From e4c228b34c39d0fcde309aa859be0c5452de0aa6 Mon Sep 17 00:00:00 2001 From: Ariejan de Vroom Date: Thu, 6 Jun 2024 22:58:27 +0200 Subject: [PATCH] Passwordless sudo is a price to pay --- roles/05_packages/tasks/aur.yml | 4 +++- roles/07_user/tasks/main.yml | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/roles/05_packages/tasks/aur.yml b/roles/05_packages/tasks/aur.yml index 028a21c..21d77cb 100644 --- a/roles/05_packages/tasks/aur.yml +++ b/roles/05_packages/tasks/aur.yml @@ -9,4 +9,6 @@ kewlfft.aur.aur: name: "{{ aur_packages }}" state: present - use: "{{ aur_helper }}" \ No newline at end of file + use: "{{ aur_helper }}" + become: true + become_user: "{{ user.name }}" \ No newline at end of file diff --git a/roles/07_user/tasks/main.yml b/roles/07_user/tasks/main.yml index d54533b..2610624 100644 --- a/roles/07_user/tasks/main.yml +++ b/roles/07_user/tasks/main.yml @@ -22,6 +22,6 @@ - name: Setup sudo ansible.builtin.copy: dest: /etc/sudoers.d/{{ user.name }} - content: "{{ user.name }} ALL=(ALL:ALL) ALL" + content: "{{ user.name }} ALL=(ALL:ALL) NOPASSWD: ALL" mode: 0440 validate: /usr/sbin/visudo -cf %s \ No newline at end of file