+ cd /tmp/tmpmwmpexgu/tests; TEST_SUBJECTS=/cache/fedora-33.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-28-e66e6f9-fedora-33-ott_anj0/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmpmwmpexgu/_setup.yml /tmp/tmpmwmpexgu/tests/tests_default.yml ansible-playbook 2.9.25 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.7 (default, Aug 30 2021, 00:00:00) [GCC 11.2.1 20210728 (Red Hat 11.2.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 1 plays in /tmp/tmpmwmpexgu/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmpmwmpexgu/_setup.yml:5 ok: [/cache/fedora-33.qcow2] => { "groups": { "all": [ "/cache/fedora-33.qcow2" ], "localhost": [ "/cache/fedora-33.qcow2" ], "subjects": [ "/cache/fedora-33.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmpmwmpexgu/_setup.yml:7 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=1 changed=0 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_default.yml **************************************************** 1 plays in /tmp/tmpmwmpexgu/tests/tests_default.yml PLAY [Ensure that the role runs with default parameters] *********************** TASK [Gathering Facts] ********************************************************* task path: /tmp/tmpmwmpexgu/tests/tests_default.yml:3 ok: [/cache/fedora-33.qcow2] META: ran handlers TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.046274", "end": "2021-11-03 01:52:59.568294", "rc": 0, "start": "2021-11-03 01:52:59.522020", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["NEXT", "FUTURE", "DEFAULT", "GOST-ONLY", "LEGACY", "FIPS", "EMPTY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["FEDORA32", "NO-CAMELLIA", "OSPP", "SHA1", "NO-SHA1", "AD-SUPPORT", "GOST", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["FEDORA32", "NO-CAMELLIA", "OSPP", "SHA1", "NO-SHA1", "AD-SUPPORT", "GOST", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:71 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:80 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.042130", "end": "2021-11-03 01:53:01.031618", "rc": 0, "start": "2021-11-03 01:53:00.989488", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} META: ran handlers TASK [Check the current policy is DEFAULT and common variables] **************** task path: /tmp/tmpmwmpexgu/tests/tests_default.yml:13 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=15 changed=0 unreachable=0 failed=0 skipped=4 rescued=0 ignored=0 + cd /tmp/tmpmwmpexgu/tests; TEST_SUBJECTS=/cache/fedora-33.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-28-e66e6f9-fedora-33-ott_anj0/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmpmwmpexgu/_setup.yml /tmp/tmpmwmpexgu/tests/tests_include_vars_from_parent.yml ansible-playbook 2.9.25 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.7 (default, Aug 30 2021, 00:00:00) [GCC 11.2.1 20210728 (Red Hat 11.2.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 1 plays in /tmp/tmpmwmpexgu/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmpmwmpexgu/_setup.yml:5 ok: [/cache/fedora-33.qcow2] => { "groups": { "all": [ "/cache/fedora-33.qcow2" ], "localhost": [ "/cache/fedora-33.qcow2" ], "subjects": [ "/cache/fedora-33.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmpmwmpexgu/_setup.yml:7 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=1 changed=0 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_include_vars_from_parent.yml *********************************** 1 plays in /tmp/tmpmwmpexgu/tests/tests_include_vars_from_parent.yml PLAY [all] ********************************************************************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmpmwmpexgu/tests/tests_include_vars_from_parent.yml:1 ok: [/cache/fedora-33.qcow2] META: ran handlers TASK [create var file in caller that can override the one in called role] ****** task path: /tmp/tmpmwmpexgu/tests/tests_include_vars_from_parent.yml:3 changed: [/cache/fedora-33.qcow2 -> localhost] => (item=Fedora-33) => {"ansible_loop_var": "item", "changed": true, "checksum": "870b2314d3f4184a363b31373f07abb444f26444", "dest": "/tmp/tmpmwmpexgu/tests/roles/caller/vars/Fedora-33.yml", "gid": 0, "group": "root", "item": "Fedora-33", "md5sum": "5a57da448a1d752b982858b38aab344d", "mode": "0600", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1635904395.8317573-16210-116199628431872/source", "state": "file", "uid": 0} changed: [/cache/fedora-33.qcow2 -> localhost] => (item=Fedora_33) => {"ansible_loop_var": "item", "changed": true, "checksum": "870b2314d3f4184a363b31373f07abb444f26444", "dest": "/tmp/tmpmwmpexgu/tests/roles/caller/vars/Fedora_33.yml", "gid": 0, "group": "root", "item": "Fedora_33", "md5sum": "5a57da448a1d752b982858b38aab344d", "mode": "0600", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1635904396.3619497-16210-30236292141083/source", "state": "file", "uid": 0} changed: [/cache/fedora-33.qcow2 -> localhost] => (item=Fedora) => {"ansible_loop_var": "item", "changed": true, "checksum": "870b2314d3f4184a363b31373f07abb444f26444", "dest": "/tmp/tmpmwmpexgu/tests/roles/caller/vars/Fedora.yml", "gid": 0, "group": "root", "item": "Fedora", "md5sum": "5a57da448a1d752b982858b38aab344d", "mode": "0600", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1635904396.7147744-16210-24907907734830/source", "state": "file", "uid": 0} changed: [/cache/fedora-33.qcow2 -> localhost] => (item=RedHat) => {"ansible_loop_var": "item", "changed": true, "checksum": "870b2314d3f4184a363b31373f07abb444f26444", "dest": "/tmp/tmpmwmpexgu/tests/roles/caller/vars/RedHat.yml", "gid": 