ansible-playbook [core 2.17.7]
config file = /etc/ansible/ansible.cfg
configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /usr/local/lib/python3.12/site-packages/ansible
ansible collection location = /tmp/collections-dYq
executable location = /usr/local/bin/ansible-playbook
python version = 3.12.8 (main, Dec 3 2024, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-2)] (/usr/bin/python3.12)
jinja version = 3.1.5
libyaml = True
Using /etc/ansible/ansible.cfg as config file
running playbook inside collection fedora.linux_system_roles
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.profile_tasks to ansible.posix.profile_tasks
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
PLAYBOOK: tests_fs_attrs.yml ***************************************************
5 plays in /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml
PLAY [Ensure UID and GID exists] ***********************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:2
Saturday 11 January 2025 07:27:22 -0500 (0:00:00.011) 0:00:00.012 ******
[WARNING]: Platform linux on host managed-node3 is using the discovered Python
interpreter at /usr/bin/python3.9, but future installation of another Python
interpreter could change the meaning of that path. See
https://docs.ansible.com/ansible-
core/2.17/reference_appendices/interpreter_discovery.html for more information.
ok: [managed-node3]
TASK [Ensure user exists] ******************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:5
Saturday 11 January 2025 07:27:24 -0500 (0:00:01.105) 0:00:01.117 ******
changed: [managed-node3] => {
"changed": true,
"comment": "",
"create_home": true,
"group": 1040,
"home": "/home/user1",
"name": "user1",
"shell": "/bin/bash",
"state": "present",
"system": false,
"uid": 1040
}
TASK [Ensure group "somegroup" exists] *****************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:9
Saturday 11 January 2025 07:27:24 -0500 (0:00:00.584) 0:00:01.701 ******
changed: [managed-node3] => {
"changed": true,
"gid": 1041,
"name": "somegroup",
"state": "present",
"system": false
}
PLAY [Issue certificate setting user/group] ************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:14
Saturday 11 January 2025 07:27:25 -0500 (0:00:00.563) 0:00:02.264 ******
ok: [managed-node3]
TASK [fedora.linux_system_roles.certificate : Set version specific variables] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2
Saturday 11 January 2025 07:27:25 -0500 (0:00:00.749) 0:00:03.014 ******
included: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node3
TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2
Saturday 11 January 2025 07:27:25 -0500 (0:00:00.032) 0:00:03.047 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "__certificate_required_facts | difference(ansible_facts.keys() | list) | length > 0",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Check if system is ostree] *******
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:10
Saturday 11 January 2025 07:27:26 -0500 (0:00:00.055) 0:00:03.102 ******
ok: [managed-node3] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:15
Saturday 11 January 2025 07:27:26 -0500 (0:00:00.530) 0:00:03.632 ******
ok: [managed-node3] => {
"ansible_facts": {
"__certificate_is_ostree": false
},
"changed": false
}
TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:19
Saturday 11 January 2025 07:27:26 -0500 (0:00:00.035) 0:00:03.667 ******
skipping: [managed-node3] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=CentOS.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "CentOS.yml",
"skip_reason": "Conditional result was False"
}
ok: [managed-node3] => (item=CentOS_9.yml) => {
"ansible_facts": {
"__certificate_certmonger_packages": [
"certmonger",
"python3-packaging"
]
},
"ansible_included_var_files": [
"/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_9.yml"
}
ok: [managed-node3] => (item=CentOS_9.yml) => {
"ansible_facts": {
"__certificate_certmonger_packages": [
"certmonger",
"python3-packaging"
]
},
"ansible_included_var_files": [
"/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_9.yml"
}
TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
Saturday 11 January 2025 07:27:26 -0500 (0:00:00.069) 0:00:03.737 ******
ok: [managed-node3] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: python3-cryptography python3-dbus python3-pyasn1
TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:23
Saturday 11 January 2025 07:27:28 -0500 (0:00:01.608) 0:00:05.345 ******
ok: [managed-node3] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: certmonger python3-packaging
TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:35
Saturday 11 January 2025 07:27:29 -0500 (0:00:01.393) 0:00:06.739 ******
ok: [managed-node3] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//pre-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 6,
"state": "directory",
"uid": 0
}
TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:61
Saturday 11 January 2025 07:27:30 -0500 (0:00:00.486) 0:00:07.226 ******
ok: [managed-node3] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//post-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 6,
"state": "directory",
"uid": 0
}
TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:90
Saturday 11 January 2025 07:27:30 -0500 (0:00:00.430) 0:00:07.657 ******
ok: [managed-node3] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"enabled": true,
"name": "certmonger",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:certmonger_unit_file_t:s0",
"ActiveEnterTimestamp": "Sat 2025-01-11 07:27:16 EST",
"ActiveEnterTimestampMonotonic": "302274491",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "dbus.socket system.slice network.target syslog.target systemd-journald.socket sysinit.target dbus-broker.service basic.target",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-01-11 07:27:16 EST",
"AssertTimestampMonotonic": "302252266",
"Before": "multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedorahosted.certmonger",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "464932000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-01-11 07:27:16 EST",
"ConditionTimestampMonotonic": "302252263",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/certmonger.service",
"ControlGroupId": "4016",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"Delegate": "no",
"Description": "Certificate monitoring and PKI enrollment",
"DevicePolicy": "auto",
"DynamicUser": "no",
"EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "8113",
"ExecMainStartTimestamp": "Sat 2025-01-11 07:27:16 EST",
"ExecMainStartTimestampMonotonic": "302266440",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[Sat 2025-01-11 07:27:16 EST] ; stop_time=[n/a] ; pid=8113 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[Sat 2025-01-11 07:27:16 EST] ; stop_time=[n/a] ; pid=8113 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/certmonger.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "18446744073709551615",
"IOReadOperations": "18446744073709551615",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "18446744073709551615",
"IOWriteOperations": "18446744073709551615",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "certmonger.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-01-11 07:27:16 EST",
"InactiveExitTimestampMonotonic": "302266720",
"InvocationID": "395c8d5637ff407691006d5e7ee27418",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "13960",
"LimitNPROCSoft": "13960",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "13960",
"LimitSIGPENDINGSoft": "13960",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "8113",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "infinity",
"MemoryCurrent": "3899392",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemorySwapMax": "infinity",
"MountAPIVFS": "no",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "certmonger.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"PIDFile": "/run/certmonger.pid",
"PartOf": "dbus-broker.service",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "dbus.socket system.slice sysinit.target",
"Restart": "no",
"RestartKillSignal": "15",
"RestartUSec": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StateChangeTimestamp": "Sat 2025-01-11 07:27:16 EST",
"StateChangeTimestampMonotonic": "302274491",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "1",
"TasksMax": "22336",
"TimeoutAbortUSec": "1min 30s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopFailureMode": "terminate",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] *****
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:101
Saturday 11 January 2025 07:27:31 -0500 (0:00:00.938) 0:00:08.595 ******
changed: [managed-node3] => (item={'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"name": "mycert_fs_attrs",
"owner": "ftp"
}
}
MSG:
Certificate requested (new). File attributes updated.
changed: [managed-node3] => (item={'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"group": 1041,
"name": "certid",
"owner": 1040
}
}
MSG:
Certificate requested (new). File attributes updated.
TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:152
Saturday 11 January 2025 07:27:33 -0500 (0:00:01.887) 0:00:10.483 ******
skipping: [managed-node3] => (item=['cert', {'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"cert",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"name": "mycert_fs_attrs",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['cert', {'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"cert",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": 1041,
"name": "certid",
"owner": 1040
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['key', {'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"key",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"name": "mycert_fs_attrs",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['key', {'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"key",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": 1041,
"name": "certid",
"owner": 1040
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['ca', {'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"ca",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"name": "mycert_fs_attrs",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['ca', {'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"ca",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": 1041,
"name": "certid",
"owner": 1040
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => {
"changed": false
}
MSG:
All items skipped
TASK [fedora.linux_system_roles.certificate : Create return data] **************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:160
Saturday 11 January 2025 07:27:33 -0500 (0:00:00.090) 0:00:10.573 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ******
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:176
Saturday 11 January 2025 07:27:33 -0500 (0:00:00.053) 0:00:10.627 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Remove files] ********************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:181
Saturday 11 January 2025 07:27:33 -0500 (0:00:00.054) 0:00:10.682 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"skip_reason": "Conditional result was False"
}
PLAY [Verify certificate] ******************************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:32
Saturday 11 January 2025 07:27:33 -0500 (0:00:00.074) 0:00:10.756 ******
ok: [managed-node3]
TASK [Verify each certificate] *************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:61
Saturday 11 January 2025 07:27:34 -0500 (0:00:00.746) 0:00:11.503 ******
included: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node3 => (item={'path': '/etc/pki/tls/certs/mycert_fs_attrs.crt', 'key_path': '/etc/pki/tls/private/mycert_fs_attrs.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}], 'owner': 'ftp', 'group': 'ftp', 'mode': '0640'})
included: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node3 => (item={'path': '/etc/pki/tls/certs/certid.crt', 'key_path': '/etc/pki/tls/private/certid.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}], 'owner': 1040, 'group': 1041, 'mode': '0640'})
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:2
Saturday 11 January 2025 07:27:34 -0500 (0:00:00.078) 0:00:11.582 ******
ok: [managed-node3] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:9
Saturday 11 January 2025 07:27:34 -0500 (0:00:00.024) 0:00:11.607 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:14
Saturday 11 January 2025 07:27:34 -0500 (0:00:00.026) 0:00:11.633 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:18
Saturday 11 January 2025 07:27:34 -0500 (0:00:00.030) 0:00:11.666 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "ansible_distribution_major_version == \"7\"",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
Saturday 11 January 2025 07:27:34 -0500 (0:00:00.025) 0:00:11.691 ******
ok: [managed-node3] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: python3-cryptography python3-pyasn1
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:38
Saturday 11 January 2025 07:27:36 -0500 (0:00:01.401) 0:00:13.093 ******
ok: [managed-node3] => {
"changed": false,
"stat": {
"atime": 1736598452.2708259,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "fedd9568081e24e44a578935f9ef8e6d17488942",
"ctime": 1736598452.404826,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 8712610,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1736598452.2678258,
"nlink": 1,
"path": "/etc/pki/tls/certs/mycert_fs_attrs.crt",
"pw_name": "ftp",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 14,
"version": "2044473947",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:43
Saturday 11 January 2025 07:27:36 -0500 (0:00:00.336) 0:00:13.430 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:49
Saturday 11 January 2025 07:27:36 -0500 (0:00:00.019) 0:00:13.449 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:59
Saturday 11 January 2025 07:27:36 -0500 (0:00:00.040) 0:00:13.490 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:65
Saturday 11 January 2025 07:27:36 -0500 (0:00:00.038) 0:00:13.529 ******
ok: [managed-node3] => {
"changed": false,
"stat": {
"atime": 1736598452.2218258,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "f056b7c22b698de6c89c5f6cab18d046d48a2b15",
"ctime": 1736598452.404826,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 4501062,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1736598452.2678258,
"nlink": 1,
"path": "/etc/pki/tls/private/mycert_fs_attrs.key",
"pw_name": "ftp",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1708,
"uid": 14,
"version": "2231533064",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:70
Saturday 11 January 2025 07:27:36 -0500 (0:00:00.355) 0:00:13.884 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:76
Saturday 11 January 2025 07:27:36 -0500 (0:00:00.020) 0:00:13.905 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:86
Saturday 11 January 2025 07:27:36 -0500 (0:00:00.039) 0:00:13.944 ******
ok: [managed-node3] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "EF:D9:91:3B:58:CF:52:DB:28:86:A1:1F:1C:36:7C:E3:E1:09:BF:95"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "53:38:27:AF:DC:24:C4:EF:20:94:58:19:12:76:E7:C4:36:6C:04:75"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature": "1A:68:9D:75:DA:42:B6:23:52:52:56:89:E4:C8:26:39:89:DA:AF:71:93:6F:FD:F1:DE:E6:7C:FF:D5:06:60:28:DF:B2:29:80:BE:AA:28:F4:E5:69:AD:AE:CE:5C:2C:84:D7:2B:F1:9D:CC:1A:CB:DA:9A:95:B0:12:EF:4D:C2:8E:E5:4D:D5:93:AE:DC:72:2D:DD:40:91:D7:EE:9A:88:C4:2D:76:1A:66:EE:95:3F:DF:72:56:27:31:35:A5:3F:3E:53:A7:29:52:66:14:73:02:80:1B:7D:FD:ED:2B:AD:EC:45:B4:21:3B:B2:D8:11:A3:F1:DD:9A:80:43:1D:CB:CF:D6:49:BD:C9:9B:BC:2F:13:27:D4:34:4B:81:FE:4E:7C:52:03:D6:D8:62:96:43:B8:46:41:2C:8A:28:F4:9A:5F:AC:77:AC:4C:3E:62:9F:4D:4E:5E:98:F0:21:99:CF:AC:15:18:BF:C4:AC:2B:B2:1C:A1:9C:0B:13:95:42:74:E1:33:FA:ED:D2:95:59:AC:53:70:F8:C3:50:FF:3C:D3:36:84:86:80:7A:97:6F:95:19:A9:38:06:6F:09:0D:4E:F5:8D:C2:A2:86:66:6A:B2:ED:9D:6C:05:8B:53:88:F2:36:E7:FB:CA:02:FA:FE:45:EB:B9:C0:4A:FB:99:B1:9A:8C"
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20260111122716Z",
"not_valid_before": "20250111122732Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:92
Saturday 11 January 2025 07:27:37 -0500 (0:00:00.489) 0:00:14.434 ******
ok: [managed-node3] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "EF:D9:91:3B:58:CF:52:DB:28:86:A1:1F:1C:36:7C:E3:E1:09:BF:95"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "53:38:27:AF:DC:24:C4:EF:20:94:58:19:12:76:E7:C4:36:6C:04:75"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20260111122716Z",
"not_valid_before": "20250111122732Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:96
Saturday 11 January 2025 07:27:37 -0500 (0:00:00.020) 0:00:14.454 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:104
Saturday 11 January 2025 07:27:37 -0500 (0:00:00.038) 0:00:14.492 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:112
Saturday 11 January 2025 07:27:37 -0500 (0:00:00.019) 0:00:14.512 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:119
Saturday 11 January 2025 07:27:37 -0500 (0:00:00.038) 0:00:14.550 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:130
Saturday 11 January 2025 07:27:37 -0500 (0:00:00.043) 0:00:14.593 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:143
Saturday 11 January 2025 07:27:37 -0500 (0:00:00.042) 0:00:14.635 ******
ok: [managed-node3] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.039264",
"end": "2025-01-11 07:27:37.959409",
"rc": 0,
"start": "2025-01-11 07:27:37.920145"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:152
Saturday 11 January 2025 07:27:38 -0500 (0:00:00.474) 0:00:15.110 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:2
Saturday 11 January 2025 07:27:38 -0500 (0:00:00.068) 0:00:15.179 ******
ok: [managed-node3] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:9
Saturday 11 January 2025 07:27:38 -0500 (0:00:00.037) 0:00:15.217 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:14
Saturday 11 January 2025 07:27:38 -0500 (0:00:00.035) 0:00:15.252 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:18
Saturday 11 January 2025 07:27:38 -0500 (0:00:00.021) 0:00:15.274 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "ansible_distribution_major_version == \"7\"",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
Saturday 11 January 2025 07:27:38 -0500 (0:00:00.020) 0:00:15.294 ******
ok: [managed-node3] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: python3-cryptography python3-pyasn1
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:38
Saturday 11 January 2025 07:27:39 -0500 (0:00:01.400) 0:00:16.695 ******
ok: [managed-node3] => {
"changed": false,
"stat": {
"atime": 1736598453.2688262,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "2f8e626839a84c6cc491511d94c5952ac30d3c23",
"ctime": 1736598453.3188262,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 1041,
"gr_name": "somegroup",
"inode": 8919346,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1736598453.267826,
"nlink": 1,
"path": "/etc/pki/tls/certs/certid.crt",
"pw_name": "user1",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 1040,
"version": "167078392",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:43
Saturday 11 January 2025 07:27:39 -0500 (0:00:00.368) 0:00:17.063 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:49
Saturday 11 January 2025 07:27:39 -0500 (0:00:00.020) 0:00:17.084 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:59
Saturday 11 January 2025 07:27:40 -0500 (0:00:00.040) 0:00:17.124 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:65
Saturday 11 January 2025 07:27:40 -0500 (0:00:00.038) 0:00:17.163 ******
ok: [managed-node3] => {
"changed": false,
"stat": {
"atime": 1736598453.2198262,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "a892db054543ac179a70edd5d9b6afcc32b47174",
"ctime": 1736598453.3188262,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 1041,
"gr_name": "somegroup",
"inode": 4882499,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1736598453.267826,
"nlink": 1,
"path": "/etc/pki/tls/private/certid.key",
"pw_name": "user1",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 1040,
"version": "1445180869",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:70
Saturday 11 January 2025 07:27:40 -0500 (0:00:00.358) 0:00:17.522 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:76
Saturday 11 January 2025 07:27:40 -0500 (0:00:00.028) 0:00:17.551 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:86
Saturday 11 January 2025 07:27:40 -0500 (0:00:00.065) 0:00:17.616 ******
ok: [managed-node3] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "EF:D9:91:3B:58:CF:52:DB:28:86:A1:1F:1C:36:7C:E3:E1:09:BF:95"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "28:91:3B:7D:9A:E7:FD:26:23:F8:FB:EB:4C:02:E5:15:57:8C:D1:D5"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature": "56:4C:11:D8:D0:9D:19:C5:97:96:56:FF:74:39:DD:6E:D9:CA:2C:87:07:C8:9C:7B:96:74:5F:8F:E5:B8:B2:43:0C:93:94:DA:E6:47:C4:3F:8C:E2:11:C0:43:7E:5A:DA:6C:BB:2B:89:8A:06:E7:5D:61:CC:8B:35:E7:4F:9B:50:42:3D:3B:31:F2:07:8B:CF:27:6C:8A:E7:5B:B8:66:CE:25:94:98:C0:75:94:CB:B9:ED:B6:94:99:D4:E3:4A:BC:1A:02:A3:97:1C:F2:CD:C2:2B:D9:DA:ED:6E:17:A8:31:E7:6B:2E:3C:C1:B2:0D:E3:50:F9:D0:D5:DB:ED:0A:00:5F:0F:67:15:09:32:EF:FC:B4:09:0D:FF:27:3B:06:E8:07:16:10:E9:D4:B1:49:C8:68:71:EC:A8:64:D2:FC:E5:C5:03:B6:91:BA:DD:80:3D:64:33:B7:5B:BE:A4:F8:99:BF:CA:5A:28:C8:B3:0F:24:E6:6E:11:60:69:DC:01:90:56:C5:16:59:6B:1A:3E:DF:68:0D:DA:17:A7:F4:92:80:7D:56:62:74:96:5A:76:90:0C:EC:A1:03:F3:45:AF:8E:A1:36:CC:7B:05:9A:8C:35:71:88:6B:C3:0E:32:1C:2A:92:B4:13:57:A5:43:12:03:AF:47:6B:6D:43:65:62:DE"
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20260111122716Z",
"not_valid_before": "20250111122733Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:92
Saturday 11 January 2025 07:27:40 -0500 (0:00:00.399) 0:00:18.015 ******
ok: [managed-node3] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "EF:D9:91:3B:58:CF:52:DB:28:86:A1:1F:1C:36:7C:E3:E1:09:BF:95"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "28:91:3B:7D:9A:E7:FD:26:23:F8:FB:EB:4C:02:E5:15:57:8C:D1:D5"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature": "56:4C:11:D8:D0:9D:19:C5:97:96:56:FF:74:39:DD:6E:D9:CA:2C:87:07:C8:9C:7B:96:74:5F:8F:E5:B8:B2:43:0C:93:94:DA:E6:47:C4:3F:8C:E2:11:C0:43:7E:5A:DA:6C:BB:2B:89:8A:06:E7:5D:61:CC:8B:35:E7:4F:9B:50:42:3D:3B:31:F2:07:8B:CF:27:6C:8A:E7:5B:B8:66:CE:25:94:98:C0:75:94:CB:B9:ED:B6:94:99:D4:E3:4A:BC:1A:02:A3:97:1C:F2:CD:C2:2B:D9:DA:ED:6E:17:A8:31:E7:6B:2E:3C:C1:B2:0D:E3:50:F9:D0:D5:DB:ED:0A:00:5F:0F:67:15:09:32:EF:FC:B4:09:0D:FF:27:3B:06:E8:07:16:10:E9:D4:B1:49:C8:68:71:EC:A8:64:D2:FC:E5:C5:03:B6:91:BA:DD:80:3D:64:33:B7:5B:BE:A4:F8:99:BF:CA:5A:28:C8:B3:0F:24:E6:6E:11:60:69:DC:01:90:56:C5:16:59:6B:1A:3E:DF:68:0D:DA:17:A7:F4:92:80:7D:56:62:74:96:5A:76:90:0C:EC:A1:03:F3:45:AF:8E:A1:36:CC:7B:05:9A:8C:35:71:88:6B:C3:0E:32:1C:2A:92:B4:13:57:A5:43:12:03:AF:47:6B:6D:43:65:62:DE"
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20260111122716Z",
"not_valid_before": "20250111122733Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:96
Saturday 11 January 2025 07:27:40 -0500 (0:00:00.019) 0:00:18.035 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:104
Saturday 11 January 2025 07:27:40 -0500 (0:00:00.038) 0:00:18.073 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:112
Saturday 11 January 2025 07:27:41 -0500 (0:00:00.020) 0:00:18.094 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:119
Saturday 11 January 2025 07:27:41 -0500 (0:00:00.039) 0:00:18.134 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:130
Saturday 11 January 2025 07:27:41 -0500 (0:00:00.043) 0:00:18.177 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:143
Saturday 11 January 2025 07:27:41 -0500 (0:00:00.042) 0:00:18.220 ******
ok: [managed-node3] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.039794",
