forked from ansible-lockdown/RHEL9-CIS
0f58436212
* change logic thanks to @rjacobs1990 see #175 * 1.2.1 force gpg import rhel * fix missing facts --------- Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
34 lines
1 KiB
YAML
34 lines
1 KiB
YAML
---
|
|
|
|
- name: Pre Audit Setup | Set audit package name
|
|
block:
|
|
- name: Pre Audit Setup | Set audit package name | 64bit
|
|
ansible.builtin.set_fact:
|
|
audit_pkg_arch_name: AMD64
|
|
when: ansible_facts.machine == "x86_64"
|
|
|
|
- name: Pre Audit Setup | Set audit package name | ARM64
|
|
ansible.builtin.set_fact:
|
|
audit_pkg_arch_name: ARM64
|
|
when: ansible_facts.machine == "arm64"
|
|
|
|
- name: Pre Audit Setup | Download audit binary
|
|
ansible.builtin.get_url:
|
|
url: "{{ audit_bin_url }}{{ audit_pkg_arch_name }}"
|
|
dest: "{{ audit_bin }}"
|
|
owner: root
|
|
group: root
|
|
checksum: "{{ audit_bin_version[audit_pkg_arch_name + '_checksum'] }}"
|
|
mode: '0555'
|
|
when:
|
|
- get_audit_binary_method == 'download'
|
|
|
|
- name: Pre Audit Setup | Copy audit binary
|
|
ansible.builtin.copy:
|
|
src: "{{ audit_bin_copy_location }}"
|
|
dest: "{{ audit_bin }}"
|
|
mode: '0555'
|
|
owner: root
|
|
group: root
|
|
when:
|
|
- get_audit_binary_method == 'copy'
|