0, "group": "root", "item": "RedHat", "md5sum": "5a57da448a1d752b982858b38aab344d", "mode": "0600", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1635904397.041365-16210-96984103093168/source", "state": "file", "uid": 0} TASK [include_role : {{ roletoinclude }}] ************************************** task path: /tmp/tmpmwmpexgu/tests/roles/caller/tasks/main.yml:4 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.045133", "end": "2021-11-03 01:53:54.365225", "rc": 0, "start": "2021-11-03 01:53:54.320092", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["GOST-ONLY", "LEGACY", "DEFAULT", "FUTURE", "EMPTY", "FIPS", "NEXT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-CAMELLIA", "GOST", "AD-SUPPORT", "ECDHE-ONLY", "OSPP", "NO-SHA1", "FEDORA32", "SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-CAMELLIA", "GOST", "AD-SUPPORT", "ECDHE-ONLY", "OSPP", "NO-SHA1", "FEDORA32", "SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:71 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:80 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.037173", "end": "2021-11-03 01:53:55.565720", "rc": 0, "start": "2021-11-03 01:53:55.528547", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [caller : assert] ********************************************************* task path: /tmp/tmpmwmpexgu/tests/roles/caller/tasks/main.yml:7 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=16 changed=1 unreachable=0 failed=0 skipped=4 rescued=0 ignored=0 + cd /tmp/tmpmwmpexgu/tests; TEST_SUBJECTS=/cache/fedora-33.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-28-e66e6f9-fedora-33-ott_anj0/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmpmwmpexgu/_setup.yml /tmp/tmpmwmpexgu/tests/tests_no_package_update.yml ansible-playbook 2.9.25 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.7 (default, Aug 30 2021, 00:00:00) [GCC 11.2.1 20210728 (Red Hat 11.2.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 1 plays in /tmp/tmpmwmpexgu/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmpmwmpexgu/_setup.yml:5 ok: [/cache/fedora-33.qcow2] => { "groups": { "all": [ "/cache/fedora-33.qcow2" ], "localhost": [ "/cache/fedora-33.qcow2" ], "subjects": [ "/cache/fedora-33.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmpmwmpexgu/_setup.yml:7 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=1 changed=0 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_no_package_update.yml ****************************************** 1 plays in /tmp/tmpmwmpexgu/tests/tests_no_package_update.yml PLAY [Ensure that running the role does not update packages] ******************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmpmwmpexgu/tests/tests_no_package_update.yml:3 ok: [/cache/fedora-33.qcow2] META: ran handlers TASK [Get package facts] ******************************************************* task path: /tmp/tmpmwmpexgu/tests/tests_no_package_update.yml:6 ok: [/cache/fedora-33.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [Save current package facts] ********************************************** task path: /tmp/tmpmwmpexgu/tests/tests_no_package_update.yml:10 ok: [/cache/fedora-33.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [Include role] ************************************************************ task path: /tmp/tmpmwmpexgu/tests/tests_no_package_update.yml:15 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.055880", "end": "2021-11-03 01:54:48.806803", "rc": 0, "start": "2021-11-03 01:54:48.750923", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["EMPTY", "FIPS", "FUTURE", "GOST-ONLY", "NEXT", "LEGACY", "DEFAULT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["SHA1", "NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "GOST", "AD-SUPPORT", "OSPP", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["SHA1", "NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "GOST", "AD-SUPPORT", "OSPP", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:71 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:80 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.045412", "end": "2021-11-03 01:54:50.428161", "rc": 0, "start": "2021-11-03 01:54:50.382749", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [Refresh package facts] *************************************************** task path: /tmp/tmpmwmpexgu/tests/tests_no_package_update.yml:19 ok: [/cache/fedora-33.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [Verify packages were not changed] **************************************** task path: /tmp/tmpmwmpexgu/tests/tests_no_package_update.yml:23 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=18 changed=0 unreachable=0 failed=0 skipped=4 rescued=0 ignored=0 + cd /tmp/tmpmwmpexgu/tests; TEST_SUBJECTS=/cache/fedora-33.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-28-e66e6f9-fedora-33-ott_anj0/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmpmwmpexgu/_setup.yml /tmp/tmpmwmpexgu/tests/tests_reboot.yml ansible-playbook 2.9.25 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.7 (default, Aug 30 2021, 00:00:00) [GCC 11.2.1 20210728 (Red Hat 11.2.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 1 plays in /tmp/tmpmwmpexgu/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmpmwmpexgu/_setup.yml:5 ok: [/cache/fedora-33.qcow2] => { "groups": { "all": [ "/cache/fedora-33.qcow2" ], "localhost": [ "/cache/fedora-33.qcow2" ], "subjects": [ "/cache/fedora-33.