From 7bbb5b08f925a157e9955a30b08bce147ce68568 Mon Sep 17 00:00:00 2001 From: cole-maxwell1 Date: Fri, 7 Aug 2026 15:31:51 -0500 Subject: [PATCH] ops(ansible): prepare rootless app deployment Create the application user's Ansible temporary directory and rely on the Quadlet install configuration for service enablement. --- ansible/roles/app/tasks/main.yml | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/ansible/roles/app/tasks/main.yml b/ansible/roles/app/tasks/main.yml index c74a670..71f1eaf 100644 --- a/ansible/roles/app/tasks/main.yml +++ b/ansible/roles/app/tasks/main.yml @@ -8,6 +8,14 @@ ansible.builtin.set_fact: app_user_uid: "{{ ansible_facts.getent_passwd[app_user][1] }}" +- name: Create application user Ansible temporary directory + ansible.builtin.file: + path: "/home/{{ app_user }}/.ansible/tmp" + state: directory + owner: "{{ app_user }}" + group: "{{ app_user }}" + mode: "0700" + - name: Create Quadlet directory ansible.builtin.file: path: "/home/{{ app_user }}/.config/containers/systemd" @@ -60,12 +68,3 @@ environment: XDG_RUNTIME_DIR: "/run/user/{{ app_user_uid }}" changed_when: false - -- name: Enable application service without starting it - ansible.builtin.command: - argv: [systemctl, --user, enable, app-todo.service] - become_user: "{{ app_user }}" - environment: - XDG_RUNTIME_DIR: "/run/user/{{ app_user_uid }}" - register: app_enable - changed_when: "'Created symlink' in app_enable.stderr"