T

fix(ci): pin actions to their commit sha

Floating tags let a compromised or force pushed release change what the workflows execute. Pinning the actions to a
commit sha and restricting the default token to read access limits the blast radius of a supply chain attack. The
outdated ansible-lint and markdownlint-cli2 versions are raised along with the pinning.

The ansible-lint run installs the collections of the molecule scenario, because the scenario is linted as well and
depends on community.docker beside the community.general requirement of the role.

Co-authored-by: Copilot <copilot@github.com>

2026-09-10 21:41:34 +02:00

.gitea/workflows

fix(ci): pin actions to their commit sha

2026-09-10 21:41:34 +02:00

.vscode

fix: replace deprecated INJECT_FACTS_AS_VARS

2026-01-05 10:28:07 +01:00

defaults

fix(tasks)!: stop flushing /etc/sudoers.d

2026-09-10 21:41:34 +02:00

README.md

sudo_users

With following role can be created sudoers files in /etc/sudoers.d. For example to grant a user special perimssions to execute a program as root.

Supported distributions

Arch Linux
Debian
Fedora
RHEL
Ubuntu 20.04

Features

Installing sudo
Configuring drop-on files in /etc/sudoers.d

Configuring

In the default directory are examples how to configure the network stack. Copy the defaults into your host_vars or group_vars and adapt the examples.