fix(aide): aideinit creates: should check .db not .db.gz on Ubuntu 24
- SHA
1a02f4376d83da89871ed83f09160b60abf3e9ee- Parents
-
ab67f98 - Tree
472e05d
tenseleyflow/shithub
/
1a02f43
Browse files
1 changed file
| Status | File | + | - |
|---|---|---|---|
| M |
deploy/ansible/roles/base/tasks/aide.yml
|
5 | 2 |
deploy/ansible/roles/base/tasks/aide.ymlmodified@@ -53,10 +53,13 @@ | ||
| 53 | 53 | |
| 54 | 54 | - name: AIDE — initialize baseline DB if missing |
| 55 | 55 | # Use creates: so this is a one-shot. Re-baselining is an explicit |
| 56 | - # operator action (runbook), not an Ansible side-effect. | |
| 56 | + # operator action (runbook), not an Ansible side-effect. The DB | |
| 57 | + # path is .db (uncompressed) on Ubuntu 24's aide 0.18 — older | |
| 58 | + # references say .db.gz, but the shipped /etc/aide/aide.conf | |
| 59 | + # writes uncompressed. | |
| 57 | 60 | command: |
| 58 | 61 | cmd: /usr/sbin/aideinit -y -f |
| 59 | - creates: /var/lib/aide/aide.db.gz | |
| 62 | + creates: /var/lib/aide/aide.db | |
| 60 | 63 | |
| 61 | 64 | - name: cron — nightly aide check at 03:30 UTC |
| 62 | 65 | # Slightly after the 03:17 backup so the backup's transient files |