Backup authorized keys before nuking

hosts

@@ -0,0 +1,17 @@
+[forensics]
+10.8.2.12 ansible_user=administrator
+
+[database]
+10.8.2.3 ansible_user=administrator
+
+[workstations]
+10.8.1.10 ansible_user=administrator
+10.8.1.40 ansible_user=administrator
+
+[workstations:children]
+web
+
+[web]
+10.8.1.90 ansible_user=administrator
+
+

roles/immortal/tasks/main.yml

@@ -31,6 +31,7 @@
         content: "{{lsblk_output.stdout}}"
         dest: "{{ inventory_hostname }}/lsblk.out"
       delegate_to: localhost
+      become: no
 
 - name: Collect netstat
   block:
@@ -43,7 +44,7 @@
         content: "{{netstat_output.stdout}}"
         dest: "{{ inventory_hostname }}/netstat.out"
       delegate_to: localhost
-
+      become: no
 - name: Collect process data
   block:
     - name: Run command
@@ -55,7 +56,7 @@
         content: "{{ps_output.stdout}}"
         dest: "{{ inventory_hostname }}/ps.out"
       delegate_to: localhost
-
+      become: no
 - name: Get users
   get_users:
     #min_uid: "{{ (ansible_os_family == 'RedHat') | ternary(500,1000) }}"
@@ -64,6 +65,13 @@
   become: yes
   register: users_list 
 
+- name: Backup all users authorized keys
+  fetch:
+    src: "{{item['dir']}}/.ssh/authorized_keys"
+    dest: "{{ inventory_hostname }}"
+  ignore_errors: yes
+  loop: "{{ users_list.users }}"
+
 - name: Give root exclusively the current controller user's SSH key
   ansible.posix.authorized_key:
     user: root