Spectre / Meltdown Checker

This guide helps you install a script to check for [Spectre] and [Meltdown] vulnerabilities in your systems.

Requirements

No special requirements needed.

Role Variables

You can set this variable:

spectre_meltdown_check_disabled: true

Dependencies

There are no dependencies.

Example Playbook

Here is how you can use it in a playbook:

- hosts: servers
  roles:
  - { role: SimpliField.spectre-meltdown-checker }

Running by Variant

To check for different variants of Spectre and Meltdown, use this setup:

- hosts: servers
  roles:
  - { role: SimpliField.spectre-meltdown-checker }

- hosts: servers
  tasks:
  - name: Check for Spectre/Meltdown variant 1
    shell: spectre-meltdown-checker --variant 1 > /dev/null
    register: spectre_meltdown_checker_result
    changed_when: false
    failed_when: spectre_meltdown_checker_result.rc != 0
    tags:
    - spectre
    - meltdown

  - name: Check for Spectre/Meltdown variant 2
    shell: spectre-meltdown-checker --variant 2 > /dev/null
    register: spectre_meltdown_checker_result
    changed_when: false
    failed_when: spectre_meltdown_checker_result.rc != 0
    tags:
    - spectre
    - meltdown

  - name: Check for Spectre/Meltdown variant 3
    shell: spectre-meltdown-checker --variant 3 > /dev/null
    register: spectre_meltdown_checker_result
    changed_when: false
    failed_when: spectre_meltdown_checker_result.rc != 0
    tags:
    - spectre
    - meltdown

License

This project is licensed under the BSD license.

You can read more about Spectre and Meltdown.