fix: relocate tasks to appropriate stage`

Author: samrose

ansible/tasks/setup-pgbouncer.yml

@@ -135,3 +135,11 @@
 - name: PgBouncer - reload systemd
   ansible.builtin.systemd_service:
     daemon_reload: true
+
+- name: PgBouncer - create log file
+  ansible.builtin.file:
+    path: '/var/log/pgbouncer.log'
+    state: 'touch'
+    owner: 'pgbouncer'
+    group: 'postgres'
+    mode: '0644'

ansible/tasks/setup-wal-g.yml

@@ -83,3 +83,27 @@
         regexp: "#include = '/etc/postgresql-custom/wal-g.conf'"
         replace: "include = '/etc/postgresql-custom/wal-g.conf'"
       become: true
+
+    - name: Create wal-g log directory
+      ansible.builtin.file:
+        path: '/var/log/wal-g'
+        state: 'directory'
+        owner: 'postgres'
+        group: 'postgres'
+        mode: '0300'
+
+    - name: Create wal-g log files
+      ansible.builtin.file:
+        path: "/var/log/wal-g/{{ walg_log_item }}"
+        state: 'touch'
+        owner: 'postgres'
+        group: 'postgres'
+        mode: '0300'
+      loop:
+        - 'backup-push.log'
+        - 'backup-fetch.log'
+        - 'wal-push.log'
+        - 'wal-fetch.log'
+        - 'pitr.log'
+      loop_control:
+        loop_var: 'walg_log_item'

ebssurrogate/scripts/surrogate-bootstrap-nix.sh

@@ -337,29 +337,13 @@ function clean_system {
 	# https://github.com/fail2ban/fail2ban/issues/1593
 	touch /mnt/var/log/auth.log
 
-	touch /mnt/var/log/pgbouncer.log
-	if [ -f /usr/bin/chown ]; then
-		chroot /mnt /usr/bin/chown pgbouncer:postgres /var/log/pgbouncer.log
-	fi
-
-	# Setup postgresql logs
-	mkdir -p /mnt/var/log/postgresql
-	if [ -f /usr/bin/chown ]; then
-		chroot /mnt /usr/bin/chown postgres:postgres /var/log/postgresql
-	fi
+	# Note: pgbouncer, postgresql, and wal-g log setup moved to ansible tasks
+	# (setup-pgbouncer.yml, setup-postgres.yml, setup-wal-g.yml)
+	# because those users don't exist in the Stage 1 base image
 
-	# Setup wal-g logs
-	mkdir /mnt/var/log/wal-g
-	touch /mnt/var/log/wal-g/{backup-push.log,backup-fetch.log,wal-push.log,wal-fetch.log,pitr.log}
-
-	#Creatre Sysstat directory for SAR
+	# Create Sysstat directory for SAR
 	mkdir /mnt/var/log/sysstat
 
-	if [ -f /usr/bin/chown ]; then
-		chroot /mnt /usr/bin/chown -R postgres:postgres /var/log/wal-g
-		chroot /mnt /usr/bin/chmod -R 0300 /var/log/wal-g
-	fi
-
 	# audit logs directory for apparmor
 	mkdir /mnt/var/log/audit