Commit Graph

35 Commits

Author SHA1 Message Date
Kevin Fenzi
d74c28a2c8 basessh: try and set /usr/bin/python for the delegations to batcave01 for python3 using hosts.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-06-16 20:01:10 +00:00
Karsten Hopp
a713ec2e71 basessh: dnf -> package 2019-06-11 14:55:11 +00:00
Stephen Smoogen
309677ee8a try to figure out which of the identical named jobs arent working on grobisplitter 2019-06-01 17:48:43 +00:00
Mikolaj Izdebski
3cedc1366b basessh: Fix libselinux-python installation on Fedora >= 31 2019-04-11 15:24:49 +02:00
Mikolaj Izdebski
6680b25ef8 basessh: Fix conditionals for installing libselinux-python 2019-04-11 15:18:39 +02:00
Kevin Fenzi
321c458292 basessh: switch fedora to use dnf here (since package wants dnf-2)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-04-08 20:59:29 +00:00
Patrick Uiterwijk
4f3c609815 basessh: Migrate sshd config to single template and strengthen ciphers
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-04-08 18:51:31 +02:00
Kevin Fenzi
76789fc3be basessh: Fedora 30 also has no python3 version of libselinux, add conditionals.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-03-28 16:10:09 +00:00
Kevin Fenzi
abff8931f9 basessh: adjust for package names in rhel8beta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-12 22:14:49 +00:00
Rick Elrod
f3a72d1039 remove all instances of bkernel01/02
Signed-off-by: Rick Elrod <relrod@redhat.com>
2018-08-22 21:15:17 +00:00
Patrick Uiterwijk
350110f769 Only run date once
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-20 17:35:01 +00:00
Patrick Uiterwijk
dcc9aa15d2 Use a date pipe lookup, since sometime ansible_date_Time seems to be undefined...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-20 17:33:42 +00:00
Patrick Uiterwijk
7cce79de07 Also integer-ize the epoch
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-16 17:42:17 +00:00
Patrick Uiterwijk
b35d4402e1 Try to convert this string to int
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-16 17:40:59 +00:00
Patrick Uiterwijk
9b48361d76 Do the loop
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-16 17:39:55 +00:00
Patrick Uiterwijk
d31019a444 Renew SSH cert if it was last modified more than 10 months ago
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-16 17:38:14 +00:00
Patrick Uiterwijk
03dc378215 Revert "For now, just renew all the certs" - they are renewed
This reverts commit 36357599cf.
2018-08-14 19:27:42 +00:00
Patrick Uiterwijk
36357599cf For now, just renew all the certs
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-14 18:08:04 +00:00
Kevin Fenzi
c6bc13809a do not care that a tmp dir does not exist in basessh 2017-12-23 20:09:26 +00:00
Kevin Fenzi
ac481b9a2c make sure we have libselinux-python here 2017-12-08 21:44:18 +00:00
Patrick Uiterwijk
2aeb91e62f Use a per-host keydir
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-12-05 01:44:30 +00:00
Kevin Fenzi
8000aa8b76 Revert "see if we can defer facts gathering until after ssh host key setup is done"
This reverts commit ff8f5e1930.
2017-10-13 01:27:33 +00:00
Kevin Fenzi
ff8f5e1930 see if we can defer facts gathering until after ssh host key setup is done 2017-10-13 01:26:11 +00:00
Kevin Fenzi
2e0b111660 make this when defined 2017-10-10 19:39:36 +00:00
Kevin Fenzi
23aec06b82 try and handle provisioning a new hardware instance the first time 2017-10-10 19:24:24 +00:00
Patrick Uiterwijk
ed6687d319 Lets just use the .changed
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-09 00:30:32 +00:00
Patrick Uiterwijk
53f762b281 Try this if statement
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-09 00:23:46 +00:00
Patrick Uiterwijk
0eac85dcb2 Directly restart sshd after signing certs
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 22:17:24 +00:00
Patrick Uiterwijk
67fc1384c4 Drop the cached keys after signing and copying
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-05 10:56:20 +00:00
Kevin Fenzi
6b1fc4d83f for initial installs use gathered ssh host key, then remove and use signed ones 2017-09-04 17:24:56 +00:00
Kevin Fenzi
9718d74c09 try this 2017-08-20 21:38:08 +00:00
Kevin Fenzi
9631bf1797 try this to remove {{}} from when 2017-08-20 21:26:25 +00:00
Patrick Uiterwijk
f54f4f72f6 Allow the selinux updating to fail
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-08-16 18:32:24 +00:00
Patrick Uiterwijk
bfa06337cc Add basessh tag for consistency
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-08-16 17:44:16 +00:00
Patrick Uiterwijk
e43e0e06b1 Move SSH setup to its own role
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-08-16 17:39:23 +00:00