Dynamically set rhel9stig_gui variable

[PrymalInstynct]

Overall Review of Changes:
I believe this role would be improved by dynamically determining if the target system to be locked down has Gnome Desktop installed or not. This makes management of the inventory easier and based on my analysis there is not a justification to set this variable statically.

This could be accomplished in a number of ways, I chose to stat the gnome-version.xml file that is installed when the Gnome Desktop packages are installed.

Issue Fixes:
N/A

Enhancements:
Quality of life improvement

How has this been tested?:
Built a fresh Rocky 9 VM with Gnome Desktop installed and executed the entire role.

[PrymalInstynct]

I am struggling to figure out why this PR is failing when run against a target without a GUI. For some reason RHEL-09-271010 and RHEL-09-271090 are returning a changed state instead of a skipping which causes the Update_dconf handler to run that the fails because the dconf command does not exist.

From what I can tell the when clauses of those 2 tasks are exactly the same as the when clauses on all of the other tasks in RHEL-09-27xxxx.yml.

[uk-bolly]

hi @PrymalInstynct

That is indeed, strange, i feel debug investigation taking place. I will look at this and get back to you.

kindest

uk-bolly

[uk-bolly]

RHEL-09-271010

hi @PrymalInstynct

Taking a quick look through this today. The defaults/main.yml is not getting a value you expect for your stat to set the value to true.

Current settings gives the following debug

• When file not present
  "msg": "Value of rhel9stig_gui is False"

• When file is present
  "msg": "Value of rhel9stig_gui is {'changed': False, 'stat': {'exists': True, [..redacted..] 'failed': False}" }

I have suggest change your PR slightly.

rhel9stig_gui: "{{ rhel_09_gnome_present.stat.exists | default(false) }}"

Seems to be what you are looking for and also skips the two controls in question.

You would also need to GPG sign all your commits in order to pass as well.

Hope that makes sense.

kindest

uk-bolly

[PrymalInstynct]

Fubar'd the rebase to GPG sign the commits in the PR so I am closing this one and creating a new one.