We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
When the install directory is /opt as it appears to be in OpenSuse, the tasks to copy the CIS Sysctl settings fail.
Needs to copy from /opt/rke2/share/rke2/rke2-cis-sysctl.conf
The following lines from roles/rke2_common/tasks/cis-hardening.yml do not check /opt which RKE2 may be installed in
Default is /usr/local, unless /usr/local is read-only or has a dedicated mount point, # in which case /opt/rke2 is used instead.
- name: Copy systemctl file for kernel hardening for yum installs ansible.builtin.copy: src: /usr/share/rke2/rke2-cis-sysctl.conf dest: /etc/sysctl.d/60-rke2-cis.conf remote_src: true mode: 0600 register: sysctl_operation_yum when: - ansible_os_family == 'RedHat' or ansible_os_family == 'Rocky' - not rke2_binary_tarball_check.stat.exists - rke2_tarball_url is not defined or rke2_tarball_url == "" - name: Copy systemctl file for kernel hardening for non-yum installs ansible.builtin.copy: src: /usr/local/share/rke2/rke2-cis-sysctl.conf dest: /etc/sysctl.d/60-rke2-cis.conf remote_src: yes mode: 0600 register: sysctl_operation_tarball when: >- (ansible_facts['os_family'] != 'RedHat' and ansible_facts['os_family'] != 'Rocky') or rke2_binary_tarball_check.stat.exists or (rke2_tarball_url is defined and rke2_tarball_url != "")
The text was updated successfully, but these errors were encountered:
Successfully merging a pull request may close this issue.
When the install directory is /opt as it appears to be in OpenSuse, the tasks to copy the CIS Sysctl settings fail.
Needs to copy from
/opt/rke2/share/rke2/rke2-cis-sysctl.conf
The following lines from roles/rke2_common/tasks/cis-hardening.yml do not check /opt which RKE2 may be installed in
The text was updated successfully, but these errors were encountered: