playbook shared_directories: allow configuring writeability of shared…

… dir
UtrechtUniversity · Sep 19, 2024 · ba2030e · ba2030e
1 parent fcaf4fc
commit ba2030e
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/molecule/playbook-shared_directories/molecule.yml b/molecule/playbook-shared_directories/molecule.yml
@@ -8,3 +8,4 @@ provisioner:
         parameters:
           paths: /shared, /home/testuser/shared,/scratch
           group_name: testgroup
+          group_writable: 'false'
diff --git a/molecule/playbook-shared_directories/verify.yml b/molecule/playbook-shared_directories/verify.yml
@@ -30,7 +30,7 @@
     - name: Assert shared folder has correct mode and ownership
       ansible.builtin.assert:
         that:
-          - "'drwxrws' in item.stdout"
+          - "'drwxr s' in item.stdout"
           - "'root testgroup' in item.stdout"
       with_items:
         - "{{ list_dir1 }}"

diff --git a/playbooks/shared_directories.yml b/playbooks/shared_directories.yml
@@ -4,6 +4,7 @@
   gather_facts: true
   vars:
     _group_name: "{{ group_name | default('shared') }}"
+    _group_writable: "{{ group_writable | default('true', true) | bool | ternary('7','5') }}"
   roles:
     - role: default_group
       vars:
@@ -15,7 +16,7 @@
         path: "{{ item | trim }}"
         owner: "root"
         group: "{{ _group_name }}"
-        mode: "02770"
+        mode: "027{{ _group_writable }}0"
         state: directory
         recurse: true
       with_items: "{{ paths.split(',') }}"