We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
This bug featured in issue #514 now also affects Debian systems, see https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html#linux-user-namespaces.
...
... sysctl: cannot stat /proc/sys/kernel/unprivileged_userns_clone: No such file or directory
... No error.
Debian 12.2
ansible [core 2.16.0] config file = /Users/ana/PycharmProjects/ops/ansible-zammad/ansible.cfg configured module search path = ['/Users/ana/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /Users/ana/PycharmProjects/ops/ansible-zammad/venv/lib/python3.11/site-packages/ansible ansible collection location = /Users/ana/PycharmProjects/ops/ansible-zammad/collections/local:/Users/ana/PycharmProjects/ops/ansible-zammad/collections/external executable location = /Users/ana/PycharmProjects/ops/ansible-zammad/venv/bin/ansible python version = 3.11.3 (main, Apr 7 2023, 19:25:52) [Clang 14.0.0 (clang-1400.0.29.202)] (/Users/ana/PycharmProjects/ops/ansible-zammad/venv/bin/python3.11) jinja version = 3.1.2 libyaml = True
v9.0.0
To work around this, I used the undocumented variable sysctl_unsupported_entries:
sysctl_unsupported_entries: - kernel.unprivileged_userns_clone
The text was updated successfully, but these errors were encountered:
Thanks for noticing this. Do you want to create a PR to fix this?
Sorry, something went wrong.
Workaround for dev-sec/ansible-collection-hardening#723
36d4e02
No branches or pull requests
Description
This bug featured in issue #514 now also affects Debian systems, see https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html#linux-user-namespaces.
Reproduction steps
Current Behavior
...
sysctl: cannot stat /proc/sys/kernel/unprivileged_userns_clone: No such file or directory
Expected Behavior
...
No error.
OS / Environment
Debian 12.2
Ansible Version
Collection Version
Additional information
To work around this, I used the undocumented variable sysctl_unsupported_entries:
The text was updated successfully, but these errors were encountered: