Compare commits

..

3 commits

Author SHA1 Message Date
255b812b54
fix(infra): Disable infrastructure skeleton until implementation 2025-11-28 18:39:34 +01:00
961e10223c
ref(system): Fix ssh authorized keys task
Fixed the loop for authorized keys. While I read previously that the
Ansible module can take keys in the array format:

```yaml
    key:
      - key1
      - key2
      - ...
```

This seems to not be the case.
Instead, we now do a 'sub-loop' through all the existing authorized_keys
entries in the data structure, running the task once for each key.

This also means we can simplify the 'when' condition to only check the
data structure itself exists, not the key since we only loop once for
each existing key anyway.

More in-depth explanation on the subelements filter here:
https://docs.ansible.com/projects/ansible/latest/playbook_guide/playbooks_filters.html#combining-objects-and-subelements

Concise explanation of use here:
https://overflow.ducks.party/questions/56086290/how-can-i-traverse-nested-lists-in-ansible

One drawback:
we can now _not_ change the key setting in the module to be exclusive
(`exclusive: true` for `authorized_keys` module). As described in the
documentation, if there are more than one key for a user, this would
lead to the following keys overwriting the first key.

Currently do not know how to fix this, but we are not supplying
exclusive keys so it is fine for the moment.
2025-11-28 18:39:33 +01:00
e0efc51c34
feat(system): Add tags to system role tasks 2025-11-28 18:39:32 +01:00
2 changed files with 17 additions and 10 deletions

View file

@ -40,6 +40,8 @@
community.general.timezone:
name: "{{ system_timezone }}"
when: "system_timezone"
tags:
- timezone
become: true
- name: Create necessary groups
@ -48,6 +50,8 @@
state: present
loop: "{{ system_users | map(attribute='groups') | flatten | unique }}"
when: "system_users"
tags:
- groups
become: true
- name: Set up system users
@ -59,15 +63,18 @@
shell: "{{ item.shell | default('/bin/bash') }}"
loop: "{{ system_users }}"
when: "system_users"
tags:
- users
- groups
become: true
- name: Add authorized SSH keys
ansible.posix.authorized_key:
user: "{{ item.name }}"
user: "{{ item.0.name }}"
state: present
key: "{{ item.authorized_keys }}"
loop: "{{ system_users }}"
when: system_users is defined and item.authorized_keys is defined
key: "{{ item.1 }}"
loop: "{{ system_users | subelements('authorized_keys', skip_missing=True) }}"
when: system_users is defined
tags:
- ssh
become: true

View file

@ -49,12 +49,12 @@
# name: incus-install
# tags: incus
- name: Raise infrastructure
hosts: localhost
tags: infrastructure
tasks:
- ansible.builtin.import_role:
name: infrastructure
# - name: Raise infrastructure
# hosts: localhost
# tags: infrastructure
# tasks:
# - ansible.builtin.import_role:
# name: infrastructure
# ansible-galaxy install geerlingguy.docker
- name: Install docker