Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't manage SSH ciphers on bullseye #151

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions tasks/ssh_cluster_config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -69,3 +69,12 @@
create: yes
mode: 0644
dest: /root/.ssh/config
state: present
when: pve_ssh_ciphers is defined

- name: Drop PVE-provided ciphers, when undefined
lineinfile:
regexp: "^Ciphers .*"
dest: /root/.ssh/config
state: absent
when: pve_ssh_ciphers is not defined
1 change: 1 addition & 0 deletions vars/debian-bullseye.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,3 +2,4 @@
pve_release_key: proxmox-ve-release-7.x.asc
pve_release_key_id: DD4BA3917E23BF59
pve_ssh_ciphers: "aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],[email protected]"
pve_ceph_repository_line: "deb http://download.proxmox.com/debian/ceph-pacific bullseye main"