Playbook #2
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml
Execution
Date 14 Dec 2025 10:04:43 +0000
Duration 00:10:10.66
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.13.5
Summary
15 Hosts
603 Tasks
2357 Results
18 Plays
157 Files
0 Records
check:False tags:all

Host facts: aio1
Processor
Storage
/
/dev/vda1 (ext4)
22.6% used
57.7 GB free
/mnt/config
/dev/sr0 (iso9660)
100.0% used
0 bytes free
/var/lib/lxc
/dev/vdb2 (ext4)
25.0% used
28.1 GB free
/var/lib/nova/instances
/dev/loop0 (xfs)
1.9% used
1004.2 GB free
/var/lib/machines
/dev/loop1 (ext4)
9.4% used
9.7 GB free
/openstack
/dev/vdb1 (ext4)
5.7% used
23.6 GB free
All Host Facts
Fact Value
ansible_mounts 
[
    {
        "block_available": 15113204,
        "block_size": 4096,
        "block_total": 19520835,
        "block_used": 4407631,
        "device": "/dev/vda1",
        "dump": 0,
        "fstype": "ext4",
        "inode_available": 20123813,
        "inode_total": 20858880,
        "inode_used": 735067,
        "mount": "/",
        "options": "rw,relatime",
        "passno": 0,
        "size_available": 61903683584,
        "size_total": 79957340160,
        "uuid": "2c8347a5-aa05-419f-9dc6-138cbe98436c"
    },
    {
        "block_available": 0,
        "block_size": 2048,
        "block_total": 329,
        "block_used": 329,
        "device": "/dev/sr0",
        "dump": 0,
        "fstype": "iso9660",
        "inode_available": 0,
        "inode_total": 0,
        "inode_used": 0,
        "mount": "/mnt/config",
        "options": "ro,relatime,nojoliet,check=s,map=n,blocksize=2048,fmode=700,iocharset=utf8",
        "passno": 0,
        "size_available": 0,
        "size_total": 673792,
        "uuid": "2025-12-14-09-58-32-00"
    },
    {
        "block_available": 7370991,
        "block_size": 4096,
        "block_total": 9830276,
        "block_used": 2459285,
        "device": "/dev/vdb2",
        "dump": 0,
        "fstype": "ext4",
        "inode_available": 2305945,
        "inode_total": 2518208,
        "inode_used": 212263,
        "mount": "/var/lib/lxc",
        "options": "rw,noatime,nobarrier,data=writeback",
        "passno": 0,
        "size_available": 30191579136,
        "size_total": 40264810496,
        "uuid": "a5a9514b-ebff-43ea-9d82-67cee34c3802"
    },
    {
        "block_available": 263253996,
        "block_size": 4096,
        "block_total": 268402688,
        "block_used": 5148692,
        "device": "/dev/loop0",
        "dump": 0,
        "fstype": "xfs",
        "inode_available": 107374141,
        "inode_total": 107374144,
        "inode_used": 3,
        "mount": "/var/lib/nova/instances",
        "options": "rw,noatime,nodiratime,attr2,inode64,logbufs=8,logbsize=256k,noquota",
        "passno": 0,
        "size_available": 1078288367616,
        "size_total": 1099377410048,
        "uuid": "bae14e7d-1022-488f-ba5d-41fb74a42978"
    },
    {
        "block_available": 2547034,
        "block_size": 4096,
        "block_total": 2811698,
        "block_used": 264664,
        "device": "/dev/loop1",
        "dump": 0,
        "fstype": "ext4",
        "inode_available": 706126,
        "inode_total": 720896,
        "inode_used": 14770,
        "mount": "/var/lib/machines",
        "options": "rw,relatime",
        "passno": 0,
        "size_available": 10432651264,
        "size_total": 11516715008,
        "uuid": "89806c61-ed72-4cde-88f2-ab9bad056e80"
    },
    {
        "block_available": 6187246,
        "block_size": 4096,
        "block_total": 6561071,
        "block_used": 373825,
        "device": "/dev/vdb1",
        "dump": 0,
        "fstype": "ext4",
        "inode_available": 1679231,
