Skip to content

Commit df00e38

Browse files
authored
Merge pull request #43 from coopdevs/docker_user
backup user can manage docker containers
2 parents 14a00e9 + 688359e commit df00e38

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed

tasks/main.yml

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -90,6 +90,29 @@
9090
- "{{ backups_role_restic_repo }}"
9191

9292

93+
# Adding this user to docker group can have security issues when docker
94+
# manages other containers too, but it's better than running docker from root.
95+
- name: User to execute the manage docker on behalf of monitoring
96+
become: true
97+
user:
98+
name: "{{ backups_role_user_name }}"
99+
state: present
100+
shell: /bin/bash
101+
home: "/home/{{ backups_role_user_name }}"
102+
103+
- name: Install docker
104+
include_role:
105+
name: geerlingguy.docker
106+
vars:
107+
docker_users:
108+
- "{{ backups_role_user_name }}"
109+
110+
- name: Working directory
111+
file:
112+
state: directory
113+
path: "/home/{{ backups_role_user_name }}"
114+
owner: "{{ backups_role_user_name }}"
115+
93116
- name: Working directory
94117
file:
95118
state: directory

0 commit comments

Comments
 (0)