evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 33 Wiki Activity

evolinux-base: quote values
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Jérémy Lecour 2021-05-10 09:07:18 +02:00 committed by Jérémy Lecour
parent 9b2a3a6db2
commit 9ca68a16dd
2 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
evolinux-base/defaults/main.yml
View file

@ -51,7 +51,7 @@ evolinux_kernel_include: True
evolinux_kernel_reboot_after_panic: True evolinux_kernel_reboot_after_panic: True
evolinux_kernel_disable_tcp_timestamps: True evolinux_kernel_disable_tcp_timestamps: True
evolinux_kernel_customize_swappiness: True evolinux_kernel_customize_swappiness: True
evolinux_kernel_swappiness: 20 evolinux_kernel_swappiness: "20"
evolinux_kernel_cve20165696: True evolinux_kernel_cve20165696: True
# fstab # fstab

10
evolinux-base/tasks/kernel.yml
View file

@ -44,7 +44,7 @@
- name: Patch for TCP stack vulnerability CVE-2016-5696 - name: Patch for TCP stack vulnerability CVE-2016-5696
sysctl: sysctl:
name: net.ipv4.tcp_challenge_ack_limit name: net.ipv4.tcp_challenge_ack_limit
value: 1073741823 value: "1073741823"
sysctl_file: "{{ evolinux_kernel_sysctl_path }}" sysctl_file: "{{ evolinux_kernel_sysctl_path }}"
state: present state: present
reload: yes reload: yes
@ -58,9 +58,9 @@
state: present state: present
reload: yes reload: yes
loop: loop:
- { name: "net.ipv4.ipfrag_low_thresh", value: 196608 } - { name: "net.ipv4.ipfrag_low_thresh", value: "196608" }
- { name: "net.ipv6.ip6frag_low_thresh", value: 196608 } - { name: "net.ipv6.ip6frag_low_thresh", value: "196608" }
- { name: "net.ipv4.ipfrag_high_thresh", value: 262144 } - { name: "net.ipv4.ipfrag_high_thresh", value: "262144" }
- { name: "net.ipv6.ip6frag_high_thresh", value: 262144 } - { name: "net.ipv6.ip6frag_high_thresh", value: "262144" }
- meta: flush_handlers - meta: flush_handlers