[PATCH 1/3] common: use fallback for group inference on remote systems

[Luis Chamberlain <mcgrof@kernel.org>]

  When provisioning remote bare metal systems or VMs with different
  user configurations, getent group <username> may fail if the user's
  primary group has a different name. This is common in:
  - Enterprise environments with LDAP/AD integration
  - Bare metal systems with pre-existing user configurations
  - Systems like NixOS with different group naming conventions
  - Cloud/managed hosting with auto-generated group names

Add fallback to extract the primary GID from the passwd entry and
look up the group by GID, which is more reliable across diverse
system configurations.

Signed-off-by: Luis Chamberlain <mcgrof@kernel.org>
---
 playbooks/roles/common/tasks/main.yml | 29 +++++++++++++++++++++++++--
 1 file changed, 27 insertions(+), 2 deletions(-)

diff --git a/playbooks/roles/common/tasks/main.yml b/playbooks/roles/common/tasks/main.yml
index 3ee08018..bb92fea8 100644
--- a/playbooks/roles/common/tasks/main.yml
+++ b/playbooks/roles/common/tasks/main.yml
@@ -55,9 +55,34 @@
   when:
     - infer_uid_and_group|bool
 
-- name: Override user and group with inferred settings if feature is enabled
-  ansible.builtin.set_fact:
+- name: Get primary group ID from user entry
+  set_fact:
+    user_primary_gid: "{{ getent_running_user.ansible_facts.getent_passwd[target_user][2] }}"
+  when:
+    - infer_uid_and_group|bool
+    - getent_on_group.rc | default(1) != 0
+
+- name: Run getent against the primary group ID
+  getent:
+    database: group
+    key: "{{ user_primary_gid }}"
+  register: getent_primary_group
+  when:
+    - infer_uid_and_group|bool
+    - getent_on_group.rc | default(1) != 0
+
+- name: Override user and group with inferred settings if feature is enabled (group found by name)
+  set_fact:
     data_user: "{{ target_user }}"
     data_group: "{{ ((getent_on_group.values() | first).values() | first).keys() | first }}"
   when:
     - infer_uid_and_group|bool
+    - getent_on_group.rc | default(1) == 0
+
+- name: Override user and group with inferred settings if feature is enabled (group found by GID)
+  set_fact:
+    data_user: "{{ target_user }}"
+    data_group: "{{ getent_primary_group.ansible_facts.getent_group.keys() | first }}"
+  when:
+    - infer_uid_and_group|bool
+    - getent_on_group.rc | default(1) != 0
-- 
2.50.1