This commit is contained in:
parent
7cf7c56972
commit
f3b8ad5c51
@ -41,21 +41,21 @@
|
|||||||
|
|
||||||
- name: Add namespace group
|
- name: Add namespace group
|
||||||
group:
|
group:
|
||||||
name: "{{ dockerengine_remap_user }}"
|
name: "{{ dockerengine_nsremap_user }}"
|
||||||
state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
|
state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
|
||||||
|
|
||||||
- name: Add namespace user
|
- name: Add namespace user
|
||||||
user:
|
user:
|
||||||
name: "{{ dockerengine_remap_user }}"
|
name: "{{ dockerengine_nsremap_user }}"
|
||||||
group: "{{ dockerengine_remap_user }}"
|
group: "{{ dockerengine_nsremap_user }}"
|
||||||
shell: /sbin/nologin
|
shell: /sbin/nologin
|
||||||
state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
|
state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
|
||||||
|
|
||||||
- name: Configure namespace id range
|
- name: Configure namespace id range
|
||||||
lineinfile:
|
lineinfile:
|
||||||
dest: "{{ item }}"
|
dest: "{{ item }}"
|
||||||
regexp: "^{{ dockerengine_remap_user }}:"
|
regexp: "^{{ dockerengine_nsremap_user }}:"
|
||||||
line: "{{ dockerengine_remap_user }}:{{ dockerengine_nsremap_range_start }}:{{ dockerengine_nsremap_range_length }}"
|
line: "{{ dockerengine_nsremap_user }}:{{ dockerengine_nsremap_range_start }}:{{ dockerengine_nsremap_range_length }}"
|
||||||
state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
|
state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
|
||||||
loop:
|
loop:
|
||||||
- /etc/subuid
|
- /etc/subuid
|
||||||
|
Loading…
Reference in New Issue
Block a user