Files
@ f05151d6f802
Branch filter:
Location: majic-ansible-roles/roles/bootstrap/tasks/main.yml - annotation
f05151d6f802
849 B
text/x-yaml
MAR-132: Added support for Debian 9 (Stretch) to wsgi_website role:
- Set the shell for application system account explicitly (workaround
for Debian bug 865762 in Stretch).
- Updated Molecule tests to cover Debian 9.
- Updated Molecule test preparation playbook to account for a number
of differences between Jessie and Stretch (mainly related to mailing
functionality).
- Renamed a couple of variables in test for sending out mails to make
it clearer what is being looked up as part of regex matching.
- Updated Molecule tests where certain paths depend on what Debian
release they are ran against.
- Split-up Jessie-specific tests into separate file.
- Remove the /bin/ss utility instead of renaming it (testinfra socket
tests do not work with /bin/ss).
- Set the shell for application system account explicitly (workaround
for Debian bug 865762 in Stretch).
- Updated Molecule tests to cover Debian 9.
- Updated Molecule test preparation playbook to account for a number
of differences between Jessie and Stretch (mainly related to mailing
functionality).
- Renamed a couple of variables in test for sending out mails to make
it clearer what is being looked up as part of regex matching.
- Updated Molecule tests where certain paths depend on what Debian
release they are ran against.
- Split-up Jessie-specific tests into separate file.
- Remove the /bin/ss utility instead of renaming it (testinfra socket
tests do not work with /bin/ss).
626eadba53b7 626eadba53b7 626eadba53b7 e4a0f78340ef e4a0f78340ef 48a901602e77 626eadba53b7 626eadba53b7 e4a0f78340ef e4a0f78340ef 48a901602e77 626eadba53b7 626eadba53b7 e4a0f78340ef e4a0f78340ef 48a901602e77 e4a0f78340ef e4a0f78340ef 626eadba53b7 626eadba53b7 e4a0f78340ef e4a0f78340ef e4a0f78340ef 626eadba53b7 626eadba53b7 e4a0f78340ef e4a0f78340ef e4a0f78340ef e4a0f78340ef e4a0f78340ef e4a0f78340ef 61ddc6eab566 61ddc6eab566 e4a0f78340ef e4a0f78340ef e4a0f78340ef e4a0f78340ef 7387caca37f3 7387caca37f3 7387caca37f3 10d5a1e15c30 7387caca37f3 0388df2571ca | ---
- name: Install sudo
apt:
name: sudo
state: present
- name: Set-up the Ansible group
group:
name: ansible
system: true
- name: Set-up the Ansible user
user:
name: ansible
system: true
group: ansible
shell: /bin/bash
- name: Set-up authorized key for the Ansible user
authorized_key:
user: ansible
key: "{{ ansible_key }}"
- name: Set-up password-less sudo for the ansible user
copy:
src: "ansible_sudo"
dest: "/etc/sudoers.d/ansible"
mode: 0640
owner: root
group: root
- name: Revoke rights for Ansible user to log-in as root to server via ssh
authorized_key:
user: root
key: "{{ ansible_key }}"
state: absent
- name: Explicitly run all handlers
include: ../handlers/main.yml
when: "handlers | default(False) | bool() == True"
tags:
- handlers
|