Playbook #2
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml
Execution
Date 08 Dec 2025 13:40:18 +0000
Duration 00:10:06.79
Controller aio1.openstack.local
User root
Versions
Ansible 2.18.6
ara 1.7.4 / 1.7.4
Python 3.12.11
Summary
15 Hosts
608 Tasks
2412 Results
18 Plays
158 Files
0 Records
check:False tags:all

Host facts: aio1
Processor
Storage
/
/dev/vda1 (ext4)
22.3% used
57.8 GB free
/mnt/config
/dev/sr0 (iso9660)
100.0% used
0 bytes free
/openstack
/dev/vdb1 (ext4)
5.7% used
23.6 GB free
/var/lib/lxc
/dev/vdb2 (ext4)
18.2% used
30.7 GB free
/var/lib/nova/instances
/dev/loop0 (xfs)
1.9% used
1004.2 GB free
/var/lib/machines
/dev/loop1 (ext4)
8.0% used
9.9 GB free
All Host Facts
Fact Value
ansible_mounts 
[
    {
        "block_available": 15158694,
        "block_size": 4096,
        "block_total": 19520195,
        "block_used": 4361501,
        "device": "/dev/vda1",
        "dump": 0,
        "fstype": "ext4",
        "inode_available": 20138405,
        "inode_total": 20869120,
        "inode_used": 730715,
        "mount": "/",
        "options": "rw,seclabel,relatime",
        "passno": 0,
        "size_available": 62090010624,
        "size_total": 79954718720,
        "uuid": "48c6584a-b837-4962-ae7f-ea9cc3c50511"
    },
    {
        "block_available": 0,
        "block_size": 2048,
        "block_total": 329,
        "block_used": 329,
        "device": "/dev/sr0",
        "dump": 0,
        "fstype": "iso9660",
        "inode_available": 0,
        "inode_total": 0,
        "inode_used": 0,
        "mount": "/mnt/config",
        "options": "ro,relatime,nojoliet,check=s,map=n,blocksize=2048,fmode=700,iocharset=utf8",
        "passno": 0,
        "size_available": 0,
        "size_total": 673792,
        "uuid": "2025-12-08-13-34-45-00"
    },
    {
        "block_available": 6187771,
        "block_size": 4096,
        "block_total": 6561071,
        "block_used": 373300,
        "device": "/dev/vdb1",
        "dump": 0,
        "fstype": "ext4",
        "inode_available": 1679254,
        "inode_total": 1679360,
        "inode_used": 106,
        "mount": "/openstack",
        "options": "rw,seclabel,noatime,nobarrier,data=writeback",
        "passno": 0,
        "size_available": 25345110016,
        "size_total": 26874146816,
        "uuid": "53e5c21e-8ace-439e-afdf-970aba61b435"
    },
    {
        "block_available": 8045648,
        "block_size": 4096,
        "block_total": 9830276,
        "block_used": 1784628,
        "device": "/dev/vdb2",
        "dump": 0,
        "fstype": "ext4",
        "inode_available": 2327711,
        "inode_total": 2518208,
        "inode_used": 190497,
        "mount": "/var/lib/lxc",
        "options": "rw,seclabel,noatime,nobarrier,data=writeback",
        "passno": 0,
        "size_available": 32954974208,
        "size_total": 40264810496,
        "uuid": "ebbf2f7b-4c1c-4374-baa6-bc9e115969b0"
    },
    {
        "block_available": 263253996,
        "block_size": 4096,
        "block_total": 268402688,
        "block_used": 5148692,
        "device": "/dev/loop0",
        "dump": 0,
        "fstype": "xfs",
        "inode_available": 107374141,
        "inode_total": 107374144,
        "inode_used": 3,
        "mount": "/var/lib/nova/instances",
        "options": "rw,seclabel,noatime,nodiratime,attr2,inode64,logbufs=8,logbsize=256k,noquota",
        "passno": 0,
        "size_available": 1078288367616,
        "size_total": 1099377410048,
        "uuid": "a1da55eb-eb8a-4546-8d2c-a99ff0de6be1"
    },
    {
        "block_available": 2587987,
        "block_size": 4096,
        "block_total": 2811698,
        "block_used": 223711,
        "device": "/dev/loop1",
        "dump": 0,
        "fstype": "ext4",
        "inode_available": 709193,
        "inode_total": 720896,
        "inode_used": 11703,
        "mount": "/var/lib/machines",
        "options": "rw,seclabel,relatime",
        "passno": 0,
        "size_available": 10600394752,
        "size_total": 11516715008,
        "uuid": "e562eda9-0c35-4a33-9dbb-93b534890b6a"
    }
]


258 OK 105 CHANGED 142 SKIPPED





Reset
Report Status Date Date Duration Host Action Task Tags Notes
CHANGED 08 Dec 2025 13:50:24 +0000 00:00:00.30 aio1 ansible.builtin.service ansible-hardening : Restart ssh 1
CHANGED 08 Dec 2025 13:50:20 +0000 00:00:00.19 aio1 ansible.builtin.blockinfile ansible-hardening : Adjust ssh server configuration based on STIG requirements 21
CHANGED 08 Dec 2025 13:50:17 +0000 00:00:02.80 aio1 ansible.builtin.lineinfile ansible-hardening : Drop options from SSH config that we manage 21
CHANGED 08 Dec 2025 13:50:17 +0000 00:00:00.46 aio1 ansible.builtin.copy ansible-hardening : Copy login warning banner 5
CHANGED 08 Dec 2025 13:50:13 +0000 00:00:00.15 aio1 ansible.builtin.blockinfile ansible-hardening : V-72223 - Set 10 minute timeout on communication sessions 4
CHANGED 08 Dec 2025 13:50:09 +0000 00:00:00.73 aio1 ansible.builtin.systemd ansible-hardening : V-71993 - The x86 Ctrl-Alt-Delete key sequence must be disabled 4
CHANGED 08 Dec 2025 13:50:09 +0000 00:00:00.51 aio1 ansible.builtin.systemd ansible-hardening : V-71993 - The x86 Ctrl-Alt-Delete key sequence must be disabled 4
CHANGED 08 Dec 2025 13:50:06 +0000 00:00:00.45 aio1 ansible.builtin.copy ansible-hardening : V-77821 - Datagram Congestion Control Protocol (DCCP) kernel module must be disabled 4
CHANGED 08 Dec 2025 13:50:03 +0000 00:00:02.32 aio1 ansible.posix.sysctl ansible-hardening : Set sysctl configurations 13
CHANGED 08 Dec 2025 13:50:03 +0000 00:00:00.16 aio1 ansible.builtin.lineinfile ansible-hardening : V-71983 - USB mass storage must be disabled. 4
CHANGED 08 Dec 2025 13:49:55 +0000 00:00:00.69 aio1 ansible.builtin.lineinfile ansible-hardening : Prevent users with blank or null passwords from authenticating (Red Hat) 4
CHANGED 08 Dec 2025 13:49:53 +0000 00:00:00.49 aio1 ansible.builtin.template ansible-hardening : Deploy rules for auditd based on STIG requirements 56
CHANGED 08 Dec 2025 13:49:53 +0000 00:00:00.16 aio1 ansible.builtin.file ansible-hardening : Remove system default audit.rules file 2
CHANGED 08 Dec 2025 13:49:44 +0000 00:00:00.49 aio1 ansible.builtin.lineinfile ansible-hardening : Apply shadow-utils configurations 9
CHANGED 08 Dec 2025 13:49:43 +0000 00:00:00.16 aio1 community.general.ini_file ansible-hardening : Ensure libuser is storing passwords using SHA512 4
CHANGED 08 Dec 2025 13:49:43 +0000 00:00:00.22 aio1 ansible.builtin.blockinfile ansible-hardening : Set password quality requirements 12
CHANGED 08 Dec 2025 13:49:41 +0000 00:00:00.46 aio1 ansible.builtin.lineinfile ansible-hardening : V-71977 - Require digital signatures for all packages 6
CHANGED 08 Dec 2025 13:49:32 +0000 00:00:06.64 aio1 ansible.builtin.package ansible-hardening : Add packages based on STIG requirements 17
