add posibility to run ssh_hardening as unprivileged user (#561)

* add VM tests for ssh_hardening Signed-off-by: Martin Schurz <[email protected]> * remove VM tests from ssh_hardening Signed-off-by: Martin Schurz <[email protected]> * run ssh_hardening test as unprivileged user Signed-off-by: Martin Schurz <[email protected]> * add link for documentation Signed-off-by: Martin Schurz <[email protected]> * use different config Signed-off-by: Martin Schurz <[email protected]> * remove become Signed-off-by: Martin Schurz <[email protected]> * re-add become Signed-off-by: Martin Schurz <[email protected]> * move become into role Signed-off-by: Martin Schurz <[email protected]> * indentation Signed-off-by: Martin Schurz <[email protected]> * try args apply Signed-off-by: Martin Schurz <[email protected]> * fix linting Signed-off-by: Martin Schurz <[email protected]> * add documentation Signed-off-by: Martin Schurz <[email protected]> Signed-off-by: Martin Schurz <[email protected]>
2022-08-15 13:19:07 +02:00
1 parent fad6059f6d
commit a806ec8598
@@ -1,7 +1,6 @@
 ---
 - name: wrapper playbook for kitchen testing "ansible-ssh-hardening" with default settings
  hosts: all
-  become: true
  environment:
    http_proxy: "{{ lookup('env', 'http_proxy') | default(omit)  }}"
    https_proxy: "{{ lookup('env', 'https_proxy') | default(omit) }}"
@@ -29,6 +29,12 @@ provisioner:
    defaults:
      interpreter_python: auto_silent
      callback_whitelist: profile_tasks, timer, yaml
+  inventory:
+    host_vars:
+      # https://molecule.readthedocs.io/en/latest/examples.html#docker-with-non-privileged-user
+      # setting for the platform instance named 'instance'
+      instance:
+        ansible_user: ansible
 verifier:
  name: ansible