fix the CIS hardening steps when tar URL is used

rancherfederal / rke2-ansible

RKE2 cluster provisioning via Ansible.

Apache License 2.0

228 stars 129 forks source link

fix the CIS hardening steps when tar URL is used #231

Closed mddamato closed 5 months ago

aleiner commented 5 months ago

logic for 60-rke2-cis.conf needs to be revised to support Tarball install on RHEL. check to see which exists: /usr/share/rke2/rke2-cis-sysctl.conf or /usr/local/share/rke2/rke2-cis-sysctl.conf

and copy that file.

While you're at it, the reboot logic should probably be blocked to a single node at a time.

mddamato commented 5 months ago

I think it already does what you're asking. There is one copy here for yum installs which comes from /usr/share/rke2/ and another here for non-yum which come from usr/local/share/rke2/