+ cd /tmp/tmp9uexqlrl/tests; TEST_SUBJECTS=/cache/rhel-8.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-23-fc55f1e-rhel-8-dk_08y_f/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmp9uexqlrl/_setup.yml /tmp/tmp9uexqlrl/tests/tests_default.yml ansible-playbook 2.9.21 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.5 (default, May 14 2021, 00:00:00) [GCC 11.1.1 20210428 (Red Hat 11.1.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 2 plays in /tmp/tmp9uexqlrl/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmp9uexqlrl/_setup.yml:5 ok: [/cache/rhel-8.qcow2] => { "groups": { "all": [ "/cache/rhel-8.qcow2" ], "localhost": [ "/cache/rhel-8.qcow2" ], "subjects": [ "/cache/rhel-8.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:7 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY [Setup repos] ************************************************************* META: ran handlers TASK [set up internal repositories] ******************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:16 changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=2 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_default.yml **************************************************** 1 plays in /tmp/tmp9uexqlrl/tests/tests_default.yml PLAY [Ensure that the role runs with default parameters] *********************** TASK [Gathering Facts] ********************************************************* task path: /tmp/tmp9uexqlrl/tests/tests_default.yml:3 ok: [/cache/rhel-8.qcow2] META: ran handlers TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.056269", "end": "2021-06-30 09:53:23.546020", "rc": 0, "start": "2021-06-30 09:53:23.489751", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1620069875.8180447, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["LEGACY", "EMPTY", "FUTURE", "DEFAULT", "FIPS"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["AD-SUPPORT", "NO-CAMELLIA", "OSPP", "NO-SHA1", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["AD-SUPPORT", "NO-CAMELLIA", "OSPP", "NO-SHA1", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:81 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:90 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.043875", "end": "2021-06-30 09:53:25.127961", "rc": 0, "start": "2021-06-30 09:53:25.084086", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} META: ran handlers TASK [Check the current policy is DEFAULT and common variables] **************** task path: /tmp/tmp9uexqlrl/tests/tests_default.yml:13 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=16 changed=1 unreachable=0 failed=0 skipped=5 rescued=0 ignored=0 + cd /tmp/tmp9uexqlrl/tests; TEST_SUBJECTS=/cache/rhel-8.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-23-fc55f1e-rhel-8-dk_08y_f/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmp9uexqlrl/_setup.yml /tmp/tmp9uexqlrl/tests/tests_include_vars_from_parent.yml ansible-playbook 2.9.21 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.5 (default, May 14 2021, 00:00:00) [GCC 11.1.1 20210428 (Red Hat 11.1.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 2 plays in /tmp/tmp9uexqlrl/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmp9uexqlrl/_setup.yml:5 ok: [/cache/rhel-8.qcow2] => { "groups": { "all": [ "/cache/rhel-8.qcow2" ], "localhost": [ "/cache/rhel-8.qcow2" ], "subjects": [ "/cache/rhel-8.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:7 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY [Setup repos] ************************************************************* META: ran handlers TASK [set up internal repositories] ******************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:16 changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=2 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_include_vars_from_parent.yml *********************************** 1 plays in /tmp/tmp9uexqlrl/tests/tests_include_vars_from_parent.yml PLAY [all] ********************************************************************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmp9uexqlrl/tests/tests_include_vars_from_parent.yml:1 ok: [/cache/rhel-8.qcow2] META: ran handlers TASK [create var file in caller that can override the one in called role] ****** task path: /tmp/tmp9uexqlrl/tests/tests_include_vars_from_parent.yml:3 changed: [/cache/rhel-8.qcow2] => (item=RedHat-8.4) => {"ansible_loop_var": "item", "changed": true, "checksum": "870b2314d3f4184a363b31373f07abb444f26444", "dest": "/tmp/tmp9uexqlrl/tests/roles/caller/vars/RedHat-8.4.yml", "gid": 0, "group": "root", "item": "RedHat-8.4", "md5sum": "5a57da448a1d752b982858b38aab344d", "mode": "0600", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1625061263.3254817-54515-85808096571250/source", "state": "file", "uid": 0} changed: [/cache/rhel-8.qcow2] => (item=RedHat-8) => {"ansible_loop_var": "item", "changed": true, "checksum": "870b2314d3f4184a363b31373f07abb444f26444", "dest": "/tmp/tmp9uexqlrl/tests/roles/caller/vars/RedHat-8.yml", "gid": 0, "group": "root", "item": "RedHat-8", "md5sum": "5a57da448a1d752b982858b38aab344d", "mode": "0600", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1625061263.817194-54515-203264573226487/source", "state": "file", "uid": 0} changed: [/cache/rhel-8.qcow2] => (item=RedHat_8.4) => {"ansible_loop_var": "item", "changed": true, "checksum": "870b2314d3f4184a363b31373f07abb444f26444", "dest": "/tmp/tmp9uexqlrl/tests/roles/caller/vars/RedHat_8.4.yml", "gid": 