"end": "2025-01-11 07:27:41.456256",
"rc": 0,
"start": "2025-01-11 07:27:41.416462"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:152
Saturday 11 January 2025 07:27:41 -0500 (0:00:00.377) 0:00:18.597 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
PLAY [Issue certificate setting user/group/mode] *******************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:67
Saturday 11 January 2025 07:27:41 -0500 (0:00:00.043) 0:00:18.640 ******
ok: [managed-node3]
TASK [fedora.linux_system_roles.certificate : Set version specific variables] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2
Saturday 11 January 2025 07:27:42 -0500 (0:00:00.747) 0:00:19.387 ******
included: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node3
TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2
Saturday 11 January 2025 07:27:42 -0500 (0:00:00.030) 0:00:19.418 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "__certificate_required_facts | difference(ansible_facts.keys() | list) | length > 0",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Check if system is ostree] *******
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:10
Saturday 11 January 2025 07:27:42 -0500 (0:00:00.082) 0:00:19.501 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:15
Saturday 11 January 2025 07:27:42 -0500 (0:00:00.030) 0:00:19.531 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:19
Saturday 11 January 2025 07:27:42 -0500 (0:00:00.021) 0:00:19.553 ******
skipping: [managed-node3] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=CentOS.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "CentOS.yml",
"skip_reason": "Conditional result was False"
}
ok: [managed-node3] => (item=CentOS_9.yml) => {
"ansible_facts": {
"__certificate_certmonger_packages": [
"certmonger",
"python3-packaging"
]
},
"ansible_included_var_files": [
"/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_9.yml"
}
ok: [managed-node3] => (item=CentOS_9.yml) => {
"ansible_facts": {
"__certificate_certmonger_packages": [
"certmonger",
"python3-packaging"
]
},
"ansible_included_var_files": [
"/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/CentOS_9.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_9.yml"
}
TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
Saturday 11 January 2025 07:27:42 -0500 (0:00:00.053) 0:00:19.606 ******
ok: [managed-node3] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: python3-cryptography python3-dbus python3-pyasn1
TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:23
Saturday 11 January 2025 07:27:43 -0500 (0:00:01.378) 0:00:20.984 ******
ok: [managed-node3] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: certmonger python3-packaging
TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:35
Saturday 11 January 2025 07:27:45 -0500 (0:00:01.428) 0:00:22.413 ******
ok: [managed-node3] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//pre-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 6,
"state": "directory",
"uid": 0
}
TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:61
Saturday 11 January 2025 07:27:45 -0500 (0:00:00.413) 0:00:22.826 ******
ok: [managed-node3] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//post-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 6,
"state": "directory",
"uid": 0
}
TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:90
Saturday 11 January 2025 07:27:46 -0500 (0:00:00.384) 0:00:23.211 ******
ok: [managed-node3] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"enabled": true,
"name": "certmonger",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:certmonger_unit_file_t:s0",
"ActiveEnterTimestamp": "Sat 2025-01-11 07:27:16 EST",
"ActiveEnterTimestampMonotonic": "302274491",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "dbus.socket system.slice network.target syslog.target systemd-journald.socket sysinit.target dbus-broker.service basic.target",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-01-11 07:27:16 EST",
"AssertTimestampMonotonic": "302252266",
"Before": "multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedorahosted.certmonger",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "868963000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-01-11 07:27:16 EST",
"ConditionTimestampMonotonic": "302252263",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/certmonger.service",
"ControlGroupId": "4016",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"Delegate": "no",
"Description": "Certificate monitoring and PKI enrollment",
"DevicePolicy": "auto",
"DynamicUser": "no",
"EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "8113",
"ExecMainStartTimestamp": "Sat 2025-01-11 07:27:16 EST",
"ExecMainStartTimestampMonotonic": "302266440",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[Sat 2025-01-11 07:27:16 EST] ; stop_time=[n/a] ; pid=8113 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[Sat 2025-01-11 07:27:16 EST] ; stop_time=[n/a] ; pid=8113 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/certmonger.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "18446744073709551615",
"IOReadOperations": "18446744073709551615",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "18446744073709551615",
"IOWriteOperations": "18446744073709551615",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "certmonger.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-01-11 07:27:16 EST",
"InactiveExitTimestampMonotonic": "302266720",
"InvocationID": "395c8d5637ff407691006d5e7ee27418",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "13960",
"LimitNPROCSoft": "13960",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "13960",
"LimitSIGPENDINGSoft": "13960",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "8113",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "infinity",
"MemoryCurrent": "4616192",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemorySwapMax": "infinity",
"MountAPIVFS": "no",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "certmonger.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"PIDFile": "/run/certmonger.pid",
"PartOf": "dbus-broker.service",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "dbus.socket system.slice sysinit.target",
"Restart": "no",
"RestartKillSignal": "15",
"RestartUSec": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StateChangeTimestamp": "Sat 2025-01-11 07:27:16 EST",
"StateChangeTimestampMonotonic": "302274491",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "1",
"TasksMax": "22336",
"TimeoutAbortUSec": "1min 30s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopFailureMode": "terminate",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] *****
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:101
Saturday 11 January 2025 07:27:46 -0500 (0:00:00.512) 0:00:23.724 ******
changed: [managed-node3] => (item={'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"mode": "0620",
"name": "mycert_fs_attrs_mode",
"owner": "ftp"
}
}
MSG:
Certificate requested (new). File attributes updated.
changed: [managed-node3] => (item={'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0600', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"mode": "0600",
"name": "certid_mode"
}
}
MSG:
Certificate requested (new).
TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] ***
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:152
Saturday 11 January 2025 07:27:48 -0500 (0:00:01.893) 0:00:25.617 ******
skipping: [managed-node3] => (item=['cert', {'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"cert",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"mode": "0620",
"name": "mycert_fs_attrs_mode",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['cert', {'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0600', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"cert",
{
"ca": "self-sign",
"dns": "www.example.com",
"mode": "0600",
"name": "certid_mode"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['key', {'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"key",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"mode": "0620",
"name": "mycert_fs_attrs_mode",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['key', {'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0600', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"key",
{
"ca": "self-sign",
"dns": "www.example.com",
"mode": "0600",
"name": "certid_mode"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['ca', {'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"ca",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"mode": "0620",
"name": "mycert_fs_attrs_mode",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => (item=['ca', {'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0600', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"ca",
{
"ca": "self-sign",
"dns": "www.example.com",
"mode": "0600",
"name": "certid_mode"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node3] => {
"changed": false
}
MSG:
All items skipped
TASK [fedora.linux_system_roles.certificate : Create return data] **************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:160
Saturday 11 January 2025 07:27:48 -0500 (0:00:00.059) 0:00:25.677 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ******
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:176
Saturday 11 January 2025 07:27:48 -0500 (0:00:00.043) 0:00:25.720 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Remove files] ********************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:181
Saturday 11 January 2025 07:27:48 -0500 (0:00:00.074) 0:00:25.795 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"skip_reason": "Conditional result was False"
}
PLAY [Verify certificate] ******************************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:85
Saturday 11 January 2025 07:27:48 -0500 (0:00:00.046) 0:00:25.841 ******
ok: [managed-node3]
TASK [Verify each certificate] *************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:112
Saturday 11 January 2025 07:27:49 -0500 (0:00:00.727) 0:00:26.569 ******
included: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node3 => (item={'path': '/etc/pki/tls/certs/mycert_fs_attrs_mode.crt', 'key_path': '/etc/pki/tls/private/mycert_fs_attrs_mode.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}], 'owner': 'ftp', 'group': 'ftp', 'mode': '0620'})
included: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node3 => (item={'path': '/etc/pki/tls/certs/certid_mode.crt', 'key_path': '/etc/pki/tls/private/certid_mode.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}], 'mode': '0600'})
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:2
Saturday 11 January 2025 07:27:49 -0500 (0:00:00.050) 0:00:26.619 ******
ok: [managed-node3] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:9
Saturday 11 January 2025 07:27:49 -0500 (0:00:00.016) 0:00:26.636 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:14
Saturday 11 January 2025 07:27:49 -0500 (0:00:00.019) 0:00:26.655 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:18
Saturday 11 January 2025 07:27:49 -0500 (0:00:00.019) 0:00:26.675 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "ansible_distribution_major_version == \"7\"",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
Saturday 11 January 2025 07:27:49 -0500 (0:00:00.014) 0:00:26.689 ******
ok: [managed-node3] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: python3-cryptography python3-pyasn1
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:38
Saturday 11 January 2025 07:27:50 -0500 (0:00:01.392) 0:00:28.081 ******
ok: [managed-node3] => {
"changed": false,
"stat": {
"atime": 1736598467.1908295,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "571aa2d7621a900f9d38da5f47c0a5a026904002",
"ctime": 1736598467.3318295,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 8919349,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0620",
"mtime": 1736598467.1878295,
"nlink": 1,
"path": "/etc/pki/tls/certs/mycert_fs_attrs_mode.crt",
"pw_name": "ftp",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 14,
"version": "3969764099",
"wgrp": true,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:43
Saturday 11 January 2025 07:27:51 -0500 (0:00:00.358) 0:00:28.439 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:49
Saturday 11 January 2025 07:27:51 -0500 (0:00:00.027) 0:00:28.467 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:59
Saturday 11 January 2025 07:27:51 -0500 (0:00:00.049) 0:00:28.516 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:65
Saturday 11 January 2025 07:27:51 -0500 (0:00:00.039) 0:00:28.555 ******
ok: [managed-node3] => {
"changed": false,
"stat": {
"atime": 1736598467.1428297,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "f4e6c0a710c81468c0d3b05e67f7216b894541dd",
"ctime": 1736598467.3328297,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 4882500,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0620",
"mtime": 1736598467.1878295,
"nlink": 1,
"path": "/etc/pki/tls/private/mycert_fs_attrs_mode.key",
"pw_name": "ftp",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 14,
"version": "3400320256",
"wgrp": true,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:70
Saturday 11 January 2025 07:27:51 -0500 (0:00:00.349) 0:00:28.905 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:76
Saturday 11 January 2025 07:27:51 -0500 (0:00:00.037) 0:00:28.942 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:86
Saturday 11 January 2025 07:27:51 -0500 (0:00:00.077) 0:00:29.020 ******
ok: [managed-node3] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "EF:D9:91:3B:58:CF:52:DB:28:86:A1:1F:1C:36:7C:E3:E1:09:BF:95"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "5A:93:5D:AD:0C:E8:AC:88:B9:B3:DF:8E:37:22:CA:12:BA:B1:3E:8B"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20260111122716Z",
"not_valid_before": "20250111122747Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:92
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.406) 0:00:29.426 ******
ok: [managed-node3] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "EF:D9:91:3B:58:CF:52:DB:28:86:A1:1F:1C:36:7C:E3:E1:09:BF:95"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "5A:93:5D:AD:0C:E8:AC:88:B9:B3:DF:8E:37:22:CA:12:BA:B1:3E:8B"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature": "04:DD:9B:E5:17:BC:32:B1:48:E0:88:CF:15:FD:F7:53:7F:C8:8A:BF:49:42:69:C5:94:E9:F1:DC:BA:09:43:72:C6:7C:1F:50:AA:0F:49:E3:F7:78:4E:F2:E2:83:DA:FA:B4:7E:EC:98:BF:A4:24:F2:D0:5A:83:32:F3:C6:35:88:D9:09:DA:4E:C1:D9:CC:26:66:FD:C0:FB:C8:FA:D8:45:AF:30:92:7D:64:DA:D4:1F:83:CA:81:E6:F2:B9:55:F8:E2:DF:0D:FC:D7:EA:EF:68:B8:D2:B2:6B:51:76:32:C8:CA:4C:6A:BB:F7:C0:DA:91:28:88:26:C5:18:E6:CD:67:E4:3F:E0:92:4D:A0:C0:8F:18:B7:C8:6F:24:6F:E6:5C:1C:50:09:6B:EA:55:8B:07:93:C8:3C:8A:62:D6:AD:11:10:18:B3:1F:EA:CD:13:E8:BC:2B:BF:DA:8D:87:5B:58:44:A3:B8:E2:C8:92:A0:2B:68:D1:D6:2C:E5:ED:C2:58:F0:B5:8A:13:A0:D9:0A:66:5B:BC:D7:DB:63:B7:E3:DE:CC:9D:56:C8:7A:87:48:B1:41:5A:8D:64:25:F4:E1:61:6A:E7:F5:AC:E4:98:FE:24:F0:81:63:44:93:15:49:BF:D8:2A:A0:4D:B6:3C:1A:CC:71:6C:7A:99:80:31:3F:9A"
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20260111122716Z",
"not_valid_before": "20250111122747Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:96
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.020) 0:00:29.447 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:104
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.043) 0:00:29.490 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:112
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.020) 0:00:29.511 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:119
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.041) 0:00:29.552 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:130
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.046) 0:00:29.598 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:143
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.045) 0:00:29.643 ******
ok: [managed-node3] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.041991",
"end": "2025-01-11 07:27:52.875584",
"rc": 0,
"start": "2025-01-11 07:27:52.833593"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:152
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.381) 0:00:30.024 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:2
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.040) 0:00:30.065 ******
ok: [managed-node3] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:9
Saturday 11 January 2025 07:27:52 -0500 (0:00:00.015) 0:00:30.080 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:14
Saturday 11 January 2025 07:27:53 -0500 (0:00:00.018) 0:00:30.098 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:18
Saturday 11 January 2025 07:27:53 -0500 (0:00:00.018) 0:00:30.117 ******
skipping: [managed-node3] => {
"changed": false,
"false_condition": "ansible_distribution_major_version == \"7\"",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
Saturday 11 January 2025 07:27:53 -0500 (0:00:00.013) 0:00:30.130 ******
ok: [managed-node3] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: python3-cryptography python3-pyasn1
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:38
Saturday 11 January 2025 07:27:54 -0500 (0:00:01.408) 0:00:31.539 ******
ok: [managed-node3] => {
"changed": false,
"stat": {
"atime": 1736598468.37183,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "0459616ba34d576fe5bdc915ee6e3ec37e568a82",
"ctime": 1736598468.36883,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 8956719,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1736598468.36883,
"nlink": 1,
"path": "/etc/pki/tls/certs/certid_mode.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "3960459968",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:43
Saturday 11 January 2025 07:27:54 -0500 (0:00:00.366) 0:00:31.905 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:49