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmpmwmpexgu/_setup.yml:7 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=1 changed=0 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_reboot.yml ***************************************************** 1 plays in /tmp/tmpmwmpexgu/tests/tests_reboot.yml PLAY [Ensure we can set crypto policy including reboot of the system] ********** TASK [Gathering Facts] ********************************************************* task path: /tmp/tmpmwmpexgu/tests/tests_reboot.yml:3 ok: [/cache/fedora-33.qcow2] META: ran handlers TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.047388", "end": "2021-11-03 01:55:44.537520", "rc": 0, "start": "2021-11-03 01:55:44.490132", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["EMPTY", "DEFAULT", "FUTURE", "NEXT", "GOST-ONLY", "LEGACY", "FIPS"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["ECDHE-ONLY", "GOST", "OSPP", "AD-SUPPORT", "NO-CAMELLIA", "FEDORA32", "NO-SHA1", "SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["ECDHE-ONLY", "GOST", "OSPP", "AD-SUPPORT", "NO-CAMELLIA", "FEDORA32", "NO-SHA1", "SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/fedora-33.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/fedora-33.qcow2 changed: [/cache/fedora-33.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--set", "FUTURE"], "delta": "0:00:00.097810", "end": "2021-11-03 01:55:45.917011", "rc": 0, "start": "2021-11-03 01:55:45.819201", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to FUTURE\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to FUTURE", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:71 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:80 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.037676", "end": "2021-11-03 01:55:46.325019", "rc": 0, "start": "2021-11-03 01:55:46.287343", "stderr": "", "stderr_lines": [], "stdout": "FUTURE", "stdout_lines": ["FUTURE"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "FUTURE"}, "changed": false} RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:4 changed: [/cache/fedora-33.qcow2] => {"changed": true, "elapsed": 8, "rebooted": true} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:11 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": false}, "changed": false} META: ran handlers TASK [Check the current policy is FUTURE] ************************************** task path: /tmp/tmpmwmpexgu/tests/tests_reboot.yml:16 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=19 changed=2 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0 + cd /tmp/tmpmwmpexgu/tests; TEST_SUBJECTS=/cache/fedora-33.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-28-e66e6f9-fedora-33-ott_anj0/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmpmwmpexgu/_setup.yml /tmp/tmpmwmpexgu/tests/tests_reload.yml ansible-playbook 2.9.25 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.7 (default, Aug 30 2021, 00:00:00) [GCC 11.2.1 20210728 (Red Hat 11.2.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 1 plays in /tmp/tmpmwmpexgu/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmpmwmpexgu/_setup.yml:5 ok: [/cache/fedora-33.qcow2] => { "groups": { "all": [ "/cache/fedora-33.qcow2" ], "localhost": [ "/cache/fedora-33.qcow2" ], "subjects": [ "/cache/fedora-33.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmpmwmpexgu/_setup.yml:7 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=1 changed=0 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_reload.yml ***************************************************** 1 plays in /tmp/tmpmwmpexgu/tests/tests_reload.yml PLAY [Ensure that crypto_policy_reload variable works] ************************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:3 ok: [/cache/fedora-33.qcow2] META: ran handlers TASK [Run role to make sure all dependencies are installed] ******************** task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:7 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.046740", "end": "2021-11-03 01:56:47.475910", "rc": 0, "start": "2021-11-03 01:56:47.429170", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["FIPS", "FUTURE", "EMPTY", "GOST-ONLY", "LEGACY", "DEFAULT", "NEXT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["ECDHE-ONLY", "SHA1", "NO-CAMELLIA", "NO-SHA1", "GOST", "AD-SUPPORT", "OSPP", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["ECDHE-ONLY", "SHA1", "NO-CAMELLIA", "NO-SHA1", "GOST", "AD-SUPPORT", "OSPP", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:71 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:80 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.038035", "end": "2021-11-03 01:56:48.935360", "rc": 0, "start": "2021-11-03 01:56:48.897325", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [Get SSHD pid before policy update] *************************************** task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:11 ok: [/cache/fedora-33.qcow2] => {"changed": false, "content": "Nzc1Cg==", "encoding": "base64", "source": "/var/run/sshd.pid"} TASK [Change policy from DEFAULT TO LEGACY (disable reload)] ******************* task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:16 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.041239", "end": "2021-11-03 01:56:51.654320", "rc": 0, "start": "2021-11-03 01:56:51.613081", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["FIPS", "FUTURE", "EMPTY", "GOST-ONLY", "LEGACY", "DEFAULT", "NEXT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["ECDHE-ONLY", "SHA1", "NO-CAMELLIA", "NO-SHA1", "GOST", "AD-SUPPORT", "OSPP", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["ECDHE-ONLY", "SHA1", "NO-CAMELLIA", "NO-SHA1", "GOST", "AD-SUPPORT", "OSPP", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/fedora-33.