0, "group": "root", "item": "RedHat_8.4", "md5sum": "5a57da448a1d752b982858b38aab344d", "mode": "0600", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1625061264.1436281-54515-271489148268187/source", "state": "file", "uid": 0} changed: [/cache/rhel-8.qcow2] => (item=RedHat_8) => {"ansible_loop_var": "item", "changed": true, "checksum": "870b2314d3f4184a363b31373f07abb444f26444", "dest": "/tmp/tmp9uexqlrl/tests/roles/caller/vars/RedHat_8.yml", "gid": 0, "group": "root", "item": "RedHat_8", "md5sum": "5a57da448a1d752b982858b38aab344d", "mode": "0600", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1625061264.461623-54515-116047744716686/source", "state": "file", "uid": 0} changed: [/cache/rhel-8.qcow2] => (item=RedHat) => {"ansible_loop_var": "item", "changed": true, "checksum": "870b2314d3f4184a363b31373f07abb444f26444", "dest": "/tmp/tmp9uexqlrl/tests/roles/caller/vars/RedHat.yml", "gid": 0, "group": "root", "item": "RedHat", "md5sum": "5a57da448a1d752b982858b38aab344d", "mode": "0600", "owner": "root", "size": 23, "src": "/root/.ansible/tmp/ansible-tmp-1625061264.7815492-54515-142881999202143/source", "state": "file", "uid": 0} TASK [include_role : {{ roletoinclude }}] ************************************** task path: /tmp/tmp9uexqlrl/tests/roles/caller/tasks/main.yml:4 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.051410", "end": "2021-06-30 09:54:25.995487", "rc": 0, "start": "2021-06-30 09:54:25.944077", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1620069875.8180447, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["EMPTY", "FIPS", "FUTURE", "DEFAULT", "LEGACY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["AD-SUPPORT", "NO-SHA1", "NO-CAMELLIA", "OSPP", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["AD-SUPPORT", "NO-SHA1", "NO-CAMELLIA", "OSPP", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:81 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:90 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.045472", "end": "2021-06-30 09:54:27.332386", "rc": 0, "start": "2021-06-30 09:54:27.286914", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [caller : assert] ********************************************************* task path: /tmp/tmp9uexqlrl/tests/roles/caller/tasks/main.yml:7 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=17 changed=2 unreachable=0 failed=0 skipped=5 rescued=0 ignored=0 + cd /tmp/tmp9uexqlrl/tests; TEST_SUBJECTS=/cache/rhel-8.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-23-fc55f1e-rhel-8-dk_08y_f/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmp9uexqlrl/_setup.yml /tmp/tmp9uexqlrl/tests/tests_no_package_update.yml ansible-playbook 2.9.21 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.5 (default, May 14 2021, 00:00:00) [GCC 11.1.1 20210428 (Red Hat 11.1.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 2 plays in /tmp/tmp9uexqlrl/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmp9uexqlrl/_setup.yml:5 ok: [/cache/rhel-8.qcow2] => { "groups": { "all": [ "/cache/rhel-8.qcow2" ], "localhost": [ "/cache/rhel-8.qcow2" ], "subjects": [ "/cache/rhel-8.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:7 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY [Setup repos] ************************************************************* META: ran handlers TASK [set up internal repositories] ******************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:16 changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=2 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_no_package_update.yml ****************************************** 1 plays in /tmp/tmp9uexqlrl/tests/tests_no_package_update.yml PLAY [Ensure that running the role does not update packages] ******************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmp9uexqlrl/tests/tests_no_package_update.yml:3 ok: [/cache/rhel-8.qcow2] META: ran handlers TASK [Get package facts] ******************************************************* task path: /tmp/tmp9uexqlrl/tests/tests_no_package_update.yml:6 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [Save current package facts] ********************************************** task path: /tmp/tmp9uexqlrl/tests/tests_no_package_update.yml:10 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [Include role] ************************************************************ task path: /tmp/tmp9uexqlrl/tests/tests_no_package_update.yml:15 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.051203", "end": "2021-06-30 09:55:27.157664", "rc": 0, "start": "2021-06-30 09:55:27.106461", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1620069875.8180447, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["DEFAULT", "LEGACY", "EMPTY", "FUTURE", "FIPS"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-SHA1", "OSPP", "ECDHE-ONLY", "NO-CAMELLIA", "AD-SUPPORT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-SHA1", "OSPP", "ECDHE-ONLY", "NO-CAMELLIA", "AD-SUPPORT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:81 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:90 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.044163", "end": "2021-06-30 09:55:28.741087", "rc": 0, "start": "2021-06-30 09:55:28.696924", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [Refresh package facts] *************************************************** task path: /tmp/tmp9uexqlrl/tests/tests_no_package_update.yml:19 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [Verify packages were not changed] **************************************** task path: /tmp/tmp9uexqlrl/tests/tests_no_package_update.yml:23 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=19 changed=1 unreachable=0 failed=0 skipped=5 rescued=0 ignored=0 + cd /tmp/tmp9uexqlrl/tests; TEST_SUBJECTS=/cache/rhel-8.