evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 32 Wiki Activity

Fail if /var has nodev or noexec option enabled.
Some checks reported errors
continuous-integration/drone/push Build was killed
Details

Browse source
This commit is contained in:
William Hirigoyen (Evolix) 2022-01-11 11:48:57 +01:00
parent 14883aa95e
commit bd39adaf68
1 changed files with 5 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
lxc/tasks/main.yml
View file

@ -43,15 +43,11 @@
- lxc_unprivilegied_containers | bool - lxc_unprivilegied_containers | bool
- root_subuids.rc != 0 - root_subuids.rc != 0
- name: /var has mount options dev and exec enabled - name: Check if /var has not mount options nodev or noexec
mount: shell: findmnt | grep -E "/var[^/]" | grep -e nodev -e noexec
path: /var register: check_var
opts: dev,exec changed_when: false
state: remounted failed_when: "check_var.rc == 0"
with_items: "{{ ansible_mounts }}"
when: "item.mount == '/var' and
('nodev' in item.options.split(',') or
'noexec' in item.options.split(','))"
- name: Create containers - name: Create containers
include: create-container.yml include: create-container.yml