fix(defaults): use nologin instead of /bin/false

This commit is contained in:
Michael Schmitt 2021-08-05 23:58:26 -06:00
parent 7140ccf8a8
commit 1af0deb087
No known key found for this signature in database
GPG Key ID: 5145CC5841E00C15
3 changed files with 4 additions and 1 deletions

View File

@ -18,7 +18,7 @@ prometheus-config-users-install-{{ name }}-user-present:
- groups: - groups:
- {{ name }} - {{ name }}
{%- if grains.os != 'Windows' %} {%- if grains.os != 'Windows' %}
- shell: /bin/false - shell: {{ p.shell }}
{%- if grains.kernel|lower == 'linux' %} {%- if grains.kernel|lower == 'linux' %}
- createhome: false - createhome: false
{%- elif grains.os_family == 'MacOS' %} {%- elif grains.os_family == 'MacOS' %}

View File

@ -310,6 +310,8 @@ prometheus:
rootuser: root rootuser: root
rootgroup: root rootgroup: root
shell: /usr/sbin/nologin
retry_option: retry_option:
# https://docs.saltstack.com/en/latest/ref/states/requisites.html#retrying-states # https://docs.saltstack.com/en/latest/ref/states/requisites.html#retrying-states
attempts: 3 attempts: 3

View File

@ -406,6 +406,7 @@ Windows:
MacOS: MacOS:
div: '/' div: '/'
shell: /sbin/nologin
dir: dir:
default: /etc/defaults default: /etc/defaults
identity: identity: