5 commits

Author	SHA1	Message	Date
Jakub Jelen	345eeed0c0	Fix variable precedence for sshd_hostkey_* variables ... This worked fine with the new include_role: invocation, but not with the old roles: invocation.	2021-06-10 19:53:00 +02:00
Jakub Jelen	dd820d1c24	Implement hostkey checks ... This is useful during provisioning, when the keys were not generated by sshd-keygen service or similar principles depending on operating system. This is also helpful when running this role in containers, where is no service running either. The keys are generally readable only by root, but in RHEL and Fedora, they are readable also by group ssh_keys, which is used for hostbased authentication. This should fix #111	2020-11-16 11:10:16 +01:00
Jakub Jelen	f32003f051	Remove set_facts tasks not to polute global namespace ... The usage of set_facts inside of roles is not recommended if it is used for internal variables used only inside of the role. It is recommended to use variables with smaller scope to avoid inter-dependencies between different invocations of the same role as demonstrated in the tests_alternative_file.yml later in the patch series ttps://github.com/oasis-roles/meta_standards#ansible-best-practices	2020-11-06 12:04:41 +01:00
Jakub Jelen	71b3f87308	Add support for sysconfig on Fedora/RHEL ... This is useful for opting out from system-wide cryto policy for SSH or configuring advanced use case (strong RNG seed). Fixes: #141	2020-10-06 21:11:39 +02:00
Jakub Jelen	707e2e64a3	Update defaults for Fedora supporting Include keyword	2020-09-23 14:49:42 +02:00