7232bd6756
Some checks failed
Ansible Testing / lint (push) Has been cancelled
Ansible Testing / test (default) (push) Has been cancelled
Ansible Testing / test (minimal) (push) Has been cancelled
Ansible Testing / test (performance) (push) Has been cancelled
Ansible Testing / deploy-check (push) Has been cancelled
- Добавлена автоматическая детекция ОС и настройка групп пользователя - Поддержка всех ОС из dockerfiles: Ubuntu, Debian, RHEL, CentOS, Rocky, AlmaLinux, Astra Linux, ALT Linux, RedOS - Автоматический выбор групп: sudo для Ubuntu/Debian, wheel для RHEL-семейства - Обновлена документация с примерами для разных ОС - Добавлены тесты для проверки универсальности - Исправлены ошибки линтера в meta/main.yml Роль теперь работает на всех системах из dockerfiles без дополнительной настройки.
83 lines
1.9 KiB
YAML
83 lines
1.9 KiB
YAML
---
|
||
# Переменные по умолчанию для роли devops
|
||
# Автор: Сергей Антропов
|
||
# Сайт: https://devops.org.ru
|
||
|
||
# Настройки пользователя devops
|
||
devops_user:
|
||
name: "devops"
|
||
home: "/home/devops"
|
||
shell: "/bin/bash"
|
||
groups: []
|
||
create_home: true
|
||
state: "present"
|
||
|
||
# Настройки пароля
|
||
devops_password:
|
||
length: 30
|
||
special_chars: true
|
||
min_special: 4
|
||
min_upper: 4
|
||
min_lower: 4
|
||
min_digits: 4
|
||
|
||
# Настройки sudo
|
||
devops_sudo:
|
||
nopasswd: true
|
||
commands: "ALL"
|
||
|
||
# SSH настройки
|
||
devops_ssh:
|
||
authorized_keys_file: "/home/devops/.ssh/authorized_keys"
|
||
ssh_dir: "/home/devops/.ssh"
|
||
ssh_dir_mode: "0700"
|
||
authorized_keys_mode: "0600"
|
||
|
||
# Настройки для разных ОС
|
||
devops_os_config:
|
||
# Ubuntu/Debian
|
||
ubuntu:
|
||
groups: ["sudo", "docker"]
|
||
sudo_file: "/etc/sudoers.d/devops"
|
||
sudo_validate: "visudo -cf %s"
|
||
debian:
|
||
groups: ["sudo", "docker"]
|
||
sudo_file: "/etc/sudoers.d/devops"
|
||
sudo_validate: "visudo -cf %s"
|
||
|
||
# RHEL/CentOS/Rocky/AlmaLinux
|
||
rhel:
|
||
groups: ["wheel", "docker"]
|
||
sudo_file: "/etc/sudoers.d/devops"
|
||
sudo_validate: "visudo -cf %s"
|
||
centos:
|
||
groups: ["wheel", "docker"]
|
||
sudo_file: "/etc/sudoers.d/devops"
|
||
sudo_validate: "visudo -cf %s"
|
||
rocky:
|
||
groups: ["wheel", "docker"]
|
||
sudo_file: "/etc/sudoers.d/devops"
|
||
sudo_validate: "visudo -cf %s"
|
||
alma:
|
||
groups: ["wheel", "docker"]
|
||
sudo_file: "/etc/sudoers.d/devops"
|
||
sudo_validate: "visudo -cf %s"
|
||
|
||
# Astra Linux
|
||
astra:
|
||
groups: ["sudo", "docker"]
|
||
sudo_file: "/etc/sudoers.d/devops"
|
||
sudo_validate: "visudo -cf %s"
|
||
|
||
# ALT Linux
|
||
alt:
|
||
groups: ["wheel", "docker"]
|
||
sudo_file: "/etc/sudoers.d/devops"
|
||
sudo_validate: "visudo -cf %s"
|
||
|
||
# RedOS
|
||
redos:
|
||
groups: ["wheel", "docker"]
|
||
sudo_file: "/etc/sudoers.d/devops"
|
||
sudo_validate: "visudo -cf %s"
|