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-23-fc55f1e-rhel-8-dk_08y_f/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmp9uexqlrl/_setup.yml /tmp/tmp9uexqlrl/tests/tests_reboot.yml ansible-playbook 2.9.21 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.5 (default, May 14 2021, 00:00:00) [GCC 11.1.1 20210428 (Red Hat 11.1.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 2 plays in /tmp/tmp9uexqlrl/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmp9uexqlrl/_setup.yml:5 ok: [/cache/rhel-8.qcow2] => { "groups": { "all": [ "/cache/rhel-8.qcow2" ], "localhost": [ "/cache/rhel-8.qcow2" ], "subjects": [ "/cache/rhel-8.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:7 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY [Setup repos] ************************************************************* META: ran handlers TASK [set up internal repositories] ******************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:16 changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=2 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_reboot.yml ***************************************************** 1 plays in /tmp/tmp9uexqlrl/tests/tests_reboot.yml PLAY [Ensure we can set crypto policy including reboot of the system] ********** TASK [Gathering Facts] ********************************************************* task path: /tmp/tmp9uexqlrl/tests/tests_reboot.yml:3 ok: [/cache/rhel-8.qcow2] META: ran handlers TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.054507", "end": "2021-06-30 09:56:29.179862", "rc": 0, "start": "2021-06-30 09:56:29.125355", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1620069875.8180447, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["EMPTY", "FIPS", "LEGACY", "DEFAULT", "FUTURE"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["OSPP", "AD-SUPPORT", "NO-SHA1", "ECDHE-ONLY", "NO-CAMELLIA"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["OSPP", "AD-SUPPORT", "NO-SHA1", "ECDHE-ONLY", "NO-CAMELLIA"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/rhel-8.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/rhel-8.qcow2 changed: [/cache/rhel-8.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--set", "FUTURE"], "delta": "0:00:00.093617", "end": "2021-06-30 09:56:30.640194", "rc": 0, "start": "2021-06-30 09:56:30.546577", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to FUTURE\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to FUTURE", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:81 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:90 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.044583", "end": "2021-06-30 09:56:31.095632", "rc": 0, "start": "2021-06-30 09:56:31.051049", "stderr": "", "stderr_lines": [], "stdout": "FUTURE", "stdout_lines": ["FUTURE"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "FUTURE"}, "changed": false} RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:4 changed: [/cache/rhel-8.qcow2] => {"changed": true, "elapsed": 11, "rebooted": true} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:11 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": false}, "changed": false} META: ran handlers TASK [Check the current policy is FUTURE] ************************************** task path: /tmp/tmp9uexqlrl/tests/tests_reboot.yml:16 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=20 changed=3 unreachable=0 failed=0 skipped=3 rescued=0 ignored=0 + cd /tmp/tmp9uexqlrl/tests; TEST_SUBJECTS=/cache/rhel-8.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-23-fc55f1e-rhel-8-dk_08y_f/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmp9uexqlrl/_setup.yml /tmp/tmp9uexqlrl/tests/tests_reload.yml ansible-playbook 2.9.21 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.5 (default, May 14 2021, 00:00:00) [GCC 11.1.1 20210428 (Red Hat 11.1.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 2 plays in /tmp/tmp9uexqlrl/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmp9uexqlrl/_setup.yml:5 ok: [/cache/rhel-8.qcow2] => { "groups": { "all": [ "/cache/rhel-8.qcow2" ], "localhost": [ "/cache/rhel-8.qcow2" ], "subjects": [ "/cache/rhel-8.