bart/platform
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(ansible): document -K / passwordless sudo for become

Browse source 
The playbook runs everything via become(root); note that -K
(--ask-become-pass) is required unless the target user has passwordless
sudo. Replace the misleading --check first-run hint with --syntax-check.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Bart Van Geyt 2026-07-09 05:01:20 +02:00
parent 21ff7026a0
commit 3678f43767
1 changed files with 7 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
platform-infra/ansible/README.md
View file

@ -35,12 +35,15 @@ Key variables in `group_vars/all.yml`:
## Run ## Run
```bash ```bash
ansible-playbook site.yml --check # dry run (note: first run can't fully ansible-playbook site.yml --syntax-check # no-host pre-flight
# check tasks that depend on ZFS/Docker ansible-playbook site.yml -K # apply (-K prompts for the sudo/become
# not yet present) # password; omit only if the user has
ansible-playbook site.yml # apply # passwordless sudo on the VM)
``` ```
Everything runs via `become` (root), so `-K` is required unless the target user
has passwordless sudo (`/etc/sudoers.d/… NOPASSWD:ALL`).
Run a single layer with tags: `--tags zfs`, `--tags docker`, `--tags firewall`, Run a single layer with tags: `--tags zfs`, `--tags docker`, `--tags firewall`,
`--tags ssh`, `--tags base`. `--tags ssh`, `--tags base`.