openstack/ansible-hardening
Code Issues Proposed changes

Extend timeout for RPM verification

Browse Source 
For systems with many packages deployed or heavy loaded environments
rpm verification takes the way more time then 5 minutes ending up in
corrupted database of the rpm packages. So we set limit to 1 hour
and extending amount of retries to wait for result to match the async
timeout

Change-Id: I30d29630214914bea99fc7fd66afa3218705d733
Closes-Bug: #1921292
This commit is contained in:
Dmitriy Rabotyagov 2021-03-25 09:47:35 +02:00
parent 4cdc2de73c
commit e4b55822cf
3 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/rhel7stig/async_tasks.yml
View File

@ -22,7 +22,7 @@
failed_when: False failed_when: False
changed_when: False changed_when: False
register: rpmverify_task register: rpmverify_task
async: 300 async: 3600
poll: 0 poll: 0
when: when:
- not check_mode | bool - not check_mode | bool

3
tasks/rhel7stig/rpm.yml
View File

@ -20,7 +20,8 @@
changed_when: False changed_when: False
register: job_result register: job_result
until: job_result.finished until: job_result.finished
retries: 30 retries: 360
delay: 10
when: when:
- rpmverify_task is not skipped - rpmverify_task is not skipped
tags: tags:

3
tasks/rhel7stig/zypper.yml
View File

@ -21,7 +21,8 @@
changed_when: False changed_when: False
register: job_result register: job_result
until: job_result.finished until: job_result.finished
retries: 30 retries: 360
delay: 10
when: when:
- rpmverify_task is not skipped - rpmverify_task is not skipped
tags: tags: