Commit Graph
1400 Commits
Author SHA1 Message Date
Sebastian Gumprich de5a7ce506 add archlinux support
Signed-off-by: Sebastian Gumprich <[email protected]>
2020-08-22 14:08:08 +02:00
Andre Lehmann 77434b8a37 Make compatible with ArchLinux
Signed-off-by: Andre Lehmann <[email protected]>
2020-08-22 13:39:44 +02:00
dev-sec CI a806a25af5 update changelog 2020-08-22 06:56:30 +00:00
schurzi 4ddbbb2a61 fix linting for molecule (#301)
Signed-off-by: Martin Schurz <[email protected]>
2020-08-22 08:53:44 +02:00
dev-sec CI 17570fda66 update changelog 2020-08-18 22:08:28 +00:00
schurzi 989f7b0e1e Merge pull request #300 from danielkubat/master
define file permissions explicitly
2020-08-19 00:05:51 +02:00
danielkubat fd10d8e8d2 single quotes added to follow role formatting
Signed-off-by: danielkubat <[email protected]>
2020-08-18 23:50:46 +02:00
danielkubat 34abe1ab03 mode defined in octal form
Signed-off-by: danielkubat <[email protected]>
2020-08-18 22:50:10 +02:00
danielkubat 2a75fc11d3 permissions explicitly defined
Signed-off-by: danielkubat <[email protected]>
2020-08-18 22:38:08 +02:00
dev-sec CI 6f0181b2fc update changelog 2020-08-17 10:17:48 +00:00
Daniel Kubat 7077187a67 replace module parameter fixed (#297)
Signed-off-by: danielkubat <[email protected]>
6.2.0
2020-08-17 12:15:04 +02:00
dev-sec CI e698433939 update changelog 2020-08-16 18:19:59 +00:00
dev-sec CI 37ab009093 update changelog 2020-08-16 18:19:43 +00:00
schurzi 56f6cd0337 Merge pull request #296 from dev-sec/fedora
fix fedora build
2020-08-16 20:17:15 +02:00
schurzi aaece07fe0 Merge pull request #321 from dev-sec/fedora
use systemd in fedora
2020-08-16 20:16:53 +02:00
dev-sec CI 337c7dbbed update changelog 2020-08-16 08:06:54 +00:00
Daniel KubatandSebastian Gumprich 2c4505addd use find module instead of shell (#294)
* use find module to find yum repos, regexp fixes

Signed-off-by: danielkubat <[email protected]>

* use loop instead of with_*

Signed-off-by: danielkubat <[email protected]>

* Update tasks/yum.yml

Co-authored-by: Sebastian Gumprich <[email protected]>
2020-08-16 10:04:26 +02:00
Sebastian Gumprich 88fecc4f2e try to fix fedora build
Signed-off-by: Sebastian Gumprich <[email protected]>
2020-08-16 09:53:11 +02:00
Sebastian Gumprich 0b38b85a0a install systemd in fedora
Signed-off-by: Sebastian Gumprich <[email protected]>
2020-08-16 09:52:59 +02:00
dev-sec CI c777133050 update changelog 2020-08-13 09:48:20 +00:00
Alex Domoradov 29158e4285 Optimize and unify when clause (#295)
Signed-off-by: Alex Domoradov <[email protected]>
2020-08-13 11:45:44 +02:00
dev-sec CI 5cad140f7b update changelog 2020-08-09 15:04:56 +00:00
Sebastian Gumprich fa2cf790f8 Merge pull request #320 from dev-sec/pam
add separate option for controlling motd via pam
2020-08-09 17:02:02 +02:00
Martin Schurz 5cf53b215f add separate option for controlling motd via pam
makes it possible to set different values for motd via sshd and pam.
Also create a backup file of pam configuration, to allow user to restore
the previous settings.

Signed-off-by: Martin Schurz <[email protected]>
2020-08-08 18:14:38 +02:00
dev-sec CI bbe5ad4707 update changelog 2020-08-07 18:06:25 +00:00
schurzi b3d7acee44 Merge pull request #48 from dev-sec/kitchen_travis
update testing
2020-08-07 20:04:50 +02:00
Sebastian Gumprich 6b42f12434 update testing
Signed-off-by: Sebastian Gumprich <[email protected]>
2020-08-07 19:30:58 +02:00
dev-sec CI eb777fbe2f update changelog 2020-08-07 07:02:27 +00:00
schurzi eaeca04d96 do not blacklist used filesystems (#289)
* add additional check for efi

some systems seem to require vfat because of efi, despite not exposing a
/sys/firmware/efi directory.

