From e0610f11fad39c2625ad005217621e586623daec Mon Sep 17 00:00:00 2001
From: Daniel Berteaud <daniel@firewall-services.com>
Date: Wed, 26 Oct 2016 12:47:52 +0200
Subject: [PATCH] Create an ansible user and setup SSH keys for him

---
 el7.ks | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/el7.ks b/el7.ks
index 3d48860..f73c723 100644
--- a/el7.ks
+++ b/el7.ks
@@ -17,6 +17,8 @@ repo --name=epel --mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=ep
 
 %include /tmp/ks.partitions
 
+user --name=ansible --shell /bin/bash --gecos="Ansible Account"
+
 reboot
 
 %packages --nobase --ignoremissing
@@ -106,11 +108,17 @@ cp /tmp/pre.log /mnt/sysimage/root/pre.log
 %post --log /root/post.log
 
 # Initial SSH keys
-mkdir /root/.ssh
-cat << _EOF >> /root/.ssh/authorized_keys
+mkdir /home/ansible/.ssh
+cat << _EOF >> /home/ansible/.ssh/authorized_keys
 ssh-rsa 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 ansible@firewall-services.com
 _EOF
 chmod 700 /root/.ssh
 chown -R root:root /root/.ssh
 
+# Sudo access for ansible
+cat << _EOF > /etc/sudoers.d/ansible
+Defaults:ansible !requiretty
+ansible ALL=(ALL) NOPASSWD: ALL
+_EOF
+
 %end