fix(ssh-ca): install sudo before the Claude sudo rules

The edge-host base install has no sudo, so /etc/sudoers.d is missing and the sudoers template fails. DSM keeps its own sudo and is skipped. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-06 11:17:15 +01:00
1 changed files with 6 additions and 0 deletions
@@ -143,6 +143,12 @@
    group: root
    mode: "0644"

+- name: Install sudo
+  ansible.builtin.package:
+    name: sudo
+    state: present
+  when: not ssh_ca_synouser.stat.exists
+
 - name: Install the Claude sudo rules
  ansible.builtin.template:
    src: sudoers-claude.j2