Freeze break: fix ssh_known_hosts

Stephen John Smoogen smooge at gmail.com
Thu Apr 2 16:04:32 UTC 2015


+1 This looks good. Do we need to do any sort of selinux to get it readable
by http?

On 2 April 2015 at 09:40, Kevin Fenzi <kevin at scrye.com> wrote:

> When we moved our proxies from puppet to ansible, we forgot to setup
> something to copy the ssh_known_hosts file over to them, so anyone who
> goes to https://admin.fedoraproject.org/ssh_known_hosts gets a no such
> file.
>
> I'd like to add the following patch to the proxies playbook and run
> that playbook to correct this.
>
> +1s?
>
> kevin
> --
> diff --git a/roles/httpd/fingerprints/tasks/main.yml
> b/roles/httpd/fingerprints/tasks/main.yml
> index 74dd152..00afe5c 100644
> --- a/roles/httpd/fingerprints/tasks/main.yml
> +++ b/roles/httpd/fingerprints/tasks/main.yml
> @@ -13,3 +13,7 @@
>    - fingerprints
>    - httpd
>    - httpd/fingerprints
> +
> +- copy: src=/etc/ssh/ssh_known_hosts dest=/etc/ssh/ssh_known_hosts
> +  tags:
> +  - fingerprints
>
> _______________________________________________
> infrastructure mailing list
> infrastructure at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/infrastructure
>



-- 
Stephen J Smoogen.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20150402/51d13f6c/attachment.html>


More information about the infrastructure mailing list