[DEPRECATION WARNING]: ANSIBLE_COLLECTIONS_PATHS option, does not fit var naming standard, use the singular form ANSIBLE_COLLECTIONS_PATH instead. This feature will be removed from ansible-core in version 2.19. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. ansible-playbook [core 2.17.4] config file = None configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/local/lib/python3.12/site-packages/ansible ansible collection location = /tmp/collections-Mjf executable location = /usr/local/bin/ansible-playbook python version = 3.12.5 (main, Aug 23 2024, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-2)] (/usr/bin/python3.12) jinja version = 3.1.4 libyaml = True No config file found; using defaults running playbook inside collection fedora.linux_system_roles redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug redirecting (type: callback) ansible.builtin.profile_tasks to ansible.posix.profile_tasks Skipping callback 'default', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. PLAYBOOK: tests_match.yml ****************************************************** 1 plays in /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml PLAY [Verify Match and Host keywords are rendered as expected] ***************** TASK [Gathering Facts] ********************************************************* task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:2 Saturday 21 September 2024 17:16:23 -0400 (0:00:00.007) 0:00:00.007 **** [WARNING]: Platform linux on host managed_node2 is using the discovered Python interpreter at /usr/bin/python3.9, but future installation of another Python interpreter could change the meaning of that path. See https://docs.ansible.com/ansible- core/2.17/reference_appendices/interpreter_discovery.html for more information. ok: [managed_node2] TASK [Backup configuration files] ********************************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:11 Saturday 21 September 2024 17:16:24 -0400 (0:00:01.237) 0:00:01.245 **** included: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/backup.yml for managed_node2 TASK [Setup] ******************************************************************* task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/backup.yml:2 Saturday 21 September 2024 17:16:24 -0400 (0:00:00.016) 0:00:01.261 **** included: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml for managed_node2 TASK [Ensure facts used by test] *********************************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:2 Saturday 21 September 2024 17:16:24 -0400 (0:00:00.023) 0:00:01.285 **** skipping: [managed_node2] => { "changed": false, "false_condition": "'os_family' not in ansible_facts", "skip_reason": "Conditional result was False" } TASK [Check if system is ostree] *********************************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:10 Saturday 21 September 2024 17:16:24 -0400 (0:00:00.018) 0:00:01.303 **** ok: [managed_node2] => { "changed": false, "stat": { "exists": false } } TASK [Set flag to indicate system is ostree] *********************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:15 Saturday 21 September 2024 17:16:25 -0400 (0:00:00.489) 0:00:01.793 **** ok: [managed_node2] => { "ansible_facts": { "__ssh_is_ostree": false }, "changed": false } TASK [Make sure openssh is installed before creating backup] ******************* task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:19 Saturday 21 September 2024 17:16:25 -0400 (0:00:00.042) 0:00:01.835 **** ok: [managed_node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: openssh-clients TASK [Define common variables] ************************************************* task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:31 Saturday 21 September 2024 17:16:27 -0400 (0:00:01.650) 0:00:03.486 **** ok: [managed_node2] => { "ansible_facts": { "main_ssh_config": "/etc/ssh/ssh_config", "main_ssh_config_name": "ssh_config", "main_ssh_config_path": "/etc/ssh/" }, "changed": false } TASK [Define specific variables] *********************************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:37 Saturday 21 September 2024 17:16:27 -0400 (0:00:00.039) 0:00:03.525 **** ok: [managed_node2] => { "ansible_facts": { "main_ssh_config": "/etc/ssh/ssh_config.d/00-ansible.conf", "main_ssh_config_name": "00-ansible.conf", "main_ssh_config_path": "/etc/ssh/ssh_config.d/" }, "changed": false } TASK [Create a temporary directory for backup files] *************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/backup.yml:5 Saturday 21 September 2024 17:16:27 -0400 (0:00:00.080) 0:00:03.606 **** ok: [managed_node2] => { "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/tmp/ansible.7mvpuepk", "secontext": "unconfined_u:object_r:user_tmp_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [Backup files] ************************************************************ task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/backup.yml:13 Saturday 21 September 2024 17:16:27 -0400 (0:00:00.435) 0:00:04.041 **** ok: [managed_node2] => (item=/etc/ssh/ssh_config.d/00-ansible.conf) => { "ansible_loop_var": "item", "changed": false, "cmd": "if test -f /etc/ssh/ssh_config.d/00-ansible.conf; then\n mkdir -p /tmp/ansible.7mvpuepk/$(dirname /etc/ssh/ssh_config.d/00-ansible.conf);\n cp -a /etc/ssh/ssh_config.d/00-ansible.conf /tmp/ansible.7mvpuepk/$(dirname /etc/ssh/ssh_config.d/00-ansible.conf)\nfi\n", "delta": "0:00:00.008962", "end": "2024-09-21 17:16:28.133949", "item": "/etc/ssh/ssh_config.d/00-ansible.conf", "rc": 0, "start": "2024-09-21 17:16:28.124987" } ok: [managed_node2] => (item=/etc/ssh/ssh_config) => { "ansible_loop_var": "item", "changed": false, "cmd": "if test -f /etc/ssh/ssh_config; then\n mkdir -p /tmp/ansible.7mvpuepk/$(dirname /etc/ssh/ssh_config);\n cp -a /etc/ssh/ssh_config /tmp/ansible.7mvpuepk/$(dirname /etc/ssh/ssh_config)\nfi\n", "delta": "0:00:00.007705", "end": "2024-09-21 17:16:28.441563", "item": "/etc/ssh/ssh_config", "rc": 0, "start": "2024-09-21 17:16:28.433858" } TASK [Run role] **************************************************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:14 Saturday 21 September 2024 17:16:28 -0400 (0:00:00.904) 0:00:04.946 **** included: fedora.linux_system_roles.ssh for managed_node2 TASK [fedora.linux_system_roles.ssh : Set platform/version specific variables] *** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:2 Saturday 21 September 2024 17:16:28 -0400 (0:00:00.027) 0:00:04.974 **** included: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/set_vars.yml for managed_node2 TASK [fedora.linux_system_roles.ssh : Ensure ansible_facts used by role] ******* task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/set_vars.yml:2 Saturday 21 September 2024 17:16:28 -0400 (0:00:00.019) 0:00:04.994 **** skipping: [managed_node2] => { "changed": false, "false_condition": "__ssh_required_facts | difference(ansible_facts.keys() | list) | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.ssh : Check if system is ostree] *************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/set_vars.yml:10 Saturday 21 September 2024 17:16:28 -0400 (0:00:00.033) 0:00:05.027 **** skipping: [managed_node2] => { "changed": false, "false_condition": "not __ssh_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.ssh : Set flag to indicate system is ostree] *** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/set_vars.yml:15 Saturday 21 September 2024 17:16:28 -0400 (0:00:00.017) 0:00:05.045 **** skipping: [managed_node2] => { "changed": false, "false_condition": "not __ssh_is_ostree is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.ssh : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/set_vars.yml:22 Saturday 21 September 2024 17:16:28 -0400 (0:00:00.017) 0:00:05.063 **** ok: [managed_node2] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.ssh : Set flag if transactional-update exists] *** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/set_vars.yml:27 Saturday 21 September 2024 17:16:28 -0400 (0:00:00.310) 0:00:05.373 **** ok: [managed_node2] => { "ansible_facts": { "__ssh_is_transactional": false }, "changed": false } TASK [fedora.linux_system_roles.ssh : Set platform/version specific variables] *** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/set_vars.yml:31 Saturday 21 September 2024 17:16:28 -0400 (0:00:00.027) 0:00:05.401 **** skipping: [managed_node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed_node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } ok: [managed_node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__ssh_defaults": { "Include": "/etc/ssh/ssh_config.d/*.conf" }, "__ssh_drop_in_name": "00-ansible", "__ssh_supports_drop_in": true }, "ansible_included_var_files": [ "/tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } ok: [managed_node2] => (item=CentOS_9.yml) => { "ansible_facts": { "__ssh_defaults": { "Include": "/etc/ssh/ssh_config.d/*.conf" }, "__ssh_drop_in_name": "00-ansible", "__ssh_supports_drop_in": true }, "ansible_included_var_files": [ "/tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/vars/CentOS_9.yml" ], "ansible_loop_var": "item", "changed": false, "item": "CentOS_9.yml" } TASK [fedora.linux_system_roles.ssh : Ensure required packages are installed] *** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:5 Saturday 21 September 2024 17:16:28 -0400 (0:00:00.042) 0:00:05.443 **** ok: [managed_node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: openssh openssh-clients TASK [fedora.linux_system_roles.ssh : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:17 Saturday 21 September 2024 17:16:30 -0400 (0:00:01.319) 0:00:06.763 **** skipping: [managed_node2] => { "false_condition": "__ssh_is_transactional | d(false)" } TASK [fedora.linux_system_roles.ssh : Reboot transactional update systems] ***** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:22 Saturday 21 September 2024 17:16:30 -0400 (0:00:00.042) 0:00:06.805 **** skipping: [managed_node2] => { "changed": false, "false_condition": "__ssh_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.ssh : Fail if reboot is needed and not set] **** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:27 Saturday 21 September 2024 17:16:30 -0400 (0:00:00.035) 0:00:06.840 **** skipping: [managed_node2] => { "changed": false, "false_condition": "__ssh_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.ssh : Gather information about the user for user configuration] *** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:35 Saturday 21 September 2024 17:16:30 -0400 (0:00:00.033) 0:00:06.874 **** skipping: [managed_node2] => { "changed": false, "false_condition": "ssh_user is not none", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.ssh : Make sure the ~/.ssh/ directory exists and has expected permissions] *** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:42 Saturday 21 September 2024 17:16:30 -0400 (0:00:00.017) 0:00:06.892 **** skipping: [managed_node2] => { "changed": false, "false_condition": "ssh_user is not none", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.ssh : Generate the configuration file] ********* task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:53 Saturday 21 September 2024 17:16:30 -0400 (0:00:00.018) 0:00:06.910 **** changed: [managed_node2] => { "backup_file": "/etc/ssh/ssh_config.d/00-ansible.conf.12210.2024-09-21@17:16:31~", "changed": true, "checksum": "ef2a28213aba2bd9717e70173d449a502457eaad", "dest": "/etc/ssh/ssh_config.d/00-ansible.conf", "gid": 0, "group": "root", "md5sum": "b3139d38b34b2e55be846c02e58c8181", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:etc_t:s0", "size": 191, "src": "/root/.ansible/tmp/ansible-tmp-1726953390.5214958-9399-81085120901842/.source.conf", "state": "file", "uid": 0 } TASK [Download the configuration file] ***************************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:33 Saturday 21 September 2024 17:16:31 -0400 (0:00:01.142) 0:00:08.052 **** ok: [managed_node2] => { "changed": false, "content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6c3NoCgpNYXRjaCB1c2VyIHRlc3R1c2VyCiAgQ29tcHJlc3Npb24geWVzCk1hdGNoIGhvc3QgZXhhbXBsZQogIEhvc3RuYW1lIGV4YW1wbGUuY29tCkhvc3QgbG9jYWwKICBVc2VyIGxvY2FsdXNlcgpIb3N0IHJlbW90ZQogIEhvc3RuYW1lIHJlbW90ZS5leGFtcGxlLmNvbQo=", "encoding": "base64", "source": "/etc/ssh/ssh_config.d/00-ansible.conf" } TASK [Verify the options are in the file] ************************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:38 Saturday 21 September 2024 17:16:32 -0400 (0:00:00.421) 0:00:08.474 **** ok: [managed_node2] => { "changed": false } MSG: All assertions passed TASK [Run first ssh in test mode to evaluate the configuration] **************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:54 Saturday 21 September 2024 17:16:32 -0400 (0:00:00.041) 0:00:08.516 **** ok: [managed_node2] => { "changed": false, "cmd": [ "ssh", "-G", "testuser@example" ], "delta": "0:00:00.009339", "end": "2024-09-21 17:16:32.352577", "rc": 0, "start": "2024-09-21 17:16:32.343238" } STDOUT: user testuser hostname example.com port 22 addressfamily any batchmode