Spectre / Meltdown 检查工具

安装一个脚本来检查 [spectre] / [meltdown] 漏洞。

要求

没有特别要求

角色变量

spectre_meltdown_check_disabled: true

依赖

没有依赖

示例剧本

- hosts: servers
  roles:
  - { role: SimpliField.spectre-meltdown-checker }

按变种运行

- hosts: servers
  roles:
  - { role: SimpliField.spectre-meltdown-checker }

- hosts: servers
  tasks:
  - name: 检查 spectre / meltdown 变种 1
    shell: spectre-meltdown-checker --variant 1 > /dev/null
    register: spectre_meltdown_checker_result
    changed_when: false
    failed_when: spectre_meltdown_checker_result.rc != 0
    tags:
    - spectre
    - meltdown
  - name: 检查 spectre / meltdown 变种 2
    shell: spectre-meltdown-checker --variant 2 > /dev/null
    register: spectre_meltdown_checker_result
    changed_when: false
    failed_when: spectre_meltdown_checker_result.rc != 0
    tags:
    - spectre
    - meltdown
  - name: 检查 spectre / meltdown 变种 3
    shell: spectre-meltdown-checker --variant 3 > /dev/null
    register: spectre_meltdown_checker_result
    changed_when: false
    failed_when: spectre_meltdown_checker_result.rc != 0
    tags:
    - spectre
    - meltdown

许可证

BSD

spectre meltdown