# नमूना इन्वेंट्री कॉपी करें
cp examples/inventory/hosts.ini inventory/hosts.ini

# नमूना ansible कॉन्फ़िगरेशन कॉपी करें (वैकल्पिक)
cp examples/ansible.cfg ansible.cfg

[servers]
server1.example.com
server2.example.com ansible_host=192.168.1.50

[servers:vars]
ansible_user=admin
ansible_become=true

ansible all -m ping

ansible-playbook mitigation-playbook.yaml

ansible-playbook mitigation-playbook.yaml

ansible-playbook mitigation-playbook.yaml --limit webservers

ansible-playbook mitigation-playbook.yaml -e "rollback=true"

ansible-playbook mitigation-playbook.yaml --tags rollback -e "rollback=true"

ansible-playbook mitigation-playbook.yaml -e "run_systemd_cleanup=true"

TASK [CVE-2026-31431 Summary (Debian)] ****************************************
ok: [server1] => {
    "msg": [
        "===== CVE-2026-31431 SUMMARY — server1 =====",
        "Action:               apply",
        "Module loaded (pre):  False",
        "Module loaded (post): False",
        "Reboot required:      False"
    ]
}

TASK [Remind operator to reboot (RHEL)] ****************************************
ok: [server2] => {
    "msg": "REMINDER: Kernel args changed. Reboot required to activate mitigation."
}

TASK [CVE-2026-31431 Summary (Red Hat)] ****************************************
ok: [server2] => {
    "msg": [
        "===== CVE-2026-31431 SUMMARY — server2 =====",
        "Action:                   apply",
        "Kernel arg active (pre):  False",
        "Kernel arg active (post): False",
        "Reboot required:          True"
    ]
}

TASK [Remind to reboot if required (Red Hat)] **********************************
ok: [server2] => {
    "msg": "REMINDER: A reboot is required to activate/deactivate the mitigation on this Red Hat-based host."
}

# केवल शमन कार्य चलाएँ
ansible-playbook -i inventory/hosts.ini mitigation-playbook.yaml --tags mitigation

# केवल रोलबैक कार्य चलाएँ
ansible-playbook -i inventory/hosts.ini mitigation-playbook.yaml --tags rollback -e "rollback=true"

# जाँचें कि मॉड्यूल ब्लैकलिस्टेड है या नहीं
cat /etc/modprobe.d/disable-algif.conf

# जाँचें कि मॉड्यूल लोड है या नहीं (कुछ भी वापस नहीं आना चाहिए)
lsmod | grep algif_aead

# जाँचें कि कर्नेल तर्क मौजूद है या नहीं
grep initcall_blacklist /proc/cmdline

# कुछ इस तरह आउटपुट होना चाहिए:
# ... initcall_blacklist=algif_aead_init ...