Martin Schurz
1512111726
Write sysctl config to separate file ( #907 )
...
* Write sysctl config to separate file
Write our sysctl config to separate file, since newer distributions no longer use the global /etc/sysctl.conf file. All older distributions seem to already support reading from /etc/sysctl.d so this should be no breaking change.
2025-10-22 11:01:01 +02:00
Martin Schurz
f377395e00
Update ArchLinux test environment before testing ( #908 )
...
* Update ArchLinux test environment before testing
Update Arch packages and Keyrings to avoid problems when installing Ansible and dependencies.
2025-10-22 10:20:40 +02:00
Martin Schurz and Jonathan Wright
b87188c619
Add support for current versions of Debian and EL ( #893 )
...
* Add support for current versions of Debian and EL
Signed-off-by: Martin Schurz <[email protected] >
* Add conditions for EL8
Signed-off-by: Martin Schurz <[email protected] >
* Fix Audit in AlmaLinux
Signed-off-by: Martin Schurz <[email protected] >
* Fix broken SSH host key config in rhel/almalinux 10
Signed-off-by: Jonathan Wright <[email protected] >
* Generate SSH Keys on EL10
Signed-off-by: Martin Schurz <[email protected] >
* Generate SSH Keys for tests via Systemd
Signed-off-by: Martin Schurz <[email protected] >
* Fixup tests
Signed-off-by: Martin Schurz <[email protected] >
* Remove auditd conditions
Signed-off-by: Martin Schurz <[email protected] >
* Add path to audit handler
Signed-off-by: Martin Schurz <[email protected] >
* Install init scripts
Signed-off-by: Martin Schurz <[email protected] >
* Update main README
---------
Signed-off-by: Martin Schurz <[email protected] >
Signed-off-by: Jonathan Wright <[email protected] >
Co-authored-by: Jonathan Wright <[email protected] >
2025-08-12 12:48:46 +02:00
Martin Schurz
f14460514d
Merge pull request #888 from jonathanspw/almalinux10
...
Add SSH config for EL/AlmaLinux 10
2025-08-12 12:48:21 +02:00
Martin Schurz
e234ac57e3
Merge pull request #889 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 9765b87
2025-08-04 08:21:18 +02:00
Martin Schurz
9634efbdff
Merge pull request #887 from jonathanspw/patch-1
...
Improve OS support accuracy
2025-08-04 07:59:19 +02:00
schurzi
ec97936cce
Merge pull request #873 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 06f616d
2025-07-24 17:17:15 +02:00
Martin Schurz
96e7d7a5bd
Use different names for test tasks
...
Signed-off-by: Martin Schurz <[email protected] >
2025-07-24 16:43:52 +02:00
schurzi
a3935ee6cd
Merge pull request #877 from dev-sec/renovate/aar-doc-2.x
...
chore(deps): update dependency aar-doc to v2.2.0
2025-07-24 16:39:11 +02:00
schurzi
946ffc5f93
Merge pull request #866 from dev-sec/renovate/actions-setup-python-digest
...
chore(deps): update actions/setup-python digest to a26af69
2025-07-24 12:31:17 +02:00
schurzi
422d58fd14
Merge pull request #884 from dev-sec/fix_bsd_tests
...
Use fixed test env for BSD VMs
2025-07-24 11:41:45 +02:00
Martin Schurz
bb7e74407d
Use fixed test env for BSD VMs
...
Signed-off-by: Martin Schurz <[email protected] >
2025-07-24 11:32:55 +02:00
schurzi
6cba622ea1
Merge pull request #882 from dev-sec/fix_rocky8
...
Downgrade community.crypto for rocky8
2025-07-24 10:03:41 +02:00
Martin Schurz
ec7603846d
Downgrade community.crypto for rocky8
...
Signed-off-by: Martin Schurz <[email protected] >
2025-07-24 09:37:39 +02:00
schurzi
bb951fc55f
Merge pull request #867 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to e98f9b3
2025-05-16 10:28:17 +02:00
schurzi
72297cf078
Merge pull request #859 from dev-sec/renovate/actions-setup-python-digest
...
chore(deps): update actions/setup-python digest to 8d9ed9a
2025-04-03 22:04:06 +02:00
schurzi
8f2c7d6866
Merge pull request #863 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to c16f018
2025-04-03 17:48:38 +02:00
schurzi
9378570308
Merge pull request #862 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 6a4fcdb
2025-04-03 16:47:50 +02:00
schurzi
2a5dac1918
Merge pull request #853 from dev-sec/renovate/artis3n-ansible_galaxy_collection-digest
...
chore(deps): update artis3n/ansible_galaxy_collection digest to f6110ae
2025-03-10 14:39:46 +01:00
schurzi
cf655a35d8
Merge pull request #794 from mib1185/allow-seperate-password-login-for-sftp
...
Allow to override settings for sftponly users
2025-02-25 21:47:06 +01:00
schurzi
fc3e20cdf3
Merge pull request #851 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 49ded6a
2025-02-20 13:23:21 +01:00
schurzi
68ac7869f4
Merge pull request #839 from Normo/set-pw-warn-days
...
Set number of warning days before password expires for existing users
2025-02-09 12:20:32 +01:00
Martin Schurz
78b9cbdc60
bump min_ansible_version
...
Signed-off-by: Martin Schurz <[email protected] >
2025-02-09 11:21:06 +01:00
schurzi
f0596e36b7
Merge pull request #841 from dev-sec/renovate/molecule-25.x
...
chore(deps): update dependency molecule to v25
2025-02-08 15:39:13 +01:00
Martin Schurz
4880a5f852
Downgrade molecule
...
Signed-off-by: Martin Schurz <[email protected] >
2025-02-08 14:59:27 +01:00
Martin Schurz
f620ee1548
Also update plugins
...
Signed-off-by: Martin Schurz <[email protected] >
2025-02-08 14:32:45 +01:00
schurzi
2372abd97f
Merge pull request #846 from Tinyblargon/reduce-set-fact
...
Refactor: combine multiple set_fact into single jinja filter
2025-02-08 12:14:24 +01:00
schurzi
8582cae0d4
Merge pull request #844 from dev-sec/renovate/actions-setup-python-digest
...
chore(deps): update actions/setup-python digest to 4237552
2025-02-08 11:34:17 +01:00
schurzi
22aec478d8
Merge pull request #840 from dev-sec/renovate/ansible-ansible-lint-25.x
...
chore(deps): update ansible/ansible-lint action to v25
2025-02-08 11:33:59 +01:00
Martin Schurz
c029b84138
update zypper
...
Signed-off-by: Martin Schurz <[email protected] >
2025-02-07 21:32:45 +01:00
Martin Schurz
c41fd51b63
minor fixups
...
Signed-off-by: Martin Schurz <[email protected] >
2025-02-07 20:50:10 +01:00
Martin Schurz
dfdbeaa247
minor fixups
...
Signed-off-by: Martin Schurz <[email protected] >
2025-02-07 19:57:21 +01:00
Martin Schurz
9f48cf4bbc
Pin runner image to specific version to decouple from GitHub updates
...
Signed-off-by: Martin Schurz <[email protected] >
2025-02-07 18:49:52 +01:00
schurzi
c53e8bcb1e
Merge pull request #835 from dev-sec/ssh_locked
...
Modify PAM to allow SSH key based logins with locked passwords
2024-12-23 12:52:33 +01:00
schurzi
5e7005a91f
Merge pull request #832 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 4ce8e49
2024-12-23 12:51:15 +01:00
schurzi
4d32540823
Merge pull request #834 from dev-sec/renovate/molecule-plugins-23.x
...
chore(deps): update dependency molecule-plugins to v23.6.0
2024-12-23 12:50:49 +01:00
Martin Schurz
b7f0bdd81f
Add docs
...
Signed-off-by: Martin Schurz <[email protected] >
2024-12-23 00:53:32 +01:00
Martin Schurz
e13bb0fcae
Use correct os_family for Suse ...
...
Signed-off-by: Martin Schurz <[email protected] >
2024-12-22 22:23:40 +01:00
Martin Schurz
e8cf61bd3c
Make changes portable
...
Signed-off-by: Martin Schurz <[email protected] >
Make changes portable
Signed-off-by: Martin Schurz <[email protected] >
Make changes portable
Signed-off-by: Martin Schurz <[email protected] >
Make changes portable
Signed-off-by: Martin Schurz <[email protected] >
Make changes portable
Signed-off-by: Martin Schurz <[email protected] >
Make changes portable
Signed-off-by: Martin Schurz <[email protected] >
Make changes portable
Signed-off-by: Martin Schurz <[email protected] >
Make changes portable
Signed-off-by: Martin Schurz <[email protected] >
2024-12-22 22:23:38 +01:00
Martin Schurz
767293e40b
Install passlib on executor
...
Signed-off-by: Martin Schurz <[email protected] >
2024-12-22 19:26:22 +01:00
Martin Schurz
4b05df756c
fix errors
...
Signed-off-by: Martin Schurz <[email protected] >
2024-12-22 18:58:39 +01:00
Martin Schurz
fba07a4d41
MOdify PAM to allow SSH Key logins with locked passwords
...
