Fix password hashing;Delete temporary user;Housekeeping

2021-06-10 16:53:03 +02:00
parent 4257849ca4
commit f15485e7c2
5 changed files with 11 additions and 3 deletions
--- a/ansible/roles/firstboot/files/ansible_payload/roles/users/tasks/main.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/roles/users/tasks/main.yml
@@ -1,7 +1,7 @@
 - name: Set root password
  ansible.builtin.user:
    name: root
-    password: "{{ ovfproperties['guestinfo.rootpw'] }}"
+    password: "{{ ovfproperties['guestinfo.rootpw'] | password_hash('sha512', 65534 | random(seed=ovfproperties['guestinfo.hostname']) | string) }}"
    generate_ssh_key: yes
    ssh_key_bits: 2048
    ssh_key_file: .ssh/id_rsa