From e25a1fa2d59d50ab5630f159a15dbd053e69f6c9 Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <liw@liw.fi>
Date: Mon, 11 Jul 2022 15:10:33 +0300
Subject: fix: install sudo on base image, allow debian user to use sudo

Sponsored-by: author
---
 ansible/exolobe5-vms.sh   | 34 ----------------------------------
 ansible/stamina-vms.sh    | 34 ++++++++++++++++++++++++++++++++++
 base-image/base-image.yml |  8 ++++++++
 3 files changed, 42 insertions(+), 34 deletions(-)
 delete mode 100755 ansible/exolobe5-vms.sh
 create mode 100755 ansible/stamina-vms.sh

diff --git a/ansible/exolobe5-vms.sh b/ansible/exolobe5-vms.sh
deleted file mode 100755
index 1f64ff5..0000000
--- a/ansible/exolobe5-vms.sh
+++ /dev/null
@@ -1,34 +0,0 @@
-#!/bin/bash
-
-set -eu
-
-playbooks="
-apt-dev.yml
-billion.yml
-clab-dev.yml
-debian-ansible-dev.yml
-ewww-dev.yml
-ewww-test.yml
-ick2-dev.yml
-icktool.yml
-jt-dev.yml
-obnam-bench.yml
-obnam-dev.yml
-openpgp-ca-dev.yml
-python-mess.yml
-rikiwiki-dev.yml
-roadmap-dev.yml
-rust-dev.yml
-sequoia-dev.yml
-sequoia-web.yml
-sshca-dev.yml
-subplot-dev.yml
-vmadm-dev.yml
-vmdb2-dev.yml
-web.yml
-"
-
-parallel chronic ./run-playbook -- $playbooks
-
-cd "$HOME/pers/ick/ick2-ansible"
-chronic ./run-workers.sh ci-prod-controller.vm.liw.fi
diff --git a/ansible/stamina-vms.sh b/ansible/stamina-vms.sh
new file mode 100755
index 0000000..1f64ff5
--- /dev/null
+++ b/ansible/stamina-vms.sh
@@ -0,0 +1,34 @@
+#!/bin/bash
+
+set -eu
+
+playbooks="
+apt-dev.yml
+billion.yml
+clab-dev.yml
+debian-ansible-dev.yml
+ewww-dev.yml
+ewww-test.yml
+ick2-dev.yml
+icktool.yml
+jt-dev.yml
+obnam-bench.yml
+obnam-dev.yml
+openpgp-ca-dev.yml
+python-mess.yml
+rikiwiki-dev.yml
+roadmap-dev.yml
+rust-dev.yml
+sequoia-dev.yml
+sequoia-web.yml
+sshca-dev.yml
+subplot-dev.yml
+vmadm-dev.yml
+vmdb2-dev.yml
+web.yml
+"
+
+parallel chronic ./run-playbook -- $playbooks
+
+cd "$HOME/pers/ick/ick2-ansible"
+chronic ./run-workers.sh ci-prod-controller.vm.liw.fi
diff --git a/base-image/base-image.yml b/base-image/base-image.yml
index 3a14b62..84d938f 100644
--- a/base-image/base-image.yml
+++ b/base-image/base-image.yml
@@ -10,7 +10,15 @@
           - cloud-init
           - openssh-server
           - locales-all
+          - sudo
         install_recommends: no
+    - copy:
+        content: |
+          debian ALL=(ALL:ALL) NOPASSWD: ALL
+        dest: /etc/sudoers.d/debian
+        owner: root
+        group: root
+        mode: 0600
     - shell: |
         apt clean
   vars:
-- 
cgit v1.2.1