Q1. If you setup
root with a restrictive umask, it will affect the files created when you run ansible, right? (Unless you tell ansible to ensure a specific mode aka. permissions).
A1. Looks like it, ansible does not automatically reset the umask.
- Using ansible to upgrade ansible in envronment with restrictive umask
- [ansible-project] Temporarily setting umask
Q2. What can we conclude from this?
- Is there a way to write ansible roles that they will never depend on the umask?
- Are there disadvantages of writing an ansible role to work under this constraint?