Skip to content

SLE16 fix sysctl related ansible remediations#14329

Merged
teacup-on-rockingchair merged 4 commits intoComplianceAsCode:masterfrom
teacup-on-rockingchair:sle16_fix_sysctl_related_ansible_remediations
Jan 28, 2026
Merged

SLE16 fix sysctl related ansible remediations#14329
teacup-on-rockingchair merged 4 commits intoComplianceAsCode:masterfrom
teacup-on-rockingchair:sle16_fix_sysctl_related_ansible_remediations

Conversation

@teacup-on-rockingchair
Copy link
Contributor

Description:

  • Enable SLE16 support for sysctl remediations

Rationale:

  • Enable SLE16 platform for sysctl_kernel_exec_shield ansible remediation
  • Add SLE16 support for sysctl related templates
  • Add SLE16 support in ansible for ensure_gpgcheck_never_disabled

@teacup-on-rockingchair teacup-on-rockingchair added this to the 0.1.80 milestone Jan 26, 2026
@teacup-on-rockingchair teacup-on-rockingchair added Ansible Ansible remediation update. SLES SUSE Linux Enterprise Server product related. Update Template Issues or pull requests related to Templates updates. labels Jan 26, 2026
@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Used by openshift-ci bot. label Jan 26, 2026
@openshift-ci
Copy link

openshift-ci bot commented Jan 26, 2026

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@github-actions
Copy link

github-actions bot commented Jan 26, 2026

ATEX Test Results

Test artifacts have been submitted to Testing Farm.

Results: View Test Results
Workflow Run: View Workflow Details

This comment was automatically generated by the ATEX workflow.

@teacup-on-rockingchair teacup-on-rockingchair marked this pull request as ready for review January 26, 2026 06:44
@openshift-ci openshift-ci bot removed the do-not-merge/work-in-progress Used by openshift-ci bot. label Jan 26, 2026
@svet-se svet-se self-assigned this Jan 26, 2026
- name: {{{ rule_title }}} - Set fact for sysctl paths
ansible.builtin.set_fact:
{{% if product in ["sle12", "sle15", "slmicro5", "slmicro6"] %}}
{{% if product in ["sle12", "sle15", "sle16", "slmicro5", "slmicro6"] %}}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe we could improve readability a little
{{% if product in ["sle12", "sle15", "sle16", "slmicro5", "slmicro6"] %}} =>
{{% if 'sle' in product or 'slmicro' in product %}}

@teacup-on-rockingchair teacup-on-rockingchair merged commit d05b4cf into ComplianceAsCode:master Jan 28, 2026
62 of 64 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Ansible Ansible remediation update. SLES SUSE Linux Enterprise Server product related. Update Template Issues or pull requests related to Templates updates.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants