Merge pull request #206 from jLemmings/main

Fix CIS hardening rke2-cis-sysctl.conf path

Author: MonolithProjects

tasks/cis.yml

@@ -15,7 +15,7 @@
 
 - name: Copy systemctl config file for kernel hardening
   ansible.builtin.copy:
-    src: /usr/local/share/rke2/rke2-cis-sysctl.conf
+    src: "{{ '/usr/local/share/rke2/rke2-cis-sysctl.conf' if usr_local.stat.writeable == True else '/opt/rke2/share/rke2/rke2-cis-sysctl.conf' }}"
     dest: /etc/sysctl.d/60-rke2-cis.conf
     mode: 0600
     remote_src: true