blob: e0a27c80ddda131574841440266eafb485a91491 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
# Depends on:
# - check.yml
---
- name: Create the lorry user without generating sshkeys.
user: name=lorry comment="Trove lorry service" shell=/bin/bash
- name: Create the /home/lorry/.ssh folder
file: path=/home/lorry/.ssh state=directory owner=lorry group=lorry mode=0700
- name: Create users (git, cache) and ssh keys for them.
user: name={{ item }} comment="Trove {{ item }} service" shell=/bin/bash generate_ssh_key=yes
with_items:
- git
- cache
- name: Create known_hosts for all the users
shell: |
cat /etc/ssh/ssh_host_*_key.pub | cut -d\ -f1,2 | \
sed -e's/^/'{{ TROVE_HOSTNAME|regex_replace('(\\W)', '\\\\\\1')|quote }}',localhost /' > \
/home/{{ item }}/.ssh/known_hosts
chown {{ item }}:{{ item }} /home/{{ item }}/.ssh/known_hosts
chmod 600 /home/{{ item }}/.ssh/known_hosts
creates=/home/{{ item }}/.ssh/known_hosts
with_items:
- git
- cache
- lorry
- name: Copy the lorry ssh private key
copy: |
src={{ LORRY_SSH_KEY }}
dest=/home/lorry/.ssh/id_rsa
owner=lorry group=lorry mode=600
- name: Copy the lorry ssh public key
copy: |
src={{ LORRY_SSH_PUBKEY }}
dest=/home/lorry/.ssh/id_rsa.pub
owner=lorry group=lorry mode=644
|
