Freeze break: fix ssh_known_hosts

Pierre-Yves Chibon pingou at pingoured.fr
Thu Apr 2 17:27:14 UTC 2015


On Thu, Apr 02, 2015 at 09:40:54AM -0600, Kevin Fenzi wrote:
> When we moved our proxies from puppet to ansible, we forgot to setup
> something to copy the ssh_known_hosts file over to them, so anyone who
> goes to https://admin.fedoraproject.org/ssh_known_hosts gets a no such
> file. 
> 
> I'd like to add the following patch to the proxies playbook and run
> that playbook to correct this.
> 
> +1s?
> 
> kevin
> --
> diff --git a/roles/httpd/fingerprints/tasks/main.yml b/roles/httpd/fingerprints/tasks/main.yml
> index 74dd152..00afe5c 100644
> --- a/roles/httpd/fingerprints/tasks/main.yml
> +++ b/roles/httpd/fingerprints/tasks/main.yml
> @@ -13,3 +13,7 @@
>    - fingerprints
>    - httpd
>    - httpd/fingerprints
> +
> +- copy: src=/etc/ssh/ssh_known_hosts dest=/etc/ssh/ssh_known_hosts
> +  tags:
> +  - fingerprints

+1 for me


Pierre
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20150402/421095bc/attachment.sig>


More information about the infrastructure mailing list