.The `sshd` RHEL System Role can be managed through `/etc/ssh/sshd_config`
The `sshd` RHEL System Role applied to a RHEL 9 managed node places the SSHD configuration in a drop-in directory (`/etc/ssh/sshd_config.d/00-ansible_system_role.conf` by default). Previously, any changes to the `/etc/ssh/sshd_config` file overwrote the default values in `00-ansible_system_role.conf`. With this update, you can manage SSHD by using `/etc/ssh/sshd_config` instead of `00-ansible_system_role.conf` while preserving the system default values in `00-ansible_system_role.conf`.
Description of problem:
The sshd RHEL System Role, when run on a RHEL 9 managed node, by default places the configuration in /etc/ssh/sshd_config.d/00-ansible_system_role.conf. Customers should be able to optionally manage the /etc/ssh/sshd_config file on RHEL 9 instead of using 00-ansible_system_role.conf
Version-Release number of selected component (if applicable):
RHEL 9 beta
How reproducible:
Every time
Steps to Reproduce:
1. Run playbook similar to this on RHEL 9 beta:
- hosts: localhost
become: true
roles:
- role: redhat.rhel_system_roles.sshd
vars:
sshd_config_file: /etc/ssh/sshd_config
sshd_skip_defaults: false
sshd:
PermitRootLogin: no
Actual results:
Generated /etc/ssh/sshd_config file:
# cat /etc/ssh/sshd_config
#
# Ansible managed
#
PermitRootLogin no
Expected results:
I would expect the role to populate the sshd_config file with the RHEL 9 default sshd_config settings, plus the PermitRootLogin setting that I specified.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (rhel-system-roles bug fix and enhancement update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHEA-2022:8117
Description of problem: The sshd RHEL System Role, when run on a RHEL 9 managed node, by default places the configuration in /etc/ssh/sshd_config.d/00-ansible_system_role.conf. Customers should be able to optionally manage the /etc/ssh/sshd_config file on RHEL 9 instead of using 00-ansible_system_role.conf Version-Release number of selected component (if applicable): RHEL 9 beta How reproducible: Every time Steps to Reproduce: 1. Run playbook similar to this on RHEL 9 beta: - hosts: localhost become: true roles: - role: redhat.rhel_system_roles.sshd vars: sshd_config_file: /etc/ssh/sshd_config sshd_skip_defaults: false sshd: PermitRootLogin: no Actual results: Generated /etc/ssh/sshd_config file: # cat /etc/ssh/sshd_config # # Ansible managed # PermitRootLogin no Expected results: I would expect the role to populate the sshd_config file with the RHEL 9 default sshd_config settings, plus the PermitRootLogin setting that I specified.