Add exception in sysctl task (dev-sec#240)

No need apply sysctl in docker and openvz containers. Signed-off-by: Oleg Kupriyanov <[email protected]>
divialth · Oct 28, 2019 · 3e14d45 · 3e14d45
1 parent d609de1
commit 3e14d45
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tasks/sysctl.yml b/tasks/sysctl.yml
@@ -49,6 +49,7 @@
     reload: yes
     ignoreerrors: yes
   with_dict: '{{ sysctl_config }}'
+  when: ansible_virtualization_type != 'docker' and ansible_virtualization_type != 'openvz'
 
 - name: Change various sysctl-settings on rhel6-hosts or older, look at the sysctl-vars file for documentation
   sysctl: