5 commits

Author	SHA1	Message	Date
Jakub Jelen	dd820d1c24	Implement hostkey checks ... This is useful during provisioning, when the keys were not generated by sshd-keygen service or similar principles depending on operating system. This is also helpful when running this role in containers, where is no service running either. The keys are generally readable only by root, but in RHEL and Fedora, they are readable also by group ssh_keys, which is used for hostbased authentication. This should fix #111	2020-11-16 11:10:16 +01:00
Jakub Jelen	f32003f051	Remove set_facts tasks not to polute global namespace ... The usage of set_facts inside of roles is not recommended if it is used for internal variables used only inside of the role. It is recommended to use variables with smaller scope to avoid inter-dependencies between different invocations of the same role as demonstrated in the tests_alternative_file.yml later in the patch series ttps://github.com/oasis-roles/meta_standards#ansible-best-practices	2020-11-06 12:04:41 +01:00
Jakub Jelen	71b3f87308	Add support for sysconfig on Fedora/RHEL ... This is useful for opting out from system-wide cryto policy for SSH or configuring advanced use case (strong RNG seed). Fixes: #141	2020-10-06 21:11:39 +02:00
Jakub Jelen	9e7eae712d	Reformat yaml files to avoid wrong indentation, trailing spaces and long lines	2020-09-23 14:49:42 +02:00
Tiziano Müller	90b19f3b7c	vars: add config for RedHat/CentOS 8 ... besides dropping the deprecated Sandbox option, set `GSSAPICleanupCredentials no` since that's what I have on a fresh installation of CentOS 8.	2019-10-14 14:48:06 +02:00