Copy Fail Ansible collection

Table of Contents

1. Description
2. Usage
3. Development
4. Contributors

Description

Ansible collection that mitigate Copy Fail on Debian-based Linux distributions.

The collection provides three roles:

Role	Purpose
detection	Detects whether the system is vulnerable to CVE-2026-31431 and exposes Ansible facts (detection_copy_fail_vulnerable, detection_copy_fail_patched, detection_copy_fail_mitigated, detection_copy_fail_protected)
mitigation	Disables the algif_aead kernel module and drops the page cache to block the attack vector without a reboot
reactivation	Restores algif_aead after a patched kernel has been installed and the system rebooted

Usage

    ansible-galaxy collection install soli.copy_fail

You can also include it in a requirements.yml file and install it via ansible-galaxy collection install -r requirements.yml using the format:

collections:
  - name: soli.copy_fail

To upgrade the collection to the latest available version, run the following command:

ansible-galaxy collection install soli.copy_fail --upgrade

You can also install a specific version of the collection, for example, if you need to downgrade when something is broken in the latest version (please report an issue in this repository). Use the following syntax where X.Y.Z can be any available version:

ansible-galaxy collection install soli.copy_fail:==X.Y.Z

See Ansible Using collections for more details.

Development

Solution Libre's repositories are open projects, and community contributions are essential for keeping them great.

Fork this repo on our GitLab.

Contributors

The list of contributors can be found at: https://usine.solution-libre.fr/ansible/copy-fail/-/graphs/main.