Simple change: default to None rather than '' for the custom config file var. These changes were introduced in #68, to satisfy #48. Use of the with_first_found looping parameter causes Ansible to misinterpret the empty string default var drastically. Fortunately, the subsequent sanity check in the "Fail if grsecurity options are not enabled" task catches the error and stops execution of the role.
As indicated by both the item and src parameters in that output, Ansible tries to copy the entire tasks/ directory from within the role—definitely not what we want! The result on the target host:
That's so wrong it hurts. By changing the default value to None, rather than an empty string—which Ansible silently expands to the parent directory of the task list—the problem is resolved.
Simple change: default to
None
rather than''
for the custom config file var. These changes were introduced in #68, to satisfy #48. Use of thewith_first_found
looping parameter causes Ansible to misinterpret the empty string default var drastically. Fortunately, the subsequent sanity check in the "Fail if grsecurity options are not enabled" task catches the error and stops execution of the role.Failure output when using an empty string:
As indicated by both the
item
andsrc
parameters in that output, Ansible tries to copy the entiretasks/
directory from within the role—definitely not what we want! The result on the target host:That's so wrong it hurts. By changing the default value to
None
, rather than an empty string—which Ansible silently expands to the parent directory of the task list—the problem is resolved.Closes #48 (again).