Last Updated: February 25, 2016
·
2.502K
· jpmens

Distribute sudoers file safely

#ansible

When templating a sudoers file onto machines, I (now) make sure the file is only installed to its final location if visudo has checked it.

I do something like this in my playbook:

- action: template src=sudoers.in dest=/etc/sudoers.tmp
- action: shell visudo -q -c -f /etc/sudoers.tmp && cp /etc/sudoers.tmp /etc/sudoers
#ansible

Written by JP Mens

Say Thanks
Respond

Related protips

Ansible retry task

78.84K
1

updating PATH with ansible - system wide

78.35K
2

Dump all variables

62.37K
8

1 Response
Add your response

bcoca

in 1.2 you can use:

- action: templates src=sudoers.in dest=/etc/sudoers validate="visudo %s"

let there be cake anyways!

over 1 year ago ·

Have a fresh tip? Share with Coderwall community!

Post
Post a tip
Best #Ansible Authors
Lorin Hochstein
130.7K
#ansible
#python
#JavaScript
alisaifee
113K
#ansible
#python
#shell
mpdehaan
92.41K
#ansible
#Python
#Ruby
Misha Behersky
78.83K
#ansible
#loving ie6
tartansandal
73.25K
#ansible
#JavaScript
#jquery
Related Tags
#ansible
Sponsored by
#native_company#
#native_desc#
#native_cta#
Filed Under
Tools
Awesome Job
See All Jobs
Post a job for only $299
Thanks to our sponsor
Sponsored by #native_company# — Learn More
#native_title# #native_desc#
#native_cta#