69472a5f8d
Change: - Refactoring to make it harder to get wrong and easier to read. - Generalize become_unprivileged tests and fix some that never worked but also never failed. Test Plan: - CI, new units/integration tests Signed-off-by: Rick Elrod <rick@elrod.me>
35 lines
806 B
YAML
35 lines
806 B
YAML
- name: Cleanup (as root)
|
|
hosts: ssh
|
|
gather_facts: yes
|
|
remote_user: root
|
|
tasks:
|
|
- name: Remove group for unprivileged users
|
|
group:
|
|
name: commongroup
|
|
state: absent
|
|
|
|
- name: Check if /usr/bin/setfacl exists
|
|
stat:
|
|
path: /usr/bin/setfacl
|
|
register: usr_bin_setfacl
|
|
|
|
- name: Check if /bin/setfacl exists
|
|
stat:
|
|
path: /bin/setfacl
|
|
register: bin_setfacl
|
|
|
|
- name: Set path to setfacl
|
|
set_fact:
|
|
setfacl_path: /usr/bin/setfacl
|
|
when: usr_bin_setfacl.stat.exists
|
|
|
|
- name: Set path to setfacl
|
|
set_fact:
|
|
setfacl_path: /bin/setfacl
|
|
when: bin_setfacl.stat.exists
|
|
|
|
- name: chmod +x setfacl
|
|
file:
|
|
path: "{{ setfacl_path }}"
|
|
mode: a+x
|
|
when: setfacl_path is defined
|