railiance-infra/ansible/roles/railiance_clock/tasks/prepare.yaml
codex 07a0c07b7c
All checks were successful
CI Smoke / source-contract (push) Successful in 14s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Prepare Clock host identity before attended key delivery
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
2026-09-15 23:00:26 +02:00

21 lines
555 B
YAML

---
- name: Create unprivileged authority account
ansible.builtin.user:
name: railiance-clock
system: true
shell: /usr/sbin/nologin
create_home: false
- name: Create root-owned install tree
ansible.builtin.file:
path: "{{ railiance_clock_install_root }}"
state: directory
owner: root
group: root
mode: '0755'
- name: Create private signing-key directory
ansible.builtin.file:
path: "{{ railiance_clock_state_root }}"
state: directory
owner: railiance-clock
group: railiance-clock
mode: '0700'