ara | Result #405: [changed] ansible.posix.sysctl on aio1 for "ansible-hardening : Set sysctl configurations"

/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml

Execution

Date 08 Dec 2025 13:27:39 +0000

Duration 00:05:33.94

Controller aio1.openstack.local

User root

Versions

Ansible 2.18.6

ara 1.7.4 / 1.7.4

Python 3.12.3

Summary

2 Hosts

316 Tasks

313 Results

18 Plays

136 Files

0 Records

check:False tags:all

Date
08 Dec 2025 13:27:39 +0000
Path
/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml

Argument	Value
version	None
verbosity	0
private_key_file	None
remote_user	None
connection	openstack.osa.ssh
timeout	None
ssh_common_args	None
sftp_extra_args	None
scp_extra_args	None
ssh_extra_args	None
ask_pass	False
connection_password_file	None
force_handlers	True
flush_cache	False
become	False
become_method	sudo
become_user	None
become_ask_pass	False
become_password_file	None
tags	['all']
skip_tags	[]
check	False
diff	False
inventory	['/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py', '/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini', '/etc/openstack_deploy/inventory.ini']
listhosts	False
subset	None
extra_vars	Not saved by ARA as configured by 'ignored_arguments'
vault_ids	[]
ask_vault_pass	False
vault_password_files	[]
forks	8
module_path	None
syntax	False
listtasks	False
listtags	False
step	False
start_at_task	None
args	['setup-hosts.yml']

Task result details

Status
CHANGED
Duration
00:00:03.67
Play
Apply security hardening configurations
Task
ansible-hardening : Set sysctl configurations
Host
aio1

Date
08 Dec 2025 13:32:38 +0000
Module / Action
ansible.posix.sysctl (/home/zuul/src/opendev.org/openstack/ansible-hardening/tasks/rhel7stig/kernel.yml:29)
Tags
- kernel
- V-72287
- V-72291
- V-72319
- V-72285
- V-72289
- V-72283
- V-72293
- V-72309
- C-00001
- medium
- V-73175
- security

Field

Value

changed

True

msg

All items completed

results

Result #1

Field	Value
ansible_loop_var	item
changed	True
failed	False
invocation	{ "module_args": { "ignoreerrors": false, "name": "net.ipv4.conf.all.accept_source_route", "reload": true, "state": "present", "sysctl_file": "/etc/sysctl.conf", "sysctl_set": false, "value": "0" } }
item	{ "enabled": true, "name": "net.ipv4.conf.all.accept_source_route", "value": 0 }

Result #2

Field	Value
ansible_loop_var	item
changed	True
failed	False
invocation	{ "module_args": { "ignoreerrors": false, "name": "net.ipv4.conf.default.accept_source_route", "reload": true, "state": "present", "sysctl_file": "/etc/sysctl.conf", "sysctl_set": false, "value": "0" } }
item	{ "enabled": true, "name": "net.ipv4.conf.default.accept_source_route", "value": 0 }

Result #3

Field	Value
ansible_loop_var	item
changed	True
failed	False
invocation	{ "module_args": { "ignoreerrors": false, "name": "net.ipv4.icmp_echo_ignore_broadcasts", "reload": true, "state": "present", "sysctl_file": "/etc/sysctl.conf", "sysctl_set": false, "value": "1" } }
item	{ "enabled": true, "name": "net.ipv4.icmp_echo_ignore_broadcasts", "value": 1 }

Result #4

Field	Value
ansible_loop_var	item
changed	True
failed	False
invocation	{ "module_args": { "ignoreerrors": false, "name": "net.ipv4.conf.all.send_redirects", "reload": true, "state": "present", "sysctl_file": "/etc/sysctl.conf", "sysctl_set": false, "value": "0" } }
item	{ "enabled": true, "name": "net.ipv4.conf.all.send_redirects", "value": 0 }

Result #5

Field	Value
ansible_loop_var	item
changed	True
failed	False
invocation	{ "module_args": { "ignoreerrors": false, "name": "net.ipv4.conf.default.send_redirects", "reload": true, "state": "present", "sysctl_file": "/etc/sysctl.conf", "sysctl_set": false, "value": "0" } }
item	{ "enabled": true, "name": "net.ipv4.conf.default.send_redirects", "value": 0 }

Result #6

Field	Value
ansible_loop_var	item
changed	False
false_condition	item.enabled \| bool
item	{ "enabled": false, "name": "net.ipv4.ip_forward", "value": 0 }
skip_reason	Conditional result was False
skipped	True

Result #7

Field	Value
ansible_loop_var	item
changed	True
failed	False
invocation	{ "module_args": { "ignoreerrors": false, "name": "net.ipv6.conf.all.accept_source_route", "reload": true, "state": "present", "sysctl_file": "/etc/sysctl.conf", "sysctl_set": false, "value": "0" } }
item	{ "enabled": true, "name": "net.ipv6.conf.all.accept_source_route", "value": 0 }

Result #8

Field	Value
ansible_loop_var	item
changed	True
failed	False
invocation	{ "module_args": { "ignoreerrors": false, "name": "net.ipv4.conf.default.accept_redirects", "reload": true, "state": "present", "sysctl_file": "/etc/sysctl.conf", "sysctl_set": false, "value": "0" } }
item	{ "enabled": true, "name": "net.ipv4.conf.default.accept_redirects", "value": 0 }

Result #9

Field	Value
ansible_loop_var	item
changed	True
failed	False
invocation	{ "module_args": { "ignoreerrors": false, "name": "kernel.randomize_va_space", "reload": true, "state": "present", "sysctl_file": "/etc/sysctl.conf", "sysctl_set": false, "value": "2" } }
item	{ "enabled": true, "name": "kernel.randomize_va_space", "value": 2 }

Result #10

Field	Value
ansible_loop_var	item
changed	False
false_condition	item.enabled \| bool
item	{ "enabled": false, "name": "net.ipv6.conf.all.disable_ipv6", "value": 1 }
skip_reason	Conditional result was False
skipped	True

Playbook #2