ansible-playbook [core 2.17.8]
config file = None
configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /usr/local/lib/python3.12/site-packages/ansible
ansible collection location = /tmp/collections-YIC
executable location = /usr/local/bin/ansible-playbook
python version = 3.12.8 (main, Dec 6 2024, 00:00:00) [GCC 14.2.1 20240912 (Red Hat 14.2.1-3)] (/usr/bin/python3.12)
jinja version = 3.1.5
libyaml = True
No config file found; using defaults
running playbook inside collection fedora.linux_system_roles
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.profile_tasks to ansible.posix.profile_tasks
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
PLAYBOOK: tests_default.yml ****************************************************
1 plays in /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tests_default.yml
PLAY [Ensure that the role runs with default parameters] ***********************
TASK [fedora.linux_system_roles.keylime_server : Set platform/version specific variables] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:4
Saturday 15 February 2025 04:40:25 -0500 (0:00:00.010) 0:00:00.010 *****
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml for managed-node1
TASK [fedora.linux_system_roles.keylime_server : Ensure ansible_facts used by role] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml:2
Saturday 15 February 2025 04:40:25 -0500 (0:00:00.018) 0:00:00.028 *****
[WARNING]: Platform linux on host managed-node1 is using the discovered Python
interpreter at /usr/bin/python3.12, but future installation of another Python
interpreter could change the meaning of that path. See
https://docs.ansible.com/ansible-
core/2.17/reference_appendices/interpreter_discovery.html for more information.
ok: [managed-node1]
TASK [fedora.linux_system_roles.keylime_server : Check if system is ostree] ****
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml:10
Saturday 15 February 2025 04:40:27 -0500 (0:00:02.266) 0:00:02.294 *****
ok: [managed-node1] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [fedora.linux_system_roles.keylime_server : Set flag to indicate system is ostree] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml:15
Saturday 15 February 2025 04:40:28 -0500 (0:00:00.480) 0:00:02.774 *****
ok: [managed-node1] => {
"ansible_facts": {
"__keylime_server_is_ostree": false
},
"changed": false
}
TASK [fedora.linux_system_roles.keylime_server : Set platform/version specific variables] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml:19
Saturday 15 February 2025 04:40:28 -0500 (0:00:00.023) 0:00:02.798 *****
skipping: [managed-node1] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=Fedora.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "Fedora.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=Fedora_40.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "Fedora_40.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=Fedora_40.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "Fedora_40.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
"changed": false
}
MSG:
All items skipped
TASK [fedora.linux_system_roles.keylime_server : Ensure required packages are installed] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:7
Saturday 15 February 2025 04:40:28 -0500 (0:00:00.033) 0:00:02.831 *****
changed: [managed-node1] => {
"changed": true,
"rc": 0,
"results": [
"Installed: python3-paste-3.7.1-3.fc40.noarch",
"Installed: python3-sqlalchemy-2.0.37-1.fc40.x86_64",
"Installed: python3-keylime-7.11.0-2.fc40.x86_64",
"Installed: python3-gpg-1.23.2-3.fc40.x86_64",
"Installed: python3-lark-1.1.7-3.fc40.noarch",
"Installed: python3-greenlet-3.0.3-3.fc40.x86_64",
"Installed: python3-crypto-2.6.1-50.fc40.x86_64",
"Installed: python3-cryptography-41.0.7-1.fc40.x86_64",
"Installed: keylime-base-7.11.0-2.fc40.x86_64",
"Installed: keylime-registrar-7.11.0-2.fc40.x86_64",
"Installed: keylime-verifier-7.11.0-2.fc40.x86_64",
"Installed: python3-tornado-6.3.3-3.fc40.x86_64",
"Installed: python3-alembic-1.14.1-1.fc40.noarch",
"Installed: python3-pyasn1-0.6.0-1.fc40.noarch",
"Installed: python3-pyasn1-modules-0.6.0-1.fc40.noarch",
"Installed: python3-pyOpenSSL-23.2.0-3.fc40.noarch",
"Installed: libtomcrypt-1.18.2-19.fc40.x86_64",
"Installed: python3-beaker-1.12.1-5.fc40.noarch",
"Installed: python3-mako-1.2.3-6.fc40.noarch",
"Installed: python3-typing-extensions-4.12.2-2.fc40.noarch",
"Installed: python3-packaging-23.2-4.fc40.noarch",
"Installed: libtommath-1.2.1-3.fc40.x86_64",
"Installed: python3-ply-3.11-23.fc40.noarch",
"Installed: python3-tempita-0.5.2-12.fc40.noarch",
"Installed: python3-pycparser-2.20-14.fc40.noarch",
"Installed: python3-cffi-1.16.0-4.fc40.x86_64"
]
}
lsrpackages: keylime-registrar keylime-verifier
TASK [fedora.linux_system_roles.keylime_server : Generate keylime legacy configuration] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:13
Saturday 15 February 2025 04:40:52 -0500 (0:00:24.047) 0:00:26.879 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__keylime_server_legacy_config | bool",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.keylime_server : Generate keylime configuration] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:24
Saturday 15 February 2025 04:40:52 -0500 (0:00:00.058) 0:00:26.938 *****
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml for managed-node1
TASK [fedora.linux_system_roles.keylime_server : Make sure verifier snippet directory exists] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:3
Saturday 15 February 2025 04:40:52 -0500 (0:00:00.045) 0:00:26.984 *****
ok: [managed-node1] => {
"changed": false,
"gid": 991,
"group": "keylime",
"mode": "0500",
"owner": "keylime",
"path": "/etc/keylime/verifier.conf.d",
"secontext": "system_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate verifier ip/port configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:11
Saturday 15 February 2025 04:40:52 -0500 (0:00:00.559) 0:00:27.544 *****
Notification for handler Restart services has been saved.
changed: [managed-node1] => {
"changed": true,
"checksum": "29937651b1cf48e1ba472c86859f8e0d349c9cb5",
"dest": "/etc/keylime/verifier.conf.d/verifier-ip.conf",
"gid": 991,
"group": "keylime",
"md5sum": "a2f0cf630fa7c090793a93b94e27eec2",
"mode": "0400",
"owner": "keylime",
"secontext": "system_u:object_r:etc_t:s0",
"size": 139,
"src": "/root/.ansible/tmp/ansible-tmp-1739612452.8802226-4443-217429548859536/.source.conf",
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate database configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:21
Saturday 15 February 2025 04:40:53 -0500 (0:00:00.837) 0:00:28.381 *****
Notification for handler Restart services has been saved.
changed: [managed-node1] => {
"changed": true,
"checksum": "a5c90b416c0d82c3ffebc8237fc2a02e96b578b1",
"dest": "/etc/keylime/verifier.conf.d/verifier-database.conf",
"gid": 991,
"group": "keylime",
"md5sum": "95a11cb21e64d5899997e918aee5e61e",
"mode": "0400",
"owner": "keylime",
"secontext": "system_u:object_r:etc_t:s0",
"size": 116,
"src": "/root/.ansible/tmp/ansible-tmp-1739612453.717588-4461-58931066616365/.source.conf",
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate verifier keys/certs configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:31
Saturday 15 February 2025 04:40:54 -0500 (0:00:00.728) 0:00:29.110 *****
Notification for handler Restart services has been saved.
changed: [managed-node1] => {
"changed": true,
"checksum": "a68aa3c9457a2d00aa51d57180aeeb99650fe645",
"dest": "/etc/keylime/verifier.conf.d/verifier-keys-certs.conf",
"gid": 991,
"group": "keylime",
"md5sum": "30d32fad72d832c2c1540413322cfe2a",
"mode": "0400",
"owner": "keylime",
"secontext": "system_u:object_r:etc_t:s0",
"size": 285,
"src": "/root/.ansible/tmp/ansible-tmp-1739612454.4455943-4479-107556006687255/.source.conf",
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Make sure registrar snippet directory exists] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:41
Saturday 15 February 2025 04:40:55 -0500 (0:00:00.742) 0:00:29.852 *****
ok: [managed-node1] => {
"changed": false,
"gid": 991,
"group": "keylime",
"mode": "0500",
"owner": "keylime",
"path": "/etc/keylime/registrar.conf.d",
"secontext": "system_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate registrar ip/port configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:49
Saturday 15 February 2025 04:40:55 -0500 (0:00:00.408) 0:00:30.261 *****
Notification for handler Restart services has been saved.
changed: [managed-node1] => {
"changed": true,
"checksum": "00f045349854acc5f014b830f50d1090a68a8ee0",
"dest": "/etc/keylime/registrar.conf.d/registrar-ip.conf",
"gid": 991,
"group": "keylime",
"md5sum": "f170a8dd54892e3e493a84592632069b",
"mode": "0400",
"owner": "keylime",
"secontext": "system_u:object_r:etc_t:s0",
"size": 92,
"src": "/root/.ansible/tmp/ansible-tmp-1739612455.5975866-4523-61900634384878/.source.conf",
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate database configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:59
Saturday 15 February 2025 04:40:56 -0500 (0:00:00.746) 0:00:31.007 *****
Notification for handler Restart services has been saved.
changed: [managed-node1] => {
"changed": true,
"checksum": "cc09696d689e5f86abac15cf812f28123b55f7ed",
"dest": "/etc/keylime/registrar.conf.d/registrar-database.conf",
"gid": 991,
"group": "keylime",
"md5sum": "7a94205ad3ddc85c55bf1988cf2c488e",
"mode": "0400",
"owner": "keylime",
"secontext": "system_u:object_r:etc_t:s0",
"size": 117,
"src": "/root/.ansible/tmp/ansible-tmp-1739612456.3438423-4556-196232268129184/.source.conf",
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate registrar keys/certs configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:69
Saturday 15 February 2025 04:40:57 -0500 (0:00:00.736) 0:00:31.744 *****
Notification for handler Restart services has been saved.
changed: [managed-node1] => {
"changed": true,
"checksum": "c0752e119430f60111be5aad8a02caee7f38ef9a",
"dest": "/etc/keylime/registrar.conf.d/registrar-keys-certs.conf",
"gid": 991,
"group": "keylime",
"md5sum": "db799f84e1168dad674a433b7af9afe7",
"mode": "0400",
"owner": "keylime",
"secontext": "system_u:object_r:etc_t:s0",
"size": 184,
"src": "/root/.ansible/tmp/ansible-tmp-1739612457.0805488-4586-169560013633453/.source.conf",
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Ensure the verifier is enabled and started] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:28
Saturday 15 February 2025 04:40:57 -0500 (0:00:00.733) 0:00:32.478 *****
changed: [managed-node1] => {
"changed": true,
"enabled": true,
"name": "keylime_verifier",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:systemd_unit_file_t:s0",
"ActiveEnterTimestampMonotonic": "0",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "inactive",
"After": "system.slice sysinit.target network.target basic.target systemd-journald.socket",
"AllowIsolate": "no",
"AssertResult": "no",
"AssertTimestampMonotonic": "0",
"Before": "shutdown.target keylime_registrar.service",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "[not set]",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "no",
"ConditionTimestampMonotonic": "0",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroupId": "0",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "The Keylime verifier",
"DevicePolicy": "auto",
"DropInPaths": "/usr/lib/systemd/system/service.d/10-timeout-abort.conf",
"DynamicUser": "no",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "0",
"ExecMainStartTimestampMonotonic": "0",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/bin/keylime_verifier ; argv[]=/usr/bin/keylime_verifier ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/bin/keylime_verifier ; argv[]=/usr/bin/keylime_verifier ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/keylime_verifier.service",
"FreezerState": "running",
"GID": "[not set]",
"Group": "keylime",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "keylime_verifier.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestampMonotonic": "0",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "14701",
"LimitNPROCSoft": "14701",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "14701",
"LimitSIGPENDINGSoft": "14701",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "0",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "3514687488",
"MemoryCurrent": "[not set]",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "[not set]",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "[not set]",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "[not set]",
"MemoryZSwapCurrent": "[not set]",
"MemoryZSwapMax": "infinity",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "keylime_verifier.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "system.slice sysinit.target",
"Restart": "on-failure",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "2min",
"RestartUSecNext": "2min",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestampMonotonic": "0",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "dead",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "[not set]",
"TasksMax": "4410",
"TimeoutAbortUSec": "1min",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min",
"TimeoutStopFailureMode": "abort",
"TimeoutStopUSec": "1min",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "simple",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "disabled",
"User": "keylime",
"UtmpMode": "init",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "infinity"
}
}
TASK [fedora.linux_system_roles.keylime_server : Make sure the verifier is up and running] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:34
Saturday 15 February 2025 04:40:59 -0500 (0:00:01.519) 0:00:33.998 *****
ok: [managed-node1] => {
"changed": false,
"elapsed": 2,
"match_groupdict": {},
"match_groups": [],
"path": null,
"port": 8881,
"search_regex": null,
"state": "started"
}
TASK [fedora.linux_system_roles.keylime_server : Ensure the registrar is enabled and started] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:40
Saturday 15 February 2025 04:41:01 -0500 (0:00:02.611) 0:00:36.609 *****
changed: [managed-node1] => {
"changed": true,
"enabled": true,
"name": "keylime_registrar",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:systemd_unit_file_t:s0",
"ActiveEnterTimestampMonotonic": "0",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "inactive",
"After": "keylime_verifier.service basic.target systemd-journald.socket network.target sysinit.target system.slice",
"AllowIsolate": "no",
"AssertResult": "no",
"AssertTimestampMonotonic": "0",
"Before": "shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "[not set]",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "no",
"ConditionTimestampMonotonic": "0",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroupId": "0",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "The Keylime registrar service",
"DevicePolicy": "auto",
"DropInPaths": "/usr/lib/systemd/system/service.d/10-timeout-abort.conf",
"DynamicUser": "no",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "0",
"ExecMainStartTimestampMonotonic": "0",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/bin/keylime_registrar ; argv[]=/usr/bin/keylime_registrar ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/bin/keylime_registrar ; argv[]=/usr/bin/keylime_registrar ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/keylime_registrar.service",
"FreezerState": "running",
"GID": "[not set]",
"Group": "keylime",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "keylime_registrar.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestampMonotonic": "0",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "14701",
"LimitNPROCSoft": "14701",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "14701",
"LimitSIGPENDINGSoft": "14701",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "0",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "3452235776",
"MemoryCurrent": "[not set]",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "[not set]",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "[not set]",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "[not set]",
"MemoryZSwapCurrent": "[not set]",
"MemoryZSwapMax": "infinity",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "keylime_registrar.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "system.slice sysinit.target",
"Restart": "on-failure",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "2min",
"RestartUSecNext": "2min",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestampMonotonic": "0",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "dead",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "[not set]",
