Backup authorized keys before nuking

This commit is contained in:
citty 2021-10-16 10:17:45 -04:00
parent 752a9de6df
commit d38e3ba4e0

View File

@ -32,7 +32,7 @@
dest: "{{ inventory_hostname }}/lsblk.out"
delegate_to: localhost
become: no
- name: Collect netstat
block:
- name: Run command
@ -65,6 +65,13 @@
become: yes
register: users_list
- name: Backup all users authorized keys
fetch:
src: "{{item['dir']}}/.ssh/authorized_keys"
dest: "{{ inventory_hostname }}"
ignore_errors: yes
loop: "{{ users_list.users }}"
- name: Give root exclusively the current controller user's SSH key
ansible.posix.authorized_key:
user: root