From c8cf3eb3a14d976f49c325f29b404c88c5339d0b Mon Sep 17 00:00:00 2001
From: Beth <ejparker@actcur.com>
Date: Fri, 28 Mar 2025 16:29:59 -0500
Subject: [PATCH] disable selinux

---
 files/replicate.sh | 4 +++-
 tasks/main.yml     | 4 ++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/files/replicate.sh b/files/replicate.sh
index 959ef49..e312d01 100644
--- a/files/replicate.sh
+++ b/files/replicate.sh
@@ -9,4 +9,6 @@ fi
 
 ipa-client-install -U -p admin -w $ADMIN_PASSWORD --server=ipa-replica2.actcur.com --domain actcur.com  --mkhomedir  --force-join
 
-ipa-replica-install --skip-mem-check
\ No newline at end of file
+ipa-replica-install --skip-mem-check
+
+ipa-ca-install
\ No newline at end of file
diff --git a/tasks/main.yml b/tasks/main.yml
index 50564dd..51e024e 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -25,6 +25,10 @@
     src: files/replicate.sh
     dest: /scripts/replicate.sh
 
+- name: Disable SELinux
+  ansible.posix.selinux:
+    state: disabled
+    
 # create symlink for certs if letsencrypt is set up
 - name: check if letsencrypt is set up
   ansible.builtin.command: '[ -d "/etc/letsencrypt/" ]'