labitat-ansible/roles/users/tasks, branch 3x1g-bondUnnamed repository; edit this file 'description' to name the repository.
https://git.2e8.dk/labitat/labitat-ansible/atom?h=3x1g-bond2019-01-13T21:12:16Zusers: optionally set user password2019-01-13T21:12:16ZEmil Renner Berthingesmil@labitat.dk2019-01-13T21:12:16Zurn:sha1:e8469ae75248c7020372985041eb5eeedb1ae22eusers: add more flexible user management2019-01-13T20:30:45ZEmil Renner Berthingesmil@labitat.dk2019-01-13T19:07:50Zurn:sha1:bbced59f27d07563734cd0b3cb3da5e4e77634ae
Now user data is in roles/users/defaults/main.yml
and each server should have a hash like this
users:
'foo': sudo
'bar': true
'baz': false
#'qux': false
This means the user foo will be created with sudo
access, the user bar will be created without sudo
access, while baz and qux will be removed.
users: esmil: add password2018-12-03T20:00:21ZEmil Renner Berthingesmil@labitat.dk2018-12-03T19:59:42Zurn:sha1:733fbbb1ff2fbd427ec7ef1955232150f4a9fb5a
..so I can log in on a serial port and save the day.
This is one way to generate the hashed password line:
python <<EOF
from passlib.hash import sha512_crypt
import getpass
print(sha512_crypt.using(rounds=5000).hash(getpass.getpass()))
EOF
users: make user groups configurable2018-10-09T12:23:21ZEmil Renner Berthingesmil@labitat.dk2018-10-09T12:23:15Zurn:sha1:9bd5613b87e4d38d65646ff2dea9c025b5ea914c
On the doorputer we want to put every user
in both the dialout group and the sudo group
users: esmil: add my plastik2 ssh key2018-10-06T16:03:28ZEmil Renner Berthingesmil@labitat.dk2018-10-04T16:45:24Zurn:sha1:fce6d170ae573eb584fdf6fba8fdec2136f0fdfcusers: esmil: add some dotfiles2018-09-30T19:30:53ZEmil Renner Berthingesmil@labitat.dk2018-09-30T18:44:44Zurn:sha1:6ff123525e8a3f44028a2fcee9cf30e9e7792052users: root: let each user have their own root bashrc2018-09-30T19:30:53ZEmil Renner Berthingesmil@labitat.dk2018-09-30T19:25:28Zurn:sha1:a39fb817e87d053f82e06305b4a737d40c483ee3users: start user uids from 20002018-09-30T19:30:51ZEmil Renner Berthingesmil@labitat.dk2018-09-30T19:11:02Zurn:sha1:a34e4d1dfe1b6990824051fde40e9288c8cdfd5d
This way we shouldn't conflict with existing
users. Eg. the 'pi' user on Raspbian
users: prepare for running on other OSes2018-09-30T19:30:25ZEmil Renner Berthingesmil@labitat.dk2018-09-30T18:25:49Zurn:sha1:ae3222d454c6d6c4f5147de7c96dd1f1d1fc5f3fFormat yaml lists like yaml.org2018-09-26T11:00:05ZEmil Renner Berthingesmil@labitat.dk2018-09-26T10:55:55Zurn:sha1:72e69659fe0a51bf2e61cebdb0b3c66ee9e564ba