dandyrow.linux.doas role – Installs opendoas and removes sudo

Note

This role is part of the dandyrow.linux collection (version 2.6.0).

To install it use: ansible-galaxy collection install dandyrow.linux.

To use it in a playbook, specify: dandyrow.linux.doas.

Entry point main – Installs opendoas and removes sudo

Synopsis

  • Installs opendoas and removes sudo

Parameters

Parameter

Comments

doas_conf_lines

list / elements=string / required

List of lines to insert into doas config file.

The role will run the config through doas -C to check syntax is correct.

See doas.conf(5) man page for instructions to configure doas.

force_remove_sudo

boolean

If true, bypasses package manager safeguards preventing sudo being uninstalled due to packages depending on it

Setting this to true is not recommended. Do at your own risk!

Choices:

  • false ← (default)

  • true

install_sudo_shim

boolean

If true, will install doas_sudo_shim from the AUR on Arch Linux.

doas_sudo_shim is used to map sudo calls to doas. Note that doas doesn’t implement all the features of sudo so certain calls to sudo will still fail.

This parameter is ignored when not targeting Arch Linux hosts.

Choices:

  • false ← (default)

  • true

non_root_user

string

User that isn’t root to run makepkg when installing doas_sudo_shim on Arch Linux.

Required when install_sudo_shim=true and running on Arch Linux.

Parameter is ignored when running on non Arch Linux system or when install_sudo_shim=false.

remove_sudo

boolean

If true, will remove sudo once doas is installed.

Choices:

  • false ← (default)

  • true

remove_sudo_config

boolean

If true, will remove sudo’s config files after installing doas.

If remove_sudo=false this parameter is ignored.

Choices:

  • false ← (default)

  • true

Authors

  • Daniel Lowry (github.com/dandyrow)