Improved AI roles
This commit is contained in:
@@ -24,13 +24,13 @@
|
||||
- acl
|
||||
state: present
|
||||
|
||||
- name: Create group and user for AI workloads
|
||||
- name: Create group and user for workloads
|
||||
become: true
|
||||
ansible.builtin.group:
|
||||
name: "{{ podman_group }}"
|
||||
system: true
|
||||
|
||||
- name: Create user and group for AI containers
|
||||
- name: Create user and group for containers
|
||||
become: true
|
||||
ansible.builtin.user:
|
||||
name: "{{ podman_user }}"
|
||||
@@ -39,7 +39,7 @@
|
||||
home: "{{ podman_user_home }}"
|
||||
group: "{{ podman_group }}"
|
||||
|
||||
- name: Disable password login for AI user
|
||||
- name: Disable password login for user
|
||||
ansible.builtin.command: passwd -d "{{ podman_user }}"
|
||||
become: true
|
||||
changed_when: false
|
||||
@@ -79,12 +79,12 @@
|
||||
- name: Create folders
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: "{{ podman_user_home }}/{{ item.name }}"
|
||||
path: "{{ podman_user_home }}/{{ item }}"
|
||||
state: directory
|
||||
owner: "{{ podman_user }}"
|
||||
group: "{{ podman_group }}"
|
||||
mode: "0750"
|
||||
loop: "{{ pods }}"
|
||||
loop: "{{ podman_user_folders }}"
|
||||
|
||||
- name: Enable sudo access to podman user (temporary)
|
||||
become: true
|
||||
@@ -119,6 +119,7 @@
|
||||
register: gid
|
||||
|
||||
- name: Ensure rootless Podman works with overlay driver on Debian-family systems
|
||||
when: ansible_os_family == 'Debian'
|
||||
become: true
|
||||
vars:
|
||||
subuid_range: "100000:65536"
|
||||
|
||||
Reference in New Issue
Block a user