ansible-lockdown/RHEL6-STIG

Certain tasks require target machines to have Internet access

Dan0maN opened this issue · 3 comments

There are certain tasks that require the target machine to have Internet access. A good example is V-38476 which pulls down the GPG signature from a pre-defined URL.

I would suggest having a way for the user to optionally supply the required files or override the gpg_key_url variable in order to be able to run this role against machines in 'air-gapped' sites.

This is already possible simply by overriding the default value of gpg_key_url to an internal URL or a local file.

Oh, I see. That variable is set via set_fact. Yuck. Let me fix that.

Fixed by #108