27.2. Deploying systemd drop-in files by using the systemd RHEL system role

Procedure

1. Create a Jinja2 template with the systemd drop-in file contents. For example, create the ~/sshd.service.conf.j2 file with the following content:

   {{ ansible_managed | comment }}
   [Unit]
   After=
   After=network.target sshd-keygen.target network-online.target

   This drop-in file specifies the same units in the After setting as the original /usr/lib/systemd/system/sshd.service file and, additionally, network-online.target. With this extra target, sshd starts after the network interfaces are activated and have IP addresses assigned. This ensures that sshd can bind to all IP addresses.

   Use the <name>.<unit_type>.conf.j2 convention for the file name. For example, to add a drop-in for the sshd.service unit, you must name the file sshd.service.conf.j2. Place the file in the same directory as the playbook.

2. Create a playbook file, for example, ~/playbook.yml, with the following content:

   ---
   - name: Managing systemd services
     hosts: managed-node-01.example.com
     tasks:
       - name: Deploy an sshd.service systemd drop-in file
         ansible.builtin.include_role:
           name: redhat.rhel_system_roles.systemd
         vars:
            systemd_dropins:
              - sshd.service.conf.j2

   The settings specified in the example playbook include the following:

   systemd_dropins: <list_of_files>

   Specifies the names of the drop-in files to deploy in YAML list format.

   For details about all variables used in the playbook, see the /usr/share/ansible/roles/rhel-system-roles.systemd/README.md file on the control node.

3. Validate the playbook syntax:

   $ ansible-playbook --syntax-check ~/playbook.yml

   Note that this command only validates the syntax and does not protect against a wrong but valid configuration.

4. Run the playbook:

   $ ansible-playbook ~/playbook.yml