feat: Add VFIO binding script and update playbook for enhanced virtualization support

ansible/roles/cis/tasks/password.yml

@@ -135,6 +135,14 @@
         - password-auth
         - pam
 
+    - name: Check if sssd-shadowutils exists
+      ansible.builtin.stat:
+        path: /etc/pam.d/sssd-shadowutils
+      register: sssd_shadowutils
+      tags:
+        - sssd-shadowutils
+        - pam
+
     - name: Remove nullok from sssd-shadowutils
       become: true
       ansible.builtin.replace:
@@ -143,6 +151,7 @@
         mode: "0644"
         owner: root
         group: root
+      when: sssd_shadowutils.stat.exists
       tags:
         - sssd-shadowutils
         - pam

ansible/roles/cis/tasks/sshconfig.yml

@@ -12,7 +12,7 @@
 
 - name: Set ssh version as fact
   ansible.builtin.set_fact:
-    ssh_installed_version: "{{ ssh_version.stderr | regex_search('^OpenSSH_([0-9+].[0-9]+)', '\\1') | join('.') | float }}" # noqa jinja[spacing]
+    ssh_installed_version: "{{ ssh_version.stderr | regex_search('^OpenSSH_([0-9]+.[0-9]+).', '\\1') | join('.') | float }}" # noqa jinja[spacing]
   when: ssh_version.stderr != ""
   tags:
     - roles::cis::sshd