ansible-roles/evolinux-users/tasks/sudo_common.yml

---

- name: "/etc/sudoers.d presence and permissions"
  ansible.builtin.file:
    path: /etc/sudoers.d
    owner: root
    group: root
    mode: "0750"
    state: directory

- name: "Verify 'evolinux' sudoers file presence (Debian 9 or later)"
  ansible.builtin.template:
    src: sudoers.j2
    dest: /etc/sudoers.d/evolinux
    force: false
    mode: "0440"
    validate: '/usr/sbin/visudo -cf %s'
  register: copy_sudoers_evolinux

- name: "Create '{{ evolinux_sudo_group }}' group (Debian 9 or later)"

  ansible.builtin.group:
    name: "{{ evolinux_sudo_group }}"
    system: yes
Refactoring of admin-users + evolinux-base roles * rename admin-users to evolinux-users * splitting the "sudo" part for users between jessie and stretch * with stretch, the sudo group is customizable and properly configured * import evolinux-users role from evolinux-base at proper time to ensure ssh connections are possible for other users before cutting root's access * evomaintenance is also included in evolinux-base to have it available when users are created 2017-10-05 23:55:34 +02:00			`---`

evolinx-users: optimize sudo configuration 2022-03-02 09:40:52 +01:00			`- name: "/etc/sudoers.d presence and permissions"`
Use FQCN Fully Qualified Collection Name 2023-03-20 23:33:19 +01:00			`ansible.builtin.file:`
evolinx-users: optimize sudo configuration 2022-03-02 09:40:52 +01:00			`path: /etc/sudoers.d`
			`owner: root`
			`group: root`
			`mode: "0750"`
			`state: directory`

evolinux-users: add users to adm group for Stretch 2017-12-28 11:01:31 +01:00			`- name: "Verify 'evolinux' sudoers file presence (Debian 9 or later)"`
Use FQCN Fully Qualified Collection Name 2023-03-20 23:33:19 +01:00			`ansible.builtin.template:`
evolinux-users: remove Stretch references in tasks that also apply to next Debian versions. 2023-04-26 18:10:45 +02:00			`src: sudoers.j2`
Refactoring of admin-users + evolinux-base roles * rename admin-users to evolinux-users * splitting the "sudo" part for users between jessie and stretch * with stretch, the sudo group is customizable and properly configured * import evolinux-users role from evolinux-base at proper time to ensure ssh connections are possible for other users before cutting root's access * evomaintenance is also included in evolinux-base to have it available when users are created 2017-10-05 23:55:34 +02:00			`dest: /etc/sudoers.d/evolinux`
force: [yes,no] → force [true,false] 2023-06-28 13:22:59 +02:00			`force: false`
evolinux-users: sudoers file should be 0440 also in Stretch 2018-04-15 16:59:57 +02:00			`mode: "0440"`
Refactoring of admin-users + evolinux-base roles * rename admin-users to evolinux-users * splitting the "sudo" part for users between jessie and stretch * with stretch, the sudo group is customizable and properly configured * import evolinux-users role from evolinux-base at proper time to ensure ssh connections are possible for other users before cutting root's access * evomaintenance is also included in evolinux-base to have it available when users are created 2017-10-05 23:55:34 +02:00			`validate: '/usr/sbin/visudo -cf %s'`
			`register: copy_sudoers_evolinux`

evolinux-users: add users to adm group for Stretch 2017-12-28 11:01:31 +01:00			`- name: "Create '{{ evolinux_sudo_group }}' group (Debian 9 or later)"`
Use FQCN Fully Qualified Collection Name 2023-03-20 23:33:19 +01:00
			`ansible.builtin.group:`
Refactoring of admin-users + evolinux-base roles * rename admin-users to evolinux-users * splitting the "sudo" part for users between jessie and stretch * with stretch, the sudo group is customizable and properly configured * import evolinux-users role from evolinux-base at proper time to ensure ssh connections are possible for other users before cutting root's access * evomaintenance is also included in evolinux-base to have it available when users are created 2017-10-05 23:55:34 +02:00			`name: "{{ evolinux_sudo_group }}"`
			`system: yes`