Message-ID: <d1c0911f37c15ca63626326bf029dff308cc21a1.camel@ageofdream.com>
Subject: Re: Initial Postgres admin account setup using Ansible?
From: Nick <lists2@ageofdream.com>
To: Andreas 'ads' Scherbaum <adsmail@wars-nicht.de>
Cc: pgsql-general@lists.postgresql.org
Date: Tue, 31 Dec 2024 17:22:08 -0500
In-Reply-To: <CAMDzVO_HnP+V6bL0myTt0=RRXYLNOfj4XszEKa+LvPSnePO9yg@mail.gmail.com>
References: <75b177a0f2627519419009a2134fe050f3f623cb.camel@ageofdream.com>
	 <CAMDzVO_HnP+V6bL0myTt0=RRXYLNOfj4XszEKa+LvPSnePO9yg@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
User-Agent: Evolution 3.46.4-2 
MIME-Version: 1.0
Archived-At: <https://www.postgresql.org/message-id/d1c0911f37c15ca63626326bf029dff308cc21a1.camel%40ageofdream.com>
Precedence: bulk

On Tue, 2024-12-31 at 23:16 +0100, Andreas 'ads' Scherbaum wrote:
>=20
>=20
>=20
> Can you please provide an example of the task(s) which fail?
> If you have passwordless "sudo" configured tor the user running
> Ansible,
> this works:
>=20
> - name: Ping PostgreSQL
> =C2=A0 postgresql_ping:
> =C2=A0 db: postgres
> =C2=A0 login_unix_socket: "/var/run/postgresql"
> =C2=A0 login_user: postgres
> =C2=A0 become: yes
> =C2=A0 become_user: postgres
> =C2=A0
> More examples and details:
> https://andreas.scherbaum.la/writings/Managing_PostgreSQL_with_Ansible_-_=
Percona_Live_2022.pdf
>=20
>=20

When trying this:

- name: Ping PostgreSQL
  postgresql_ping:
    db: postgres
    login_unix_socket: "/var/run/postgresql"
    login_user: postgres
  become: yes
  become_user: postgres


I get:

Ping PostgreSQL...
  xxx.xxx.xxx.xxx failed | msg: Failed to set permissions on the
temporary files Ansible needs to create when becoming an unprivileged
user (rc: 1, err: chmod: invalid mode: =E2=80=98A+user:postgres:rx:allow=E2=
=80=99
Try 'chmod --help' for more information.
}). For information on working around this, see
https://docs.ansible.com/ansible-core/2.17/playbook_guide/playbooks_privile=
ge_escalation.html#risks-of-becoming-an-unprivileged-user