try to workaround pve filesystem limitations

tasks/auth.yml

@@ -1,10 +1,24 @@
 ---
 - block:
+    - name: Create tmp folder for pve
+      file:
+        path: "{{ __pve_tmp_dir }}"
+        recurse: yes
+        state: directory
+
     - name: Configure auth provider
       template:
         src: etc/pve/domains.cfg.j2
-        dest: "{{ __pve_base_dir }}/domains.cfg"
+        dest: "{{ __pve_tmp_dir }}/domains.cfg"
+        owner: root
+        group: www-data
         mode: 0640
+      register: __pve_domains_copy
+
+    - name: Copy files to pve filesystem
+      command: "/bin/cp -rf {{ __pve_tmp_dir }}/domains.cfg {{ __pve_base_dir }}/domains.cfg"
+      when: __pve_domains_copy.results.changed
+      changed_when: __pve_domains_copy.results.changed
   become: True
   become_user: root
 
@@ -18,8 +32,16 @@
     - name: Add passwd file for ldap bind
       template:
         src: etc/pve/priv/ldap.pw.j2
-        dest: "{{ __pve_base_dir }}/priv/ldap/{{ pve_auth_ldap_realm }}.pw"
+        dest: "{{ __pve_tmp_dir }}/{{ pve_auth_ldap_realm }}.pw"
-        mode: 0600
+        owner: root
+        group: www-data
+        mode:
+      register: __pve_auth_copy
+
+    - name: Copy files to pve filesystem
+      command: "/bin/cp -rf {{ __pve_tmp_dir }}/{{ pve_auth_ldap_realm }}.pw {{ __pve_base_dir }}/priv/ldap/{{ pve_auth_ldap_realm }}.pw"
+      when: __pve_auth_copy.results.changed
+      changed_when: __pve_auth_copy.results.changed
   become: True
   become_user: root
   when:

vars/main.yml

@@ -1,2 +1,3 @@
 ---
 __pve_base_dir: /etc/pve
+__pve_tmp_dir: /var/tmp/pve