        "inode_total": 1679360,
        "inode_used": 129,
        "mount": "/openstack",
        "options": "rw,noatime,nobarrier,data=writeback",
        "passno": 0,
        "size_available": 25342959616,
        "size_total": 26874146816,
        "uuid": "e2bb02b1-b010-4626-aca2-f232e1396a55"
    }
]


252 OK 104 CHANGED 145 SKIPPED





Reset
Report Status Date Date Duration Host Action Task Tags Notes
SKIPPED 14 Dec 2025 10:14:51 +0000 00:00:00.01 aio1 ansible.builtin.include_tasks ansible-hardening : Including contrib tasks 1
SKIPPED 14 Dec 2025 10:14:45 +0000 00:00:00.01 aio1 ansible.builtin.debug ansible-hardening : V-72313 - Change SNMP community strings from default. 4
SKIPPED 14 Dec 2025 10:14:45 +0000 00:00:00.01 aio1 ansible.builtin.debug ansible-hardening : V-72305 - TFTP must be configured to operate in secure mode 4
SKIPPED 14 Dec 2025 10:14:45 +0000 00:00:00.01 aio1 ansible.builtin.command ansible-hardening : Check TFTP configuration mode 2
SKIPPED 14 Dec 2025 10:14:44 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : V-72297 - Prevent unrestricted mail relaying 4
SKIPPED 14 Dec 2025 10:14:44 +0000 00:00:00.01 aio1 ansible.builtin.debug ansible-hardening : V-72295 - Network interfaces must not be in promiscuous mode. 4
SKIPPED 14 Dec 2025 10:14:43 +0000 00:00:00.01 aio1 ansible.builtin.command ansible-hardening : Limit new TCP connections to 25/minute and allow bursting to 100 4
SKIPPED 14 Dec 2025 10:14:43 +0000 00:00:00.01 aio1 ansible.builtin.service ansible-hardening : Ensure firewalld is running and enabled 4
SKIPPED 14 Dec 2025 10:14:42 +0000 00:00:00.01 aio1 ansible.builtin.template ansible-hardening : V-72269 - Synchronize system clock (configuration file) 4
SKIPPED 14 Dec 2025 10:14:42 +0000 00:00:00.01 aio1 ansible.builtin.service ansible-hardening : Start and enable chrony 4
SKIPPED 14 Dec 2025 10:14:41 +0000 00:00:00.01 aio1 ansible.builtin.service ansible-hardening : Ensure ClamAV is running 3
SKIPPED 14 Dec 2025 10:14:41 +0000 00:00:00.01 aio1 ansible.builtin.command ansible-hardening : Update ClamAV database 3
SKIPPED 14 Dec 2025 10:14:41 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : Allow automatic freshclam updates 3
SKIPPED 14 Dec 2025 10:14:41 +0000 00:00:00.01 aio1 ansible.builtin.file ansible-hardening : Ensure ClamAV socket directory exists 3
SKIPPED 14 Dec 2025 10:14:41 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : Set ClamAV server type as socket 3
SKIPPED 14 Dec 2025 10:14:40 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : Remove 'Example' line from ClamAV configuration files 3
SKIPPED 14 Dec 2025 10:14:36 +0000 00:00:00.01 aio1 ansible.builtin.service ansible-hardening : V-71985 - File system automounter must be disabled unless required. 4
SKIPPED 14 Dec 2025 10:14:36 +0000 00:00:00.01 aio1 ansible.builtin.debug ansible-hardening : V-72039 - All system device files must be correctly labeled to prevent unauthorized modification. 4
SKIPPED 14 Dec 2025 10:14:36 +0000 00:00:00.01 aio1 ansible.builtin.command ansible-hardening : Check for unlabeled device files 4
SKIPPED 14 Dec 2025 10:14:36 +0000 00:00:00.01 aio1 ansible.builtin.file ansible-hardening : Relabel files on next boot if SELinux mode changed 4
SKIPPED 14 Dec 2025 10:14:35 +0000 00:00:00.01 aio1 ansible.posix.selinux ansible-hardening : Ensure SELinux is in enforcing mode on the next reboot 4
SKIPPED 14 Dec 2025 10:14:33 +0000 00:00:00.01 aio1 ansible.builtin.debug ansible-hardening : Print a warning if FIPS isn't enabled 4
SKIPPED 14 Dec 2025 10:14:33 +0000 00:00:00.01 aio1 ansible.builtin.command ansible-hardening : Check if FIPS is enabled 2