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/fedora-33.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/fedora-33.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/fedora-33.qcow2 changed: [/cache/fedora-33.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "LEGACY"], "delta": "0:00:00.052932", "end": "2021-11-03 01:56:52.909206", "rc": 0, "start": "2021-11-03 01:56:52.856274", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to LEGACY\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to LEGACY", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:71 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:80 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.038024", "end": "2021-11-03 01:56:53.337245", "rc": 0, "start": "2021-11-03 01:56:53.299221", "stderr": "", "stderr_lines": [], "stdout": "LEGACY", "stdout_lines": ["LEGACY"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "LEGACY"}, "changed": false} TASK [Get sshd pid after first update] ***************************************** task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:23 ok: [/cache/fedora-33.qcow2] => {"changed": false, "content": "Nzc1Cg==", "encoding": "base64", "source": "/var/run/sshd.pid"} TASK [Verify that policy was changed to LEGACY] ******************************** task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:28 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Check the sshd was not reloaded] ***************************************** task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:32 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Change policy from LEGACY to DEFAULT (reload by default)] **************** task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:37 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.037192", "end": "2021-11-03 01:56:56.071531", "rc": 0, "start": "2021-11-03 01:56:56.034339", "stderr": "", "stderr_lines": [], "stdout": "LEGACY", "stdout_lines": ["LEGACY"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "LEGACY"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1635904612.8933408, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["FIPS", "FUTURE", "EMPTY", "GOST-ONLY", "LEGACY", "DEFAULT", "NEXT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["ECDHE-ONLY", "SHA1", "NO-CAMELLIA", "NO-SHA1", "GOST", "AD-SUPPORT", "OSPP", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["ECDHE-ONLY", "SHA1", "NO-CAMELLIA", "NO-SHA1", "GOST", "AD-SUPPORT", "OSPP", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/fedora-33.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/fedora-33.qcow2 changed: [/cache/fedora-33.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--set", "DEFAULT"], "delta": "0:00:00.103002", "end": "2021-11-03 01:56:57.403565", "rc": 0, "start": "2021-11-03 01:56:57.300563", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to DEFAULT\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to DEFAULT", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:71 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:80 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.037811", "end": "2021-11-03 01:56:57.833268", "rc": 0, "start": "2021-11-03 01:56:57.795457", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [Get sshd pid after second update] **************************************** task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:43 ok: [/cache/fedora-33.qcow2] => {"changed": false, "content": "MjIzNAo=", "encoding": "base64", "source": "/var/run/sshd.pid"} TASK [Verify that policy was changed to DEFAULT] ******************************* task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:48 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Check the sshd was reloaded] ********************************************* task path: /tmp/tmpmwmpexgu/tests/tests_reload.yml:53 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:4 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:11 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:4 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:11 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:4 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:11 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=49 changed=2 unreachable=0 failed=0 skipped=12 rescued=0 ignored=0 + cd /tmp/tmpmwmpexgu/tests; TEST_SUBJECTS=/cache/fedora-33.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-28-e66e6f9-fedora-33-ott_anj0/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmpmwmpexgu/_setup.yml /tmp/tmpmwmpexgu/tests/tests_update.yml ansible-playbook 2.9.25 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.7 (default, Aug 30 2021, 00:00:00) [GCC 11.2.1 20210728 (Red Hat 11.2.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 1 plays in /tmp/tmpmwmpexgu/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmpmwmpexgu/_setup.yml:5 ok: [/cache/fedora-33.qcow2] => { "groups": { "all": [ "/cache/fedora-33.qcow2" ], "localhost": [ "/cache/fedora-33.qcow2" ], "subjects": [ "/cache/fedora-33.