Signed-off-by: Martin Schurz <[email protected] >
2024-12-22 18:51:18 +01:00
schurzi
c6c1a78497
Merge pull request #831 from dev-sec/renovate/molecule-24.x
...
chore(deps): update dependency molecule to v24.12.0
2024-12-09 12:03:28 +01:00
schurzi
ca17c66742
Merge pull request #828 from dev-sec/readd_openbsd
...
Change installation source for OpenBSD tests
2024-11-30 13:50:41 +01:00
Martin Schurz
c2712fc3d9
Change installation source for OpenBSD tests
...
Signed-off-by: Martin Schurz <[email protected] >
2024-11-30 12:54:11 +01:00
schurzi
00161845d2
Merge pull request #812 from dev-sec/renovate/actions-checkout-digest
...
chore(deps): update actions/checkout digest to 11bd719
2024-11-22 22:02:20 +01:00
schurzi
f8e199b315
Merge pull request #825 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 44be233
2024-11-16 11:10:38 +01:00
Martin Schurz
577c87d07b
Add space ...
2024-11-16 11:10:10 +01:00
Martin Schurz
9096046161
Disable OpenBSD Tests
2024-11-16 01:13:50 +01:00
schurzi
47ff6e41ac
Merge pull request #814 from dev-sec/renovate/actions-setup-python-digest
...
Update actions/setup-python digest to 0b93645
2024-11-16 01:10:29 +01:00
schurzi
5d95dc7083
Merge pull request #810 from dev-sec/audit_name
...
Add variable to set name_format for auditd
2024-10-22 08:47:36 +02:00
Martin Schurz
f70a74f99f
Add variable to set name_format for auditd
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-22 08:46:23 +02:00
schurzi
b6d11a0b19
Merge pull request #811 from dev-sec/py_version
...
Pin python dependencies and optimize GitHub Actions
2024-10-22 08:45:40 +02:00
Martin Schurz
92995bbee3
Sort matrix builds
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-22 08:44:39 +02:00
Martin Schurz
752a541507
Fix copy&paste error
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-21 20:06:14 +02:00
Martin Schurz
45193e9ff1
Pin python dependencies and optimize GitHub Actions
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-21 20:01:14 +02:00
schurzi
3923ea888b
Merge pull request #806 from vmpr/patch-2
...
Document correct quotes for ssh_permit_tunnel parameter
2024-10-10 13:38:39 +02:00
schurzi
421d502f90
Merge pull request #802 from dev-sec/renovate/ansible-core-2.x
...
chore(deps): update dependency ansible-core to v2.17.5
2024-10-09 00:01:03 +02:00
schurzi
f5303344e4
Merge pull request #800 from dev-sec/renovate/actions-checkout-digest
...
chore(deps): update actions/checkout digest to eef6144
2024-10-08 13:27:16 +02:00
schurzi
9476dc9130
Merge pull request #795 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 3b5bee1
2024-10-08 13:26:49 +02:00
schurzi
2f93835a6f
Merge pull request #801 from dev-sec/guard_molecule
...
Don't run tests if the environment is not correct
2024-10-08 09:29:29 +02:00
Martin Schurz
6cc57e1581
Don't run tests if the environment is not correct
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-07 23:02:51 +02:00
Martin Schurz
3bdae0d98f
Fix Changelog generation by adapting regex
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-05 10:04:07 +02:00
Martin Schurz
1748396683
Fix Changelog
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-05 09:48:20 +02:00
schurzi
3daba1f3ee
Merge pull request #797 from dev-sec/remdep
...
Remove unused files and variables
2024-10-04 15:22:15 +02:00
Martin Schurz
2b495bf6b9
Disable testing of audit in docker
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-04 13:29:17 +02:00
Martin Schurz
4c87d293ce
Disable testing of audit in docker
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-04 13:29:17 +02:00
Martin Schurz
2e3d5e916b
Remove unused files and variables
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-04 13:29:16 +02:00
schurzi
077900eadd
Merge pull request #798 from dev-sec/vmvenv
...
Use Python venv for VM tests
2024-10-04 13:28:41 +02:00
Martin Schurz
c705e50e0c
Correct typo
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-04 12:23:18 +02:00
Martin Schurz
75158eb6d3
add Dependency
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-04 11:11:40 +02:00
Martin Schurz
ecee5ffcbd
Use Python venv for VM tests
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-04 11:07:42 +02:00
Martin Schurz
75f6b1a801
Use Python venv for VM tests
...
Signed-off-by: Martin Schurz <[email protected] >
2024-10-04 11:05:04 +02:00
schurzi
83c5918339
Merge pull request #788 from dev-sec/renovate/actions-setup-python-digest
...
chore(deps): update actions/setup-python digest to f677139
2024-09-04 10:37:37 +02:00
schurzi
69ab9e47ad
Update Debian compatibility ( #784 )
...
* Update Ubuntu compatability
Signed-off-by: Martin Schurz <[email protected] >
* reload systemd when disabling ssh socket
Signed-off-by: Martin Schurz <[email protected] >
* manage systemd files
Signed-off-by: Martin Schurz <[email protected] >
* Create privsep directory for Debian
Signed-off-by: Martin Schurz <[email protected] >
* Use working Ubuntu 24.04 image for vm tests
Signed-off-by: Martin Schurz <[email protected] >
* Remove deprecated Debian 10
Signed-off-by: Martin Schurz <[email protected] >
---------
Signed-off-by: Martin Schurz <[email protected] >
2024-08-06 13:11:32 +02:00
Martin Schurz
e73f36d20b
Add special vars for Fedora 40
...
Signed-off-by: Martin Schurz <[email protected] >
2024-07-29 22:04:51 +02:00
Martin Schurz
6c9de30d90
Add needed package for tests
...
Signed-off-by: Martin Schurz <[email protected] >
2024-07-28 18:01:04 +02:00
Martin Schurz
f7157dad4f
Update to current Fedora releases
...
Signed-off-by: Martin Schurz <[email protected] >
2024-07-28 17:32:44 +02:00
schurzi
f1b0bed5c8
Merge pull request #782 from dev-sec/rem_dep
...
Remove deprecated rebuild of initrd
2024-07-28 13:45:39 +02:00
Martin Schurz
f23d5d8eaf
Remove deprecated rebuild of initrd
...
Signed-off-by: Martin Schurz <[email protected] >
2024-07-28 13:17:49 +02:00
schurzi
1c3f2418db
Merge pull request #781 from dev-sec/renovate/patrickjahns-version-drafter-action-digest
...
chore(deps): update patrickjahns/version-drafter-action digest to 2076fa4
2024-07-25 11:41:56 +02:00
Martin Schurz
ba1ab8fdfc
fix release workflow
...
Signed-off-by: Martin Schurz <[email protected] >
2024-07-25 11:31:18 +02:00
schurzi
f9c8e4b749
Merge pull request #777 from dev-sec/fix_Bsd
...
remove tests for FreeBSD12 since it's out of support
2024-07-02 18:18:10 +02:00
Martin Schurz
77de9435fa
remove freebsd12
...
Signed-off-by: Martin Schurz <[email protected] >
2024-07-02 17:31:22 +02:00
schurzi
7008a4b8ca
Merge pull request #776 from dev-sec/renovate/pin-dependencies
...
chore(deps): pin dependencies
2024-06-25 13:09:14 +02:00
schurzi
22e122ffdc
Use best-practice preset for renovate ( #775 )
...
Signed-off-by: Martin Schurz <[email protected] >
2024-06-25 06:50:36 +02:00
schurzi
2959a584a8
Merge pull request #766 from dev-sec/codespell
...
fix spelling
2024-05-31 10:55:45 +02:00
schurzi
4f66ec4c26
Merge pull request #760 from siemens/ci/permissions
...
ci: define permissions for enforce-labels workflow
2024-05-09 12:31:28 +02:00
schurzi
02ad7664ea
Merge pull request #744 from dev-sec/fix_openbsd
...
Always update Vagrant Boxes before using
2024-02-05 10:05:06 +01:00
Martin Schurz
b0dff13204
add comment
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-05 10:04:51 +01:00
Martin Schurz
bb9358e2fb
free space on /boot
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-05 07:20:27 +01:00
Martin Schurz
3ba52e59e2
remove update tasks, since we use updated images
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-05 01:19:34 +01:00
Martin Schurz
e54c541d3b
add more excluded packages
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-04 23:34:53 +01:00
Martin Schurz
a0abefbc29
use loop for package names
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-04 21:50:41 +01:00
Martin Schurz
898bf73178
Block kernel update
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-04 20:41:51 +01:00
Martin Schurz
4a25f72076
Skip update if box is not present
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-04 16:11:28 +01:00
Martin Schurz
7a76975d01
Skip update if box is not present
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-04 15:55:31 +01:00
Martin Schurz
063f3190b8
Always update Vagrant Boxes before using
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-04 15:42:09 +01:00
Martin Schurz
4c4721c32f
Use Python3 for OpenBSD tests
...
Signed-off-by: Martin Schurz <[email protected] >
2024-02-04 14:26:42 +01:00
schurzi
9865223b8f
Merge pull request #743 from dev-sec/docker_rm
...
Remove Docker containers on self-hosted runner after tests
2024-02-04 11:42:15 +01:00