[DEPRECATION WARNING]: ANSIBLE_COLLECTIONS_PATHS option, does not fit var
naming standard, use the singular form ANSIBLE_COLLECTIONS_PATH instead. This
feature will be removed from ansible-core in version 2.19. Deprecation warnings
can be disabled by setting deprecation_warnings=False in ansible.cfg.
ansible-playbook [core 2.16.9]
config file = None
configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /usr/local/lib/python3.12/site-packages/ansible
ansible collection location = /tmp/tmp.lvyeWnIQps
executable location = /usr/local/bin/ansible-playbook
python version = 3.12.1 (main, Feb 21 2024, 14:18:26) [GCC 8.5.0 20210514 (Red Hat 8.5.0-21)] (/usr/bin/python3.12)
jinja version = 3.1.4
libyaml = True
No config file found; using defaults
running playbook inside collection fedora.linux_system_roles
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.profile_tasks to ansible.posix.profile_tasks
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
PLAYBOOK: tests_reboot.yml *****************************************************
1 plays in /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml
PLAY [Ensure we can set crypto policy including reboot of the system] **********
TASK [Gathering Facts] *********************************************************
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml:3
Saturday 27 July 2024 00:23:44 -0400 (0:00:00.008) 0:00:00.008 *********
ok: [managed_node1]
TASK [Ensure we can set crypto policy including reboot of the system] **********
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml:11
Saturday 27 July 2024 00:23:45 -0400 (0:00:01.065) 0:00:01.073 *********
TASK [fedora.linux_system_roles.crypto_policies : Set platform/version specific variables] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:3
Saturday 27 July 2024 00:23:45 -0400 (0:00:00.033) 0:00:01.106 *********
included: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml for managed_node1
TASK [fedora.linux_system_roles.crypto_policies : Ensure ansible_facts used by role] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml:2
Saturday 27 July 2024 00:23:45 -0400 (0:00:00.021) 0:00:01.128 *********
skipping: [managed_node1] => {
"changed": false,
"false_condition": "__crypto_policies_required_facts | difference(ansible_facts.keys() | list) | length > 0",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.crypto_policies : Check if system is ostree] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml:10
Saturday 27 July 2024 00:23:45 -0400 (0:00:00.029) 0:00:01.157 *********
ok: [managed_node1] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [fedora.linux_system_roles.crypto_policies : Set flag to indicate system is ostree] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml:15
Saturday 27 July 2024 00:23:45 -0400 (0:00:00.427) 0:00:01.585 *********
ok: [managed_node1] => {
"ansible_facts": {
"__crypto_policies_is_ostree": false
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Set platform/version specific variables] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml:19
Saturday 27 July 2024 00:23:45 -0400 (0:00:00.023) 0:00:01.609 *********
skipping: [managed_node1] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed_node1] => (item=CentOS.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "CentOS.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed_node1] => (item=CentOS_8.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "CentOS_8.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed_node1] => (item=CentOS_8.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "CentOS_8.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed_node1] => {
"changed": false
}
MSG:
All items skipped
TASK [fedora.linux_system_roles.crypto_policies : Ensure required packages are installed] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:6
Saturday 27 July 2024 00:23:45 -0400 (0:00:00.034) 0:00:01.644 *********
ok: [managed_node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: crypto-policies crypto-policies-scripts
TASK [fedora.linux_system_roles.crypto_policies : Gather facts] ****************
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:12
Saturday 27 July 2024 00:23:48 -0400 (0:00:02.565) 0:00:04.209 *********
included: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml for managed_node1
TASK [fedora.linux_system_roles.crypto_policies : Find out what is the currently active policy] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:3
Saturday 27 July 2024 00:23:48 -0400 (0:00:00.023) 0:00:04.233 *********
ok: [managed_node1] => {
"changed": false,
"cmd": [
"update-crypto-policies",
"--show"
],
"delta": "0:00:00.048308",
"end": "2024-07-27 00:23:48.919708",
"rc": 0,
"start": "2024-07-27 00:23:48.871400"
}
STDOUT:
DEFAULT
TASK [fedora.linux_system_roles.crypto_policies : Set current policy fact] *****
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:9
