Merge pull request #215 from lemberg/issue/214-file-permissions

Address newly introduced issue(s) with file permissions

CHANGELOG.md

@@ -1,3 +1,9 @@
+## Draft Environment (Unreleased)
+
+Fixes:
+
+- [GH-214](https://github.com/lemberg/draft-environment/issues/214) - Address newly introduced issue(s) with file permissions. See https://github.com/ansible/ansible/pull/70221 and https://github.com/ansible/ansible/issues/71200
+
 ## Draft Environment 3.1.1, 2020-08-12
 
 Updates:

molecule/default/converge.yml

@@ -7,6 +7,12 @@
 
   pre_tasks:
 
+    - name: Ensure Ansible temp directory exists
+      file:
+        path: /tmp/ansible
+        state: directory
+        mode: 0777
+
     - name: Ensure base packages are installed
       apt:
         name:

molecule/default/molecule.yml

@@ -20,5 +20,7 @@ platforms:
 provisioner:
   name: ansible
   config_options:
+    defaults:
+      remote_tmp: /tmp/ansible
     ssh_connection:
       pipelining: true

provisioning/roles/apache2/tasks/main.yml

@@ -61,6 +61,7 @@
     src: /tmp/mkcert/
     dest: /etc/apache2/ssl
     remote_src: true
+    mode: 0644
   notify:
     - Restart Apache2 web server
   when:
@@ -80,6 +81,7 @@
     dest: /etc/apache2/mods-available/dir.conf
     regexp: "DirectoryIndex"
     line: "DirectoryIndex index.php index.html"
+    mode: preserve
 
 # Disable default virtual host created on Ubuntu/Debian.
 - name: Disable default virtual host.

provisioning/roles/draft/tasks/main.yml

@@ -67,6 +67,7 @@
   lineinfile:
     path: ~/.bashrc
     line: cd {{ ssh_default_directory }}
+    mode: preserve
 
 - name: Ensure locale exists
   locale_gen:
@@ -82,6 +83,7 @@
     path: /etc/ssh/sshd_config
     regexp: '^PasswordAuthentication '
     line: 'PasswordAuthentication yes'
+    mode: preserve
   notify:
     - Restart SSH server
 
@@ -90,5 +92,6 @@
     path: /etc/ssh/sshd_config
     regexp: '^ChallengeResponseAuthentication '
     line: 'ChallengeResponseAuthentication yes'
+    mode: preserve
   notify:
     - Restart SSH server