From f7d01587a3713153bcaedecf58f9082328818e21 Mon Sep 17 00:00:00 2001 From: Rick Elrod Date: Thu, 5 Dec 2019 21:00:13 +0000 Subject: [PATCH] httpd/proxy: libsemanage here too, we should abstract this out... Signed-off-by: Rick Elrod --- roles/httpd/proxy/tasks/main.yml | 19 +++++++++++++++++-- 1 file changed, 17 insertions(+), 2 deletions(-) diff --git a/roles/httpd/proxy/tasks/main.yml b/roles/httpd/proxy/tasks/main.yml index 12be9f1f36..c449277b3a 100644 --- a/roles/httpd/proxy/tasks/main.yml +++ b/roles/httpd/proxy/tasks/main.yml @@ -53,12 +53,27 @@ - httpd - httpd/proxy -- name: Install libsemanage-python so we can manage selinux with python... - package: name=libsemanage-python state=present +- name: install libsemanage + package: + state: present + name: + - libsemanage-python tags: - httpd - httpd/proxy - selinux + when: (ansible_distribution == 'RedHat' and ansible_distribution_major_version|int < 8) or (ansible_distribution_major_version|int < 30 and ansible_distribution == 'Fedora') + +- name: install libsemanage in a python3 manner + package: + state: present + name: + - python3-libsemanage + tags: + - httpd + - httpd/proxy + - selinux + when: (ansible_distribution_major_version|int >= 30 and ansible_distribution == 'Fedora') or (ansible_distribution == 'RedHat' and ansible_distribution_major_version|int >= 8) - name: Turn on certain selinux booleans we need for our proxy layer seboolean: name={{ item }} state=true persistent=true