)]}'
{"playbooks/roles/gerrit/tasks/main.yaml":[{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"2af1bff3ad2232bd101fc068a4923cd1dc7447bf","unresolved":true,"context_lines":[{"line_number":252,"context_line":"    name: \u0027{{ item.key }}\u0027"},{"line_number":253,"context_line":"    path: \u0027/home/gerrit2/.ssh/known_hosts\u0027"},{"line_number":254,"context_line":"  loop: \u0027{{ gerrit_known_hosts_keys | dict2items }}\u0027"},{"line_number":255,"context_line":"  when: gerrit_known_hosts_keys is defined"},{"line_number":256,"context_line":""},{"line_number":257,"context_line":"- name: Install apache2"},{"line_number":258,"context_line":"  apt:"}],"source_content_type":"text/x-yaml","patch_set":7,"id":"6dea6dcb_af2a2bac","line":255,"updated":"2021-08-04 00:05:17.000000000","message":"I think I\u0027d like to see this use with_inventory_hostnames to loop over the gitea servers automatically?  like we do in the backup role\n\n - name: Accept hostkey of backup server\n   known_hosts:\n     state: present\n     key: \u0027{{ item }} ssh-ed25519 {{ hostvars[item][\"ansible_ssh_host_key_ed25519_public\"] }}\u0027\n     name: \u0027{{ item }}\u0027\n   with_inventory_hostnames: borg-backup-server\n\ni guess it doesn\u0027t hurt to add to root but i\u0027m not sure that is necessary","commit_id":"f6a0bf7be5b1c0f2739580394a231f57ce78b642"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"7b200a5b9f92ebb10bdf6c3dfdf9a2342d252807","unresolved":true,"context_lines":[{"line_number":252,"context_line":"    name: \u0027{{ item.key }}\u0027"},{"line_number":253,"context_line":"    path: \u0027/home/gerrit2/.ssh/known_hosts\u0027"},{"line_number":254,"context_line":"  loop: \u0027{{ gerrit_known_hosts_keys | dict2items }}\u0027"},{"line_number":255,"context_line":"  when: gerrit_known_hosts_keys is defined"},{"line_number":256,"context_line":""},{"line_number":257,"context_line":"- name: Install apache2"},{"line_number":258,"context_line":"  apt:"}],"source_content_type":"text/x-yaml","patch_set":7,"id":"05e0552f_d2b1ebdb","line":255,"in_reply_to":"03a59cb9_3837a41b","updated":"2021-08-04 22:27:50.000000000","message":"\u003e The problem with using this system is that ansible only collects facts for the port 22 sshd and not the port 222 sshd that we push to.\n\nAhh of course.  I guess we could do all sorts of things to grab these from custom parsers to as you say keeping the whole key in Ansible.  But I agree this isn\u0027t worth a ton of effort","commit_id":"f6a0bf7be5b1c0f2739580394a231f57ce78b642"},{"author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"change_message_id":"6482099fdbe7b647060b4a3072c31b24361482c4","unresolved":true,"context_lines":[{"line_number":252,"context_line":"    name: \u0027{{ item.key }}\u0027"},{"line_number":253,"context_line":"    path: \u0027/home/gerrit2/.ssh/known_hosts\u0027"},{"line_number":254,"context_line":"  loop: \u0027{{ gerrit_known_hosts_keys | dict2items }}\u0027"},{"line_number":255,"context_line":"  when: gerrit_known_hosts_keys is defined"},{"line_number":256,"context_line":""},{"line_number":257,"context_line":"- name: Install apache2"},{"line_number":258,"context_line":"  apt:"}],"source_content_type":"text/x-yaml","patch_set":7,"id":"03a59cb9_3837a41b","line":255,"in_reply_to":"6dea6dcb_af2a2bac","updated":"2021-08-04 21:23:28.000000000","message":"The problem with using this system is that ansible only collects facts for the port 22 sshd and not the port 222 sshd that we push to.\n\nGitea autogenerates these keyfiles if they are not present on startup and bind mounts them via /var/gitea/data/ssh:/data/ssh. We could possibly manage those keys liek we are managing the review keys and then pass them around that way. For now though the simplest thing is probably to just include what is already there here so that replication will work reliably?\n\nI agree it isn\u0027t necessary for root but I Figured it wouldn\u0027t hurt to have them there as well and it simplifies the input data here.","commit_id":"f6a0bf7be5b1c0f2739580394a231f57ce78b642"}]}