Added conditional checks
This commit is contained in:
parent
7a48c860e7
commit
1e99fb4984
1 changed files with 15 additions and 1 deletions
|
@ -227,14 +227,20 @@
|
||||||
line: '\1&protocol=https'
|
line: '\1&protocol=https'
|
||||||
loop: '{{ found_files.files }}'
|
loop: '{{ found_files.files }}'
|
||||||
|
|
||||||
|
- name: Check that the sudo-dom0-prompt exists
|
||||||
|
stat:
|
||||||
|
path: '/etc/authselect/custom/sudo-dom0-prompt'
|
||||||
|
register: stat_result
|
||||||
|
|
||||||
- name: Create authselect profile
|
- name: Create authselect profile
|
||||||
shell: authselect create-profile sudo-dom0-prompt --base-on=sssd --symlink-meta --symlink-pam
|
shell: authselect create-profile sudo-dom0-prompt --base-on=sssd --symlink-meta --symlink-pam
|
||||||
|
when: not stat_result.stat.exists
|
||||||
- name: Copy authselect file
|
- name: Copy authselect file
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: '/etc/authselect/custom/sudo-dom0-prompt/system-auth'
|
src: '/etc/authselect/custom/sudo-dom0-prompt/system-auth'
|
||||||
dest: '/etc/authselect/custom/sudo-dom0-prompt/system-auth.original_aside'
|
dest: '/etc/authselect/custom/sudo-dom0-prompt/system-auth.original_aside'
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
|
|
||||||
|
|
||||||
- name: Copy authselect folder
|
- name: Copy authselect folder
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
|
@ -258,10 +264,18 @@
|
||||||
dest: '/etc/sudoers.d/qubes'
|
dest: '/etc/sudoers.d/qubes'
|
||||||
mode: '0440'
|
mode: '0440'
|
||||||
|
|
||||||
|
- name: Check that allow all rule doesn't exist
|
||||||
|
stat:
|
||||||
|
path: '/etc/polkit-1/rules.d/00-qubes-allow-all.rules'
|
||||||
|
register: stat_result
|
||||||
|
|
||||||
- name: Delete allow all rule
|
- name: Delete allow all rule
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: '/etc/polkit-1/rules.d/00-qubes-allow-all.rules'
|
path: '/etc/polkit-1/rules.d/00-qubes-allow-all.rules'
|
||||||
state: 'absent'
|
state: 'absent'
|
||||||
|
when: not stat_result.stat.exists
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
- name: Drop flathub script to homedir for any new appvms created based on this template
|
- name: Drop flathub script to homedir for any new appvms created based on this template
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue