disable systemd-journal-remote

Signed-off-by: Thomas Sjögren <[email protected]>
konstruktoid · Jan 15, 2024 · 9271db1 · 9271db1
1 parent 74c88f6
commit 9271db1
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/tasks/journalconf.yml b/tasks/journalconf.yml
@@ -17,6 +17,24 @@
     - CIS-UBUNTU2004-4.2.2.2
     - CIS-UBUNTU2004-4.2.2.3
 
+- name: Disable systemd-journal-remote
+  become: true
+  ansible.builtin.systemd:
+    name: "{{ item }}"
+    state: stopped
+    enabled: false
+    masked: true
+  loop:
+    - systemd-journal-remote.socket
+    - systemd-journal-remote.service
+  register: mask_journal_remote
+  failed_when:
+    - mask_journal_remote is not success
+    - not "Could not find the requested service" in mask_journal_remote.msg
+  tags:
+    - systemd
+    - journald
+
 - name: Configure logrotate(8)
   become: true
   ansible.builtin.template: