add testing for OpenBSD and FreeBSD (#642)

* add testing for OpenBSD and FreeBSD Signed-off-by: Martin Schurz <[email protected]> * make python work Signed-off-by: Martin Schurz <[email protected]> * remove jinja template ... Signed-off-by: Martin Schurz <[email protected]> * make verify work Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * use right vm name for connect Signed-off-by: Martin Schurz <[email protected]> * add a bit of documentation Signed-off-by: Martin Schurz <[email protected]> * remove sudo Signed-off-by: Martin Schurz <[email protected]> * add weird OpenSBD workaround Signed-off-by: Martin Schurz <[email protected]> * make verify playbook more consistent Signed-off-by: Martin Schurz <[email protected]> * rename nonlinux to BSD Signed-off-by: Martin Schurz <[email protected]> * use openbsd7 for testing Signed-off-by: Martin Schurz <[email protected]> * correct use openbsd7 everywhere Signed-off-by: Martin Schurz <[email protected]> * add waivers Signed-off-by: Martin Schurz <[email protected]> * update waiver descriptions Signed-off-by: Martin Schurz <[email protected]> * use docker for inspec Signed-off-by: Martin Schurz <[email protected]> * keep looking right ;) Signed-off-by: Martin Schurz <[email protected]> * correct path to waivers Signed-off-by: Martin Schurz <[email protected]> * use ephemeral directory in docker Signed-off-by: Martin Schurz <[email protected]> * use bsd inspec profile Signed-off-by: Martin Schurz <[email protected]> * remove openbsd workaround Signed-off-by: Martin Schurz <[email protected]> * re-add openbsd workaround Signed-off-by: Martin Schurz <[email protected]> * commit suggestions Signed-off-by: Martin Schurz <[email protected]> * add supportet OS to metadata Signed-off-by: Martin Schurz <[email protected]> * use current python Signed-off-by: Martin Schurz <[email protected]> --------- Signed-off-by: Martin Schurz <[email protected]>
2023-03-31 09:50:04 +02:00
1 parent b01f22b4a4
commit 29f8a2fb78
@@ -0,0 +1,62 @@
+---
+dependency:
+  name: galaxy
+  options:
+    role-file: molecule/ssh_hardening_bsd/requirements.yml
+driver:
+  name: vagrant
+  provider:
+    name: libvirt
+platforms:
+  # we need to name every instance differntly to start multiple VMs on the same host (parallelization)
+  # since we also need to use different OS users to run the tests because of how molecule operates,
+  # the VM names must be predictable by OS user (to clean up canceled runs)
+  - name: "${USER}"
+    box: "generic/${MOLECULE_DISTRO}"
+    memory: 1024
+    cpus: 2
+provisioner:
+  name: ansible
+  options:
+    diff: true
+  env:
+    ANSIBLE_PIPELINING: "True"
+  config_options:
+    defaults:
+      interpreter_python: auto_silent
+      callback_whitelist: profile_tasks, timer, yaml
+verifier:
+  name: ansible
+  env:
+    ANSIBLE_PIPELINING: "True"
+
+scenario:
+  create_sequence:
+    - dependency
+    - create
+    - prepare
+  check_sequence:
+    - dependency
+    - destroy
+    - create
+    - prepare
+    - converge
+    - check
+    - destroy
+  converge_sequence:
+    - dependency
+    - create
+    - prepare
+    - converge
+  destroy_sequence:
+    - destroy
+  test_sequence:
+    - dependency
+    - destroy
+    - syntax
+    - create
+    - prepare
+    - converge
+    - idempotence
+    - verify
+    - destroy