Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

user provisioning is not compatible with ansible 2.1 security #13

Open
jaclu opened this issue Aug 10, 2016 · 0 comments
Open

user provisioning is not compatible with ansible 2.1 security #13

jaclu opened this issue Aug 10, 2016 · 0 comments

Comments

@jaclu
Copy link

jaclu commented Aug 10, 2016

In order for this to run under ansible 2.1 you either have to create ansible.cfg with the following content (Strongly advised against in Ansible docs):

[defaults]
allow_world_readable_tmpfiles = True

What is more in line with ansible best practices is to run ansible as remote user root using pub-key auth, and don't bother with setting up the provisioning user on the target machine
This also makes the param --ask-become-pass obsolete.

  1. add to vars/all.yml
    ansible_user: root

  2. from ckan.yml, db.yml & solr.yml remove the line user: provisioning

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant