fixes idempotence for small moduli removal

remove moduli task was missing become
idiv-biodiversity · Jan 16, 2024 · ea130c6 · ea130c6
1 parent fa40322
commit ea130c6
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/molecule/alternative/molecule.yml b/molecule/alternative/molecule.yml
@@ -78,6 +78,7 @@ provisioner:
           - aes256-ctr
         ssh_macs:
           - [email protected]
+        ssh_modulus_min: 3071
     host_vars:
       archlinux:
         ansible_user: ansible

diff --git a/tasks/main.yml b/tasks/main.yml
@@ -61,6 +61,7 @@
 
 - name: remove small moduli from /etc/ssh/moduli # noqa no-handler
   ansible.builtin.script: 'mod-moduli.sh {{ ssh_modulus_min }}'
+  become: yes
   when: >-
     not ansible_check_mode and
     ssh_modulus_min is defined and