chore(deps): pin dependencies

.gitea/workflows/ansible-linters.yaml

@@ -12,9 +12,9 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
     - name: Run ansible-lint
-      uses: ansible/ansible-lint@v25.2.1
+      uses: ansible/ansible-lint@5fac056c45595896c973fbde871f01f6cb14d74c # v26.4.0
       with:
         args: "--config-file .ansible-lint"
         setup_python: "true"

.gitea/workflows/markdown-linters.yaml

@@ -9,11 +9,10 @@ on:
 
 jobs:
   markdown-lint:
-    container:
-      image: git.cryptic.systems/volker.raschek/markdownlint:0.44.0
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@v4.2.2
-    - name: Lint Markdown files
-      run: markdownlint --config .markdownlint.yaml .
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
+      with:
+        globs: '**/*.md'

.gitea/workflows/release.yaml

@@ -0,0 +1,22 @@
+name: Release Ansible Role
+
+on:
+  push:
+    tags:
+    - '**'
+  workflow_dispatch: {}
+
+jobs:
+  release:
+    name: Release Ansible Role
+    runs-on: ubuntu-latest
+    steps:
+    - name: Install Ansible Galaxy
+      run: |
+        apt update --yes
+        apt install --yes ansible
+    - env:
+        ANSIBLE_GALAXY_TOKEN: ${{ secrets.ANSIBLE_GALAXY_TOKEN }}
+      name: Update Ansible Role in Ansible Galaxy
+      run: |
+        ansible-galaxy role import --token=${ANSIBLE_GALAXY_TOKEN} volker-raschek ${GITHUB_REPOSITORY#*/}

.vscode/settings.json

@@ -0,0 +1,14 @@
+{
+  "ansible.python.interpreterPath": "/bin/python",
+  "files.associations": {
+    "**/.gitea/**/*.yml": "yaml",
+    "**/.gitea/**/*.yaml": "yaml",
+    "docker-compose*.yml": "dockercompose",
+    "*.yml": "ansible",
+    "*.yaml": "ansible",
+    ".yamllint": "yaml",
+    ".yamllint.yml": "yaml",
+    ".yamllint.yaml": "yaml"
+  },
+  "rewrap.wrappingColumn": 120
+}

README.md

@@ -1,6 +1,5 @@
 # sudo_users
 
-[![Build Status](https://drone.cryptic.systems/api/badges/volker.raschek/sudo_users/status.svg)](https://drone.cryptic.systems/volker.raschek/sudo_users)
 [![Ansible Role](https://img.shields.io/ansible/role/d/58433)](https://galaxy.ansible.com/volker_raschek/networking_role)
 
 With following role can be created sudoers files in `/etc/sudoers.d`. For

defaults/main.yaml

@@ -1,6 +1,6 @@
 ---
 
-sudo_users_sudoers: {}
+sudo_users_sudoers: []
 # - commands:
 #   - ALL
 #   filename: "" # Optional: Default to user or group

meta/main.yaml

@@ -1,24 +1,25 @@
+dependencies: []
 galaxy_info:
-  namespace: volker_raschek
-  role_name: "sudo"
   author: "Markus Pesch"
-  description: Role to configure sudoers on different distributions
   company: Cryptic Systems
+  description: Role to configure sudoers on different distributions
+  galaxy_tags:
+  - sudo
+  - sudoers
   license: MIT
   min_ansible_version: "2.9"
+  namespace: volker-raschek
   platforms:
   - name: ArchLinux
     versions:
     - all
+  - name: EL
+    versions:
+    - all
+  - name: Fedora
+    versions:
+    - all
   - name: Ubuntu
     versions:
     - all
-  - name: Fedora
-    versions:
-    - "35"
-
-  galaxy_tags:
-  - sudo
-  - sudoers
-
-dependencies: []
+  role_name: "sudo"

tasks/main.yaml

@@ -1,16 +1,26 @@
 ---
 
-- name: Load variables
-  ansible.builtin.include_vars: "{{ ansible_os_family }}.yml"
+- name: Include OS-specific variables
+  ansible.builtin.include_vars: "{{ lookup('first_found', params) }}"
+  vars:
+    params:
+      files:
+      - "{{ ansible_facts['distribution'] }}_{{ ansible_facts['architecture'] }}.yaml"
+      - "{{ ansible_facts['distribution'] }}.yaml"
+      - "{{ ansible_facts['os_family'] }}_{{ ansible_facts['architecture'] }}.yaml"
+      - "{{ ansible_facts['os_family'] }}.yaml"
+      - main.yaml
+      paths:
+      - vars
 
 - name: Verify variables
   ansible.builtin.include_vars: "{{ lookup('first_found', params) }}"
   vars:
     params:
       files:
-      - "{{ ansible_distribution }}_verify_vars.yml"
-      - "{{ ansible_os_family }}_verify_vars.yml"
-      - "verify_vars.yml"
+      - "{{ ansible_facts['distribution'] }}_verify_vars.yaml"
+      - "{{ ansible_facts['os_family'] }}_verify_vars.yaml"
+      - "verify_vars.yaml"
 
 - name: Install sudo
   ansible.builtin.package:

tasks/verify_vars.yaml

@@ -0,0 +1,8 @@
+---
+
+# - name: Verify if not user and group exists for each entry
+#   ansible.builtin.assert:
+#     that:
+#     - (item.user is defined and item.group is not defined) or
+#       (item.user is not defined and item.group is defined)
+#   with_items: "{{ sudo_users_sudoers }}"

tasks/verify_vars.yml

@@ -1,9 +0,0 @@
----
-
-- name: Verify if not user and group exists for each entry
-  ansible.builtin.assert:
-    that:
-    - (item.user is defined and item.group is not defined) or
-      (item.user is not defined and item.group is defined)
-  with_items:
-  - "{{ sudo_users_sudoers }}"