2022-05-02 14:39:00 +02:00
|
|
|
---
|
|
|
|
- name: Install systemd service files
|
2022-12-13 11:33:59 +01:00
|
|
|
when: sshd_install_service | bool
|
2022-05-02 14:39:00 +02:00
|
|
|
block:
|
|
|
|
- name: Install service unit file
|
2022-06-03 12:22:17 +02:00
|
|
|
ansible.builtin.template:
|
2022-05-02 14:39:00 +02:00
|
|
|
src: "{{ sshd_service_template_service }}"
|
|
|
|
dest: "/etc/systemd/system/{{ sshd_service }}.service"
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
mode: "0644"
|
|
|
|
notify: reload_sshd
|
|
|
|
- name: Install instanced service unit file
|
2022-06-03 12:22:17 +02:00
|
|
|
ansible.builtin.template:
|
2022-05-02 14:39:00 +02:00
|
|
|
src: "{{ sshd_service_template_at_service }}"
|
|
|
|
dest: "/etc/systemd/system/{{ sshd_service }}@.service"
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
mode: "0644"
|
|
|
|
notify: reload_sshd
|
|
|
|
- name: Install socket unit file
|
2022-06-03 12:22:17 +02:00
|
|
|
ansible.builtin.template:
|
2022-05-02 14:39:00 +02:00
|
|
|
src: "{{ sshd_service_template_socket }}"
|
|
|
|
dest: "/etc/systemd/system/{{ sshd_service }}.socket"
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
mode: "0644"
|
|
|
|
notify: reload_sshd
|
|
|
|
|
|
|
|
- name: Service enabled and running
|
2022-06-03 12:22:17 +02:00
|
|
|
ansible.builtin.service:
|
2022-05-02 14:39:00 +02:00
|
|
|
name: "{{ sshd_service }}"
|
|
|
|
enabled: true
|
|
|
|
state: started
|
|
|
|
when:
|
|
|
|
- sshd_manage_service|bool
|
|
|
|
- ansible_virtualization_type|default(None) not in __sshd_skip_virt_env
|
|
|
|
- ansible_connection != 'chroot'
|
|
|
|
|
|
|
|
# Due to ansible bug 21026, cannot use service module on RHEL 7
|
|
|
|
- name: Enable service in chroot
|
2022-09-07 10:33:33 +02:00
|
|
|
ansible.builtin.command: systemctl enable {{ sshd_service }} # noqa command-instead-of-module
|
2022-05-02 14:39:00 +02:00
|
|
|
when:
|
|
|
|
- ansible_connection == 'chroot'
|
|
|
|
- ansible_os_family == 'RedHat'
|
|
|
|
- ansible_distribution_major_version|int >= 7
|
2023-04-10 22:19:29 +02:00
|
|
|
changed_when: true
|