Saturday 27 July 2024 00:23:48 -0400 (0:00:00.472) 0:00:04.705 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_active": "DEFAULT"
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Find base policies files] ****
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:15
Saturday 27 July 2024 00:23:48 -0400 (0:00:00.018) 0:00:04.723 *********
ok: [managed_node1] => {
"changed": false,
"examined": 7,
"files": [
{
"atime": 1716968748.851,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047304,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/DEFAULT.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 2153,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047305,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/EMPTY.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 267,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047306,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/FIPS.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 1726,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047307,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/FUTURE.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 2102,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047308,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/LEGACY.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 2471,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
],
"matched": 5,
"skipped_paths": {}
}
MSG:
All paths examined
TASK [fedora.linux_system_roles.crypto_policies : Set available base policies fact] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:23
Saturday 27 July 2024 00:23:49 -0400 (0:00:00.433) 0:00:05.156 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_available_policies": [
"DEFAULT",
"EMPTY",
"FIPS",
"FUTURE",
"LEGACY"
]
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Find subpolicy files] ********
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:30
Saturday 27 July 2024 00:23:49 -0400 (0:00:00.034) 0:00:05.191 *********
ok: [managed_node1] => {
"changed": false,
"examined": 5,
"files": [
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695037,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 322,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695038,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 121,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695039,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 90,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695104,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 123,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695105,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 1986,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
],
"matched": 5,
"skipped_paths": {}
}
MSG:
All paths examined
TASK [fedora.linux_system_roles.crypto_policies : Set available subpolicies fact] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:38
Saturday 27 July 2024 00:23:49 -0400 (0:00:00.328) 0:00:05.520 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_available_subpolicies": [
"AD-SUPPORT",
"ECDHE-ONLY",
"NO-CAMELLIA",
"NO-SHA1",
"OSPP"
]
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:45
Saturday 27 July 2024 00:23:49 -0400 (0:00:00.034) 0:00:05.554 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_available_modules": [
"AD-SUPPORT",
"ECDHE-ONLY",
"NO-CAMELLIA",
"NO-SHA1",
"OSPP"
]
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Update crypto policy if needed] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:51
Saturday 27 July 2024 00:23:49 -0400 (0:00:00.017) 0:00:05.572 *********
Notification for handler __crypto_policies_handler_modified has been saved.
changed: [managed_node1] => {
"changed": true,
"cmd": [
"update-crypto-policies",
"--set",
"FUTURE"
],
"delta": "0:00:00.134331",
"end": "2024-07-27 00:23:50.253807",
"rc": 0,
"start": "2024-07-27 00:23:50.119476"
}
STDOUT:
Setting system policy to FUTURE
Note: System-wide crypto policies are applied on application start-up.
It is recommended to restart the system for the change of policies
to fully take place.
TASK [fedora.linux_system_roles.crypto_policies : Set the reboot_required flag if needed] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:63
Saturday 27 July 2024 00:23:50 -0400 (0:00:00.467) 0:00:06.039 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_reboot_required": true
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Update facts after applying policy] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:71
Saturday 27 July 2024 00:23:50 -0400 (0:00:00.022) 0:00:06.062 *********
included: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml for managed_node1
TASK [fedora.linux_system_roles.crypto_policies : Find out what is the currently active policy] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:3
Saturday 27 July 2024 00:23:50 -0400 (0:00:00.022) 0:00:06.085 *********
ok: [managed_node1] => {
"changed": false,
"cmd": [
"update-crypto-policies",
"--show"
],
"delta": "0:00:00.050047",
"end": "2024-07-27 00:23:50.668029",
"rc": 0,
"start": "2024-07-27 00:23:50.617982"
}
STDOUT:
FUTURE
TASK [fedora.linux_system_roles.crypto_policies : Set current policy fact] *****
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:9
Saturday 27 July 2024 00:23:50 -0400 (0:00:00.365) 0:00:06.450 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_active": "FUTURE"
},
"changed": false
}
TASK [Flush handlers] **********************************************************
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml:19
Saturday 27 July 2024 00:23:50 -0400 (0:00:00.020) 0:00:06.471 *********
NOTIFIED HANDLER fedora.linux_system_roles.crypto_policies : Reboot the managed host to apply crypto policies changes for managed_node1
NOTIFIED HANDLER fedora.linux_system_roles.crypto_policies : Clear the crypto_policies_reboot_required flag for managed_node1
META: triggered running handlers for managed_node1
RUNNING HANDLER [fedora.linux_system_roles.crypto_policies : Reboot the managed host to apply crypto policies changes] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/handlers/main.yml:4
Saturday 27 July 2024 00:23:50 -0400 (0:00:00.006) 0:00:06.477 *********
changed: [managed_node1] => {
"changed": true,
"elapsed": 25,
"rebooted": true
}
RUNNING HANDLER [fedora.linux_system_roles.crypto_policies : Clear the crypto_policies_reboot_required flag] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/handlers/main.yml:11
Saturday 27 July 2024 00:24:17 -0400 (0:00:26.483) 0:00:32.961 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_reboot_required": false
},
"changed": false
}
TASK [Check the current policy is FUTURE] **************************************
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml:22
Saturday 27 July 2024 00:24:17 -0400 (0:00:00.033) 0:00:32.994 *********
ok: [managed_node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Restore policy to DEFAULT] ***********************************************
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml:29
Saturday 27 July 2024 00:24:17 -0400 (0:00:00.019) 0:00:33.014 *********
TASK [fedora.linux_system_roles.crypto_policies : Set platform/version specific variables] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:3
Saturday 27 July 2024 00:24:17 -0400 (0:00:00.038) 0:00:33.053 *********
included: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml for managed_node1
TASK [fedora.linux_system_roles.crypto_policies : Ensure ansible_facts used by role] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml:2
Saturday 27 July 2024 00:24:17 -0400 (0:00:00.022) 0:00:33.075 *********
skipping: [managed_node1] => {
"changed": false,
"false_condition": "__crypto_policies_required_facts | difference(ansible_facts.keys() | list) | length > 0",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.crypto_policies : Check if system is ostree] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml:10
Saturday 27 July 2024 00:24:17 -0400 (0:00:00.030) 0:00:33.105 *********
skipping: [managed_node1] => {
"changed": false,
"false_condition": "not __crypto_policies_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.crypto_policies : Set flag to indicate system is ostree] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml:15
Saturday 27 July 2024 00:24:17 -0400 (0:00:00.019) 0:00:33.125 *********
skipping: [managed_node1] => {
"changed": false,
"false_condition": "not __crypto_policies_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.crypto_policies : Set platform/version specific variables] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml:19
Saturday 27 July 2024 00:24:17 -0400 (0:00:00.018) 0:00:33.143 *********
skipping: [managed_node1] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed_node1] => (item=CentOS.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "CentOS.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed_node1] => (item=CentOS_8.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "CentOS_8.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed_node1] => (item=CentOS_8.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "CentOS_8.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed_node1] => {
"changed": false
}
MSG:
All items skipped
TASK [fedora.linux_system_roles.crypto_policies : Ensure required packages are installed] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:6
Saturday 27 July 2024 00:24:17 -0400 (0:00:00.033) 0:00:33.177 *********
ok: [managed_node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: crypto-policies crypto-policies-scripts
TASK [fedora.linux_system_roles.crypto_policies : Gather facts] ****************
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:12
Saturday 27 July 2024 00:24:21 -0400 (0:00:04.244) 0:00:37.421 *********
included: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml for managed_node1
TASK [fedora.linux_system_roles.crypto_policies : Find out what is the currently active policy] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:3
Saturday 27 July 2024 00:24:21 -0400 (0:00:00.021) 0:00:37.443 *********
ok: [managed_node1] => {
"changed": false,
"cmd": [
"update-crypto-policies",
"--show"
],
"delta": "0:00:00.073969",
"end": "2024-07-27 00:24:21.746182",
"rc": 0,
"start": "2024-07-27 00:24:21.672213"
}
STDOUT:
FUTURE
TASK [fedora.linux_system_roles.crypto_policies : Set current policy fact] *****
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:9
Saturday 27 July 2024 00:24:22 -0400 (0:00:00.391) 0:00:37.834 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_active": "FUTURE"
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Find base policies files] ****
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:15
Saturday 27 July 2024 00:24:22 -0400 (0:00:00.017) 0:00:37.852 *********
ok: [managed_node1] => {
"changed": false,
"examined": 7,
"files": [
{
"atime": 1716968748.851,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047304,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/DEFAULT.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 2153,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047305,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/EMPTY.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 267,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047306,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/FIPS.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 1726,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1722054230.1634157,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047307,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/FUTURE.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 2102,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4047308,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/LEGACY.pol",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 2471,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
],
"matched": 5,
"skipped_paths": {}
}
MSG:
All paths examined
TASK [fedora.linux_system_roles.crypto_policies : Set available base policies fact] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:23
Saturday 27 July 2024 00:24:22 -0400 (0:00:00.331) 0:00:38.184 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_available_policies": [
"DEFAULT",
"EMPTY",
"FIPS",
"FUTURE",
"LEGACY"
]
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Find subpolicy files] ********
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:30
Saturday 27 July 2024 00:24:22 -0400 (0:00:00.036) 0:00:38.220 *********
ok: [managed_node1] => {
"changed": false,
"examined": 5,
"files": [
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695037,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 322,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695038,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 121,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695039,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 90,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695104,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 123,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
},
{
"atime": 1690903086.0,
"ctime": 1716968718.641,
"dev": 51713,
"gid": 0,
"gr_name": "root",
"inode": 4695105,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mode": "0644",
"mtime": 1690903086.0,
"nlink": 1,
"path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod",
"pw_name": "root",
"rgrp": true,
"roth": true,
"rusr": true,
"size": 1986,
"uid": 0,
"wgrp": false,
"woth": false,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
],
"matched": 5,
"skipped_paths": {}
}
MSG:
All paths examined
TASK [fedora.linux_system_roles.crypto_policies : Set available subpolicies fact] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:38
Saturday 27 July 2024 00:24:22 -0400 (0:00:00.334) 0:00:38.555 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_available_subpolicies": [
"AD-SUPPORT",
"ECDHE-ONLY",
"NO-CAMELLIA",
"NO-SHA1",
"OSPP"
]
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:45
Saturday 27 July 2024 00:24:22 -0400 (0:00:00.035) 0:00:38.590 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_available_modules": [
"AD-SUPPORT",
"ECDHE-ONLY",
"NO-CAMELLIA",
"NO-SHA1",
"OSPP"
]
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Update crypto policy if needed] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:51
Saturday 27 July 2024 00:24:22 -0400 (0:00:00.018) 0:00:38.608 *********
Notification for handler __crypto_policies_handler_modified has been saved.
changed: [managed_node1] => {
"changed": true,
"cmd": [
"update-crypto-policies",
"--set",
"DEFAULT"
],
"delta": "0:00:00.159253",
"end": "2024-07-27 00:24:23.103701",
"rc": 0,
"start": "2024-07-27 00:24:22.944448"
}
STDOUT:
Setting system policy to DEFAULT
Note: System-wide crypto policies are applied on application start-up.
It is recommended to restart the system for the change of policies
to fully take place.
