48 lines
1.2 KiB
YAML
48 lines
1.2 KiB
YAML
|
---
|
||
|
|
- name: Configure systemd timesyncd
|
||
|
|
become: true
|
||
|
|
ansible.builtin.template:
|
||
|
|
src: etc/systemd/timesyncd.conf.j2
|
||
|
|
dest: /etc/systemd/timesyncd.conf
|
||
|
|
backup: true
|
||
|
|
mode: "0644"
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
notify:
|
||
|
|
- Reload systemd
|
||
|
|
tags:
|
||
|
|
- systemd
|
||
|
|
- timesyncd
|
||
|
|
- CIS-UBUNTU2004-2.1.1.1
|
||
|
|
- CIS-UBUNTU2004-2.1.1.2
|
||
|
|
|
||
|
|
- name: Stat timesyncd status
|
||
|
|
ansible.builtin.command: systemctl status systemd-timesyncd
|
||
|
|
register: timesyncd_status
|
||
|
|
changed_when: false
|
||
|
|
failed_when: false
|
||
|
|
tags:
|
||
|
|
- systemd
|
||
|
|
- timesyncd
|
||
|
|
- CIS-UBUNTU2004-2.1.1.1
|
||
|
|
- CIS-UBUNTU2004-2.1.1.2
|
||
|
|
|
||
|
|
- name: Stat timedatectl show
|
||
|
|
ansible.builtin.command: timedatectl show
|
||
|
|
register: timedatectl_show
|
||
|
|
changed_when: timedatectl_show.stdout.find('NTPSynchronized=yes') == -1 and timesyncd_status.rc == 0
|
||
|
|
tags:
|
||
|
|
- systemd
|
||
|
|
- timesyncd
|
||
|
|
- CIS-UBUNTU2004-2.1.1.1
|
||
|
|
- CIS-UBUNTU2004-2.1.1.2
|
||
|
|
|
||
|
|
- name: Run timedatectl set-ntp
|
||
|
|
become: true
|
||
|
|
ansible.builtin.command: timedatectl set-ntp true # noqa no-changed-when
|
||
|
|
when: timedatectl_show.stdout.find('NTPSynchronized=yes') == -1 and timesyncd_status.rc == 0
|
||
|
|
tags:
|
||
|
|
- systemd
|
||
|
|
- timesyncd
|
||
|
|
- CIS-UBUNTU2004-2.1.1.2
|