freedomofpress / ansible-role-grsecurity

The documentation and build system for the grsecurity kernel maintained by the Freedom of the Press Foundation for SecureDrop
GNU General Public License v2.0
49 stars 13 forks source link

Fixes fetch logic in build role #110

Closed conorsch closed 7 years ago

conorsch commented 7 years ago

The role was previously using with_fileglob, which will only work when targeting localhost, since that's where Ansible performs the lookup. Instead, we can use the find module (requires Ansible 2+), then loop over the registered results. The find approach also supports globbing, so we can still fuzzily match on all likely deb packages by filtering on the kernel version string.

Closes #93.

conorsch commented 7 years ago

Thanks @msheiny, I've tested this on several builds lately by pegging the commit for this PR and it's worked well. Merging, then will continue with repo splitting.