49 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Martin Schurz	20dd04c9cb	split notify, add tmp options for arch ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 21:58:58 +01:00
Martin Schurz	60d10811d4	add separate handlers for audit restart ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 21:45:05 +01:00
Martin Schurz	84c43c0550	limit tests to some distros ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 21:27:23 +01:00
schurzi	f9a1cab023	Merge pull request #721 from dev-sec/python_version ... pin Ansible to always let Renovate update to the most current version in our tests	2023-11-21 16:38:21 +01:00
Martin Schurz	f15ff3fc83	remove unneeded mysql vars ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 16:37:50 +01:00
Martin Schurz	aae720c977	update python version for all tests ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 12:23:49 +01:00
Martin Schurz	c3b9245900	fix for mysql role ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 12:22:47 +01:00
Martin Schurz	5c5f2ce446	remove the base ansible package ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 12:22:47 +01:00
Martin Schurz	7b32deca17	pin the right ansible package ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 12:22:47 +01:00
Martin Schurz	e2c2d0d5e2	pin Ansible version ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 12:22:47 +01:00
Martin Schurz	addbbd32cf	run tests on update of dependencied ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 12:22:47 +01:00
Martin Schurz	01cc9c811f	update python versions for testing ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 12:22:47 +01:00
schurzi	e98d766c6c	Merge pull request #718 from akikanellis/fix-disabling-filesystems-idempotency ... Restore idempotency for disabling unused filesystems with Ansible 2.16.0	2023-11-21 12:20:42 +01:00
Martin Schurz	adda83572a	fix mixup, add custom test badge ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-16 12:10:41 +01:00
Martin Schurz	01bde49fbc	update badges ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-16 11:30:38 +01:00
schurzi	3d98cbf67b	add testing and support for current versions of Fedora and FreeBSD (#709) ... * add testing and support for current versions of Fedora and FreeBSD Signed-off-by: Martin Schurz <[email protected]> * add waivers for FreeBSD Signed-off-by: Martin Schurz <[email protected]> * use original fedora images Signed-off-by: Martin Schurz <[email protected]> * also harden /home mount Signed-off-by: Martin Schurz <[email protected]> * also harden /tmp mount Signed-off-by: Martin Schurz <[email protected]> * test mock efi directory Signed-off-by: Martin Schurz <[email protected]> * remove mock Signed-off-by: Martin Schurz <[email protected]> * umount efi Signed-off-by: Martin Schurz <[email protected]> * add /tmp to special mountpoints Signed-off-by: Martin Schurz <[email protected]> * set options for /tmp mount Signed-off-by: Martin Schurz <[email protected]> * create /tmp mount Signed-off-by: Martin Schurz <[email protected]> * create /tmp mount and mount it ... Signed-off-by: Martin Schurz <[email protected]> * make fewer changes to default test run Signed-off-by: Martin Schurz <[email protected]> * use correct Ansible var Signed-off-by: Martin Schurz <[email protected]> --------- Signed-off-by: Martin Schurz <[email protected]>	2023-11-16 09:14:03 +01:00
schurzi	15f2de8b44	fix os ci (#711) ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-12 20:45:30 +01:00
schurzi	57d2d524b3	add temporary fix for nginx ci tests (#710) ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-12 12:41:15 +01:00
Martin Schurz	655cb49630	add note to temporary fix ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-12 10:00:33 +01:00
Martin Schurz	3c73f8ab1d	use release version of inspec profile again ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:47:00 +01:00
Martin Schurz	8e97184d5e	test wirth modified inspec profile ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:39:20 +01:00
Martin Schurz	7437f68c86	onece more ... ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:26 +01:00
Martin Schurz	bf177add07	one last time ... ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:26 +01:00
Martin Schurz	fb22b242fe	better compare for utf8 ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	0c8c96a535	collate for opensuse ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	99784726f8	drop role after test for inspec ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	2f5360225b	extend role check ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	fdf7bbd7be	correct hostname in test ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	ee1fec3d3e	correct indentation ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	35df355248	add tests for roles ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	ec8811acdf	use like to coerce collation ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	6681e0b319	correct query ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	79dc1d5474	check mode for status var ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	219ec1938b	try symlink fix ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	336861838a	try local path ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	b07ac77223	test removing requirements ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	665edd5157	re-add working directories ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	8f516018b6	trigger workflow ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:25 +01:00
Martin Schurz	4756a620f2	reduce dir dependencies ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:37:02 +01:00
Martin Schurz	c59a4d4e48	fix role path ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:36:26 +01:00
Martin Schurz	216b56f468	lint ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:36:26 +01:00
Martin Schurz	36715017d7	use separate task for role detection ... Signed-off-by: Martin Schurz <[email protected]>	2023-11-11 15:36:26 +01:00
schurzi	da017fa880	Gather facts when os_hardening role is executed with tags (#708) ... * Gather facts when os_hardening role is executed with tags Signed-off-by: Martin Schurz <[email protected]> * better when condition Signed-off-by: Martin Schurz <[email protected]> --------- Signed-off-by: Martin Schurz <[email protected]>	2023-11-01 15:54:52 +01:00
schurzi	90ca33466e	Merge pull request #696 from dev-sec/renovate/actions-checkout-4.x ... chore(deps): update actions/checkout action to v4	2023-10-20 10:33:08 +02:00
schurzi	9c2f12561a	update links to new Ansible Galaxy (#702) ... * update links to new Ansible Galaxy Signed-off-by: Martin Schurz <[email protected]> * remove dead link Signed-off-by: Martin Schurz <[email protected]> --------- Signed-off-by: Martin Schurz <[email protected]>	2023-10-16 20:56:13 +02:00
schurzi	dae8487ab3	Merge pull request #700 from nejch/chore/template-typo ... Fix typo in login.defs.j2	2023-10-08 21:04:58 +02:00
schurzi	ed5aefad3e	Merge pull request #667 from dev-sec/molecule_update ... use new molecule-plugins	2023-04-28 14:05:46 +02:00
schurzi	1cce7bca9a	Merge pull request #662 from dev-sec/codespell ... add spellchecking with codespell	2023-04-17 09:47:53 +02:00
schurzi	4a21ec0234	Merge pull request #656 from dev-sec/update_Tests ... Update test environment	2023-04-12 22:21:49 +02:00