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:7 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY [Setup repos] ************************************************************* META: ran handlers TASK [set up internal repositories] ******************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:16 changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=2 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_reload.yml ***************************************************** 1 plays in /tmp/tmp9uexqlrl/tests/tests_reload.yml PLAY [Ensure that crypto_policy_reload variable works] ************************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:3 ok: [/cache/rhel-8.qcow2] META: ran handlers TASK [Run role to make sure all dependencies are installed] ******************** task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:7 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.054726", "end": "2021-06-30 09:57:44.278751", "rc": 0, "start": "2021-06-30 09:57:44.224025", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1620069875.8180447, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["LEGACY", "EMPTY", "FUTURE", "FIPS", "DEFAULT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-SHA1", "OSPP", "AD-SUPPORT", "NO-CAMELLIA", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-SHA1", "OSPP", "AD-SUPPORT", "NO-CAMELLIA", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:81 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:90 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.054205", "end": "2021-06-30 09:57:45.815847", "rc": 0, "start": "2021-06-30 09:57:45.761642", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [Get SSHD pid before policy update] *************************************** task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:11 ok: [/cache/rhel-8.qcow2] => {"changed": false, "content": "NDc2Mwo=", "encoding": "base64", "source": "/var/run/sshd.pid"} TASK [Change policy from DEFAULT TO LEGACY (disable reload)] ******************* task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:16 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.044485", "end": "2021-06-30 09:57:47.891591", "rc": 0, "start": "2021-06-30 09:57:47.847106", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1620069875.8180447, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["LEGACY", "EMPTY", "FUTURE", "FIPS", "DEFAULT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-SHA1", "OSPP", "AD-SUPPORT", "NO-CAMELLIA", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-SHA1", "OSPP", "AD-SUPPORT", "NO-CAMELLIA", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/rhel-8.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/rhel-8.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/rhel-8.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/rhel-8.qcow2 changed: [/cache/rhel-8.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "LEGACY"], "delta": "0:00:00.058367", "end": "2021-06-30 09:57:49.262652", "rc": 0, "start": "2021-06-30 09:57:49.204285", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to LEGACY\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to LEGACY", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:81 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:90 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.044800", "end": "2021-06-30 09:57:49.736352", "rc": 0, "start": "2021-06-30 09:57:49.691552", "stderr": "", "stderr_lines": [], "stdout": "LEGACY", "stdout_lines": ["LEGACY"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "LEGACY"}, "changed": false} TASK [Get sshd pid after first update] ***************************************** task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:23 ok: [/cache/rhel-8.qcow2] => {"changed": false, "content": "NDc2Mwo=", "encoding": "base64", "source": "/var/run/sshd.pid"} TASK [Verify that policy was changed to LEGACY] ******************************** task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:28 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Check the sshd was not reloaded] ***************************************** task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:32 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Change policy from LEGACY to DEFAULT (reload by default)] **************** task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:37 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.044794", "end": "2021-06-30 09:57:51.828092", "rc": 0, "start": "2021-06-30 09:57:51.783298", "stderr": "", "stderr_lines": [], "stdout": "LEGACY", "stdout_lines": ["LEGACY"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "LEGACY"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1620069875.8180447, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1625061469.2456539, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["LEGACY", "EMPTY", "FUTURE", "FIPS", "DEFAULT"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-SHA1", "OSPP", "AD-SUPPORT", "NO-CAMELLIA", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-SHA1", "OSPP", "AD-SUPPORT", "NO-CAMELLIA", "ECDHE-ONLY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/rhel-8.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/rhel-8.qcow2 changed: [/cache/rhel-8.