Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Use umask to create the private SAR tarball.

Browse source 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
This commit is contained in:
Randy Barlow 2018-05-14 14:50:23 +00:00
parent a7aec206bd
commit 4d7e1eb3ab
1 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
playbooks/manual/gdpr/sar.yml
View file

@ -74,12 +74,10 @@
content: "{{ hostvars[item]['sar_data'] }}"
dest: "{{ sar_tmp_dir }}/{{ hostvars[item]['sar_output_file'] }}"
loop: "{{ groups['sar'] }}"
# Generate a tarball of the files from each service.
- shell: "tar --transform \"s:^:{{ sar_fas_user }}_{{ sar_email }}/:\" -czf {{ sar_tmp_dir }}/{{ sar_fas_user }}_{{ sar_email }}.tar.gz *"
# Generate a private tarball of the files from each service.
- shell: "umask 0077 && tar --transform \"s:^:{{ sar_fas_user }}_{{ sar_email }}/:\" -czf {{ sar_tmp_dir }}/{{ sar_fas_user }}_{{ sar_email }}.tar.gz *"
args:
chdir: "{{ sar_tmp_dir }}"
# Make sure the tarball is private.
- command: "chmod 0700 {{ sar_tmp_dir }}/{{ sar_fas_user }}_{{ sar_email }}.tar.gz"
# Move the tarball into the desired pick up location.
- command: "mv {{ sar_tmp_dir }}/{{ sar_fas_user }}_{{ sar_email }}.tar.gz {{ sar_tar_output_path }}"
always: