|
12 | 12 | changed_when: false |
13 | 13 | register: sshd_version |
14 | 14 |
|
15 | | -- debug: var={{sshd_version.stdout}} |
| 15 | +- name: set hostkeys according to openssh-version |
| 16 | + set_fact: |
| 17 | + ssh_host_key_files: ['/etc/ssh/ssh_host_rsa_key'] |
| 18 | + when: sshd_version.stdout >= '5.3' |
| 19 | + |
| 20 | +- name: set hostkeys according to openssh-version |
| 21 | + set_fact: |
| 22 | + ssh_host_key_files: ['/etc/ssh/ssh_host_rsa_key', '/etc/ssh/ssh_host_ecdsa_key'] |
| 23 | + when: sshd_version.stdout >= '6.0' |
| 24 | + |
| 25 | +- name: set hostkeys according to openssh-version |
| 26 | + set_fact: |
| 27 | + ssh_host_key_files: ['/etc/ssh/ssh_host_rsa_key', '/etc/ssh/ssh_host_ecdsa_key', '/etc/ssh/ssh_host_ed25519_key'] |
| 28 | + when: sshd_version.stdout >= '6.3' |
16 | 29 |
|
17 | 30 | - name: create sshd_config and set permissions to root/600 |
18 | 31 | template: src='opensshd.conf.j2' dest='/etc/ssh/sshd_config' mode=0600 owner=root group=root validate="/usr/sbin/sshd -T -f %s" |
|
46 | 59 | changed_when: false |
47 | 60 | check_mode: no |
48 | 61 |
|
49 | | -- name: set hostkeys according to openssh-version |
50 | | - set_fact: |
51 | | - ssh_host_key_files: ['/etc/ssh/ssh_host_rsa_key'] |
52 | | - when: sshd_version.stdout >= '5.3' |
53 | | - |
54 | | -- name: set hostkeys according to openssh-version |
55 | | - set_fact: |
56 | | - ssh_host_key_files: ['/etc/ssh/ssh_host_rsa_key', '/etc/ssh/ssh_host_ecdsa_key'] |
57 | | - when: sshd_version.stdout >= '6.0' |
58 | | - |
59 | | -- name: set hostkeys according to openssh-version |
60 | | - set_fact: |
61 | | - ssh_host_key_files: ['/etc/ssh/ssh_host_rsa_key', '/etc/ssh/ssh_host_ecdsa_key', '/etc/ssh/ssh_host_ed25519_key'] |
62 | | - when: sshd_version.stdout >= '6.3' |
63 | | - |
64 | 62 | - block: # only runs when selinux is running |
65 | 63 | - name: install selinux dependencies when selinux is installed on RHEL or Oracle Linux |
66 | 64 | yum: name="{{item}}" state=installed |
|
0 commit comments