SKIPPED 14 Dec 2025 10:14:33 +0000 00:00:00.01 aio1 ansible.builtin.service ansible-hardening : V-72057 - Kernel core dumps must be disabled unless needed. 4
SKIPPED 14 Dec 2025 10:14:30 +0000 00:00:00.01 aio1 ansible.builtin.template ansible-hardening : Create a GDM keyfile for machine-wide settings 4
SKIPPED 14 Dec 2025 10:14:30 +0000 00:00:00.01 aio1 ansible.builtin.copy ansible-hardening : Create a GDM profile for displaying a login banner 4
SKIPPED 14 Dec 2025 10:14:30 +0000 00:00:00.01 aio1 ansible.builtin.template ansible-hardening : Prevent users from changing graphical session locking configurations 6
SKIPPED 14 Dec 2025 10:14:29 +0000 00:00:00.01 aio1 ansible.builtin.template ansible-hardening : Configure graphical session locking 6
SKIPPED 14 Dec 2025 10:14:29 +0000 00:00:00.02 aio1 ansible.builtin.file ansible-hardening : Create dconf directories 7
SKIPPED 14 Dec 2025 10:14:29 +0000 00:00:00.01 aio1 ansible.builtin.copy ansible-hardening : Create a user profile in dconf 6
SKIPPED 14 Dec 2025 10:14:29 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : V-71955 - The operating system must not allow guest logon to the system. 4
SKIPPED 14 Dec 2025 10:14:28 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : V-71953 - The operating system must not allow an unattended or automatic logon to the system via a graphical user interface 4
SKIPPED 14 Dec 2025 10:14:28 +0000 00:00:00.02 aio1 ansible.builtin.file ansible-hardening : Set owner/group owner on /etc/cron.allow 5
SKIPPED 14 Dec 2025 10:14:28 +0000 00:00:00.02 aio1 ansible.builtin.debug ansible-hardening : V-72047 - All world-writable directories must be group-owned by root, sys, bin, or an application group. 4
SKIPPED 14 Dec 2025 10:14:27 +0000 00:00:00.01 aio1 ansible.builtin.shell ansible-hardening : Find all world-writable directories 2
SKIPPED 14 Dec 2025 10:14:27 +0000 00:00:00.02 aio1 ansible.builtin.file ansible-hardening : Set proper owner, group owner, and permissions on home directories 6
SKIPPED 14 Dec 2025 10:14:27 +0000 00:00:00.02 aio1 ansible.builtin.debug ansible-hardening : V-72009 - All files and directories must have a valid group owner. 4
SKIPPED 14 Dec 2025 10:14:27 +0000 00:00:00.01 aio1 ansible.builtin.command ansible-hardening : Search for files/directories with an invalid group owner 2
SKIPPED 14 Dec 2025 10:14:27 +0000 00:00:00.01 aio1 ansible.builtin.debug ansible-hardening : V-72007 - All files and directories must have a valid owner. 4
SKIPPED 14 Dec 2025 10:14:27 +0000 00:00:00.01 aio1 ansible.builtin.command ansible-hardening : Search for files/directories with an invalid owner 2
SKIPPED 14 Dec 2025 10:14:26 +0000 00:00:00.01 aio1 shell ansible-hardening : V-71849 - Reset file permissions/ownership to vendor values 5
SKIPPED 14 Dec 2025 10:14:26 +0000 00:00:00.01 aio1 ansible.builtin.shell ansible-hardening : V-71849 - Get packages with incorrect file permissions or ownership 4
SKIPPED 14 Dec 2025 10:14:26 +0000 00:00:00.01 aio1 ansible.builtin.file ansible-hardening : Remove .shosts or shosts.equiv files 5
SKIPPED 14 Dec 2025 10:14:26 +0000 00:00:00.01 aio1 ansible.builtin.async_status ansible-hardening : Ensure .shosts find has finished 5
SKIPPED 14 Dec 2025 10:14:25 +0000 00:00:00.01 aio1 ansible.builtin.blockinfile ansible-hardening : V-72217 - The operating system must limit the number of concurrent sessions to 10 for all accounts and/or account types 4
SKIPPED 14 Dec 2025 10:14:25 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : Set CLASS for grub file 5
SKIPPED 14 Dec 2025 10:14:25 +0000 00:00:00.01 aio1 ansible.builtin.blockinfile ansible-hardening : Define password options for grub 5
SKIPPED 14 Dec 2025 10:14:24 +0000 00:00:00.01 aio1 debug ansible-hardening : V-71949 - Users must re-authenticate for privilege escalation 5
SKIPPED 14 Dec 2025 10:14:23 +0000 00:00:00.01 aio1 ansible.builtin.blockinfile ansible-hardening : Lock accounts after three failed login attempts a 15 minute period 5
SKIPPED 14 Dec 2025 10:14:23 +0000 00:00:00.02 aio1 ansible.builtin.lineinfile ansible-hardening : Prevent users with blank or null passwords from authenticating (Red Hat) 4
SKIPPED 14 Dec 2025 10:14:22 +0000 00:00:00.03 aio1 ansible.builtin.lineinfile ansible-hardening : Adjust auditd/audispd configurations 7
SKIPPED 14 Dec 2025 10:14:21 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : V-72085 - The operating system must encrypt the transfer of audit records off-loaded onto a different system or media from the system being audited 4
SKIPPED 14 Dec 2025 10:14:21 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : V-72083 - The operating system must off-load audit records onto a different system or media from the system being audited 4
SKIPPED 14 Dec 2025 10:14:20 +0000 00:00:00.01 aio1 ansible.builtin.shell ansible-hardening : Initialize AIDE (this will take a few minutes) 4
SKIPPED 14 Dec 2025 10:14:18 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : Use pwquality when passwords are changed or created 4
SKIPPED 14 Dec 2025 10:14:14 +0000 00:00:00.02 aio1 ansible.builtin.debug ansible-hardening : Print warning for local interactive users without a home directory assigned 4
SKIPPED 14 Dec 2025 10:14:14 +0000 00:00:00.01 aio1 ansible.builtin.fail ansible-hardening : Print warnings for non-root users with UID 0 4
SKIPPED 14 Dec 2025 10:14:13 +0000 00:00:00.02 aio1 ansible.builtin.debug ansible-hardening : Print warning for groups in /etc/passwd that are not in /etc/group 4
SKIPPED 14 Dec 2025 10:14:13 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : Ensure accounts are disabled if the password expires 4
SKIPPED 14 Dec 2025 10:14:12 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : Ensure that users cannot reuse one of their last 5 passwords 4
SKIPPED 14 Dec 2025 10:14:12 +0000 00:00:00.05 aio1 ansible.builtin.command ansible-hardening : Set maximum password lifetime limit to 60 days for interactive accounts 4
SKIPPED 14 Dec 2025 10:14:12 +0000 00:00:00.05 aio1 ansible.builtin.command ansible-hardening : Set minimum password lifetime limit to 24 hours for interactive accounts 4
SKIPPED 14 Dec 2025 10:14:12 +0000 00:00:00.01 aio1 community.general.ini_file ansible-hardening : Ensure libuser is storing passwords using SHA512 4
SKIPPED 14 Dec 2025 10:14:11 +0000 00:00:00.01 aio1 ansible.builtin.copy ansible-hardening : Enable automatic package updates (apt) 4
SKIPPED 14 Dec 2025 10:14:10 +0000 00:00:00.01 aio1 ansible.builtin.lineinfile ansible-hardening : V-71987 - Clean requirements/dependencies when removing packages (dpkg) 4
SKIPPED 14 Dec 2025 10:14:10 +0000 00:00:00.01 aio1 ansible.builtin.debug ansible-hardening : V-71855 - The cryptographic hash of system files and commands must match vendor values (apt) 3
SKIPPED 14 Dec 2025 10:14:09 +0000 00:00:00.01 aio1 ansible.builtin.set_fact ansible-hardening : V-71855 - Create comma-separated list 3
SKIPPED 14 Dec 2025 10:14:09 +0000 00:00:00.01 aio1 ansible.builtin.shell ansible-hardening : V-71855 - Get files with invalid checksums (apt) 3
SKIPPED 14 Dec 2025 10:14:09 +0000 00:00:00.01 aio1 ansible.builtin.shell ansible-hardening : Gather debsums report 1
SKIPPED 14 Dec 2025 10:14:09 +0000 00:00:00.01 aio1 ansible.builtin.apt ansible-hardening : Ensure debsums is installed 1
SKIPPED 14 Dec 2025 10:13:43 +0000 00:00:00.01 aio1 ansible.builtin.dnf ansible-hardening : Install EPEL repository 2
