Prepare fresh Debian for ansible management by created user "ansible" in sudoers (needs public ssh-Key in PUBKEY)

debansstrap.sh

#!/bin/bash
# enable host for ansible
set -e
PUBKEY=""
id -u ansible > /dev/null 2>&1 || \
adduser ansible --disabled-password \
--gecos "" --quiet
mkdir -p /home/ansible/.ssh
echo "$PUBKEY" \
> /home/ansible/.ssh/authorized_keys
chown -R ansible /home/ansible/.ssh
apt-get update
apt-get install sudo
grep -q ansible /etc/sudoers || \
echo "ansible ALL = (ALL) \
NOPASSWD: ALL" >> /etc/sudoers

echo "ansible ALL = (ALL) NOPASSWD: ALL" >> /etc/sudoers.d/ansible

is better. :-)

But then please also adapt the path in the grep command one line above ;)

grep -q ansible /etc/sudoers.d/ansible || \
echo "ansible ALL = (ALL) NOPASSWD: ALL" >> /etc/sudoers.d/ansible

Even better: Use a variable for the path to avoid such mistakes...