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--set", "DEFAULT"], "delta": "0:00:00.092691", "end": "2021-06-30 09:57:53.248321", "rc": 0, "start": "2021-06-30 09:57:53.155630", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to DEFAULT\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to DEFAULT", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:81 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:90 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.044206", "end": "2021-06-30 09:57:53.713920", "rc": 0, "start": "2021-06-30 09:57:53.669714", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [Get sshd pid after second update] **************************************** task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:43 ok: [/cache/rhel-8.qcow2] => {"changed": false, "content": "NjM5NQo=", "encoding": "base64", "source": "/var/run/sshd.pid"} TASK [Verify that policy was changed to DEFAULT] ******************************* task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:48 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Check the sshd was reloaded] ********************************************* task path: /tmp/tmp9uexqlrl/tests/tests_reload.yml:53 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:4 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:11 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:4 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:11 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:4 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:11 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=50 changed=3 unreachable=0 failed=0 skipped=15 rescued=0 ignored=0 + cd /tmp/tmp9uexqlrl/tests; TEST_SUBJECTS=/cache/rhel-8.qcow2 TEST_ARTIFACTS=/tmp/linux-system-role-test-work-pull-linux-system-roles_crypto_policies-23-fc55f1e-rhel-8-dk_08y_f/artifacts ansible-playbook -vv --inventory=/usr/share/ansible/inventory/standard-inventory-qcow2 /tmp/tmp9uexqlrl/_setup.yml /tmp/tmp9uexqlrl/tests/tests_update.yml ansible-playbook 2.9.21 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/tester/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.9.5 (default, May 14 2021, 00:00:00) [GCC 11.1.1 20210428 (Red Hat 11.1.1-1)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: _setup.yml *********************************************************** 2 plays in /tmp/tmp9uexqlrl/_setup.yml PLAY [Fail when only localhost is available] *********************************** META: ran handlers TASK [debug] ******************************************************************* task path: /tmp/tmp9uexqlrl/_setup.yml:5 ok: [/cache/rhel-8.qcow2] => { "groups": { "all": [ "/cache/rhel-8.qcow2" ], "localhost": [ "/cache/rhel-8.qcow2" ], "subjects": [ "/cache/rhel-8.qcow2" ], "ungrouped": [] } } TASK [fail] ******************************************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:7 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY [Setup repos] ************************************************************* META: ran handlers TASK [set up internal repositories] ******************************************** task path: /tmp/tmp9uexqlrl/_setup.yml:16 changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => (item=None) => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} changed: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=2 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 PLAYBOOK: tests_update.yml ***************************************************** 1 plays in /tmp/tmp9uexqlrl/tests/tests_update.yml PLAY [Ensure that we can set the policy using this role (without reboot)] ****** TASK [Gathering Facts] ********************************************************* task path: /tmp/tmp9uexqlrl/tests/tests_update.yml:3 ok: [/cache/rhel-8.qcow2] META: ran handlers TASK [Set correct base policy] ************************************************* task path: /tmp/tmp9uexqlrl/tests/tests_update.yml:7 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.053025", "end": "2021-06-30 09:58:53.133249", "rc": 0, "start": "2021-06-30 09:58:53.080224", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT", "stdout_lines": ["DEFAULT"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1620069875.8180447, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["FIPS", "FUTURE", "DEFAULT", "LEGACY", "EMPTY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-CAMELLIA", "ECDHE-ONLY", "OSPP", "AD-SUPPORT", "NO-SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-CAMELLIA", "ECDHE-ONLY", "OSPP", "AD-SUPPORT", "NO-SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/rhel-8.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/rhel-8.qcow2 changed: [/cache/rhel-8.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "LEGACY"], "delta": "0:00:00.055713", "end": "2021-06-30 09:58:54.504503", "rc": 0, "start": "2021-06-30 09:58:54.448790", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to LEGACY\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to LEGACY", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:81 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:90 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.045095", "end": "2021-06-30 09:58:54.973289", "rc": 0, "start": "2021-06-30 09:58:54.928194", "stderr": "", "stderr_lines": [], "stdout": "LEGACY", "stdout_lines": ["LEGACY"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "LEGACY"}, "changed": false} TASK [Verify that base policy was updated] ************************************* task path: /tmp/tmp9uexqlrl/tests/tests_update.yml:13 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Set correct base policy and subpolicy] *********************************** task path: /tmp/tmp9uexqlrl/tests/tests_update.yml:19 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.045990", "end": "2021-06-30 09:58:56.736620", "rc": 0, "start": "2021-06-30 