fix: become true

tasks/root_user.yml

@@ -5,13 +5,15 @@
   when: first_contact_root_password_update and first_contact_root_password is none or (first_contact_root_password | default('')) == ''
 
 - name: "Ensure correct first_contact_root_password is set: root"
+  become: true
   ansible.builtin.user:
     name: "root"
     password: "{{ first_contact_root_password | password_hash('sha512') }}"
     update_password: "always"
   when: first_contact_root_password_update
 
 - name: "Ensure SSH is disabled for root"
+  become: true
   ansible.builtin.lineinfile:
     path: "/etc/ssh/sshd_config"
     regexp: "^PermitRootLogin"
@@ -21,20 +23,23 @@
   when: first_contact_root_ssh_disable
 
 - name: "Ensure root user login is disabled"
+  become: true
   ansible.builtin.user:
     name: "root"
     shell: "/sbin/nologin"
     state: present
   when: first_contact_root_login_disable is true
 
 - name: "Ensure root user login is enabled"
+  become: true
   ansible.builtin.user:
     name: "root"
     shell: "/bin/bash"
     state: present
   when: first_contact_root_login_disable is false
 
 - name: "Restart SSH service"
+  become: true
   ansible.builtin.service:
     name: sshd
     state: restarted