Ensure that ssh is installed (#774)

Signed-off-by: Sevan Murriguian-Watrin <[email protected]>
This commit is contained in:
Sevan authored and GitHub committed 2024-07-02 20:41:07 +02:00
1 parent ed85a70105
commit 0233bfe543
16 files changed
+53 -15

No files matched your search

+3 -9
View File
@@ -22,6 +22,9 @@
with_dict: "{{ os_vars }}"
tags: always
- name: Install openssh package and configure the service
ansible.builtin.include_tasks: install.yml
- name: Get openssh-version
ansible.builtin.command: ssh -V
register: sshd_version_raw
@@ -32,15 +35,6 @@
ansible.builtin.set_fact:
sshd_version: "{{ sshd_version_raw.stderr | regex_replace('.*_([0-9]*.[0-9]).*', '\\1') }}"
# see https://github.com/dev-sec/ansible-collection-hardening/issues/763
- name: Change Debian/Ubuntu systems so ssh starts traditionally instead of socket-activated
ansible.builtin.include_tasks: disable-systemd-socket.yml
when:
- ssh_server_hardening | bool
- ssh_server_enabled | bool
- (ansible_facts.distribution == 'Ubuntu' and ansible_facts.distribution_major_version is version('22.04', '>=')) or
(ansible_facts.os_family == 'Debian' and ansible_facts.distribution_major_version is version('12', '>='))
- name: Set default for ssh_host_key_files if not supplied
ansible.builtin.include_tasks: crypto_hostkeys.yml
when: