2022-08-07 13:37:23 +02:00
|
|
|
---
|
|
|
|
# Copyright (c) Ansible Project
|
|
|
|
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
2020-03-09 10:11:07 +01:00
|
|
|
|
|
|
|
- name: disable userdir module
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: userdir
|
|
|
|
state: absent
|
|
|
|
register: userdir_first_disable
|
|
|
|
|
|
|
|
- name: disable userdir module, second run
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: userdir
|
|
|
|
state: absent
|
|
|
|
register: disable
|
|
|
|
|
2021-07-30 18:07:38 +02:00
|
|
|
- name: ensure community.general.apache2_module is idempotent
|
2020-03-09 10:11:07 +01:00
|
|
|
assert:
|
|
|
|
that:
|
|
|
|
- disable is not changed
|
|
|
|
|
|
|
|
- name: enable userdir module
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: userdir
|
|
|
|
state: present
|
|
|
|
register: enable
|
|
|
|
|
|
|
|
- name: ensure changed on successful enable
|
|
|
|
assert:
|
|
|
|
that:
|
|
|
|
- enable is changed
|
|
|
|
|
|
|
|
- name: enable userdir module, second run
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: userdir
|
|
|
|
state: present
|
|
|
|
register: enabletwo
|
|
|
|
|
2021-07-30 18:07:38 +02:00
|
|
|
- name: ensure community.general.apache2_module is idempotent
|
2020-03-09 10:11:07 +01:00
|
|
|
assert:
|
|
|
|
that:
|
|
|
|
- 'not enabletwo.changed'
|
|
|
|
|
|
|
|
- name: disable userdir module, final run
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: userdir
|
|
|
|
state: absent
|
|
|
|
register: disablefinal
|
|
|
|
|
|
|
|
- name: ensure changed on successful disable
|
|
|
|
assert:
|
|
|
|
that:
|
|
|
|
- 'disablefinal.changed'
|
|
|
|
|
|
|
|
- name: set userdir to original state
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: userdir
|
|
|
|
state: present
|
|
|
|
when: userdir_first_disable is changed
|
|
|
|
|
|
|
|
- name: ensure autoindex enabled
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: autoindex
|
|
|
|
state: present
|
|
|
|
|
|
|
|
- name: Debian/Ubuntu specific tests
|
|
|
|
when: "ansible_os_family == 'Debian'"
|
|
|
|
block:
|
|
|
|
- name: force disable of autoindex # bug #2499
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: autoindex
|
|
|
|
state: absent
|
2023-03-06 23:02:24 +01:00
|
|
|
force: true
|
2020-03-09 10:11:07 +01:00
|
|
|
|
2023-10-29 18:04:44 +01:00
|
|
|
- name: re-enable autoindex
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: autoindex
|
|
|
|
state: present
|
|
|
|
|
2021-07-30 18:07:38 +02:00
|
|
|
# mod_evasive is enabled by default upon the installation, so disable first and enable second, to preserve the config
|
2020-03-09 10:11:07 +01:00
|
|
|
- name: disable evasive module
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: evasive
|
|
|
|
state: absent
|
|
|
|
|
2021-07-30 18:07:38 +02:00
|
|
|
- name: enable evasive module, test https://github.com/ansible/ansible/issues/22635
|
|
|
|
community.general.apache2_module:
|
|
|
|
name: evasive
|
|
|
|
state: present
|
|
|
|
|
2020-03-09 10:11:07 +01:00
|
|
|
- name: use identifier to enable module, fix for https://github.com/ansible/ansible/issues/33669
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: dump_io
|
|
|
|
state: present
|
2023-03-06 23:02:24 +01:00
|
|
|
ignore_errors: true
|
2020-03-09 10:11:07 +01:00
|
|
|
register: enable_dumpio_wrong
|
|
|
|
|
|
|
|
- name: disable dump_io
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: dump_io
|
|
|
|
identifier: dumpio_module
|
|
|
|
state: absent
|
|
|
|
|
|
|
|
- name: use identifier to enable module, fix for https://github.com/ansible/ansible/issues/33669
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: dump_io
|
|
|
|
identifier: dumpio_module
|
|
|
|
state: present
|
|
|
|
register: enable_dumpio_correct_1
|
|
|
|
|
|
|
|
- name: ensure idempotency with identifier
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: dump_io
|
|
|
|
identifier: dumpio_module
|
|
|
|
state: present
|
|
|
|
register: enable_dumpio_correct_2
|
|
|
|
|
|
|
|
- name: disable dump_io
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: dump_io
|
|
|
|
identifier: dumpio_module
|
|
|
|
state: absent
|
|
|
|
|
|
|
|
- assert:
|
|
|
|
that:
|
|
|
|
- enable_dumpio_wrong is failed
|
|
|
|
- enable_dumpio_correct_1 is changed
|
|
|
|
- enable_dumpio_correct_2 is not changed
|
|
|
|
|
|
|
|
- name: disable mpm modules
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: "{{ item }}"
|
|
|
|
state: absent
|
2023-03-06 23:02:24 +01:00
|
|
|
ignore_configcheck: true
|
2020-03-09 10:11:07 +01:00
|
|
|
with_items:
|
|
|
|
- mpm_worker
|
|
|
|
- mpm_event
|
|
|
|
- mpm_prefork
|
|
|
|
|
|
|
|
- name: enabled mpm_event
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: mpm_event
|
|
|
|
state: present
|
2023-03-06 23:02:24 +01:00
|
|
|
ignore_configcheck: true
|
2020-03-09 10:11:07 +01:00
|
|
|
register: enabledmpmevent
|
|
|
|
|
|
|
|
- name: ensure changed mpm_event
|
|
|
|
assert:
|
|
|
|
that:
|
|
|
|
- 'enabledmpmevent.changed'
|
|
|
|
|
|
|
|
- name: switch between mpm_event and mpm_worker
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: "{{ item.name }}"
|
|
|
|
state: "{{ item.state }}"
|
2023-03-06 23:02:24 +01:00
|
|
|
ignore_configcheck: true
|
2020-03-09 10:11:07 +01:00
|
|
|
with_items:
|
|
|
|
- name: mpm_event
|
|
|
|
state: absent
|
|
|
|
- name: mpm_worker
|
|
|
|
state: present
|
|
|
|
|
|
|
|
- name: ensure mpm_worker is already enabled
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: mpm_worker
|
|
|
|
state: present
|
|
|
|
register: enabledmpmworker
|
|
|
|
|
|
|
|
- name: ensure mpm_worker unchanged
|
|
|
|
assert:
|
|
|
|
that:
|
|
|
|
- 'not enabledmpmworker.changed'
|
|
|
|
|
|
|
|
- name: try to disable all mpm modules with configcheck
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: "{{item}}"
|
|
|
|
state: absent
|
|
|
|
with_items:
|
|
|
|
- mpm_worker
|
|
|
|
- mpm_event
|
|
|
|
- mpm_prefork
|
2023-01-14 18:37:33 +01:00
|
|
|
ignore_errors: true
|
2020-03-09 10:11:07 +01:00
|
|
|
register: remove_with_configcheck
|
|
|
|
|
|
|
|
- name: ensure configcheck fails task with when run without mpm modules
|
|
|
|
assert:
|
|
|
|
that:
|
|
|
|
- "{{ item.failed }}"
|
|
|
|
with_items: "{{ remove_with_configcheck.results }}"
|
|
|
|
|
|
|
|
- name: try to disable all mpm modules without configcheck
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: "{{item}}"
|
|
|
|
state: absent
|
2023-03-06 23:02:24 +01:00
|
|
|
ignore_configcheck: true
|
2020-03-09 10:11:07 +01:00
|
|
|
with_items:
|
|
|
|
- mpm_worker
|
|
|
|
- mpm_event
|
|
|
|
- mpm_prefork
|
|
|
|
|
|
|
|
- name: enabled mpm_event to restore previous state
|
2021-07-30 18:07:38 +02:00
|
|
|
community.general.apache2_module:
|
2020-03-09 10:11:07 +01:00
|
|
|
name: mpm_event
|
|
|
|
state: present
|
2023-03-06 23:02:24 +01:00
|
|
|
ignore_configcheck: true
|
2020-03-09 10:11:07 +01:00
|
|
|
register: enabledmpmevent
|