feat(rabe_backup): create local user and configure authorized_keys and sudo rules

[spameier]

No description provided.

[spameier]

@smirta please review :)

I am not really sure why currently the known_hosts file is modified by this role. As I understand it, the role is supposed to configure a system to be able to be backed up by our central system..

[smirta]

Ugh, that's a long time ago. Looking at it, it indeed doesn't make a lot of sense. Did you test your change? How do we use it when we're using a FreeIPA-provisioned backup user? We skip the user creation and authorized_Key part?

[spameier]

Did you test your change?

Not yet :)

How do we use it when we're using a FreeIPA-provisioned backup user? We skip the user creation and authorized_Key part?

Yes, if the system is IPA-joined we don't specify a user and public key as these settings are configured in IPA.

[spameier]

@hairmare how can I make ansible-lint happy here?

[hairmare]

it seems to complain about this one:

syntax-check[unknown-module]: couldn't resolve module/action 'community.general.sudoers'. This often indicates a misspelling, missing collection, or incorrect module path.

afaict we need to add community.general.sudoers to galaxy.yml

rabe_foreman has some as example: https://github.com/radiorabe/ansible-collection-rabe_foreman/blob/main/galaxy.yml#L14