group

Manages local groups -- create, modify, and delete groups.

Parameters

Parameter	Required	Default	Description
`group`	Yes	--	Group name.
`state`	Yes	--	Desired state: `present` or `absent`.
`gid`	No	--	Desired GID (group ID).
`system`	No	`false`	If `true`, create as a system group (`groupadd --system`, GID < 1000).
`members`	No	--	Comma-separated user list. Ensures exact membership: adds missing users, removes extras.

States

present -- Ensure the group exists. If gid is specified and differs, modify it with groupmod.
absent -- Delete the group.

Idempotency

Reads /etc/group to check if the group exists and its current GID. Only creates or modifies when drift is detected.

Examples

Basic

resources:
  - name: docker group
    type: group
    group: docker

With specific GID

resources:
  - name: myapp group
    type: group
    group: myapp
    gid: "1500"

With depends_on

resources:
  - name: app-group
    type: group
    group: myapp

  - name: app-user
    type: user
    username: myapp
    group: myapp
    depends_on: app-group

System group with managed members

resources:
  - name: app-group
    type: group
    group: myapp
    system: "true"
    members: "deploy,ci"

Remove a group

resources:
  - name: old-group
    type: group
    group: old-group
    state: absent

Platform

Linux only.

Notes

Uses groupadd, groupmod, and groupdel commands.