09:58:56.690630", "stderr": "", "stderr_lines": [], "stdout": "LEGACY", "stdout_lines": ["LEGACY"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "LEGACY"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1620069875.8180447, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1625061534.4895072, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["FIPS", "FUTURE", "DEFAULT", "LEGACY", "EMPTY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-CAMELLIA", "ECDHE-ONLY", "OSPP", "AD-SUPPORT", "NO-SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-CAMELLIA", "ECDHE-ONLY", "OSPP", "AD-SUPPORT", "NO-SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 NOTIFIED HANDLER linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes for /cache/rhel-8.qcow2 NOTIFIED HANDLER linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag for /cache/rhel-8.qcow2 changed: [/cache/rhel-8.qcow2] => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "DEFAULT:NO-SHA1"], "delta": "0:00:00.057499", "end": "2021-06-30 09:58:58.095954", "rc": 0, "start": "2021-06-30 09:58:58.038455", "stderr": "", "stderr_lines": [], "stdout": "Setting system policy to DEFAULT:NO-SHA1\nNote: System-wide crypto policies are applied on application start-up.\nIt is recommended to restart the system for the change of policies\nto fully take place.", "stdout_lines": ["Setting system policy to DEFAULT:NO-SHA1", "Note: System-wide crypto policies are applied on application start-up.", "It is recommended to restart the system for the change of policies", "to fully take place."]} TASK [linux-system-roles.crypto_policies : Set the reboot_required flag if needed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:81 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_reboot_required": true}, "changed": false} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:90 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.045498", "end": "2021-06-30 09:58:58.565189", "rc": 0, "start": "2021-06-30 09:58:58.519691", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT:NO-SHA1", "stdout_lines": ["DEFAULT:NO-SHA1"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT:NO-SHA1"}, "changed": false} TASK [Verify that base policy and subpolicy were updated] ********************** task path: /tmp/tmp9uexqlrl/tests/tests_update.yml:25 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Set incorrect base policy] *********************************************** task path: /tmp/tmp9uexqlrl/tests/tests_update.yml:33 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.049080", "end": "2021-06-30 09:59:00.316251", "rc": 0, "start": "2021-06-30 09:59:00.267171", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT:NO-SHA1", "stdout_lines": ["DEFAULT:NO-SHA1"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT:NO-SHA1"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1625061538.0785072, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1625061534.4895072, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["FIPS", "FUTURE", "DEFAULT", "LEGACY", "EMPTY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1625061538.079507, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-CAMELLIA", "ECDHE-ONLY", "OSPP", "AD-SUPPORT", "NO-SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-CAMELLIA", "ECDHE-ONLY", "OSPP", "AD-SUPPORT", "NO-SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 fatal: [/cache/rhel-8.qcow2]: FAILED! => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "NOEXIST"], "delta": "0:00:00.046335", "end": "2021-06-30 09:59:01.670575", "msg": "non-zero return code", "rc": 1, "start": "2021-06-30 09:59:01.624240", "stderr": "Error: Unknown policy: NOEXIST", "stderr_lines": ["Error: Unknown policy: NOEXIST"], "stdout": "", "stdout_lines": []} TASK [Check that we failed in the role] **************************************** task path: /tmp/tmp9uexqlrl/tests/tests_update.yml:43 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } TASK [Set incorrect subpolicy] ************************************************* task path: /tmp/tmp9uexqlrl/tests/tests_update.yml:52 TASK [linux-system-roles.crypto_policies : Set platform/version specific variables] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:4 skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.yml", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=RedHat_8.4.yml) => {"ansible_loop_var": "item", "changed": false, "item": "RedHat_8.4.yml", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : Get installed packages] ************* task path: /tmp/tmp9uexqlrl/tasks/main.yml:17 ok: [/cache/rhel-8.qcow2] => {"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": false} TASK [linux-system-roles.crypto_policies : Ensure required packages are installed] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:25 skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies", "skip_reason": "Conditional result was False"} skipping: [/cache/rhel-8.qcow2] => (item=crypto-policies-scripts) => {"ansible_loop_var": "item", "changed": false, "item": "crypto-policies-scripts", "skip_reason": "Conditional result was False"} TASK [linux-system-roles.crypto_policies : include_tasks] ********************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:32 included: /tmp/tmp9uexqlrl/tasks/gather_facts.yml for /cache/rhel-8.qcow2 TASK [linux-system-roles.crypto_policies : Find out what is the currently active policy] *** task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:3 ok: [/cache/rhel-8.qcow2] => {"changed": false, "cmd": ["update-crypto-policies", "--show"], "delta": "0:00:00.045612", "end": "2021-06-30 09:59:03.264553", "rc": 0, "start": "2021-06-30 09:59:03.218941", "stderr": "", "stderr_lines": [], "stdout": "DEFAULT:NO-SHA1", "stdout_lines": ["DEFAULT:NO-SHA1"]} TASK [linux-system-roles.crypto_policies : Set current policy fact] ************ task path: /tmp/tmp9uexqlrl/tasks/gather_facts.yml:9 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_active": "DEFAULT:NO-SHA1"}, "changed": false} TASK [linux-system-roles.crypto_policies : Find base policies files] *********** task path: /tmp/tmp9uexqlrl/tasks/main.yml:34 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 7, "files": [{"atime": 1625061538.0785072, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800794, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/DEFAULT.