Merge branch 'master' of git.fsmpi.rwth-aachen.de:infra/ansible-shared/common

apt/files/51apt-sandbox

+APT::Sandbox::Seccomp "true";

apt/tasks/main.yml

@@ -24,13 +24,16 @@
 
 - meta: flush_handlers
 
-- name: ensure fix of /tmp script bug
+- name: ensure apt and dpkg are configured
   copy:
-    src: 50debconf-exec-tmp
+    src: "{{ item }}"
     dest: /etc/apt/apt.conf.d/
     owner: root
     group: root
     mode: '0644'
+  with_items:
+    - 50debconf-exec-tmp
+    - 51apt-sandbox
   tags:
     - config
     - apt

basic-system/tasks/logging.yml

@@ -4,7 +4,7 @@
 - name: restrict dmesg access to only root
   sysctl:
     name: kernel.dmesg_restrict
-    value: 1
+    value: '1'
     state: present
     sysctl_set: true
   tags:

basic-system/tasks/network.yml

@@ -54,7 +54,7 @@
 - name: ensure deactivation of tcp_timestamps
   sysctl:
     name: net.ipv4.tcp_timestamps
-    value: 0
+    value: '0'
     state: present
     sysctl_set: true
   tags:
@@ -64,7 +64,7 @@
 - name: ensure deactivation of ipv6 tempaddr (all)
   sysctl:
     name: net.ipv6.conf.all.use_tempaddr
-    value: 0
+    value: '0'
     state: present
     sysctl_set: true
   tags:
@@ -74,7 +74,7 @@
 - name: ensure deactivation of ipv6 tempaddr (default)
   sysctl:
     name: net.ipv6.conf.default.use_tempaddr
-    value: 0
+    value: '0'
     state: present
     sysctl_set: true
   tags: