From f5366b004aa97123e08905e4233e585134a27b89 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ebbe=20Ba=C3=9F?= <ebbe.bass@bechtle.com>
Date: Thu, 16 Jul 2026 08:53:09 +0200
Subject: [PATCH] added temporary sudo-rs workaround

---
 playbooks/linux/ubuntu-server/deploy_basics.yml               | 1 +
 .../nextcloud_full_deployment/connect_nextcloud_collabora.yml | 2 ++
 .../nextcloud_full_deployment/deploy_collabora_code.yml       | 4 ++++
 .../nextcloud_full_deployment/deploy_hardened_nextcloud.yml   | 3 +++
 4 files changed, 10 insertions(+)

diff --git a/playbooks/linux/ubuntu-server/deploy_basics.yml b/playbooks/linux/ubuntu-server/deploy_basics.yml
index fb955d8..432a41d 100644
--- a/playbooks/linux/ubuntu-server/deploy_basics.yml
+++ b/playbooks/linux/ubuntu-server/deploy_basics.yml
@@ -1,6 +1,7 @@
 - name: Install basic features
   hosts: all
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
 
   tasks:
     - name: Update apt
diff --git a/playbooks/linux/ubuntu-server/nextcloud_full_deployment/connect_nextcloud_collabora.yml b/playbooks/linux/ubuntu-server/nextcloud_full_deployment/connect_nextcloud_collabora.yml
index 36f47ea..8f1cec4 100644
--- a/playbooks/linux/ubuntu-server/nextcloud_full_deployment/connect_nextcloud_collabora.yml
+++ b/playbooks/linux/ubuntu-server/nextcloud_full_deployment/connect_nextcloud_collabora.yml
@@ -4,6 +4,7 @@
 - name: Bootstrap – ensure acl is installed
   hosts: nextcloud
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
   gather_facts: false
 
   tasks:
@@ -23,6 +24,7 @@
 - name: Install richdocuments and configure Office
   hosts: nextcloud
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
   vars_files:
     - vars/shared_vars.yml
 
diff --git a/playbooks/linux/ubuntu-server/nextcloud_full_deployment/deploy_collabora_code.yml b/playbooks/linux/ubuntu-server/nextcloud_full_deployment/deploy_collabora_code.yml
index 2de73d4..6c5a6d2 100644
--- a/playbooks/linux/ubuntu-server/nextcloud_full_deployment/deploy_collabora_code.yml
+++ b/playbooks/linux/ubuntu-server/nextcloud_full_deployment/deploy_collabora_code.yml
@@ -4,6 +4,7 @@
 - name: Bootstrap – ensure acl is installed
   hosts: collabora_code
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
   gather_facts: false
 
   tasks:
@@ -23,6 +24,7 @@
 - name: Add Collabore signing key and sources
   hosts: collabora_code
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
 
   tasks:
   - name: Ensure the apt keyrings directory exists
@@ -62,6 +64,7 @@
 - name: Configure Collabora CODE
   hosts: collabora_code
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
 
   vars_files:
     - vars/shared_vars.yml
@@ -87,6 +90,7 @@
 - name: Install apache2 and configure reverse proxy with SSL for Collabora CODE
   hosts: collabora_code
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
 
   vars_files:
     - vars/shared_vars.yml
diff --git a/playbooks/linux/ubuntu-server/nextcloud_full_deployment/deploy_hardened_nextcloud.yml b/playbooks/linux/ubuntu-server/nextcloud_full_deployment/deploy_hardened_nextcloud.yml
index 7e29363..48f944f 100644
--- a/playbooks/linux/ubuntu-server/nextcloud_full_deployment/deploy_hardened_nextcloud.yml
+++ b/playbooks/linux/ubuntu-server/nextcloud_full_deployment/deploy_hardened_nextcloud.yml
@@ -4,6 +4,7 @@
 - name: Bootstrap – ensure acl is installed
   hosts: nextcloud
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
   gather_facts: false
 
   tasks:
@@ -23,6 +24,7 @@
 - name: Install and configure Nextcloud
   hosts: nextcloud
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
 
   vars_files:
     - vars/shared_vars.yml
@@ -377,6 +379,7 @@
 - name: Harden Nextcloud install
   hosts: nextcloud
   become: true
+  become_exe: "{{ 'sudo.ws' if ansible_facts.packages['sudo-rs'] is defined else 'sudo' }}" # Temporary workaround for sudo-rs on Ubuntu 25.10 or later including 26.04 LTS (Lunar Lobster).
 
   vars_files:
     - vars/shared_vars.yml