TASK [fedora.linux_system_roles.crypto_policies : Set the reboot_required flag if needed] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:63
Saturday 27 July 2024 00:24:23 -0400 (0:00:00.480) 0:00:39.089 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_reboot_required": true
},
"changed": false
}
TASK [fedora.linux_system_roles.crypto_policies : Update facts after applying policy] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:71
Saturday 27 July 2024 00:24:23 -0400 (0:00:00.023) 0:00:39.113 *********
included: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml for managed_node1
TASK [fedora.linux_system_roles.crypto_policies : Find out what is the currently active policy] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:3
Saturday 27 July 2024 00:24:23 -0400 (0:00:00.022) 0:00:39.135 *********
ok: [managed_node1] => {
"changed": false,
"cmd": [
"update-crypto-policies",
"--show"
],
"delta": "0:00:00.052622",
"end": "2024-07-27 00:24:23.562180",
"rc": 0,
"start": "2024-07-27 00:24:23.509558"
}
STDOUT:
DEFAULT
TASK [fedora.linux_system_roles.crypto_policies : Set current policy fact] *****
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:9
Saturday 27 July 2024 00:24:23 -0400 (0:00:00.377) 0:00:39.513 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_active": "DEFAULT"
},
"changed": false
}
TASK [Flush handlers] **********************************************************
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml:41
Saturday 27 July 2024 00:24:23 -0400 (0:00:00.022) 0:00:39.536 *********
NOTIFIED HANDLER fedora.linux_system_roles.crypto_policies : Reboot the managed host to apply crypto policies changes for managed_node1
NOTIFIED HANDLER fedora.linux_system_roles.crypto_policies : Clear the crypto_policies_reboot_required flag for managed_node1
META: triggered running handlers for managed_node1
RUNNING HANDLER [fedora.linux_system_roles.crypto_policies : Reboot the managed host to apply crypto policies changes] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/handlers/main.yml:4
Saturday 27 July 2024 00:24:23 -0400 (0:00:00.005) 0:00:39.541 *********
changed: [managed_node1] => {
"changed": true,
"elapsed": 22,
"rebooted": true
}
RUNNING HANDLER [fedora.linux_system_roles.crypto_policies : Clear the crypto_policies_reboot_required flag] ***
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/handlers/main.yml:11
Saturday 27 July 2024 00:24:47 -0400 (0:00:23.476) 0:01:03.018 *********
ok: [managed_node1] => {
"ansible_facts": {
"crypto_policies_reboot_required": false
},
"changed": false
}
TASK [Check the current policy has been restored to DEFAULT] *******************
task path: /tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml:43
Saturday 27 July 2024 00:24:47 -0400 (0:00:00.032) 0:01:03.050 *********
ok: [managed_node1] => {
"changed": false
}
MSG:
All assertions passed
PLAY RECAP *********************************************************************
managed_node1 : ok=39 changed=4 unreachable=0 failed=0 skipped=6 rescued=0 ignored=0
Saturday 27 July 2024 00:24:47 -0400 (0:00:00.027) 0:01:03.077 *********
===============================================================================
fedora.linux_system_roles.crypto_policies : Reboot the managed host to apply crypto policies changes -- 26.48s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/handlers/main.yml:4
fedora.linux_system_roles.crypto_policies : Reboot the managed host to apply crypto policies changes -- 23.48s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/handlers/main.yml:4
fedora.linux_system_roles.crypto_policies : Ensure required packages are installed --- 4.24s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:6
fedora.linux_system_roles.crypto_policies : Ensure required packages are installed --- 2.57s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:6
Gathering Facts --------------------------------------------------------- 1.07s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml:3
fedora.linux_system_roles.crypto_policies : Update crypto policy if needed --- 0.48s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:51
fedora.linux_system_roles.crypto_policies : Find out what is the currently active policy --- 0.47s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:3
fedora.linux_system_roles.crypto_policies : Update crypto policy if needed --- 0.47s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:51
fedora.linux_system_roles.crypto_policies : Find base policies files ---- 0.43s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:15
fedora.linux_system_roles.crypto_policies : Check if system is ostree --- 0.43s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/set_vars.yml:10
fedora.linux_system_roles.crypto_policies : Find out what is the currently active policy --- 0.39s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:3
fedora.linux_system_roles.crypto_policies : Find out what is the currently active policy --- 0.38s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:3
fedora.linux_system_roles.crypto_policies : Find out what is the currently active policy --- 0.37s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/gather_facts.yml:3
fedora.linux_system_roles.crypto_policies : Find subpolicy files -------- 0.33s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:30
fedora.linux_system_roles.crypto_policies : Find base policies files ---- 0.33s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:15
fedora.linux_system_roles.crypto_policies : Find subpolicy files -------- 0.33s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:30
Restore policy to DEFAULT ----------------------------------------------- 0.04s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/tests/crypto_policies/tests_reboot.yml:29
fedora.linux_system_roles.crypto_policies : Set available base policies fact --- 0.04s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:23
fedora.linux_system_roles.crypto_policies : Set available subpolicies fact --- 0.04s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:38
fedora.linux_system_roles.crypto_policies : Set available subpolicies fact --- 0.03s
/tmp/tmp.lvyeWnIQps/ansible_collections/fedora/linux_system_roles/roles/crypto_policies/tasks/main.yml:38