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2121, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800795, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/EMPTY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 364, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800796, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FIPS.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 1680, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/FUTURE.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2029, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1625061534.4895072, "ctime": 1620069924.647428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 16800798, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/LEGACY.pol", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2543, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available base policies fact] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:42 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_policies": ["FIPS", "FUTURE", "DEFAULT", "LEGACY", "EMPTY"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Find subpolicy files] *************** task path: /tmp/tmp9uexqlrl/tasks/main.yml:49 ok: [/cache/rhel-8.qcow2] => {"changed": false, "examined": 5, "files": [{"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169053, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 288, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169054, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/ECDHE-ONLY.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 118, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169055, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-CAMELLIA.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 246, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1625061538.079507, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169056, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/NO-SHA1.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 150, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}, {"atime": 1612890631.0, "ctime": 1620069924.648428, "dev": 64515, "gid": 0, "gr_name": "root", "inode": 25169057, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0644", "mtime": 1612890631.0, "nlink": 1, "path": "/usr/share/crypto-policies/policies/modules/OSPP.pmod", "pw_name": "root", "rgrp": true, "roth": true, "rusr": true, "size": 2031, "uid": 0, "wgrp": false, "woth": false, "wusr": true, "xgrp": false, "xoth": false, "xusr": false}], "matched": 5, "msg": ""} TASK [linux-system-roles.crypto_policies : Set available subpolicies fact] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:57 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_subpolicies": ["NO-CAMELLIA", "ECDHE-ONLY", "OSPP", "AD-SUPPORT", "NO-SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Set crypto_policies_available_modules fact (deprecated)] *** task path: /tmp/tmp9uexqlrl/tasks/main.yml:64 ok: [/cache/rhel-8.qcow2] => {"ansible_facts": {"crypto_policies_available_modules": ["NO-CAMELLIA", "ECDHE-ONLY", "OSPP", "AD-SUPPORT", "NO-SHA1"]}, "changed": false} TASK [linux-system-roles.crypto_policies : Update crypto policy if needed] ***** task path: /tmp/tmp9uexqlrl/tasks/main.yml:70 fatal: [/cache/rhel-8.qcow2]: FAILED! => {"changed": true, "cmd": ["update-crypto-policies", "--no-reload", "--set", "DEFAULT:NOEXIST"], "delta": "0:00:00.046035", "end": "2021-06-30 09:59:04.617360", "msg": "non-zero return code", "rc": 1, "start": "2021-06-30 09:59:04.571325", "stderr": "Error: Unknown policy: NOEXIST", "stderr_lines": ["Error: Unknown policy: NOEXIST"], "stdout": "", "stdout_lines": []} TASK [Check that we failed in the role] **************************************** task path: /tmp/tmp9uexqlrl/tests/tests_update.yml:62 ok: [/cache/rhel-8.qcow2] => { "changed": false, "msg": "All assertions passed" } RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:4 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:11 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : reboot the managed host to apply crypto policies changes] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:4 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} RUNNING HANDLER [linux-system-roles.crypto_policies : clear the crypto_policies_reboot_required flag] *** task path: /tmp/tmp9uexqlrl/handlers/main.yml:11 skipping: [/cache/rhel-8.qcow2] => {"changed": false, "skip_reason": "Conditional result was False"} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-8.qcow2 : ok=53 changed=3 unreachable=0 failed=0 skipped=13 rescued=2 ignored=0