Search code examples
ansible-2.xopensuse

Ansible become_user results in "Incorrect sudo password" but just using become works

---
- name: Clone rbenv
  become: yes
  git:
    repo: 'https://github.com/rbenv/rbenv.git'
    dest: /home/mastodon/.rbenv

works just fine

---
- name: Clone rbenv
  become: yes
  become_user: mastodon
  git:
    repo: 'https://github.com/rbenv/rbenv.git'
    dest: /home/mastodon/.rbenv

doesn't work, error is 'FAILED! => {"msg": "Incorrect sudo password"}'

ansible_become_pass is set to ansible_user's sudo password

Ansible version: 2.15.3

OS: OpenSUSE

I've tried setting ansible_method, ansible_exe. I expect privilege escalation to make the command run as 'become_user'.

Solution

  • Looks like my issue was with sudoers.

    Adding:

    - name: Update sudoers
  become: yes
  community.general.sudoers:
    name: ansible-do-as-mastodon
    state: present
    user: ansible
    runas: mastodon
    commands: ALL

    resolved the issue