robertdebock.users

Ansible Role Users

This role adds users and groups to your system.

GitHub	GitLab	Downloads	Version

Example Playbook

This example comes from molecule/default/converge.yml and is tested every time there’s a push, pull request, or release.

---
- name: Converge
  hosts: all
  become: true
  gather_facts: true

  roles:
    - role: robertdebock.users
      users_groups:
        - name: robertdb
          gid: 1024
        - name: users
        - name: notgroup
          state: absent
        - name: systemgroup
          system: true

      users:
        - name: root
          cron_allow: true
          unauthorized_keys:
            - "ssh-rsa XYZYX54321"
        - name: robertdb
          comment: Robert de Bock
          uid: 1024
          group: robertdb
          groups:
            - users
          cron_allow: true
          sudo_options: "ALL=(ALL) NOPASSWD: ALL"
          authorized_keys:
            - "ssh-rsa ABC123"
          expires: -1
          password_validity_days: 9
        - name: notuser
          state: absent
        - name: systemuser
          system: true

To set up the machine, use molecule/default/prepare.yml:

---
- name: Prepare
  hosts: all
  become: true
  gather_facts: false

  roles:
    - role: robertdebock.bootstrap
    - role: robertdebock.core_dependencies

  tasks:
    - name: Set authorized keys for root
      ansible.posix.authorized_key:
        user: root
        state: present
        key: "ssh-rsa XYZYX54321"

For more details, see this full explanation and example on how to use these roles.

Role Variables

Default variable values are set in defaults/main.yml:

---
# defaults file for users

# Directory for storing SSH keys for users
users_ssh_key_directory: ssh_keys

# Default shell if not specified
users_shell: /bin/bash

# Manage cron permissions via /etc/cron.allow
users_cron_allow: true

# Should home directories be created?
users_create_home: true