diff --git a/thinlinc/tasks/main.yml b/thinlinc/tasks/main.yml index 054630f..e9a3ce5 100644 --- a/thinlinc/tasks/main.yml +++ b/thinlinc/tasks/main.yml @@ -39,3 +39,20 @@ regexp: '^AUTHENTICATION_METHOD=' line: "AUTHENTICATION_METHOD=kerberos" when: kerberos_realm is defined + +- name: Check if global known_hosts is fond + ansible.builtin.stat: + path: /etc/ssh/ssh_known_hosts + register: result + check_mode: false + +- name: Link global known_hosts + ansible.builtin.file: + dest: /opt/thinlinc/etc/ssh_known_hosts + src: /etc/ssh/ssh_known_hosts + state: link + owner: root + group: "{{ ansible_wheel }}" + follow: false + force: true + when: result.stat.exists