CHANGED 08 Dec 2025 13:49:30 +0000 00:00:00.22 aio1 ansible.builtin.tempfile ansible-hardening : Create temporary directory to hold any temporary files 2
CHANGED 08 Dec 2025 13:44:09 +0000 00:00:01.45 aio1 community.general.lxc_container lxc_hosts : Create base container to use for containers with dir 1
CHANGED 08 Dec 2025 13:44:08 +0000 00:00:00.43 aio1 ansible.builtin.copy lxc_hosts : Set build ID 1
CHANGED 08 Dec 2025 13:44:08 +0000 00:00:00.48 aio1 ansible.builtin.copy lxc_hosts : Set expiry 1
CHANGED 08 Dec 2025 13:44:05 +0000 00:00:02.19 aio1 ansible.builtin.template lxc_hosts : Drop container meta-data 1
CHANGED 08 Dec 2025 13:44:02 +0000 00:00:03.60 aio1 ansible.builtin.shell lxc_hosts : Create lxc image 2
CHANGED 08 Dec 2025 13:44:01 +0000 00:00:00.16 aio1 ansible.builtin.file lxc_hosts : Create LXC cache dir 1
CHANGED 08 Dec 2025 13:44:00 +0000 00:00:00.41 aio1 ansible.builtin.template lxc_hosts : Remove requiretty for sudo on centos 1
CHANGED 08 Dec 2025 13:43:50 +0000 00:00:10.40 aio1 ansible.builtin.async_status lxc_hosts : Ensure that the LXC cache has been prepared 1
CHANGED 08 Dec 2025 13:43:49 +0000 00:00:00.42 aio1 ansible.builtin.template lxc_hosts : Cached image preparation script 1
CHANGED 08 Dec 2025 13:43:46 +0000 00:00:01.67 aio1 ansible.builtin.shell lxc_hosts : Rsyncing files from the LXC host to the container cache 1
CHANGED 08 Dec 2025 13:43:31 +0000 00:00:00.16 aio1 ansible.builtin.file lxc_hosts : Create new image cache directory 1
CHANGED 08 Dec 2025 13:43:30 +0000 00:00:00.65 aio1 ansible.builtin.systemd systemd_mount : Load or Unload mount(s) 1
CHANGED 08 Dec 2025 13:43:29 +0000 00:00:00.27 aio1 openstack.config_template.config_template systemd_mount : Create systemd mount services(s) 2
CHANGED 08 Dec 2025 13:43:28 +0000 00:00:00.16 aio1 ansible.builtin.file systemd_mount : Create mount target(s) 2
CHANGED 08 Dec 2025 13:43:25 +0000 00:00:00.30 aio1 community.general.filesystem lxc_hosts : Format the machines file 1
CHANGED 08 Dec 2025 13:43:24 +0000 00:00:00.15 aio1 ansible.builtin.command lxc_hosts : Create sparse machines file 1
CHANGED 08 Dec 2025 13:43:22 +0000 00:00:00.57 aio1 ansible.builtin.systemd systemd_service : Load service lxc-dnsmasq 2
CHANGED 08 Dec 2025 13:43:20 +0000 00:00:00.30 aio1 openstack.config_template.config_template systemd_service : Place the systemd service 2
CHANGED 08 Dec 2025 13:43:20 +0000 00:00:00.44 aio1 ansible.builtin.template systemd_service : Create tmpfiles.d entry 2
CHANGED 08 Dec 2025 13:43:19 +0000 00:00:00.17 aio1 ansible.builtin.file systemd_service : Create TEMP service lock dir 2
CHANGED 08 Dec 2025 13:43:19 +0000 00:00:00.18 aio1 ansible.builtin.file systemd_service : Create TEMP run dir 2
CHANGED 08 Dec 2025 13:42:53 +0000 00:00:25.12 aio1 ansible.builtin.command systemd_networkd : Update initramfs 1
CHANGED 08 Dec 2025 13:42:52 +0000 00:00:00.31 aio1 ansible.builtin.systemd systemd_networkd : Restart systemd-networkd 2
CHANGED 08 Dec 2025 13:42:51 +0000 00:00:00.32 aio1 ansible.builtin.service lxc_hosts : Restart sshd 1
CHANGED 08 Dec 2025 13:42:49 +0000 00:00:00.32 aio1 openstack.config_template.config_template systemd_networkd : Create systemd-networkd network network(s) 2
CHANGED 08 Dec 2025 13:42:48 +0000 00:00:00.28 aio1 openstack.config_template.config_template systemd_networkd : Create systemd-networkd network link(s) 2
CHANGED 08 Dec 2025 13:42:48 +0000 00:00:00.44 aio1 ansible.builtin.template systemd_networkd : Create systemd-networkd network device(s) 2
