Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-10 09:14:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

Make disabling unused filesystems idempotent

Browse source 
The `os_unused_filesystems` was lacking sorting, making the task not
idempotent. This was especially apparent and random in Molecule tests
when this collection was added as a dependency.

Signed-off-by: Aki Kanellis <hello@akikanellis.com>
This commit is contained in:
Aki Kanellis 2023-11-19 19:57:31 +00:00
parent dc432ba71c
commit a15159d072
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/os_hardening/templates/etc/modprobe.d/modprobe.j2
View file

@ -1,6 +1,6 @@
{{ ansible_managed | comment }}
# Generated by Ansible role {{ ansible_role_name }}
{% for fs in os_unused_filesystems | difference(os_filesystem_whitelist) %}
{% for fs in os_unused_filesystems | difference(os_filesystem_whitelist) | sort %}
install {{fs}} /bin/true
{% endfor %}