SKIPPED 14 Dec 2025 10:13:42 +0000 00:00:00.01 aio1 ansible.builtin.find ansible-hardening : Check for .shosts or shosts.equiv files 5
SKIPPED 14 Dec 2025 10:13:42 +0000 00:00:00.01 aio1 ansible.builtin.find ansible-hardening : Locate top level directories to check for .shosts 5
SKIPPED 14 Dec 2025 10:13:42 +0000 00:00:00.01 aio1 shell ansible-hardening : Verify all installed RPM packages 5
SKIPPED 14 Dec 2025 10:09:02 +0000 00:00:00.01 aio1 ansible.builtin.command lxc_hosts : Set the qgroup size|compression limits on machines 1
SKIPPED 14 Dec 2025 10:08:51 +0000 00:00:00.01 aio1 ansible.builtin.template lxc_hosts : Remove requiretty for sudo on centos 1
SKIPPED 14 Dec 2025 10:08:29 +0000 00:00:00.01 aio1 ansible.builtin.copy lxc_hosts : Copy files from deployment host to the container cache 1
SKIPPED 14 Dec 2025 10:08:29 +0000 00:00:00.01 aio1 ansible.builtin.file lxc_hosts : Ensure directories exist for lxc_container_cache_files 1
SKIPPED 14 Dec 2025 10:08:08 +0000 00:00:00.01 aio1 ansible.builtin.systemd systemd_mount : Unload mount(s) 1
SKIPPED 14 Dec 2025 10:08:07 +0000 00:00:00.01 aio1 ansible.builtin.systemd systemd_mount : Set the state of the mount (fallback) 1
SKIPPED 14 Dec 2025 10:08:06 +0000 00:00:00.01 aio1 openstack.config_template.config_template systemd_mount : Create overrides file 2
SKIPPED 14 Dec 2025 10:08:06 +0000 00:00:00.01 aio1 ansible.builtin.file systemd_mount : Create overrides folder for mount 2
SKIPPED 14 Dec 2025 10:08:05 +0000 00:00:00.01 aio1 ansible.builtin.copy systemd_mount : Place mount credentials when required 1
SKIPPED 14 Dec 2025 10:08:04 +0000 00:00:00.01 aio1 ansible.builtin.service systemd_mount : Restart systemd-tmpfiles-setup-dev 1
SKIPPED 14 Dec 2025 10:08:04 +0000 00:00:00.01 aio1 ansible.builtin.include_role Apply systemctl overrides 1
SKIPPED 14 Dec 2025 10:08:04 +0000 00:00:00.01 aio1 ansible.builtin.copy systemd_mount : Configure systemd-tmpfiles to create /dev/fuse at boot 1
SKIPPED 14 Dec 2025 10:08:03 +0000 00:00:00.01 aio1 ansible.builtin.yum_repository systemd_mount : Install the EPEL repository 1
SKIPPED 14 Dec 2025 10:08:03 +0000 00:00:00.01 aio1 ansible.builtin.rpm_key systemd_mount : Install EPEL gpg keys 1
SKIPPED 14 Dec 2025 10:08:03 +0000 00:00:00.01 aio1 ansible.builtin.get_url systemd_mount : Download EPEL gpg keys 1
SKIPPED 14 Dec 2025 10:08:00 +0000 00:00:00.02 aio1 ansible.builtin.include_tasks systemd_service : Restart changed services 2
SKIPPED 14 Dec 2025 10:08:00 +0000 00:00:00.02 aio1 ansible.builtin.systemd systemd_service : Load socket 2
SKIPPED 14 Dec 2025 10:08:00 +0000 00:00:00.02 aio1 ansible.builtin.systemd systemd_service : Load timer lxc-dnsmasq 2
SKIPPED 14 Dec 2025 10:07:58 +0000 00:00:00.01 aio1 ansible.builtin.template systemd_service : Place the systemd socket 2
SKIPPED 14 Dec 2025 10:07:58 +0000 00:00:00.01 aio1 ansible.builtin.template systemd_service : Place the systemd timer 2
SKIPPED 14 Dec 2025 10:07:58 +0000 00:00:00.01 aio1 ansible.builtin.template systemd_service : Place the systemd override 2
SKIPPED 14 Dec 2025 10:07:57 +0000 00:00:00.01 aio1 ansible.builtin.file systemd_service : Create service.d overrides dir 2
SKIPPED 14 Dec 2025 10:07:56 +0000 00:00:00.03 aio1 ansible.posix.sysctl systemd_networkd : Add IP Forward for interface 1
SKIPPED 14 Dec 2025 10:07:47 +0000 00:00:00.01 aio1 ansible.builtin.file systemd_networkd : Clean-up systemd-udev override for EL 1
SKIPPED 14 Dec 2025 10:07:44 +0000 00:00:00.02 aio1 ansible.builtin.template systemd_networkd : Place systemd-networkd network routes 1
SKIPPED 14 Dec 2025 10:07:44 +0000 00:00:00.02 aio1 ansible.builtin.template systemd_networkd : Place systemd-networkd routing policy rules 1