xoxys.kernel/tasks/kernel.yml
Robert Kaussow 626c156b74
All checks were successful
continuous-integration/drone/push Build is passing
feat: add option to add custom sysctl configs (#2)
2023-01-29 15:31:08 +01:00

34 lines
859 B
YAML

---
- block:
- name: Set default kernel hardening parameters
template:
src: etc/sysctl.d/99-local.conf.j2
dest: /etc/sysctl.d/99-local.conf
owner: root
group: root
mode: 0644
notify: __kernel_reload
- name: Deploy custom kernel configurations
template:
src: etc/sysctl.d/xx-custom.conf.j2
dest: "/etc/sysctl.d/{{ item.file }}.conf"
owner: root
group: root
mode: 0644
loop: "{{ kernel_custom_config }}"
loop_control:
label: "{{ item.file }}"
notify: __kernel_reload
- name: Deploy custom modprobe
template:
src: etc/modprobe.d/custom.conf.j2
dest: /etc/modprobe.d/custom.conf
owner: root
group: root
mode: 0644
notify: __kernel_reload
become: True
become_user: root