File tree Expand file tree Collapse file tree 3 files changed +22
-0
lines changed Expand file tree Collapse file tree 3 files changed +22
-0
lines changed Original file line number Diff line number Diff line change 45
45
fail-fast : false
46
46
matrix :
47
47
image :
48
+ - " ghcr.io/hifis-net/almalinux-systemd:9"
48
49
- " ghcr.io/hifis-net/ubuntu-systemd:22.04"
49
50
- " ghcr.io/hifis-net/ubuntu-systemd:24.04"
50
51
- " ghcr.io/hifis-net/debian-systemd:11"
Original file line number Diff line number Diff line change 21
21
state : " present"
22
22
update_cache : true
23
23
24
+ # Workaround to prevent "sudo: PAM account management error" on AlmaLinux
25
+ - name : " Get file stats for /etc/shadow"
26
+ ansible.builtin.stat :
27
+ path : " /etc/shadow"
28
+ register : " shadow"
29
+
30
+ - name : " Output file stats for /etc/shadow"
31
+ ansible.builtin.debug :
32
+ var : " shadow"
33
+
34
+ - name : " Fix permissions for /etc/shadow"
35
+ ansible.builtin.file :
36
+ path : " /etc/shadow"
37
+ owner : " root"
38
+ group : " {{ shadow.stat.gr_name }}"
39
+ mode : " 0640"
40
+ when : " not shadow.stat.rusr"
41
+
24
42
- name : " Install depenencies for OS family Debian"
25
43
when : " ansible_facts.os_family == 'Debian'"
26
44
block :
Original file line number Diff line number Diff line change 10
10
ansible.builtin.package :
11
11
name : " {{ gitlab_dependencies }}"
12
12
state : " present"
13
+ allowerasing : " {{ true if ansible_facts['os_family'] == 'RedHat' else omit }}"
13
14
14
15
- name : " Prepare Debian GitLab installation"
15
16
when : " ansible_facts.os_family == 'Debian'"
71
72
gpgkey :
72
73
- " {{ gitlab_gpg_key_url }}"
73
74
- " {{ gitlab_gpg_key_url }}/gitlab-{{ gitlab_edition }}-3D645A26AB9FBD22.pub.gpg"
75
+ - " {{ gitlab_gpg_key_url }}/gitlab-{{ gitlab_edition }}-CB947AD886C8E8FD.pub.gpg"
74
76
sslverify : true
75
77
sslcacert : " /etc/pki/tls/certs/ca-bundle.crt"
76
78
metadata_expire : " 300"
87
89
gpgkey :
88
90
- " {{ gitlab_gpg_key_url }}"
89
91
- " {{ gitlab_gpg_key_url }}/gitlab-{{ gitlab_edition }}-3D645A26AB9FBD22.pub.gpg"
92
+ - " {{ gitlab_gpg_key_url }}/gitlab-{{ gitlab_edition }}-CB947AD886C8E8FD.pub.gpg"
90
93
sslverify : true
91
94
sslcacert : " /etc/pki/tls/certs/ca-bundle.crt"
92
95
metadata_expire : " 300"
You can’t perform that action at this time.
0 commit comments