44 lines
1.1 KiB
Markdown
Raw Normal View History

2025-04-10 02:21:42 +02:00
[//]: # (SPDX-License-Identifier: MIT)
# Role Name
2022-07-23 20:37:24 +00:00
2025-04-10 02:21:42 +02:00
role-common-local_os_password
2025-04-10 02:21:42 +02:00
# Description
2025-04-10 02:21:42 +02:00
Change an operating system's local user password.
# Requirements
Your target machines must be Linux.
2025-04-10 02:21:42 +02:00
# Role Variables
2025-04-10 02:21:42 +02:00
This role requires variables defined in [defaults/main.yml](defaults/main.yml). Feel free to overwrite them as needed for your HashiCorp Vault setup for example in a `group_vars` or `host_vars` file.
2025-04-10 02:21:42 +02:00
- `fqdn_reverse`: A variable that contains the reversed fully qualified domain name for each host. For `fully.qualified.domain.name` this variable will equal `name/domain/qualified/fully` which we then use in our HashiCorp Vault path to retrieve a password and password salt per host and per user.
- `reset_password_for_account`: A list of usernames whose password we want changed. This defaults to:
```
reset_password_for_account:
- 'build'
- 'root'
```
2025-04-10 02:21:42 +02:00
# Dependencies
2025-04-10 02:21:42 +02:00
None.
2025-04-10 02:21:42 +02:00
# Example Playbook
In your `playbook.yml` call it like so:
```
- name: 'Awesome playbook'
hosts: all
roles:
2025-04-10 02:21:42 +02:00
- 'role-common-local_os_password'
```
2025-04-10 02:21:42 +02:00
# License
MIT