Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add a bit of debugging to crypto-policies

Browse source 
aka why isn't it working on a64 worker02

Signed-off-by: Adam Williamson <awilliam@redhat.com>
This commit is contained in:
Adam Williamson 2020-10-30 13:05:29 -07:00
parent b60dce6bdc
commit e02baf2149
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/base/tasks/crypto-policies.yml
View file

@ -16,6 +16,9 @@
- crypto-policies - crypto-policies
- base/crypto-policies - base/crypto-policies
- debug:
msg: "admv is {{ ansible_distribution_major_version }} ccp is {{ currentcryptopolicy.stdout }} cpa is {{ cryptopolicyapplied.rc }} "
- name: Set crypto-policy on fedora 33 and higher hosts to allow 2fa to work - name: Set crypto-policy on fedora 33 and higher hosts to allow 2fa to work
command: "update-crypto-policies --set LEGACY" command: "update-crypto-policies --set LEGACY"
when: "ansible_distribution_major_version|int >= 33 and (currentcryptopolicy.stdout.find('LEGACY') == -1 or cryptopolicyapplied.rc != 0)" when: "ansible_distribution_major_version|int >= 33 and (currentcryptopolicy.stdout.find('LEGACY') == -1 or cryptopolicyapplied.rc != 0)"