{"push_id":1118134191,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"569b9fdd4fc77831ab97f801598eb70f1dd4da86","before":"7904b929debbeb5608441ff41322343608aeecc4","commits":[{"sha":"b9649a9dbb79ba4f43e8c227280bcbaf76d5ea9b","author":{"email":"d33c80bc45d65303e33ca83108a9952b745af9ef@marc-abramowitz.com","name":"Marc Abramowitz"},"message":"Make capabilities task not always report changed\n\nI noticed that whenever I ran my playbook to set up Vault that Ansible was always reporting that this particular task had changed something -- e.g.:\r\n\r\n```\r\nTASK [Give vault access to mlock syscall] **************************************\r\ntask path: /var/ACMe/vault_cap.yml:3\r\nchanged: [localhost] => {\"changed\": true, \"msg\": \"capabilities changed\", \"state\": \"present\", \"stdout\": \"\", \"stdout_lines\": []}\r\n```\r\n\r\nI did some experimenting and it appears that the extra `=` sign is what makes it do this. With this change, I get the following on an already provisioned system:\r\n\r\n```\r\nTASK [vault : Give vault access to mlock syscall] ******************************\r\ntask path: /var/ACMe/roles/vault/tasks/main.yml:47\r\nok: [localhost] => {\"changed\": false, \"state\": \"present\"}\r\n```\r\n\r\n```\r\n$ getcap /usr/local/bin/vault\r\n/usr/local/bin/vault = cap_ipc_lock+ep\r\n```\r\n\r\nIt also sets the capability properly on a system where the capability was present. For example, I can do:\r\n\r\n```\r\n$ sudo setcap cap_ipc_lock+e /usr/local/bin/vault\r\n$ getcap /usr/local/bin/vault\r\n/usr/local/bin/vault =\r\n$ sudo ansible-playbook site.yaml --tags=vault -vv\r\n...\r\nTASK [vault : Give vault access to mlock syscall] ******************************\r\ntask path: /var/ACMe/roles/vault/tasks/main.yml:47\r\nchanged: [localhost] => {\"changed\": true, \"msg\": \"capabilities changed\", \"state\": \"present\", \"stdout\": \"\", \"stdout_lines\": []}\r\n\r\n$ getcap /usr/local/bin/vault\r\n/usr/local/bin/vault = cap_ipc_lock+ep\r\n```\r\n\r\nso it works properly in both cases.","distinct":true,"url":"https://api.github.com/repos/kbrebanov/ansible-vault/commits/b9649a9dbb79ba4f43e8c227280bcbaf76d5ea9b"},{"sha":"569b9fdd4fc77831ab97f801598eb70f1dd4da86","author":{"email":"f5dcd548abb3709eae960c323c3f47056a90c8c5@users.noreply.github.com","name":"Kevin Brebanov"},"message":"Merge pull request #8 from msabramo/patch-1\n\nMake capabilities task not always report changed","distinct":true,"url":"https://api.github.com/repos/kbrebanov/ansible-vault/commits/569b9fdd4fc77831ab97f801598eb70f1dd4da86"}]}