Security repository changes | refs #33830

roles/tester/tasks/main.yml

+---
+
+- name: install tester packages
+  apt:
+    force_apt_get: true
+    install_recommends: false
+    name: "{{ tester_packages }}"
+    state: latest
+  register: apt_status
+  retries: 60
+  until: apt_status is success or ('Failed to lock apt for exclusive operation' not in apt_status.msg and '/var/lib/dpkg/lock' not in apt_status.msg)
+
+...

roles/users/defaults/main.yml

@@ -2,13 +2,12 @@
 
 users:
   - name: ubicast
-    passwd: "{{ envsetup_shell_ubicast_pwd | password_hash('sha512', 'envsetup') }}"
+    passwd: "{{ envsetup_shell_ubicast_pwd | password_hash('sha512', 'ubicastsalt') }}"
   - name: admin
-    passwd: "{{ envsetup_shell_admin_pwd | password_hash('sha512', 'envsetup') }}"
+    passwd: "{{ envsetup_shell_admin_pwd | password_hash('sha512', 'ubicastsalt') }}"
 
 users_ssh_authorized_keys:
-  - "{{ lookup('file', 'files/ubicast_support.pub') }}"
-  - "{{ envsetup_ssh_allowed_keys }}"
+  - "{{ envsetup_ssh_allowed_keys | d('') }}"
 
 users_root_change: true
 

roles/users/files/ubicast_support.pub

-ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr2IJlzvLlLxa2PyGhydAlz/PAOj240g8anQmY58X+llirLHIOlkdJXBqf94jAeZkweWpoE41RdmKPUQEz4pCO09dGJaZD4lv1NtDhrhNwTmoOnyFckoPimR6DX6+UMM9wUmfti/ytljbVEVVo/pRacXmczeumDaci3uYTURyliuAR9h3zbIMQ6D2COESXjptWmEwawE9grsTfJi84Q+XIBPvXRHjjceB5hejUMWuf7xc6GH9WIo5REh3qTUvgtxHtIGLQ3ImOzrbCsEhENrBWds0qH0pIuH0lykWGR6pumpPxLzXcVho+e/UJgUrEg5u6/58aizqJTkxFJMa8ciYz support@ubicast

roles/users/tasks/main.yml

@@ -70,4 +70,15 @@
     content: |
       %sudo ALL=(ALL) NOPASSWD: ALL
 
+- name: install ubicast ssh access
+  when: not offline_mode | d(false)
+  apt:
+    force_apt_get: true
+    install_recommends: false
+    name: "ubicast-ssh-access"
+    state: latest
+  register: apt_status
+  retries: 60
+  until: apt_status is success or ('Failed to lock apt for exclusive operation' not in apt_status.msg and '/var/lib/dpkg/lock' not in apt_status.msg)
+
 ...