25 lines
1.0 KiB
Bash
Executable File
25 lines
1.0 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
# 公開鍵の文字列（先ほど確認した正しい公開鍵をここに記載します）
|
|
PUBKEY="ssh-ed25519 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX ansible-admin-key"
|
|
|
|
# 1. グループとシステムユーザーの作成
|
|
sudo addgroup --system --gid 801 ansible-admin
|
|
sudo adduser --system --uid 801 --gid 801 --home /home/ansible-admin --shell /bin/bash ansible-admin
|
|
|
|
# 2. .ssh ディレクトリと鍵の配置
|
|
sudo mkdir -p /home/ansible-admin/.ssh
|
|
echo "$PUBKEY" | sudo tee /home/ansible-admin/.ssh/authorized_keys > /dev/null
|
|
|
|
# 3. 権限と所有者の設定
|
|
sudo chmod 700 /home/ansible-admin/.ssh
|
|
sudo chmod 600 /home/ansible-admin/.ssh/authorized_keys
|
|
sudo chown -R ansible-admin:ansible-admin /home/ansible-admin/.ssh
|
|
|
|
# 4. sudoers.d 設定ファイルの作成
|
|
sudo install -m 640 -o root -g root /dev/null /etc/sudoers.d/ansible-admin
|
|
echo "ansible-admin ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/ansible-admin > /dev/null
|
|
|
|
echo "Setup completed successfully for ansible-admin!"
|