From 261b37460586598c2d56f9a829a5d86fd97fb63c Mon Sep 17 00:00:00 2001
From: Sam <samueljamesinc@gmail.com>
Date: Wed, 26 Aug 2026 15:37:05 -0400
Subject: [PATCH] =?UTF-8?q?bootstrap:=20fix=20[5b]=20docker-group=20add=20?=
 =?UTF-8?q?=E2=80=94=20use=20stat=20check=20(old=20when:=20silently=20skip?=
 =?UTF-8?q?ped)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 playbooks/bootstrap.yml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/playbooks/bootstrap.yml b/playbooks/bootstrap.yml
index 5e18605..3fa90ab 100644
--- a/playbooks/bootstrap.yml
+++ b/playbooks/bootstrap.yml
@@ -175,13 +175,23 @@
         mode: "0440"
         validate: "visudo -cf %s"
 
-    - name: "[5b] add {{ managed_user }} to docker group (if docker present)"
+    - name: "[5b] check if docker binary exists"
+      ansible.builtin.stat:
+        path: /usr/bin/docker
+      register: docker_bin
+
+    - name: "[5b] ensure 'docker' group exists (if docker installed)"
+      ansible.builtin.group:
+        name: docker
+        state: present
+      when: docker_bin.stat.exists
+
+    - name: "[5b] add {{ managed_user }} to docker group (if docker installed)"
       ansible.builtin.user:
         name: "{{ managed_user }}"
         groups: docker
         append: true
-      when: "'/usr/bin/docker' is exists or 'docker' in ansible_facts.packages | default({})"
-      failed_when: false
+      when: docker_bin.stat.exists
 
     # ---------- SAFETY CHECK: ansible key login must work ----------
     - name: "[6] SAFETY — verify {{ managed_user }} can log in via SSH key (from the runner)"