From 0f631c14059beb7b126ad7440fc62e28804e5ad4 Mon Sep 17 00:00:00 2001
From: Martin Schurz <Martin.Schurz@t-systems.com>
Date: Mon, 11 Jul 2022 09:39:52 +0200
Subject: [PATCH] add sysctl exclude

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
---
 .github/workflows/os_hardening_vm.yml | 10 +++++-----
 roles/os_hardening/tasks/sysctl.yml   |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/os_hardening_vm.yml b/.github/workflows/os_hardening_vm.yml
index 05cc987b..55742535 100644
--- a/.github/workflows/os_hardening_vm.yml
+++ b/.github/workflows/os_hardening_vm.yml
@@ -23,11 +23,11 @@ jobs:
       matrix:
         molecule_distro:
           - centos7
-          ##- rocky8
-          ##- ubuntu1804
-          ##- ubuntu2004
-          ##- debian9
-          ##- debian10
+          - rocky8
+          - ubuntu1804
+          - ubuntu2004
+          - debian9
+          - debian10
           # - opensuse42  # opensuse currently cannot get an ip address
           # - arch  - arch is currently not supported by cinc-auditor
     steps:
diff --git a/roles/os_hardening/tasks/sysctl.yml b/roles/os_hardening/tasks/sysctl.yml
index 1d9faa54..b4efdb9e 100644
--- a/roles/os_hardening/tasks/sysctl.yml
+++ b/roles/os_hardening/tasks/sysctl.yml
@@ -68,7 +68,7 @@
         reload: true
         ignoreerrors: true
       with_dict: '{{ sysctl_config }}'
-      when: item.key not in sysctl_unsupported_entries
+      when: item.key not in sysctl_unsupported_entries | default()
   when: ansible_virtualization_type not in ['docker', 'lxc', 'openvz']
 
 - name: Apply ufw defaults