evolix
/
ansible-roles
22
2
Fork 2
Code Issues 61 Pull Requests 18 Releases 32 Wiki Activity

evolinux-base: quote values
continuous-integration/drone/push Build is passing Details

This commit is contained in:
Jérémy Lecour 2021-05-10 09:07:18 +02:00 committed by Jérémy Lecour
parent 9b2a3a6db2
commit 9ca68a16dd
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
evolinux-base/defaults/main.yml
View File

@ -51,7 +51,7 @@ evolinux_kernel_include: True
evolinux_kernel_reboot_after_panic: True
evolinux_kernel_disable_tcp_timestamps: True
evolinux_kernel_customize_swappiness: True
evolinux_kernel_swappiness: 20
evolinux_kernel_swappiness: "20"
evolinux_kernel_cve20165696: True
# fstab

10
evolinux-base/tasks/kernel.yml
View File

@ -44,7 +44,7 @@
- name: Patch for TCP stack vulnerability CVE-2016-5696
sysctl:
name: net.ipv4.tcp_challenge_ack_limit
value: 1073741823
value: "1073741823"
sysctl_file: "{{ evolinux_kernel_sysctl_path }}"
state: present
reload: yes
@ -58,9 +58,9 @@
state: present
reload: yes
loop:
- { name: "net.ipv4.ipfrag_low_thresh", value: 196608 }
- { name: "net.ipv6.ip6frag_low_thresh", value: 196608 }
- { name: "net.ipv4.ipfrag_high_thresh", value: 262144 }
- { name: "net.ipv6.ip6frag_high_thresh", value: 262144 }
- { name: "net.ipv4.ipfrag_low_thresh", value: "196608" }
- { name: "net.ipv6.ip6frag_low_thresh", value: "196608" }
- { name: "net.ipv4.ipfrag_high_thresh", value: "262144" }
- { name: "net.ipv6.ip6frag_high_thresh", value: "262144" }
- meta: flush_handlers