no canonicalizefallbacklocal yes canonicalizehostname false checkhostip no compression yes controlmaster false enablesshkeysign no clearallforwardings no exitonforwardfailure no fingerprinthash SHA256 forwardx11 no forwardx11trusted yes gatewayports no gssapiauthentication yes gssapikeyexchange no gssapidelegatecredentials no gssapitrustdns no gssapirenewalforcesrekey no gssapikexalgorithms gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512- hashknownhosts no hostbasedauthentication no identitiesonly no kbdinteractiveauthentication yes nohostauthenticationforlocalhost no passwordauthentication yes permitlocalcommand no proxyusefdpass no pubkeyauthentication yes requesttty auto sessiontype default stdinnull no forkafterauthentication no streamlocalbindunlink no stricthostkeychecking ask tcpkeepalive yes tunnel false verifyhostkeydns false visualhostkey no updatehostkeys true canonicalizemaxdots 1 connectionattempts 1 forwardx11timeout 1200 numberofpasswordprompts 3 serveralivecountmax 3 serveraliveinterval 0 requiredrsasize 2048 ciphers aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr hostkeyalgorithms ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa hostbasedacceptedalgorithms ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa kexalgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512 casignaturealgorithms ecdsa-sha2-nistp256,sk-ecdsa-sha2-nistp256@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-256,rsa-sha2-512 loglevel INFO macs hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512 securitykeyprovider internal pubkeyacceptedalgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com xauthlocation /usr/bin/xauth identityfile ~/.ssh/id_rsa identityfile ~/.ssh/id_dsa identityfile ~/.ssh/id_ecdsa identityfile ~/.ssh/id_ecdsa_sk identityfile ~/.ssh/id_ed25519 identityfile ~/.ssh/id_ed25519_sk identityfile ~/.ssh/id_xmss canonicaldomains none globalknownhostsfile /etc/ssh/ssh_known_hosts /etc/ssh/ssh_known_hosts2 userknownhostsfile /root/.ssh/known_hosts /root/.ssh/known_hosts2 logverbose none permitremoteopen any addkeystoagent false forwardagent no connecttimeout none tunneldevice any:any controlpersist no escapechar ~ ipqos af21 cs1 rekeylimit 0 0 streamlocalbindmask 0177 syslogfacility USER TASK [Run second ssh in test mode to evaluate the configuration] *************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:59 Saturday 21 September 2024 17:16:32 -0400 (0:00:00.341) 0:00:08.857 **** ok: [managed_node2] => { "changed": false, "cmd": [ "ssh", "-G", "local" ], "delta": "0:00:00.007068", "end": "2024-09-21 17:16:32.690219", "rc": 0, "start": "2024-09-21 17:16:32.683151" } STDOUT: user localuser hostname local port 22 addressfamily any batchmode no canonicalizefallbacklocal yes canonicalizehostname false checkhostip no compression no controlmaster false enablesshkeysign no clearallforwardings no exitonforwardfailure no fingerprinthash SHA256 forwardx11 no forwardx11trusted yes gatewayports no gssapiauthentication yes gssapikeyexchange no gssapidelegatecredentials no gssapitrustdns no gssapirenewalforcesrekey no gssapikexalgorithms gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512- hashknownhosts no hostbasedauthentication no identitiesonly no kbdinteractiveauthentication yes nohostauthenticationforlocalhost no passwordauthentication yes permitlocalcommand no proxyusefdpass no pubkeyauthentication yes requesttty auto sessiontype default stdinnull no forkafterauthentication no streamlocalbindunlink no stricthostkeychecking ask tcpkeepalive yes tunnel false verifyhostkeydns false visualhostkey no updatehostkeys true canonicalizemaxdots 1 connectionattempts 1 forwardx11timeout 1200 numberofpasswordprompts 3 serveralivecountmax 3 serveraliveinterval 0 requiredrsasize 2048 ciphers aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr hostkeyalgorithms ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa hostbasedacceptedalgorithms ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa kexalgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512 casignaturealgorithms ecdsa-sha2-nistp256,sk-ecdsa-sha2-nistp256@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-256,rsa-sha2-512 loglevel INFO macs hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512 securitykeyprovider internal pubkeyacceptedalgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com