diff options
| author | Dmitry Ilvokhin <d@ilvokhin.com> | 2023-12-19 18:55:22 +0000 |
|---|---|---|
| committer | Dmitry Ilvokhin <d@ilvokhin.com> | 2023-12-19 18:55:22 +0000 |
| commit | 260ec3861979205e1d6ea6ba6815fd3edfa10818 (patch) | |
| tree | 2275c1f05edc373e676733079193305f89fb4b74 /roles/essential/tasks/sudo.yml | |
| parent | f78a01b99322c83ee7937f73bf1402b9bbe8f24c (diff) | |
| download | infra-260ec3861979205e1d6ea6ba6815fd3edfa10818.tar.gz infra-260ec3861979205e1d6ea6ba6815fd3edfa10818.tar.bz2 infra-260ec3861979205e1d6ea6ba6815fd3edfa10818.zip | |
Add sudo for users from wheel group
Diffstat (limited to 'roles/essential/tasks/sudo.yml')
| -rw-r--r-- | roles/essential/tasks/sudo.yml | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/roles/essential/tasks/sudo.yml b/roles/essential/tasks/sudo.yml new file mode 100644 index 0000000..422c023 --- /dev/null +++ b/roles/essential/tasks/sudo.yml @@ -0,0 +1,17 @@ +- name: Install sudo + ansible.builtin.package: + name: + - sudo + state: present + +- name: Allow wheel group to use sudo + ansible.builtin.lineinfile: + dest: /etc/sudoers + state: present + regexp: '^(# )?%wheel ALL=\(ALL:ALL\) NOPASSWD: ALL' + insertafter: '^# %wheel ALL=\(ALL:ALL\) NOPASSWD: ALL' + line: '%wheel ALL=(ALL:ALL) NOPASSWD: ALL' + validate: "visudo -cf %s" + owner: root + group: root + mode: u+r,g+r,o-rwx |