Closed smuthali closed 6 years ago
After debugging a bit, the following exclusions had to be placed to ensure AMI build was successful
cis_level_1_exclusions:
- 3.6.2
- 5.3.3
I am pretty sure that this is an Ansible 2.4.x issue. I will debug further. Meanwhile if you have any suggestions, that'll be great.
Hi @smuthali , the issue is due to firewall task 3.6.2 which by default will block all ports including SSH which is used by anisble. So once task 3.6.2 has ran there is no way to SSH into the host and all subsequent tasks fails.
To fix the issue allow port 22 in 3.6.5.yml and update level-1.yml to rearrange the firewall task so that 3.6.2 is executed after all firewall task has finished.
Testing has finished and working on the PR to fix this issue.
Hello!, first off thank you for the ansible-role-cis-amazon-linux playbook. I've hooked this in to AWS codebuild and the AMI creation fails when Ansible task executions either take a very long time or hung. Ansible version:
2.4.3
Specifically here:
Failed messages from build.log
With verbose enabled
So, I also tried to modify ssh config to something like this:
Please let me know if you need any additional information