Merge branch 'release/1.3.0'

debian/changelog

@@ -1,3 +1,10 @@
+edi (1.3.0) bionic; urgency=medium
+
+  [ Matthias Lüscher ]
+  * Allow default user without password.
+
+ -- Matthias Lüscher (Launchpad) <m.luescher@datacomm.ch>  Wed, 18 Mar 2020 18:07:27 +0100
+
 edi (1.2.1) bionic; urgency=medium
 
   [ Matthias Lüscher ]

docs/conf.py

@@ -55,8 +55,8 @@
 # built documents.
 #
 # The short X.Y version.
-version = '1.2.1'
-release = '1.2.1'
+version = '1.3.0'
+release = '1.3.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

docs/config_management/plugins.rst

@@ -257,7 +257,13 @@ The default user can be fine tuned as follows:
      - The groups of the default user (default is :code:`adm,sudo`).
    * - default_user_password
      - The initially set password of the default user
-       (default is :code:`ChangeMe!`).
+       (default is :code:`ChangeMe!`). You can `adjust this password`_ if needed.
+       Set this password to :code:`"*"` if
+       you would like to disable password based login. Please note that
+       the playbook will then automatically create a sudoers file to not
+       impair the :code:`sudo` command.
+
+.. _adjust this password: https://docs.ansible.com/ansible/latest/reference_appendices/faq.html#how-do-i-generate-encrypted-passwords-for-the-user-module
 
 Base System Cleanup
 ^^^^^^^^^^^^^^^^^^^

edi/lib/versionhelpers.py

@@ -26,7 +26,7 @@
 
 # The do_release script will update this version!
 # During launchpad debuild neither the git version nor the package version is available.
-edi_fallback_version = '1.2.1'
+edi_fallback_version = '1.3.0'
 
 
 def get_edi_version():

edi/plugins/playbooks/debian/base_system/roles/default_user/tasks/main.yml

@@ -16,6 +16,12 @@
     append: yes
     update_password: on_create
 
+- name: Enable sudo without password for the default user.
+  template:
+    src: no_passwd
+    dest: /etc/sudoers.d/{{ default_user_name }}
+  when: "'sudo' in default_user_groups.replace(' ', '').split(',') and default_user_password == '*'"
+
 - name: Set up authorized keys for current user.
   authorized_key:
     user: '{{ default_user_name }}'

edi/plugins/playbooks/debian/base_system/roles/default_user/templates/no_passwd

@@ -0,0 +1 @@
+{{ default_user_name }} ALL=(ALL) NOPASSWD: ALL

edi/plugins/playbooks/debian/development_user_facilities/roles/host_user_as_target_user/tasks/main.yml

@@ -11,7 +11,7 @@
     gid: "{{ enforced_gid | default(omit) }}"
     state: present
 
-- name: Add the current user (password=ChangeMe!).
+- name: Add the current user.
   user:
     name: "{{ edi_current_user_name }}"
     group: "{{ edi_current_user_group_name }}"

setup.py

@@ -38,7 +38,7 @@
 setup(
     name='edi',
 
-    version='1.2.1',
+    version='1.3.0',
 
     description='Embedded Development Infrastructure - edi',
     long_description=long_description,