Menu
SkillsMP has collected 62 skills from redhat-cop/rhel-soe-ai. Open a skill to review its source and details.
Showing 40 of 62 collected skills.
Maintains the ansible/roles/accounts_local Ansible role that creates/deletes local users and groups, sets passwords, sudoers entries, supplementary groups, and SSH authorized keys, as part of the Linux SOE. Use when checking or fixing local (non-domain)…
Maintains the ansible/roles/accounts_policy Ansible role that deploys local account, login, PAM, and password-quality configuration (login.defs, pwquality.conf, faillock.conf, limits.conf, authselect profile) on RHEL-family systems as part of the Linux SOE.…
Maintains the ansible/roles/audit_setup Ansible role that installs auditd, deploys an auditd.conf and rules file from role-provided templates, and manages the locked-rules reload/reboot behavior on RHEL-family systems as part of the Linux SOE. Use when…
Maintains the ansible/roles/boot_parameters Ansible role that enables/disables GRUB kernel command-line parameters via grubby, sets the boot timeout and optional bootloader password, and can reboot the host to apply changes, on RHEL-family systems as part of…
Maintains the ansible/roles/certificates Ansible role that manages the system CA trust store (anchors, blocklist, extended-format files) via update-ca-trust, as part of the Linux SOE. Use when checking or fixing trusted/blocked CA certificates.
Maintains the ansible/roles/cron_setup Ansible role that installs cronie, manages /etc/cron.allow and /etc/cron.deny, and declaratively manages crontab entries via ansible.builtin.cron on RHEL-family systems as part of the Linux SOE. Use when checking or…
Maintains the ansible/roles/dns_cache Ansible role that enables or disables local DNS caching via dnsmasq, systemd-resolved, or nscd, as part of the Linux SOE. Use when checking or fixing DNS caching configuration.
Maintains the ansible/roles/domain_ad Ansible role that joins or leaves an Active Directory domain via realmd/adcli and configures sssd/authselect, as part of the Linux SOE. Use when checking or fixing AD domain membership.
Maintains the ansible/roles/etc_hosts Ansible role that fully manages /etc/hosts content (header, self-entry, static entries) and rebuilds initramfs on change, as part of the Linux SOE. Use when checking or fixing /etc/hosts entries.
Maintains the ansible/roles/files_acl Ansible role that applies POSIX ACL entries to paths via ansible.posix.acl, as part of the Linux SOE. Use when checking or fixing filesystem ACLs on specific paths.
Maintains the ansible/roles/files_copy Ansible role that copies files/directories (ansible.builtin.copy) and renders templates (ansible.builtin.template) to arbitrary destinations, as part of the Linux SOE. Use when checking or fixing the content of specific…
Maintains the ansible/roles/files_create Ansible role that creates directories, empty files, and symlinks with specified ownership/mode via ansible.builtin.file, as part of the Linux SOE. Use when checking or fixing the existence/permissions of specific paths.
Maintains the ansible/roles/files_fetch Ansible role that pulls files from managed hosts back to the control node via ansible.builtin.fetch, as part of the Linux SOE. Use when checking or fixing which remote files/directories should be collected centrally.
Maintains the ansible/roles/files_get Ansible role that downloads files onto managed hosts over the network via ansible.builtin.get_url, as part of the Linux SOE. Use when checking or fixing files that should be present via URL download.
Maintains the ansible/roles/files_properties Ansible role that sets ownership/mode/other file-module properties on existing paths via ansible.builtin.file, as part of the Linux SOE. Use when checking or fixing ownership or permissions on specific files.
Maintains the ansible/roles/files_remove Ansible role that removes files/directories by exact path or shell glob, as part of the Linux SOE. Use when checking or fixing which files/directories should be absent — including internally by other roles such as…
Maintains the ansible/roles/files_unarchive Ansible role that extracts archives to a destination via ansible.builtin.unarchive, as part of the Linux SOE. Use when checking or fixing extracted-archive content on a host.
Maintains the ansible/roles/firewall Ansible role that provides basic firewalld enable/disable, default-zone, and open-ports/services management, as part of the Linux SOE. Use when checking or fixing basic firewall state — for more complete firewall…
Maintains the ansible/roles/guest_agent Ansible role that detects the hypervisor a system runs under (Azure/Hyper-V, KVM/QEMU, Nutanix AHV, VMware) via Ansible facts and installs/enables the matching guest agent while removing others, as part of the Linux…
Maintains the ansible/roles/ima_evm_setup Ansible role that enables or disables IMA/EVM file-integrity appraisal via a signed policy file, as part of the Linux SOE. Use when checking or fixing IMA/EVM state. Only applies on RHEL 9.7+; no-ops (with a…
Maintains the ansible/roles/ipv6_setup Ansible role that enables/disables IPv6 via sysctl, the ipv6.disable grubby boot parameter, and NetworkManager/ifcfg connection files, and reboots on change, as part of the Linux SOE. Use when checking or fixing IPv6…
Maintains the ansible/roles/motd_issue Ansible role that deploys /etc/motd (or /etc/motd.d on RHEL 9+) and /etc/issue.d + /etc/issue.net from role-provided templates on RHEL-family systems as part of the Linux SOE. Use when checking or standardizing login…
Maintains the ansible/roles/mount_setup Ansible role that enables or disables filesystem mounts (local or NFS/CIFS) via /etc/fstab, as part of the Linux SOE. Use when checking or fixing mount/fstab state.
Maintains the ansible/roles/multipath_setup Ansible role that installs device-mapper-multipath and deploys /etc/multipath.conf and bindings, restarting or rebooting on change, as part of the Linux SOE. Use when checking or fixing multipath configuration.
Maintains the ansible/roles/packages_install Ansible role that installs a baseline package set via dnf, as part of the Linux SOE. Use when checking or fixing the baseline troubleshooting/utility package set — note this is distinct from the…
Maintains the ansible/roles/packages_remove Ansible role that removes a denylist of packages (and optionally unneeded leaf packages) via dnf, as part of the Linux SOE. Use when checking or fixing which packages should be absent.
Maintains the ansible/roles/packages_verify Ansible role that runs rpm-level package verification (missing files, modified content) against a chosen package list, as part of the Linux SOE. Use when checking for tampered or incomplete package installations.
Maintains the ansible/roles/performance_tuning Ansible role that sets the active tuned profile, as part of the Linux SOE. Use when checking or fixing the system's tuned performance profile.
Maintains the ansible/roles/repository_setup Ansible role that manages yum.repos.d files and Red Hat Subscription Management (RHSM) registration/repo enablement, as part of the Linux SOE. Use when checking or fixing repo files, RHSM subscription state, or…
Maintains the ansible/roles/rescue_image Ansible role that enables or disables kernel rescue image generation, as part of the Linux SOE. Use when checking or fixing whether a rescue image is (re)built on kernel install.
Maintains the ansible/roles/resolver_configuration Ansible role that manages how /etc/resolv.conf is populated (via NetworkManager, direct write, symlink, or left alone), as part of the Linux SOE. Use when checking or fixing DNS resolver configuration — pairs…
Maintains the ansible/roles/root_password Ansible role that sets the root account password, as part of the Linux SOE. Use when checking or fixing the root password.
Maintains the ansible/roles/scap_compliance Ansible role that runs oscap against a chosen OpenSCAP profile (default cis) and can auto-remediate findings, as part of the Linux SOE. Use when checking or fixing OpenSCAP/SCAP compliance.
Maintains the ansible/roles/scap_satellite Ansible role that runs foreman_scap_client against Satellite/Capsule-defined compliance policies, as part of the Linux SOE. Use when checking OpenSCAP compliance reported through Satellite rather than run locally…
Maintains the ansible/roles/sebooleans Ansible role that enables/disables specific persistent SELinux booleans, as part of the Linux SOE. Use when checking or fixing SELinux boolean state.
Maintains the ansible/roles/security_hardening Ansible role that verifies Secure Boot/FIPS state, sets kernel lockdown mode, SELinux mode, the system crypto policy, and SCP protocol availability, as part of the Linux SOE. Use when checking or fixing these…
Maintains the ansible/roles/service_state Ansible role that masks/unmasks, enables/disables, and restarts/reloads systemd units by declarative lists, as part of the Linux SOE. Use when checking or fixing which services should be running, stopped, or masked.
Maintains the ansible/roles/shell_profile Ansible role that deploys a shell profile template, as part of the Linux SOE. Use when checking or fixing the system-wide shell profile.
Maintains the ansible/roles/splunk_forwarder Ansible role that configures the Splunk universal forwarder's deployment-server pointer and local splunk user, as part of the Linux SOE. Use when checking or fixing Splunk forwarder deployment-server configuration.
Maintains the ansible/roles/sshd_configuration Ansible role that manages sshd_config options declaratively, resets config to RPM defaults, and validates every edit with sshd -t before applying, as part of the Linux SOE. Use when checking or fixing SSH daemon…