xauthlocation /usr/bin/xauth identityfile ~/.ssh/id_rsa identityfile ~/.ssh/id_dsa identityfile ~/.ssh/id_ecdsa identityfile ~/.ssh/id_ecdsa_sk identityfile ~/.ssh/id_ed25519 identityfile ~/.ssh/id_ed25519_sk identityfile ~/.ssh/id_xmss canonicaldomains none globalknownhostsfile /etc/ssh/ssh_known_hosts /etc/ssh/ssh_known_hosts2 userknownhostsfile /root/.ssh/known_hosts /root/.ssh/known_hosts2 logverbose none permitremoteopen any addkeystoagent false forwardagent no connecttimeout none tunneldevice any:any controlpersist no escapechar ~ ipqos af21 cs1 rekeylimit 0 0 streamlocalbindmask 0177 syslogfacility USER TASK [Run third ssh in test mode to evaluate the configuration] **************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:64 Saturday 21 September 2024 17:16:32 -0400 (0:00:00.346) 0:00:09.204 **** ok: [managed_node2] => { "changed": false, "cmd": [ "ssh", "-G", "remote" ], "delta": "0:00:00.007138", "end": "2024-09-21 17:16:33.105630", "rc": 0, "start": "2024-09-21 17:16:33.098492" } STDOUT: user root hostname remote.example.com port 22 addressfamily any batchmode no canonicalizefallbacklocal yes canonicalizehostname false checkhostip no compression no controlmaster false enablesshkeysign no clearallforwardings no exitonforwardfailure no fingerprinthash SHA256 forwardx11 no forwardx11trusted yes gatewayports no gssapiauthentication yes gssapikeyexchange no gssapidelegatecredentials no gssapitrustdns no gssapirenewalforcesrekey no gssapikexalgorithms gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512- hashknownhosts no hostbasedauthentication no identitiesonly no kbdinteractiveauthentication yes nohostauthenticationforlocalhost no passwordauthentication yes permitlocalcommand no proxyusefdpass no pubkeyauthentication yes requesttty auto sessiontype default stdinnull no forkafterauthentication no streamlocalbindunlink no stricthostkeychecking ask tcpkeepalive yes tunnel false verifyhostkeydns false visualhostkey no updatehostkeys true canonicalizemaxdots 1 connectionattempts 1 forwardx11timeout 1200 numberofpasswordprompts 3 serveralivecountmax 3 serveraliveinterval 0 requiredrsasize 2048 ciphers aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr hostkeyalgorithms ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa hostbasedacceptedalgorithms ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa kexalgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512 casignaturealgorithms ecdsa-sha2-nistp256,sk-ecdsa-sha2-nistp256@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-256,rsa-sha2-512 loglevel INFO macs hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512 securitykeyprovider internal pubkeyacceptedalgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com xauthlocation /usr/bin/xauth identityfile ~/.ssh/id_rsa identityfile ~/.ssh/id_dsa identityfile ~/.ssh/id_ecdsa identityfile ~/.ssh/id_ecdsa_sk identityfile ~/.ssh/id_ed25519 identityfile ~/.ssh/id_ed25519_sk identityfile ~/.ssh/id_xmss canonicaldomains none globalknownhostsfile /etc/ssh/ssh_known_hosts /etc/ssh/ssh_known_hosts2 userknownhostsfile /root/.ssh/known_hosts /root/.ssh/known_hosts2 logverbose none permitremoteopen any addkeystoagent false forwardagent no connecttimeout none tunneldevice any:any controlpersist no escapechar ~ ipqos af21 cs1 rekeylimit 0 0 streamlocalbindmask 0177 syslogfacility USER TASK [Verify the options are correctly evaluated] ****************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:69 Saturday 21 September 2024 17:16:33 -0400 (0:00:00.409) 0:00:09.614 **** ok: [managed_node2] => { "changed": false } MSG: All assertions passed TASK [Restore configuration files] ********************************************* task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:85 Saturday 21 September 2024 17:16:33 -0400 (0:00:00.055) 0:00:09.670 **** included: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/restore.yml for managed_node2 TASK [Restore backed up files and remove what was not present] ***************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/restore.yml:2 Saturday 21 September 2024 17:16:33 -0400 (0:00:00.019) 0:00:09.689 **** ok: [managed_node2] => (item=/etc/ssh/ssh_config.d/00-ansible.conf) => { "ansible_loop_var": "item", "changed": false, "cmd": "if test -f /tmp/ansible.7mvpuepk//etc/ssh/ssh_config.d/00-ansible.conf; then\n cp -a /tmp/ansible.7mvpuepk//etc/ssh/ssh_config.d/00-ansible.conf $(dirname /etc/ssh/ssh_config.d/00-ansible.conf)\nelif test -f /etc/ssh/ssh_config.d/00-ansible.conf; then\n rm /etc/ssh/ssh_config.d/00-ansible.conf\nfi\n", "delta": "0:00:00.006771", "end": "2024-09-21 17:16:33.566986", "item": "/etc/ssh/ssh_config.d/00-ansible.conf", "rc": 0, "start": "2024-09-21 17:16:33.560215" } ok: [managed_node2] => (item=/etc/ssh/ssh_config) => { "ansible_loop_var": "item", "changed": false, "cmd": "if test -f /tmp/ansible.7mvpuepk//etc/ssh/ssh_config; then\n cp -a /tmp/ansible.7mvpuepk//etc/ssh/ssh_config $(dirname /etc/ssh/ssh_config)\nelif test -f /etc/ssh/ssh_config; then\n rm /etc/ssh/ssh_config\nfi\n", "delta": "0:00:00.005955", "end": "2024-09-21 17:16:33.896301", "item": "/etc/ssh/ssh_config", "rc": 0, "start": "2024-09-21 17:16:33.890346" } TASK [Remove temporary directory for backup files] ***************************** task path: /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/restore.yml:15 Saturday 21 September 2024 17:16:33 -0400 (0:00:00.713) 0:00:10.403 **** ok: [managed_node2] => { "changed": false, "path": "/tmp/ansible.7mvpuepk", "state": "absent" } PLAY RECAP ********************************************************************* managed_node2 : ok=26 changed=1 unreachable=0 failed=0 skipped=9 rescued=0 ignored=0 Saturday 21 September 2024 17:16:34 -0400 (0:00:00.475) 0:00:10.878 **** =============================================================================== Make sure openssh is installed before creating backup ------------------- 1.65s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:19 fedora.linux_system_roles.ssh : Ensure required packages are installed --- 1.32s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:5 Gathering Facts --------------------------------------------------------- 1.24s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:2 fedora.linux_system_roles.ssh : Generate the configuration file --------- 1.14s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:53 Backup files ------------------------------------------------------------ 0.90s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/backup.yml:13 Restore backed up files and remove what was not present ----------------- 0.71s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/restore.yml:2 Check if system is ostree ----------------------------------------------- 0.49s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:10 Remove temporary directory for backup files ----------------------------- 0.48s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/restore.yml:15 Create a temporary directory for backup files --------------------------- 0.44s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/backup.yml:5 Download the configuration file ----------------------------------------- 0.42s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:33 Run third ssh in test mode to evaluate the configuration ---------------- 0.41s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:64 Run second ssh in test mode to evaluate the configuration --------------- 0.35s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:59 Run first ssh in test mode to evaluate the configuration ---------------- 0.34s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:54 fedora.linux_system_roles.ssh : Check if transactional-update exists in /sbin --- 0.31s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/set_vars.yml:22 Define specific variables ----------------------------------------------- 0.08s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:37 Verify the options are correctly evaluated ------------------------------ 0.06s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:69 fedora.linux_system_roles.ssh : Set platform/version specific variables --- 0.04s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/set_vars.yml:31 fedora.linux_system_roles.ssh : Notify user that reboot is needed to apply changes --- 0.04s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/roles/ssh/tasks/main.yml:17 Set flag to indicate system is ostree ----------------------------------- 0.04s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tasks/setup.yml:15 Verify the options are in the file -------------------------------------- 0.04s /tmp/collections-Mjf/ansible_collections/fedora/linux_system_roles/tests/ssh/tests_match.yml:38