From f613bf4bd6e6abd7c829d65608b81436df485893 Mon Sep 17 00:00:00 2001 From: Philipp Boenninghausen Date: Tue, 25 Feb 2025 15:36:26 +0100 Subject: [PATCH 1/2] Unpin attacker package versions --- .../roles/external_mail_handler/tasks/main.yml | 18 +----------------- .../ansible/roles/grc/defaults/main.yml | 2 -- provisioning/ansible/roles/grc/tasks/main.yml | 2 +- 3 files changed, 2 insertions(+), 20 deletions(-) delete mode 100644 provisioning/ansible/roles/grc/defaults/main.yml diff --git a/provisioning/ansible/roles/external_mail_handler/tasks/main.yml b/provisioning/ansible/roles/external_mail_handler/tasks/main.yml index 44a8a8b..578cf90 100644 --- a/provisioning/ansible/roles/external_mail_handler/tasks/main.yml +++ b/provisioning/ansible/roles/external_mail_handler/tasks/main.yml @@ -4,27 +4,11 @@ # Additionally, creates a logrotate config file for logs # -- name: Add Kali Linux archive repository manually - copy: - dest: /etc/apt/sources.list.d/kali-archive.list - content: "deb [trusted=yes] http://old.kali.org/kali 2024.4 main contrib non-free" - -- name: Update apt cache ignoring signature verification - shell: apt-get update -o Acquire::AllowInsecureRepositories=true -o Acquire::AllowDowngradeToInsecureRepositories=true - - name: Install aiosmtpd (requirement) globally apt: name: python3-aiosmtpd=1.4.6-3 state: present - allow_downgrade: yes - -- name: Remove Kali Linux archive repository after installing required packages - apt_repository: - repo: "deb http://old.kali.org/kali 2024.4 main contrib non-free" - state: absent - -- name: Update apt cache after removing repository - shell: apt-get update + update_cache: yes - name: "Create script directory {{ script_dir }}" file: diff --git a/provisioning/ansible/roles/grc/defaults/main.yml b/provisioning/ansible/roles/grc/defaults/main.yml deleted file mode 100644 index e8672e0..0000000 --- a/provisioning/ansible/roles/grc/defaults/main.yml +++ /dev/null @@ -1,2 +0,0 @@ ---- -grc_version: "1.13.1-1" diff --git a/provisioning/ansible/roles/grc/tasks/main.yml b/provisioning/ansible/roles/grc/tasks/main.yml index a29d03e..6efdae0 100644 --- a/provisioning/ansible/roles/grc/tasks/main.yml +++ b/provisioning/ansible/roles/grc/tasks/main.yml @@ -2,6 +2,6 @@ - name: Install grc apt: - name: grc={{ grc_version }} + name: grc state: present update_cache: yes From 6a0c9c0ef274b3eab21fee1cf80f7ee6353a5b69 Mon Sep 17 00:00:00 2001 From: Philipp Boenninghausen Date: Tue, 25 Feb 2025 16:57:28 +0100 Subject: [PATCH 2/2] Unpin aiosmtpd --- provisioning/ansible/roles/external_mail_handler/tasks/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/provisioning/ansible/roles/external_mail_handler/tasks/main.yml b/provisioning/ansible/roles/external_mail_handler/tasks/main.yml index 578cf90..2ae8276 100644 --- a/provisioning/ansible/roles/external_mail_handler/tasks/main.yml +++ b/provisioning/ansible/roles/external_mail_handler/tasks/main.yml @@ -6,7 +6,7 @@ - name: Install aiosmtpd (requirement) globally apt: - name: python3-aiosmtpd=1.4.6-3 + name: python3-aiosmtpd state: present update_cache: yes