"TasksMax": "4410",
"TimeoutAbortUSec": "1min",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min",
"TimeoutStopFailureMode": "abort",
"TimeoutStopUSec": "1min",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "simple",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "disabled",
"User": "keylime",
"UtmpMode": "init",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "infinity"
}
}
TASK [fedora.linux_system_roles.keylime_server : Make sure the registrar is up and running] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:46
Saturday 15 February 2025 04:41:03 -0500 (0:00:01.272) 0:00:37.882 *****
ok: [managed-node1] => {
"changed": false,
"elapsed": 1,
"match_groupdict": {},
"match_groups": [],
"path": null,
"port": 8890,
"search_regex": null,
"state": "started"
}
TASK [Run the role] ************************************************************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tests_default.yml:9
Saturday 15 February 2025 04:41:04 -0500 (0:00:01.518) 0:00:39.400 *****
included: fedora.linux_system_roles.keylime_server for managed-node1
TASK [fedora.linux_system_roles.keylime_server : Set platform/version specific variables] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:4
Saturday 15 February 2025 04:41:04 -0500 (0:00:00.022) 0:00:39.423 *****
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml for managed-node1
TASK [fedora.linux_system_roles.keylime_server : Ensure ansible_facts used by role] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml:2
Saturday 15 February 2025 04:41:04 -0500 (0:00:00.018) 0:00:39.441 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__keylime_server_required_facts | difference(ansible_facts.keys() | list) | length > 0",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.keylime_server : Check if system is ostree] ****
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml:10
Saturday 15 February 2025 04:41:04 -0500 (0:00:00.034) 0:00:39.476 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not __keylime_server_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.keylime_server : Set flag to indicate system is ostree] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml:15
Saturday 15 February 2025 04:41:04 -0500 (0:00:00.018) 0:00:39.494 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not __keylime_server_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.keylime_server : Set platform/version specific variables] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml:19
Saturday 15 February 2025 04:41:04 -0500 (0:00:00.016) 0:00:39.511 *****
skipping: [managed-node1] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=Fedora.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "Fedora.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=Fedora_40.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "Fedora_40.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=Fedora_40.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "Fedora_40.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
"changed": false
}
MSG:
All items skipped
TASK [fedora.linux_system_roles.keylime_server : Ensure required packages are installed] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:7
Saturday 15 February 2025 04:41:04 -0500 (0:00:00.030) 0:00:39.542 *****
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: keylime-registrar keylime-verifier
TASK [fedora.linux_system_roles.keylime_server : Generate keylime legacy configuration] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:13
Saturday 15 February 2025 04:41:06 -0500 (0:00:01.899) 0:00:41.441 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__keylime_server_legacy_config | bool",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.keylime_server : Generate keylime configuration] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:24
Saturday 15 February 2025 04:41:06 -0500 (0:00:00.047) 0:00:41.489 *****
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml for managed-node1
TASK [fedora.linux_system_roles.keylime_server : Make sure verifier snippet directory exists] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:3
Saturday 15 February 2025 04:41:06 -0500 (0:00:00.046) 0:00:41.536 *****
ok: [managed-node1] => {
"changed": false,
"gid": 991,
"group": "keylime",
"mode": "0500",
"owner": "keylime",
"path": "/etc/keylime/verifier.conf.d",
"secontext": "system_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate verifier ip/port configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:11
Saturday 15 February 2025 04:41:07 -0500 (0:00:00.425) 0:00:41.961 *****
ok: [managed-node1] => {
"changed": false,
"checksum": "29937651b1cf48e1ba472c86859f8e0d349c9cb5",
"dest": "/etc/keylime/verifier.conf.d/verifier-ip.conf",
"gid": 991,
"group": "keylime",
"mode": "0400",
"owner": "keylime",
"path": "/etc/keylime/verifier.conf.d/verifier-ip.conf",
"secontext": "system_u:object_r:etc_t:s0",
"size": 139,
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate database configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:21
Saturday 15 February 2025 04:41:08 -0500 (0:00:01.045) 0:00:43.006 *****
ok: [managed-node1] => {
"changed": false,
"checksum": "a5c90b416c0d82c3ffebc8237fc2a02e96b578b1",
"dest": "/etc/keylime/verifier.conf.d/verifier-database.conf",
"gid": 991,
"group": "keylime",
"mode": "0400",
"owner": "keylime",
"path": "/etc/keylime/verifier.conf.d/verifier-database.conf",
"secontext": "system_u:object_r:etc_t:s0",
"size": 116,
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate verifier keys/certs configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:31
Saturday 15 February 2025 04:41:08 -0500 (0:00:00.692) 0:00:43.699 *****
ok: [managed-node1] => {
"changed": false,
"checksum": "a68aa3c9457a2d00aa51d57180aeeb99650fe645",
"dest": "/etc/keylime/verifier.conf.d/verifier-keys-certs.conf",
"gid": 991,
"group": "keylime",
"mode": "0400",
"owner": "keylime",
"path": "/etc/keylime/verifier.conf.d/verifier-keys-certs.conf",
"secontext": "system_u:object_r:etc_t:s0",
"size": 285,
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Make sure registrar snippet directory exists] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:41
Saturday 15 February 2025 04:41:09 -0500 (0:00:00.686) 0:00:44.386 *****
ok: [managed-node1] => {
"changed": false,
"gid": 991,
"group": "keylime",
"mode": "0500",
"owner": "keylime",
"path": "/etc/keylime/registrar.conf.d",
"secontext": "system_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate registrar ip/port configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:49
Saturday 15 February 2025 04:41:10 -0500 (0:00:00.384) 0:00:44.771 *****
ok: [managed-node1] => {
"changed": false,
"checksum": "00f045349854acc5f014b830f50d1090a68a8ee0",
"dest": "/etc/keylime/registrar.conf.d/registrar-ip.conf",
"gid": 991,
"group": "keylime",
"mode": "0400",
"owner": "keylime",
"path": "/etc/keylime/registrar.conf.d/registrar-ip.conf",
"secontext": "system_u:object_r:etc_t:s0",
"size": 92,
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate database configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:59
Saturday 15 February 2025 04:41:10 -0500 (0:00:00.692) 0:00:45.463 *****
ok: [managed-node1] => {
"changed": false,
"checksum": "cc09696d689e5f86abac15cf812f28123b55f7ed",
"dest": "/etc/keylime/registrar.conf.d/registrar-database.conf",
"gid": 991,
"group": "keylime",
"mode": "0400",
"owner": "keylime",
"path": "/etc/keylime/registrar.conf.d/registrar-database.conf",
"secontext": "system_u:object_r:etc_t:s0",
"size": 117,
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Generate registrar keys/certs configuration snippet] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:69
Saturday 15 February 2025 04:41:11 -0500 (0:00:00.703) 0:00:46.167 *****
ok: [managed-node1] => {
"changed": false,
"checksum": "c0752e119430f60111be5aad8a02caee7f38ef9a",
"dest": "/etc/keylime/registrar.conf.d/registrar-keys-certs.conf",
"gid": 991,
"group": "keylime",
"mode": "0400",
"owner": "keylime",
"path": "/etc/keylime/registrar.conf.d/registrar-keys-certs.conf",
"secontext": "system_u:object_r:etc_t:s0",
"size": 184,
"state": "file",
"uid": 992
}
TASK [fedora.linux_system_roles.keylime_server : Ensure the verifier is enabled and started] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:28
Saturday 15 February 2025 04:41:12 -0500 (0:00:00.692) 0:00:46.860 *****
ok: [managed-node1] => {
"changed": false,
"enabled": true,
"name": "keylime_verifier",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:systemd_unit_file_t:s0",
"ActiveEnterTimestamp": "Sat 2025-02-15 04:40:59 EST",
"ActiveEnterTimestampMonotonic": "265326593",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "network.target systemd-journald.socket system.slice sysinit.target basic.target",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-02-15 04:40:59 EST",
"AssertTimestampMonotonic": "265319820",
"Before": "multi-user.target shutdown.target keylime_registrar.service",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "1879400000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-02-15 04:40:59 EST",
"ConditionTimestampMonotonic": "265319817",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/keylime_verifier.service",
"ControlGroupId": "5420",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "The Keylime verifier",
"DevicePolicy": "auto",
"DropInPaths": "/usr/lib/systemd/system/service.d/10-timeout-abort.conf",
"DynamicUser": "no",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "6835",
"ExecMainStartTimestamp": "Sat 2025-02-15 04:40:59 EST",
"ExecMainStartTimestampMonotonic": "265326114",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/bin/keylime_verifier ; argv[]=/usr/bin/keylime_verifier ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/bin/keylime_verifier ; argv[]=/usr/bin/keylime_verifier ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/keylime_verifier.service",
"FreezerState": "running",
"GID": "991",
"Group": "keylime",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "keylime_verifier.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-02-15 04:40:59 EST",
"InactiveExitTimestampMonotonic": "265326593",
"InvocationID": "9d03cf3bea5f4cf4a142bc48efee57b7",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "14701",
"LimitNPROCSoft": "14701",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "14701",
"LimitSIGPENDINGSoft": "14701",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "6835",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "3346923520",
"MemoryCurrent": "87277568",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "87289856",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "0",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "0",
"MemoryZSwapCurrent": "0",
"MemoryZSwapMax": "infinity",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "keylime_verifier.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "system.slice sysinit.target",
"Restart": "on-failure",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "2min",
"RestartUSecNext": "2min",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestamp": "Sat 2025-02-15 04:40:59 EST",
"StateChangeTimestampMonotonic": "265326593",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "3",
"TasksMax": "4410",
"TimeoutAbortUSec": "1min",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min",
"TimeoutStopFailureMode": "abort",
"TimeoutStopUSec": "1min",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "simple",
"UID": "992",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"User": "keylime",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.keylime_server : Make sure the verifier is up and running] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:34
Saturday 15 February 2025 04:41:13 -0500 (0:00:00.972) 0:00:47.832 *****
ok: [managed-node1] => {
"changed": false,
"elapsed": 0,
"match_groupdict": {},
"match_groups": [],
"path": null,
"port": 8881,
"search_regex": null,
"state": "started"
}
TASK [fedora.linux_system_roles.keylime_server : Ensure the registrar is enabled and started] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:40
Saturday 15 February 2025 04:41:13 -0500 (0:00:00.374) 0:00:48.206 *****
ok: [managed-node1] => {
"changed": false,
"enabled": true,
"name": "keylime_registrar",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:systemd_unit_file_t:s0",
"ActiveEnterTimestamp": "Sat 2025-02-15 04:41:03 EST",
"ActiveEnterTimestampMonotonic": "269223284",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "sysinit.target system.slice keylime_verifier.service systemd-journald.socket network.target basic.target",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-02-15 04:41:03 EST",
"AssertTimestampMonotonic": "269213156",
"Before": "shutdown.target multi-user.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "1120745000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-02-15 04:41:03 EST",
"ConditionTimestampMonotonic": "269213152",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/keylime_registrar.service",
"ControlGroupId": "5464",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "The Keylime registrar service",
"DevicePolicy": "auto",
"DropInPaths": "/usr/lib/systemd/system/service.d/10-timeout-abort.conf",
"DynamicUser": "no",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "7262",
"ExecMainStartTimestamp": "Sat 2025-02-15 04:41:03 EST",
"ExecMainStartTimestampMonotonic": "269223081",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/bin/keylime_registrar ; argv[]=/usr/bin/keylime_registrar ; ignore_errors=no ; start_time=[Sat 2025-02-15 04:41:03 EST] ; stop_time=[n/a] ; pid=7262 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/bin/keylime_registrar ; argv[]=/usr/bin/keylime_registrar ; flags= ; start_time=[Sat 2025-02-15 04:41:03 EST] ; stop_time=[n/a] ; pid=7262 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/keylime_registrar.service",
"FreezerState": "running",
"GID": "991",
"Group": "keylime",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "keylime_registrar.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-02-15 04:41:03 EST",
"InactiveExitTimestampMonotonic": "269223284",
"InvocationID": "0b0e219100504b84b9cee228a81fcfec",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "14701",
"LimitNPROCSoft": "14701",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "14701",
"LimitSIGPENDINGSoft": "14701",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "7262",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "3350155264",
"MemoryCurrent": "64696320",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "65142784",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "0",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "0",
"MemoryZSwapCurrent": "0",
"MemoryZSwapMax": "infinity",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "keylime_registrar.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "system.slice sysinit.target",
"Restart": "on-failure",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "2min",
"RestartUSecNext": "2min",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestamp": "Sat 2025-02-15 04:41:03 EST",
"StateChangeTimestampMonotonic": "269223284",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "3",
"TasksMax": "4410",
"TimeoutAbortUSec": "1min",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min",
"TimeoutStopFailureMode": "abort",
"TimeoutStopUSec": "1min",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "simple",
"UID": "992",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"User": "keylime",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.keylime_server : Make sure the registrar is up and running] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:46
Saturday 15 February 2025 04:41:14 -0500 (0:00:00.976) 0:00:49.183 *****
ok: [managed-node1] => {
"changed": false,
"elapsed": 0,
"match_groupdict": {},
"match_groups": [],
"path": null,
"port": 8890,
"search_regex": null,
"state": "started"
}
TASK [Check header for ansible_managed, fingerprint - legacy] ******************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tests_default.yml:14
Saturday 15 February 2025 04:41:14 -0500 (0:00:00.379) 0:00:49.562 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__keylime_server_legacy_config",
"skip_reason": "Conditional result was False"
}
TASK [Check header for ansible_managed, fingerprint] ***************************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tests_default.yml:22
Saturday 15 February 2025 04:41:14 -0500 (0:00:00.015) 0:00:49.577 *****
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml for managed-node1 => (item=/etc/keylime/verifier.conf.d/verifier-ip.conf)
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml for managed-node1 => (item=/etc/keylime/verifier.conf.d/verifier-database.conf)
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml for managed-node1 => (item=/etc/keylime/verifier.conf.d/verifier-keys-certs.conf)
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml for managed-node1 => (item=/etc/keylime/registrar.conf.d/registrar-ip.conf)
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml for managed-node1 => (item=/etc/keylime/registrar.conf.d/registrar-database.conf)
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml for managed-node1 => (item=/etc/keylime/registrar.conf.d/registrar-keys-certs.conf)
TASK [Get file] ****************************************************************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:3
Saturday 15 February 2025 04:41:14 -0500 (0:00:00.049) 0:00:49.627 *****
ok: [managed-node1] => {
"changed": false,
"content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6a2V5bGltZV9zZXJ2ZXIKCgpbdmVyaWZpZXJdCmlwID0gMTI3LjAuMC4xCnBvcnQgPSA4ODgxCgpyZWdpc3RyYXJfaXAgPSAxMjcuMC4wLjEKcmVnaXN0cmFyX3BvcnQgPSA4ODkwCg==",
"encoding": "base64",
"source": "/etc/keylime/verifier.conf.d/verifier-ip.conf"
}
TASK [Check for presence of ansible managed header, fingerprint] ***************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:9
Saturday 15 February 2025 04:41:15 -0500 (0:00:00.468) 0:00:50.095 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Get file] ****************************************************************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:3
Saturday 15 February 2025 04:41:15 -0500 (0:00:00.047) 0:00:50.142 *****
ok: [managed-node1] => {
"changed": false,
"content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6a2V5bGltZV9zZXJ2ZXIKCgpbdmVyaWZpZXJdCiMgRGF0YWJhc2UgVVJMIENvbmZpZ3VyYXRpb24uCmRhdGFiYXNlX3VybCA9IHNxbGl0ZQo=",
"encoding": "base64",
"source": "/etc/keylime/verifier.conf.d/verifier-database.conf"
}
TASK [Check for presence of ansible managed header, fingerprint] ***************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:9
Saturday 15 February 2025 04:41:15 -0500 (0:00:00.380) 0:00:50.522 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Get file] ****************************************************************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:3
Saturday 15 February 2025 04:41:15 -0500 (0:00:00.045) 0:00:50.567 *****
ok: [managed-node1] => {
"changed": false,
"content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6a2V5bGltZV9zZXJ2ZXIKCgpbdmVyaWZpZXJdCnRsc19kaXIgPSBnZW5lcmF0ZQpzZXJ2ZXJfa2V5ID0gZGVmYXVsdApzZXJ2ZXJfa2V5X3Bhc3N3b3JkID0gZGVmYXVsdApzZXJ2ZXJfY2VydCA9IGRlZmF1bHQKdHJ1c3RlZF9jbGllbnRfY2EgPSBkZWZhdWx0CmNsaWVudF9rZXkgPSBkZWZhdWx0CmNsaWVudF9rZXlfcGFzc3dvcmQgPSBkZWZhdWx0CmNsaWVudF9jZXJ0ID0gZGVmYXVsdAp0cnVzdGVkX3NlcnZlcl9jYSA9IGRlZmF1bHQK",
"encoding": "base64",
"source": "/etc/keylime/verifier.conf.d/verifier-keys-certs.conf"
}
TASK [Check for presence of ansible managed header, fingerprint] ***************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:9
Saturday 15 February 2025 04:41:16 -0500 (0:00:00.372) 0:00:50.940 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Get file] ****************************************************************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:3
Saturday 15 February 2025 04:41:16 -0500 (0:00:00.048) 0:00:50.988 *****
ok: [managed-node1] => {
"changed": false,
"content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6a2V5bGltZV9zZXJ2ZXIKCgpbcmVnaXN0cmFyXQppcCA9IDEyNy4wLjAuMQpwb3J0ID0gODg5MAo=",
"encoding": "base64",
"source": "/etc/keylime/registrar.conf.d/registrar-ip.conf"
}
TASK [Check for presence of ansible managed header, fingerprint] ***************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:9
Saturday 15 February 2025 04:41:16 -0500 (0:00:00.373) 0:00:51.361 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Get file] ****************************************************************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:3
Saturday 15 February 2025 04:41:16 -0500 (0:00:00.047) 0:00:51.409 *****
ok: [managed-node1] => {
"changed": false,
"content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6a2V5bGltZV9zZXJ2ZXIKCgpbcmVnaXN0cmFyXQojIERhdGFiYXNlIFVSTCBDb25maWd1cmF0aW9uLgpkYXRhYmFzZV91cmwgPSBzcWxpdGUK",
"encoding": "base64",
"source": "/etc/keylime/registrar.conf.d/registrar-database.conf"
}
TASK [Check for presence of ansible managed header, fingerprint] ***************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:9
Saturday 15 February 2025 04:41:17 -0500 (0:00:00.374) 0:00:51.784 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Get file] ****************************************************************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:3
Saturday 15 February 2025 04:41:17 -0500 (0:00:00.046) 0:00:51.830 *****
ok: [managed-node1] => {
"changed": false,
"content": "IwojIEFuc2libGUgbWFuYWdlZAojCiMgc3lzdGVtX3JvbGU6a2V5bGltZV9zZXJ2ZXIKCgpbcmVnaXN0cmFyXQp0bHNfZGlyID0gZGVmYXVsdApzZXJ2ZXJfa2V5ID0gZGVmYXVsdApzZXJ2ZXJfa2V5X3Bhc3N3b3JkID0gZGVmYXVsdApzZXJ2ZXJfY2VydCA9IGRlZmF1bHQKdHJ1c3RlZF9jbGllbnRfY2EgPSBkZWZhdWx0Cg==",
"encoding": "base64",
"source": "/etc/keylime/registrar.conf.d/registrar-keys-certs.conf"
}
TASK [Check for presence of ansible managed header, fingerprint] ***************
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/tests/keylime_server/tasks/check_header.yml:9
Saturday 15 February 2025 04:41:17 -0500 (0:00:00.374) 0:00:52.205 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
NOTIFIED HANDLER fedora.linux_system_roles.keylime_server : Restart services for managed-node1
RUNNING HANDLER [fedora.linux_system_roles.keylime_server : Restart services] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/handlers/main.yml:3
Saturday 15 February 2025 04:41:17 -0500 (0:00:00.048) 0:00:52.253 *****
included: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/restart_services.yml for managed-node1
RUNNING HANDLER [fedora.linux_system_roles.keylime_server : Restart the verifier] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/restart_services.yml:4
Saturday 15 February 2025 04:41:17 -0500 (0:00:00.016) 0:00:52.270 *****
changed: [managed-node1] => {
"changed": true,
"name": "keylime_verifier",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:systemd_unit_file_t:s0",
"ActiveEnterTimestamp": "Sat 2025-02-15 04:40:59 EST",
"ActiveEnterTimestampMonotonic": "265326593",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "network.target systemd-journald.socket system.slice sysinit.target basic.target",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-02-15 04:40:59 EST",
"AssertTimestampMonotonic": "265319820",
"Before": "multi-user.target shutdown.target keylime_registrar.service",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "1880342000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-02-15 04:40:59 EST",
"ConditionTimestampMonotonic": "265319817",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/keylime_verifier.service",
"ControlGroupId": "5420",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "The Keylime verifier",
"DevicePolicy": "auto",
"DropInPaths": "/usr/lib/systemd/system/service.d/10-timeout-abort.conf",
"DynamicUser": "no",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "6835",
"ExecMainStartTimestamp": "Sat 2025-02-15 04:40:59 EST",
"ExecMainStartTimestampMonotonic": "265326114",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/bin/keylime_verifier ; argv[]=/usr/bin/keylime_verifier ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/bin/keylime_verifier ; argv[]=/usr/bin/keylime_verifier ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/keylime_verifier.service",
"FreezerState": "running",
"GID": "991",
"Group": "keylime",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "keylime_verifier.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-02-15 04:40:59 EST",
"InactiveExitTimestampMonotonic": "265326593",
"InvocationID": "9d03cf3bea5f4cf4a142bc48efee57b7",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "14701",
"LimitNPROCSoft": "14701",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "14701",
"LimitSIGPENDINGSoft": "14701",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "6835",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "3368484864",
"MemoryCurrent": "87310336",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "87539712",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "0",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "0",
"MemoryZSwapCurrent": "0",
"MemoryZSwapMax": "infinity",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "keylime_verifier.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "system.slice sysinit.target",
"Restart": "on-failure",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "2min",
"RestartUSecNext": "2min",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestamp": "Sat 2025-02-15 04:40:59 EST",
"StateChangeTimestampMonotonic": "265326593",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "3",
"TasksMax": "4410",
"TimeoutAbortUSec": "1min",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min",
"TimeoutStopFailureMode": "abort",
"TimeoutStopUSec": "1min",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "simple",
"UID": "992",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"User": "keylime",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
RUNNING HANDLER [fedora.linux_system_roles.keylime_server : Make sure the verifier is up and running] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/restart_services.yml:9
Saturday 15 February 2025 04:41:18 -0500 (0:00:01.181) 0:00:53.451 *****
ok: [managed-node1] => {
"changed": false,
"elapsed": 1,
"match_groupdict": {},
"match_groups": [],
"path": null,
"port": 8881,
"search_regex": null,
"state": "started"
}
RUNNING HANDLER [fedora.linux_system_roles.keylime_server : Restart the registrar] ***
task path: /tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/restart_services.yml:14
Saturday 15 February 2025 04:41:20 -0500 (0:00:01.526) 0:00:54.978 *****
changed: [managed-node1] => {
"changed": true,
"name": "keylime_registrar",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:systemd_unit_file_t:s0",
"ActiveEnterTimestamp": "Sat 2025-02-15 04:41:03 EST",
"ActiveEnterTimestampMonotonic": "269223284",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "sysinit.target system.slice keylime_verifier.service systemd-journald.socket network.target basic.target",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-02-15 04:41:03 EST",
"AssertTimestampMonotonic": "269213156",
"Before": "shutdown.target multi-user.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "1122334000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-02-15 04:41:03 EST",
"ConditionTimestampMonotonic": "269213152",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/keylime_registrar.service",
"ControlGroupId": "5464",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "The Keylime registrar service",
"DevicePolicy": "auto",
"DropInPaths": "/usr/lib/systemd/system/service.d/10-timeout-abort.conf",
"DynamicUser": "no",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "7262",
"ExecMainStartTimestamp": "Sat 2025-02-15 04:41:03 EST",
"ExecMainStartTimestampMonotonic": "269223081",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/bin/keylime_registrar ; argv[]=/usr/bin/keylime_registrar ; ignore_errors=no ; start_time=[Sat 2025-02-15 04:41:03 EST] ; stop_time=[n/a] ; pid=7262 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/bin/keylime_registrar ; argv[]=/usr/bin/keylime_registrar ; flags= ; start_time=[Sat 2025-02-15 04:41:03 EST] ; stop_time=[n/a] ; pid=7262 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/keylime_registrar.service",
"FreezerState": "running",
"GID": "991",
"Group": "keylime",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "keylime_registrar.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-02-15 04:41:03 EST",
"InactiveExitTimestampMonotonic": "269223284",
"InvocationID": "0b0e219100504b84b9cee228a81fcfec",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "14701",
"LimitNPROCSoft": "14701",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "14701",
"LimitSIGPENDINGSoft": "14701",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "7262",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "3381690368",
"MemoryCurrent": "64696320",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "65142784",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "0",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "0",
"MemoryZSwapCurrent": "0",
"MemoryZSwapMax": "infinity",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "keylime_registrar.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "system.slice sysinit.target",
"Restart": "on-failure",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "2min",
"RestartUSecNext": "2min",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestamp": "Sat 2025-02-15 04:41:03 EST",
"StateChangeTimestampMonotonic": "269223284",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "3",
"TasksMax": "4410",
"TimeoutAbortUSec": "1min",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min",
"TimeoutStopFailureMode": "abort",
"TimeoutStopUSec": "1min",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "simple",
"UID": "992",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"User": "keylime",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
PLAY RECAP *********************************************************************
managed-node1 : ok=56 changed=11 unreachable=0 failed=0 skipped=8 rescued=0 ignored=0
TASKS RECAP ********************************************************************
Saturday 15 February 2025 04:41:21 -0500 (0:00:01.245) 0:00:56.224 *****
===============================================================================
fedora.linux_system_roles.keylime_server : Ensure required packages are installed -- 24.05s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:7
fedora.linux_system_roles.keylime_server : Make sure the verifier is up and running --- 2.61s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:34
fedora.linux_system_roles.keylime_server : Ensure ansible_facts used by role --- 2.27s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/set_vars.yml:2
fedora.linux_system_roles.keylime_server : Ensure required packages are installed --- 1.90s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:7
fedora.linux_system_roles.keylime_server : Make sure the verifier is up and running --- 1.53s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/restart_services.yml:9
fedora.linux_system_roles.keylime_server : Ensure the verifier is enabled and started --- 1.52s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:28
fedora.linux_system_roles.keylime_server : Make sure the registrar is up and running --- 1.52s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:46
fedora.linux_system_roles.keylime_server : Ensure the registrar is enabled and started --- 1.27s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:40
fedora.linux_system_roles.keylime_server : Restart the registrar -------- 1.25s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/restart_services.yml:14
fedora.linux_system_roles.keylime_server : Restart the verifier --------- 1.18s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/restart_services.yml:4
fedora.linux_system_roles.keylime_server : Generate verifier ip/port configuration snippet --- 1.05s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:11
fedora.linux_system_roles.keylime_server : Ensure the registrar is enabled and started --- 0.98s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:40
fedora.linux_system_roles.keylime_server : Ensure the verifier is enabled and started --- 0.97s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/main.yml:28
fedora.linux_system_roles.keylime_server : Generate verifier ip/port configuration snippet --- 0.84s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:11
fedora.linux_system_roles.keylime_server : Generate registrar ip/port configuration snippet --- 0.75s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:49
fedora.linux_system_roles.keylime_server : Generate verifier keys/certs configuration snippet --- 0.74s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:31
fedora.linux_system_roles.keylime_server : Generate database configuration snippet --- 0.74s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:59
fedora.linux_system_roles.keylime_server : Generate registrar keys/certs configuration snippet --- 0.73s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:69
fedora.linux_system_roles.keylime_server : Generate database configuration snippet --- 0.73s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:21
fedora.linux_system_roles.keylime_server : Generate database configuration snippet --- 0.70s
/tmp/collections-YIC/ansible_collections/fedora/linux_system_roles/roles/keylime_server/tasks/keylime-config.yml:59