Ansible: change the sysctl module fqcn for rhel7 product

[vojtapolasek]

Description:

• in case the full fqcn for sysctl module is used, use the ansible.builtin.sysctl when building for rhel7 product

Rationale:

• the version of Ansible shipped with RHEL 7 contains modules before the ansible.posix started being used

• Fixes ansible.posix is not found RHEL 7 #11460

Review Hints:

• build the rhel7 product
• provision RHEL 7 system
• oscap xccdf generate fix --fix-type ansible--output ansible.yml --profile '(all)' ssg-rhel7-ds.xml
• ansible-playbook --syntax-check ansible.yml

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

rhel7 (from CTF) Environment (using Fedora as testing environment)

Fedora Testing Environment

Oracle Linux 8 Environment

[github-actions]

This datastream diff is auto generated by the check Compare DS/Generate Diff

Click here to see the full diff

ansible remediation for rule 'xccdf_org.ssgproject.content_rule_set_nftables_loopback_traffic' differs.
--- xccdf_org.ssgproject.content_rule_set_nftables_loopback_traffic
+++ xccdf_org.ssgproject.content_rule_set_nftables_loopback_traffic
@@ -54,7 +54,7 @@
   - set_nftables_loopback_traffic
 
 - name: Check sysctl value of net.ipv6.conf.all.disable_ipv6
-  ansible.posix.sysctl:
+  ansible.builtin.sysctl:
     name: net.ipv6.conf.all.disable_ipv6
     state: present
     value: '1'
@@ -72,7 +72,7 @@
   - set_nftables_loopback_traffic
 
 - name: Check sysctl value of net.ipv6.conf.default.disable_ipv6
-  ansible.posix.sysctl:
+  ansible.builtin.sysctl:
     name: net.ipv6.conf.default.disable_ipv6
     state: present
     value: '1'

[codeclimate]

Code Climate has analyzed commit cf23bd5 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 58.5% (0.0% change).

View more on Code Climate.

[Mab879]

/packit retest-failed

[Mab879]

Automatus failures can be waived as the failures are on clean up.