ansible-lockdown / UBUNTU22-CIS

Ansible role for Ubuntu22 CIS Baseline
https://ansible-lockdown.readthedocs.io/en/latest/
MIT License
155 stars 68 forks source link

reboot task is not idempotent #204

Closed bhuddah closed 2 months ago

bhuddah commented 5 months ago

Describe the Issue The implementation of the reboot task makes it impossible to converge with this role.

Expected Behavior Reboot is only done when needed and no change is enforced when skip_reboot is set.

Actual Behavior Right now you either get a change with the warning that a reboot is needed (even if it is not so) or you reboot all machines and get that as a reported change

Control(s) Affected "Reboot system"

Environment (please complete the following information):

Additional Notes Anything additional goes here

Possible Solution Reboot is handled via handler and only done when needed.

uk-bolly commented 2 months ago

hi @bhuddah

I believe that this issue has been addressed and the fix merged? I will close this issue, please feel free to reopen or raise a new one if this particular problem still exists.

Many thanks

uk-bolly

bhuddah commented 2 months ago

hi @bhuddah

I believe that this issue has been addressed and the fix merged? I will close this issue, please feel free to reopen or raise a new one if this particular problem still exists.

Many thanks

uk-bolly

Yes, issue is resolved. thanks a lot for the quick fix.