feat: add role fingerprints to syslog

Feature: Add a fingerprint string to the system log to indicate when the role began
successfully, and when the role finished successfully.  The fingerprint string indicates
the role name, a timestamp, and the platform.

Reason: Users can see when the role was used and if it was used successfully.  This
information from the system log can be collected by log scanners and aggregators
for further analysis.

Result: The role logs fingerprints to the system log.

This also adds a test to check if the fingerprints were written upon a successful
role invocation.

Signed-off-by: Rich Megginson <rmeggins@redhat.com>
This commit is contained in:
Rich Megginson
2026-04-22 10:52:25 -06:00
committed by Richard Megginson
parent 19b462a7f8
commit 659d89dd69
13 changed files with 126 additions and 0 deletions
+6
View File
@@ -5,6 +5,12 @@
when: __aide_required_facts |
difference(ansible_facts.keys() | list) | length > 0
- name: Record role begin fingerprint
sr_fingerprint:
sr_message: >-
begin system_role:aide ansible_version={{ ansible_version.full }}
{{ ansible_facts['distribution'] }}-{{ ansible_facts['distribution_version'] }}
- name: Determine if system is ostree and set flag
when: not __aide_is_ostree is defined
block: