feat ✨: Import unprivileged user task

This commit introduces the `unpriv-user.yml` task, enabling the creation of unprivileged user accounts. This addition expands user management capabilities, allowing for more granular control over user permissions and access within the system. The task facilitates the streamlined setup of users without requiring elevated privileges.

defaults/main.yml

@@ -7,7 +7,6 @@ allow_world_readable_tmpfiles: true
 
 
 ansible_user_id: root
-interactive_user:
+interactive_user: "{{ remote_user | default('ansible') }}"
-interactive_home:
+interactive_home: "/home/{{ interactive_user}}"
-interactive_password:
+interactive_password: "{{ test_password }}"
-

tasks/main.yml

@@ -10,9 +10,8 @@
 # - name: Make /tmp non-executable
 #   ansible.builtin.import_tasks: tmp-nonexec.yml
 
-# not sure if needed, but I'll leave it here as a reference if needed.
+- name: Import tasks to ensure creation of unprivileged user
-# - name: Import tasks to ensure creation of unprivileged user
+  ansible.builtin.import_tasks: unpriv-user.yml
-#   ansible.builtin.import_tasks: unpriv-user.yml
 
 - name: Import custom fact setting
   ansible.builtin.import_tasks: custom-fact.yml
@@ -28,9 +27,8 @@
 #     - name: Import firmware tasks
 #       ansible.builtin.import_tasks: additional-firmware.yml
 
-# not sure if needed, but I'll leave it here as a reference if needed.
+- name: Import color-shell tasks for the common-role
-# - name: Import color-shell tasks for the common-role
+  ansible.builtin.import_tasks: color-shell.yml
-#   ansible.builtin.import_tasks: color-shell.yml
 
 - name: Import journald tasks for the common-role
   ansible.builtin.import_tasks: edit-journald.yml

tasks/unpriv-user.yml

@@ -10,28 +10,28 @@
     skeleton: /etc/skel
     append: true
 
-- name: Check the primary key for the unprivileged user
+# - name: Check the primary key for the unprivileged user
-  ansible.posix.authorized_key:
+#   ansible.posix.authorized_key:
-    user: "{{ interactive_user }}"
+#     user: "{{ interactive_user }}"
-    key: "{{ lookup('file', '../home/ssh-keys/' ~ interactive_user ~ '/' ~ interactive_user ~ '-yubi-1.pub') }}"
+#     key: "{{ lookup('file', '../home/ssh-keys/' ~ interactive_user ~ '/' ~ interactive_user ~ '-yubi-1.pub') }}"
-    state: present
+#     state: present
-    exclusive: false
+#     exclusive: false
-  register: setkey
+#   register: setkey
 
-- name: Re-set the primary key as exclusive, if we found that the key was not present yet # noqa: no-handler
+# - name: Re-set the primary key as exclusive, if we found that the key was not present yet # noqa: no-handler
-  when: setkey.changed
+#   when: setkey.changed
-  ansible.posix.authorized_key:
+#   ansible.posix.authorized_key:
-    user: "{{ interactive_user }}"
+#     user: "{{ interactive_user }}"
-    key: "{{ lookup('file', '../home/ssh-keys/' ~ interactive_user ~ '/' ~ interactive_user ~ '-yubi-1.pub') }}"
+#     key: "{{ lookup('file', '../home/ssh-keys/' ~ interactive_user ~ '/' ~ interactive_user ~ '-yubi-1.pub') }}"
-    state: present
+#     state: present
-    exclusive: true
+#     exclusive: true
 
-- name: Set the secondary key for the unprivileged user
+# - name: Set the secondary key for the unprivileged user
-  ansible.posix.authorized_key:
+#   ansible.posix.authorized_key:
-    user: "{{ interactive_user }}"
+#     user: "{{ interactive_user }}"
-    key: "{{ lookup('file', '../home/ssh-keys/' ~ interactive_user ~ '/' ~ interactive_user ~ '-yubi-2.pub') }}"
+#     key: "{{ lookup('file', '../home/ssh-keys/' ~ interactive_user ~ '/' ~ interactive_user ~ '-yubi-2.pub') }}"
-    state: present
+#     state: present
-    exclusive: false
+#     exclusive: false
 
 - name: Install required package to become unprivileged users
   ansible.builtin.apt: