Add support for the sandbox sudoer.

playbooks/roles/xserver/tasks/main.yml

@@ -12,6 +12,11 @@
 - name: create sandbox python directory
   file: path={{ xserver_sandbox_venv_dir }} owner=ubuntu group=adm mode=2775 state=directory
 
+- name: create sandbox sudoers file
+  template: src=99-sandbox.j2 dest=/etc/sudoers.d/99-sandbox owner=root group=root mode=0440
+  tags:
+  - testit
+
 - name: create sandbox python
   command: /usr/local/bin/virtualenv {{ xserver_sandbox_venv_dir }} --distribute creates={{ xserver_sandbox_venv_dir }}/bin/activate
 

playbooks/roles/xserver/templates/99-sandbox.j2

+www-data ALL=(sandbox) NOPASSWD:{{xserver_sandbox_venv_dir}}/bin/python