From 0cc92233915f53b317b824ed4682b362ffd1b5c9 Mon Sep 17 00:00:00 2001 From: Slavi Pantaleev Date: Tue, 26 Mar 2024 11:59:05 +0200 Subject: [PATCH] Revert "become -> ansible_become" This reverts commit d7d334240ce7f4171218dc4dcca4b2c18c55d69a. This is very confusing and messy.. but it's documented. `ansible_become_*` variables actually take priority and override all `become_*` variables set at the task level. As such, using `ansible_become=true ansible_become_user=root` in `inventory/hosts` causes issues because tasks that specify `become: OTHER_USER` will be forced to run as `root` due to `ansible_become_user`. --- examples/hosts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/examples/hosts b/examples/hosts index 909ae85..46bc23b 100644 --- a/examples/hosts +++ b/examples/hosts @@ -1,6 +1,6 @@ # To connect using a non-root user (and elevate to root with sudo later), -# replace `ansible_ssh_user=root` with something like this: `ansible_ssh_user=username ansible_become=true ansible_become_user=root`. -# If sudo requires a password, either add `ansible_become_password=PASSWORD_HERE` to the host line +# replace `ansible_ssh_user=root` with something like this: `ansible_ssh_user=username become=true become_user=root`. +# If sudo requires a password, either add `become_password=PASSWORD_HERE` to the host line # or tell Ansible to ask you for the password interactively by adding a `--ask-become-pass` (`-K`) flag to all `ansible-playbook` (or `just`) commands. # # For improved Ansible performance, SSH pipelining is enabled by default in `ansible.cfg`.