Signed-off-by: Martin Schurz <[email protected]>

* make linter happy

Signed-off-by: Martin Schurz <[email protected]>

* rework check to check for all used filesystems

so we don't break existing mounts with our configuration

Signed-off-by: Martin Schurz <[email protected]>

* do not check this on el6

Signed-off-by: Martin Schurz <[email protected]>

* add comment to clarify

Signed-off-by: Martin Schurz <[email protected]>
2020-08-07 08:59:46 +02:00
dev-sec CI 83a6d88c46 update changelog 2020-08-03 19:31:28 +00:00
Sebastian Gumprich 04d19fd195 fix typo 2020-08-03 21:28:23 +02:00
dev-sec CI fe7e37e6e9 update changelog 2020-08-03 13:58:20 +00:00
schurzi 387fc472bd improve testing (#287)
* fix problem with package_facts on SuSE

SuSE Linux does not work with ansibel module packet_facts, so we need to
exclude this task there.

Signed-off-by: Martin Schurz <[email protected]>

* fix local docker tests for all distributions

Signed-off-by: Martin Schurz <[email protected]>

* fix local vagrant tests for all distributions

Signed-off-by: Martin Schurz <[email protected]>

* simplify travis tests

Signed-off-by: Martin Schurz <[email protected]>

* fix opensuse in travis

Signed-off-by: Martin Schurz <[email protected]>

* add fixes for suse

Signed-off-by: Martin Schurz <[email protected]>

* add special case for suse docker

Signed-off-by: Martin Schurz <[email protected]>
2020-08-03 15:55:27 +02:00
dev-sec CI 20bf4eaa99 update changelog 2020-07-28 08:29:59 +00:00
Sebastian Gumprich f1a65f5f44 Merge pull request #318 from dev-sec/fix_kitchen
fix local kitchen tests
2020-07-28 09:24:22 +02:00
Martin Schurz 04f731a08c fix local kitchen tests
somehow a "real" linux needs different options than WSL. This is now
also working on debian 10

Signed-off-by: Martin Schurz <[email protected]>
2020-07-28 09:12:43 +02:00
schurzi 9b14f64f67 Merge pull request #317 from aqw/umask
fix sftp_umask; store as literal not octal
2020-07-28 08:59:12 +02:00
dev-sec CI b7791833a7 update changelog 2020-07-28 06:33:18 +00:00
Sebastian Gumprich f50f22ca66 Merge pull request #294 from aqw/master
add SmartOS support
2020-07-28 08:30:17 +02:00
Alex Waite e59dd46c23 fix sftp_umask; store as literal not octal
Numbers with leading zeros need to be quoted in Ansible, otherwise they
are interpreted as octal. Which the templating happily writes out in...
decimal.

In this case, sftp_umask 0027 was ending up as 23 in sshd.conf.

Signed-off-by: Alex Waite <[email protected]>
2020-07-28 07:44:54 +02:00
Alex Waite 670be01d69 add var ssh_host_keys_dir, for OSes with alternate host key locations
Signed-off-by: Alex Waite <[email protected]>
2020-07-28 07:33:52 +02:00
Alex Waite 1a28c7bdef add SmartOS support
Signed-off-by: Alex Waite <[email protected]>
2020-07-28 07:29:39 +02:00
Alex Waite 1f1c715ec7 add var sshd_path, for OSs with alternate sshd locations
Signed-off-by: Alex Waite <[email protected]>
2020-07-28 07:29:27 +02:00
dev-sec CI 6fddedccb6 update changelog 2020-07-27 14:53:41 +00:00
liteua bf7c4dd46d add ssh_banner_path variable (#316)
Signed-off-by: Volodymyr Litvak <[email protected]>
2020-07-27 16:46:04 +02:00
dev-sec CI 75880c8f48 update changelog 2020-07-22 20:45:26 +00:00
schurzi 760f1206d6 rework CRYPTO_POLICY handling for fedora (#314)
* rework CRYPTO_POLICY handling for fedora

the previous implementation did not handle fedora right. Now we check if
a CRYPTO_POLICY is present regardless of the OS version.

Signed-off-by: Martin Schurz <[email protected]>

* improve tasks for CRYPTO_POLICY

Signed-off-by: Martin Schurz <[email protected]>

* add exception for Archlinux

Signed-off-by: Martin Schurz <[email protected]>

* swap conditions

Signed-off-by: Martin Schurz <[email protected]>
2020-07-22 22:42:28 +02:00
dev-sec CI 740feae180 update changelog 2020-07-22 19:29:59 +00:00
Sebastian Gumprich 65a8fa0c6c move hidepid vars into defaults so theyre overwritable (#285)
fixes #284

Signed-off-by: Sebastian Gumprich <[email protected]>
2020-07-22 21:27:25 +02:00
dev-sec CI e69f5891d9 update changelog 2020-07-22 12:45:52 +00:00