CHANGED 08 Dec 2025 13:42:44 +0000 00:00:00.47 aio1 ansible.builtin.systemd lxc_hosts : Disable and stop lxc-net 2
CHANGED 08 Dec 2025 13:42:42 +0000 00:00:00.17 aio1 ansible.posix.sysctl lxc_hosts : Tuning kernel for lxc 1
CHANGED 08 Dec 2025 13:42:42 +0000 00:00:00.16 aio1 ansible.builtin.lineinfile lxc_hosts : Set sshd MaxSessions 2
CHANGED 08 Dec 2025 13:42:41 +0000 00:00:00.43 aio1 ansible.builtin.copy lxc_hosts : Drop lxc veth check script 3
CHANGED 08 Dec 2025 13:42:38 +0000 00:00:02.64 aio1 ansible.builtin.template lxc_hosts : Drop base config file(s) 3
CHANGED 08 Dec 2025 13:42:38 +0000 00:00:00.30 aio1 ansible.builtin.user lxc_hosts : Ensure the lxc dnsmasq user exists 2
CHANGED 08 Dec 2025 13:42:37 +0000 00:00:00.49 aio1 ansible.builtin.service lxc_hosts : Enable lxc service 2
CHANGED 08 Dec 2025 13:42:33 +0000 00:00:03.50 aio1 ansible.builtin.package lxc_hosts : Install distro packages 2
CHANGED 08 Dec 2025 13:42:33 +0000 00:00:00.17 aio1 ansible.builtin.yum_repository lxc_hosts : Install required repositories 1
CHANGED 08 Dec 2025 13:42:31 +0000 00:00:00.91 aio1 ansible.builtin.dnf lxc_hosts : Ensure createrepo package is installed 1
CHANGED 08 Dec 2025 13:42:29 +0000 00:00:01.52 aio1 ansible.builtin.file lxc_hosts : Create base directories 2
CHANGED 08 Dec 2025 13:42:28 +0000 00:00:00.16 aio1 ansible.builtin.file Create the LXC service log aggregation link 1
CHANGED 08 Dec 2025 13:42:28 +0000 00:00:00.16 aio1 ansible.builtin.file Create the new LXC service log directory 1
CHANGED 08 Dec 2025 13:42:25 +0000 00:00:00.37 aio1 ansible.builtin.service openstack_hosts : Restart systemd-journald 1
CHANGED 08 Dec 2025 13:42:25 +0000 00:00:00.53 aio1 ansible.builtin.copy openstack_hosts : Define journald configuration 3
CHANGED 08 Dec 2025 13:42:24 +0000 00:00:00.21 aio1 ansible.builtin.file openstack_hosts : Create /etc/systemd/journald.conf.d directory 3
CHANGED 08 Dec 2025 13:42:23 +0000 00:00:00.64 aio1 ansible.builtin.systemd systemd_service : Load service networking-post-up 4
CHANGED 08 Dec 2025 13:42:21 +0000 00:00:00.34 aio1 openstack.config_template.config_template systemd_service : Place the systemd service 4
CHANGED 08 Dec 2025 13:42:21 +0000 00:00:00.48 aio1 ansible.builtin.template systemd_service : Create tmpfiles.d entry 4
CHANGED 08 Dec 2025 13:42:20 +0000 00:00:00.21 aio1 ansible.builtin.file systemd_service : Create TEMP service lock dir 4
CHANGED 08 Dec 2025 13:42:20 +0000 00:00:00.22 aio1 ansible.builtin.file systemd_service : Create TEMP run dir 4
CHANGED 08 Dec 2025 13:41:54 +0000 00:00:25.43 aio1 ansible.builtin.command systemd_networkd : Update initramfs 3
CHANGED 08 Dec 2025 13:41:52 +0000 00:00:00.42 aio1 ansible.builtin.systemd systemd_networkd : Restart systemd-networkd 4
CHANGED 08 Dec 2025 13:41:50 +0000 00:00:00.37 aio1 ansible.builtin.service openstack_hosts : Restart systemd-journald 1
CHANGED 08 Dec 2025 13:41:47 +0000 00:00:02.54 aio1 openstack.config_template.config_template systemd_networkd : Create systemd-networkd network network(s) 4
CHANGED 08 Dec 2025 13:41:44 +0000 00:00:02.49 aio1 openstack.config_template.config_template systemd_networkd : Create systemd-networkd network link(s) 4
CHANGED 08 Dec 2025 13:41:40 +0000 00:00:03.95 aio1 ansible.builtin.template systemd_networkd : Create systemd-networkd network device(s) 4
CHANGED 08 Dec 2025 13:41:36 +0000 00:00:03.07 aio1 ansible.builtin.package systemd_networkd : Install networkd distro packages 3
CHANGED 08 Dec 2025 13:41:36 +0000 00:00:00.21 aio1 ansible.builtin.yum_repository systemd_networkd : Install the EPEL repository 3
CHANGED 08 Dec 2025 13:41:35 +0000 00:00:00.28 aio1 ansible.builtin.rpm_key systemd_networkd : Install gpg keys 3
CHANGED 08 Dec 2025 13:41:34 +0000 00:00:00.48 aio1 ansible.builtin.copy systemd_networkd : If a keyfile is provided, copy the gpg keyfile to the key location 3
CHANGED 08 Dec 2025 13:41:33 +0000 00:00:00.21 aio1 community.general.git_config openstack_hosts : Configure git safe directories 2
CHANGED 08 Dec 2025 13:41:33 +0000 00:00:00.26 aio1 community.general.git_config openstack_hosts : Write git config when git is installed 2
CHANGED 08 Dec 2025 13:41:30 +0000 00:00:02.07 aio1 ansible.builtin.command pki : Update CA store 2
CHANGED 08 Dec 2025 13:41:29 +0000 00:00:00.48 aio1 ansible.builtin.copy pki : Copy CA certificates to target host 2
CHANGED 08 Dec 2025 13:41:27 +0000 00:00:00.73 aio1 ansible.builtin.package openstack_hosts : Install distro packages 1
CHANGED 08 Dec 2025 13:41:27 +0000 00:00:00.26 aio1 ansible.posix.sysctl openstack_hosts : Decreasing tcp_retries2 sysctl 1
CHANGED 08 Dec 2025 13:41:26 +0000 00:00:00.21 aio1 ansible.builtin.blockinfile openstack_hosts : Update hosts file on deploy host 3
CHANGED 08 Dec 2025 13:41:26 +0000 00:00:00.25 aio1 ansible.builtin.blockinfile openstack_hosts : Update hosts file 3
CHANGED 08 Dec 2025 13:41:25 +0000 00:00:00.28 aio1 command openstack_hosts : Create tmpfiles structure in journald directory 3
CHANGED 08 Dec 2025 13:41:25 +0000 00:00:00.26 aio1 ansible.builtin.file openstack_hosts : Create a directory to hold systemd journals on disk 2
CHANGED 08 Dec 2025 13:41:24 +0000 00:00:00.53 aio1 ansible.builtin.service openstack_hosts : Start and enable the sysstat service 2
CHANGED 08 Dec 2025 13:41:23 +0000 00:00:00.49 aio1 ansible.builtin.template openstack_hosts : Enable sysstat cron 2
CHANGED 08 Dec 2025 13:41:18 +0000 00:00:04.44 aio1 ansible.posix.sysctl openstack_hosts : Adding new system tuning 2
CHANGED 08 Dec 2025 13:41:17 +0000 00:00:00.48 aio1 ansible.builtin.copy openstack_hosts : Blacklist kernel modules 2
CHANGED 08 Dec 2025 13:41:13 +0000 00:00:03.64 aio1 community.general.modprobe openstack_hosts : Load kernel module(s) 2
CHANGED 08 Dec 2025 13:40:57 +0000 00:00:15.72 aio1 ansible.builtin.package openstack_hosts : Install distro packages for bare metal nodes 2
CHANGED 08 Dec 2025 13:40:56 +0000 00:00:00.35 aio1 ansible.builtin.file openstack_hosts : Create SSL certificate and key directory symlinks 1
CHANGED 08 Dec 2025 13:40:54 +0000 00:00:00.26 aio1 ansible.builtin.yum_repository openstack_hosts : Add dnf repositories if they do not exist 1
CHANGED 08 Dec 2025 13:40:53 +0000 00:00:00.62 aio1 ansible.builtin.rpm_key openstack_hosts : Install gpg keys 1
CHANGED 08 Dec 2025 13:40:52 +0000 00:00:00.91 aio1 ansible.builtin.copy openstack_hosts : If a keyfile is provided, copy the gpg keyfile to the key location 1
CHANGED 08 Dec 2025 13:40:51 +0000 00:00:00.48 aio1 ansible.builtin.template openstack_hosts : Disable requiretty for root sudo on RHEL 1
CHANGED 08 Dec 2025 13:40:51 +0000 00:00:00.25 aio1 community.general.ini_file openstack_hosts : Configure dnf fastestmirror 1
CHANGED 08 Dec 2025 13:40:50 +0000 00:00:00.65 aio1 ansible.builtin.package openstack_hosts : Remove the blacklisted packages 1