From e0ffa652e8d2950cca4e71fc779280765bb27349 Mon Sep 17 00:00:00 2001
From: Ahmed Abdelhalim <pm@a14m.dev>
Date: Mon, 11 Aug 2025 00:32:05 +0200
Subject: Fix the debian default login shell for user

This is slightly opinionated on the configurations, but it should be
easily changed by the user later on during setup or via some other
ansible role.
---
 roles/user/README.md      | 1 +
 roles/user/tasks/main.yml | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

(limited to 'roles/user')

diff --git a/roles/user/README.md b/roles/user/README.md
index ba795d1a..a1c66f12 100644
--- a/roles/user/README.md
+++ b/roles/user/README.md
@@ -6,6 +6,7 @@ This role creates the user and configures the `sudo` group for the user
 
 - `username` **Required** name of the user to be created.
 - `user_password` created user default password (default: `changeme`).
+- `user_login_shell` the path to default user login shell (default: `/bin/bash`)
 - `user_public_keys` the list of ssh public keys to be added to user authorized_keys
 - `user_groups` extra groups to be created and user added to them (default: [])
 
diff --git a/roles/user/tasks/main.yml b/roles/user/tasks/main.yml
index 76146491..41e0b5b1 100644
--- a/roles/user/tasks/main.yml
+++ b/roles/user/tasks/main.yml
@@ -2,7 +2,9 @@
 - name: "Ensure sudo installed"
   become: true
   ansible.builtin.package:
-    name: "sudo"
+    name:
+      - "sudo"
+      - "bash"
     state: "present"
 
 - name: "Set sudo group fact"
@@ -41,6 +43,7 @@
     generate_ssh_key: false
     groups: "{{  user_groups }}"
     password: "{{ user_password }}"
+    shell: "/bin/bash"
     state: "present"
     update_password: "on_create"
   register: user
-- 
cgit v1.2.3