summaryrefslogtreecommitdiffstats
path: root/molecule/archlinux
diff options
context:
space:
mode:
authorAhmed Abdelhalim <[email protected]>2025-12-11 17:27:15 +0100
committerAhmed Abdelhalim <[email protected]>2025-12-11 22:05:56 +0100
commit5e40d4a6ffa1667412d5db10ad6c99338dfec544 (patch)
treeb48046cdbc7b26607ed884403b4414ddb17dbd00 /molecule/archlinux
parenta2a191770cc68371228bfba036ef8363fc11ee3c (diff)
Fix the test_group passwordless permission for testing
Diffstat (limited to 'molecule/archlinux')
-rw-r--r--molecule/archlinux/Dockerfile.j24
-rw-r--r--molecule/archlinux/converge.yml9
2 files changed, 8 insertions, 5 deletions
diff --git a/molecule/archlinux/Dockerfile.j2 b/molecule/archlinux/Dockerfile.j2
index b1e8c143..3dc35f2d 100644
--- a/molecule/archlinux/Dockerfile.j2
+++ b/molecule/archlinux/Dockerfile.j2
@@ -18,10 +18,6 @@ RUN (cd /lib/systemd/system/sysinit.target.wants/; \
# https://gitlab.archlinux.org/archlinux/archlinux-docker/-/issues/59
RUN cp -r /usr/share/i18n/locales/en_US /usr/share/i18n/locales/de_DE;
-# Enable passwordless sudo for test_group (created by the user role)
-RUN echo '%test_group ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/test_group && \
- chmod 0440 /etc/sudoers.d/test_group
-
VOLUME ["/sys/fs/cgroup"]
CMD ["/lib/systemd/systemd"]
diff --git a/molecule/archlinux/converge.yml b/molecule/archlinux/converge.yml
index 408bdd6d..1a29f5a7 100644
--- a/molecule/archlinux/converge.yml
+++ b/molecule/archlinux/converge.yml
@@ -16,6 +16,13 @@
- role: "user"
- role: "ssh"
- role: "password_policy"
+ tasks:
+ - name: "Configure passwordless sudo for testing"
+ ansible.builtin.copy:
+ content: "%test_group ALL=(ALL) NOPASSWD: ALL\n"
+ dest: "/etc/sudoers.d/test_group"
+ mode: "0440"
+ validate: 'visudo -cf %s'
- name: "Configure"
hosts: "archlinux"
@@ -24,7 +31,7 @@
environment:
PATH: "{{ ansible_env.HOME }}/.local/bin:{{ ansible_env.PATH }}"
vars:
- ansible_become_method: su
+ ansible_become_method: sudo
locales:
- "en_US.UTF-8 UTF-8"
timezone: "GMT"