add sysctl exclude

Signed-off-by: Martin Schurz <[email protected]>

.github/workflows/os_hardening_vm.yml

@@ -23,11 +23,11 @@ jobs:
       matrix:
         molecule_distro:
           - centos7
-          ##- rocky8
+          - rocky8
-          ##- ubuntu1804
+          - ubuntu1804
-          ##- ubuntu2004
+          - ubuntu2004
-          ##- debian9
+          - debian9
-          ##- debian10
+          - debian10
           # - opensuse42  # opensuse currently cannot get an ip address
           # - arch  - arch is currently not supported by cinc-auditor
     steps:

roles/os_hardening/tasks/sysctl.yml

@@ -68,7 +68,7 @@
         reload: true
         ignoreerrors: true
       with_dict: '{{ sysctl_config }}'
-      when: item.key not in sysctl_unsupported_entries
+      when: item.key not in sysctl_unsupported_entries | default()
   when: ansible_virtualization_type not in ['docker', 'lxc', 'openvz']
 
 - name: Apply ufw defaults