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmpmwmpexgu/_setup.yml:7 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=1 changed=0 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_update.yml ***************************************************** 1 plays in /tmp/tmpmwmpexgu/tests/tests_update.yml PLAY [Ensure that we can set the policy using this role (without reboot)] ****** TASK [Gathering Facts] ********************************************************* task path: /tmp/tmpmwmpexgu/tests/tests_update.yml:3 ok: [/cache/fedora-33.qcow2] META: ran handlers TASK [Set correct base policy] ************************************************* task path: /tmp/tmpmwmpexgu/tests/tests_update.yml:7 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.048002", "end": "2021-11-03 01:57:54.191672", "rc": 0, "start": "2021-11-03 01:57:54.143670", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["NEXT", "GOST-ONLY", "LEGACY", "EMPTY", "FIPS", "DEFAULT", "FUTURE"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "OSPP", "AD-SUPPORT", "SHA1", "GOST", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "OSPP", "AD-SUPPORT", "SHA1", "GOST", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/fedora-33.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/fedora-33.qcow2 changed: [/cache/fedora-33.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "LEGACY"], "delta": "0:00:00.053375", "end": "2021-11-03 01:57:55.541642", "rc": 0, "start": "2021-11-03 01:57:55.488267", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to LEGACY\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to LEGACY", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:71 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:80 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.038496", "end": "2021-11-03 01:57:55.970393", "rc": 0, "start": "2021-11-03 01:57:55.931897", "stderr": "", "stderr_lines": [], "stdout": "LEGACY", "stdout_lines": ["LEGACY"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "LEGACY"}, "changed": false} TASK [Verify that base policy was updated] ************************************* task path: /tmp/tmpmwmpexgu/tests/tests_update.yml:13 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Set correct base policy and subpolicy] *********************************** task path: /tmp/tmpmwmpexgu/tests/tests_update.yml:19 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.038716", "end": "2021-11-03 01:57:58.461331", "rc": 0, "start": "2021-11-03 01:57:58.422615", "stderr": "", "stderr_lines": [], "stdout": "LEGACY", "stdout_lines": ["LEGACY"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "LEGACY"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1635904675.523106, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["NEXT", "GOST-ONLY", "LEGACY", "EMPTY", "FIPS", "DEFAULT", "FUTURE"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "OSPP", "AD-SUPPORT", "SHA1", "GOST", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "OSPP", "AD-SUPPORT", "SHA1", "GOST", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/fedora-33.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/fedora-33.qcow2 changed: [/cache/fedora-33.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "DEFAULT:NO-SHA1"], "delta": "0:00:00.058043", "end": "2021-11-03 01:57:59.734593", "rc": 0, "start": "2021-11-03 01:57:59.676550", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to DEFAULT:NO-SHA1\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to DEFAULT:NO-SHA1", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:71 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:80 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.039069", "end": "2021-11-03 01:58:00.158419", "rc": 0, "start": "2021-11-03 01:58:00.119350", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT:NO-SHA1", "stdout_lines": ["DEFAULT:NO-SHA1"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT:NO-SHA1"}, "changed": false} TASK [Verify that base policy and subpolicy were updated] ********************** task path: /tmp/tmpmwmpexgu/tests/tests_update.yml:25 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Set incorrect base policy] *********************************************** task path: /tmp/tmpmwmpexgu/tests/tests_update.yml:33 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.037862", "end": "2021-11-03 01:58:02.649458", "rc": 0, "start": "2021-11-03 01:58:02.611596", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT:NO-SHA1", "stdout_lines": ["DEFAULT:NO-SHA1"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT:NO-SHA1"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1635904675.523106, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["NEXT", "GOST-ONLY", "LEGACY", "EMPTY", "FIPS", "DEFAULT", "FUTURE"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635904679.712106, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "OSPP", "AD-SUPPORT", "SHA1", "GOST", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "OSPP", "AD-SUPPORT", "SHA1", "GOST", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 fatal: [/cache/fedora-33.qcow2]: FAILED! => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "NOEXIST"], "delta": "0:00:00.039745", "end": "2021-11-03 01:58:03.906165", "msg": "non-zero return code", "rc": 1, "start": "2021-11-03 01:58:03.866420", "stderr": "Error: Unknown policy: NOEXIST", "stderr_lines": ["Error: Unknown policy: NOEXIST"], "stdout": "", "stdout_lines": []} TASK [Check that we failed in the role] **************************************** task path: /tmp/tmpmwmpexgu/tests/tests_update.yml:43 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Set incorrect subpolicy] ************************************************* task path: /tmp/tmpmwmpexgu/tests/tests_update.yml:52 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:4 skipping: [/cache/fedora-33.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/fedora-33.qcow2] => (item=Fedora_33.yml) => {"ansible_loop_var": "item", "changed": false, "item": "Fedora_33.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:17 ok: [/cache/fedora-33.qcow2] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:22 included: /tmp/tmpmwmpexgu/tasks/gather_facts.yml for /cache/fedora-33.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:3 ok: [/cache/fedora-33.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.039222", "end": "2021-11-03 01:58:06.246162", "rc": 0, "start": "2021-11-03 01:58:06.206940", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT:NO-SHA1", "stdout_lines": ["DEFAULT:NO-SHA1"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmpmwmpexgu/tasks/gather_facts.yml:9 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT:NO-SHA1"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmpmwmpexgu/tasks/main.yml:24 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 9, "files": [{"atime": 1635904675.523106, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143398, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 3001, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.965, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143399, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/NEXT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.963, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143396, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2535, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143394, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 395, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635833967.632, "ctime": 1635833945.961, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143393, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2642, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.964, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143397, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/GOST-ONLY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 953, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.962, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143395, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2153, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 7, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:32 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["NEXT", "GOST-ONLY", "LEGACY", "EMPTY", "FIPS", "DEFAULT", "FUTURE"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmpmwmpexgu/tasks/main.yml:39 ok: [/cache/fedora-33.qcow2] => {"changed": false, "examined": 8, "files": [{"atime": 1600843768.0, "ctime": 1635833945.967, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143402, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 220, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.968, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143403, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/FEDORA32.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 442, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.969, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143404, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/GOST.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 776, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.97, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143405, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143407, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 832, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1635904679.712106, "ctime": 1635833945.971, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143406, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.972, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143408, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 135, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1600843768.0, "ctime": 1635833945.966, "dev": 64513, "gid": 0, "gr_name": "root", "inode": 143401, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1600843768.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 8, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:47 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "OSPP", "AD-SUPPORT", "SHA1", "GOST", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmpmwmpexgu/tasks/main.yml:54 ok: [/cache/fedora-33.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-CAMELLIA", "ECDHE-ONLY", "NO-SHA1", "OSPP", "AD-SUPPORT", "SHA1", "GOST", "FEDORA32"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmpmwmpexgu/tasks/main.yml:60 fatal: [/cache/fedora-33.qcow2]: FAILED! => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "DEFAULT:NOEXIST"], "delta": "0:00:00.041882", "end": "2021-11-03 01:58:07.519891", "msg": "non-zero return code", "rc": 1, "start": "2021-11-03 01:58:07.478009", "stderr": "Error: Unknown policy: NOEXIST", "stderr_lines": ["Error: Unknown policy: NOEXIST"], "stdout": "", "stdout_lines": []} TASK [Check that we failed in the role] **************************************** task path: /tmp/tmpmwmpexgu/tests/tests_update.yml:62 ok: [/cache/fedora-33.qcow2] => { "changed": false, "msg": "All assertions passed" } RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:4 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:11 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:4 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmpmwmpexgu/handlers/main.yml:11 skipping: [/cache/fedora-33.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/fedora-33.qcow2 : ok=52 changed=2 unreachable=0 failed=0 skipped=9 rescued=2 ignored=0