From 602762ef0f749b332464bfc3bee8e311335c3cda Mon Sep 17 00:00:00 2001 From: teacup-on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com> Date: Sat, 14 Feb 2026 17:10:20 +0200 Subject: [PATCH 1/2] Make sure not to run ansible procedure in check mode --- .../aide_periodic_checking_systemd_timer/ansible/shared.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/ansible/shared.yml b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/ansible/shared.yml index ba728ad7d042..36a76ba9f388 100644 --- a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/ansible/shared.yml +++ b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/ansible/shared.yml @@ -42,6 +42,7 @@ enabled: true daemon_reload: true masked: false + when: not ansible_check_mode - name: "{{{ rule_title }}} - Ensure AIDE Service Timer is Enabled" ansible.builtin.systemd: @@ -50,3 +51,4 @@ enabled: true daemon_reload: true masked: false + when: not ansible_check_mode From 1537c1c5b333f02ace6ad573d0dc2522bb99a191 Mon Sep 17 00:00:00 2001 From: teacup-on-rockingchair <315160+teacup-on-rockingchair@users.noreply.github.com> Date: Fri, 20 Feb 2026 10:56:58 +0200 Subject: [PATCH 2/2] Do not issue zypper remove if packet not installed Avoid zypper returning error for non-existing packet and thus breaking the flow of the tests or environment preparation --- shared/macros/10-bash.jinja | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/shared/macros/10-bash.jinja b/shared/macros/10-bash.jinja index 7a92cfd8cdb7..1ca730dc2f79 100644 --- a/shared/macros/10-bash.jinja +++ b/shared/macros/10-bash.jinja @@ -500,7 +500,9 @@ fi {{%- elif pkg_manager == "apt_get" -%}} DEBIAN_FRONTEND=noninteractive apt-get -o DPkg::Lock::Timeout=60 remove -y "{{{ package }}}" {{%- elif pkg_manager == "zypper" -%}} -zypper remove -y "{{{ package }}}" +if rpm -q --quiet \"{{{ package }}}\" ; then + zypper remove -y "{{{ package }}}" +fi {{%- else -%}} {{{ die("Can't generate a remediation for " + pkg_manager) }}} {{%- endif -%}}