airship/images
Code Issues Proposed changes

Merge "User-management now creates users"

Browse Source
This commit is contained in:
Zuul 2021-06-07 21:01:12 +00:00 committed by Gerrit Code Review
commit b5862bbada
2 changed files with 4 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
image-builder/assets/playbooks/roles/osconfig/defaults/main.yaml
View File

@ -228,11 +228,11 @@ file_permissions:
- "{{ default_run_context }}" - "{{ default_run_context }}"
# Set password and login shell for existing users # Set password and login shell for existing users
# Mainly intended to lock down system users # Mainly intended to lock down system users
# Will not create user if does not exist # Creates user if does not exist
user_management: user_management:
- name: test - name: test
shell: /usr/sbin/nologin shell: /bin/false
password: '!' password: ''
password_lock: yes password_lock: yes
run_contexts: run_contexts:
- "{{ default_run_context }}" - "{{ default_run_context }}"

6
image-builder/assets/playbooks/roles/osconfig/tasks/user-management.yaml
View File

@ -1,7 +1,3 @@
- name: "Get all account info"
getent:
database: passwd
- name: "User Management | Modifying user settings for {{ item.name }}" - name: "User Management | Modifying user settings for {{ item.name }}"
user: user:
name: "{{ item.name }}" name: "{{ item.name }}"
@ -9,4 +5,4 @@
password_lock: "{{ item.password_lock }}" password_lock: "{{ item.password_lock }}"
shell: "{{ item.shell }}" shell: "{{ item.shell }}"
loop: "{{ user_management }}" loop: "{{ user_management }}"
when: run_context in item.run_contexts and item.name in ansible_facts.getent_passwd when: run_context in item.run_contexts