Saturday 11 January 2025 07:27:54 -0500 (0:00:00.020) 0:00:31.926 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:59
Saturday 11 January 2025 07:27:54 -0500 (0:00:00.039) 0:00:31.966 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:65
Saturday 11 January 2025 07:27:54 -0500 (0:00:00.038) 0:00:32.004 ******
ok: [managed-node3] => {
"changed": false,
"stat": {
"atime": 1736598468.32283,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "16125654ade47db0b0848204bfc1f033d1a5bb77",
"ctime": 1736598468.36883,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 4882501,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1736598468.36883,
"nlink": 1,
"path": "/etc/pki/tls/private/certid_mode.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "2808796681",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:70
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.363) 0:00:32.368 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:76
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.020) 0:00:32.388 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:86
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.040) 0:00:32.428 ******
ok: [managed-node3] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "EF:D9:91:3B:58:CF:52:DB:28:86:A1:1F:1C:36:7C:E3:E1:09:BF:95"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "A5:F3:40:08:43:B3:86:4D:DA:53:57:F6:39:35:59:70:69:8B:E9:9D"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20260111122716Z",
"not_valid_before": "20250111122748Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:92
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.373) 0:00:32.802 ******
ok: [managed-node3] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "EF:D9:91:3B:58:CF:52:DB:28:86:A1:1F:1C:36:7C:E3:E1:09:BF:95"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "A5:F3:40:08:43:B3:86:4D:DA:53:57:F6:39:35:59:70:69:8B:E9:9D"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20260111122716Z",
"not_valid_before": "20250111122748Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:96
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.020) 0:00:32.822 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:104
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.041) 0:00:32.864 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:112
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.019) 0:00:32.884 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:119
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.041) 0:00:32.925 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:130
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.045) 0:00:32.970 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:143
Saturday 11 January 2025 07:27:55 -0500 (0:00:00.043) 0:00:33.014 ******
ok: [managed-node3] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.041868",
"end": "2025-01-11 07:27:56.251600",
"rc": 0,
"start": "2025-01-11 07:27:56.209732"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:152
Saturday 11 January 2025 07:27:56 -0500 (0:00:00.379) 0:00:33.393 ******
ok: [managed-node3] => {
"changed": false
}
MSG:
All assertions passed
PLAY RECAP *********************************************************************
managed-node3 : ok=101 changed=4 unreachable=0 failed=0 skipped=24 rescued=0 ignored=0
TASKS RECAP ********************************************************************
Saturday 11 January 2025 07:27:56 -0500 (0:00:00.042) 0:00:33.436 ******
===============================================================================
fedora.linux_system_roles.certificate : Ensure certificate requests ----- 1.89s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:101
fedora.linux_system_roles.certificate : Ensure certificate requests ----- 1.89s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:101
fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 1.61s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 1.43s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:23
Ensure python3 is installed --------------------------------------------- 1.41s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
Ensure python3 is installed --------------------------------------------- 1.40s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
Ensure python3 is installed --------------------------------------------- 1.40s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 1.39s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:23
Ensure python3 is installed --------------------------------------------- 1.39s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 1.38s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
Gathering Facts --------------------------------------------------------- 1.11s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:2
fedora.linux_system_roles.certificate : Ensure provider service is running --- 0.94s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:90
Gathering Facts --------------------------------------------------------- 0.75s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:14
Gathering Facts --------------------------------------------------------- 0.75s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:67
Gathering Facts --------------------------------------------------------- 0.75s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:32
Gathering Facts --------------------------------------------------------- 0.73s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:85
Ensure user exists ------------------------------------------------------ 0.58s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:5
Ensure group "somegroup" exists ----------------------------------------- 0.56s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_fs_attrs.yml:9
fedora.linux_system_roles.certificate : Check if system is ostree ------- 0.53s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:10
fedora.linux_system_roles.certificate : Ensure provider service is running --- 0.51s
/tmp/collections-dYq/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:90