446
Ansible `copy` module has `validation` parameter that allows to validate the file prior to replacing it on remote: > The validation command to run before copying into place. The path to the file to validate is passed in via '%s' which must be present as in the example below. The command is passed securely so shell features like expansion and pipes won't work. Here we use `visudo` to validate the file before writing it in place, so the user won't lock himself out in case of incorrect changes to `sudoers.j2` template.
15 lines
314 B
YAML
15 lines
314 B
YAML
---
|
|
- name: Install sudo
|
|
pacman: name=sudo state=present
|
|
tags:
|
|
- sudo
|
|
|
|
- name: Add user to wheel group
|
|
user: name={{ user.name }} groups=wheel append=yes
|
|
tags:
|
|
- sudo
|
|
|
|
- name: Copy sudo configuration
|
|
template: src=sudoers.j2 dest=/etc/sudoers mode=440 validate='visudo -cf %s'
|
|
tags:
|
|
- sudo
|