32 lines
912 B
YAML
32 lines
912 B
YAML
|
---
|
||
|
|
- name: Konfiguriere passwordlosen Sudo Zugriff für ladm
|
||
|
|
hosts: all
|
||
|
|
become: true
|
||
|
|
vars:
|
||
|
|
sudo_user: "ladm"
|
||
|
|
sudoers_file: "/etc/sudoers.d/{{ sudo_user }}"
|
||
|
|
|
||
|
|
tasks:
|
||
|
|
- name: Stelle sicher, dass das Verzeichnis /etc/sudoers.d existiert
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: /etc/sudoers.d
|
||
|
|
state: directory
|
||
|
|
mode: '0750'
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
|
||
|
|
- name: Füge passwordlose Sudo Regel für {{ sudo_user }} hinzu
|
||
|
|
ansible.builtin.lineinfile:
|
||
|
|
path: "{{ sudoers_file }}"
|
||
|
|
line: "{{ sudo_user }} ALL=(ALL) NOPASSWD: ALL"
|
||
|
|
create: true
|
||
|
|
mode: '0440'
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
validate: 'visudo -cf %s'
|
||
|
|
register: sudoers_result
|
||
|
|
|
||
|
|
- name: Ausgabe bei Erfolg
|
||
|
|
ansible.builtin.debug:
|
||
|
|
msg: "Sudo Zugriff für {{ sudo_user }} erfolgreich eingerichtet."
|
||
|
|
when: sudoers_result.changed
|