* improve local testing
don't use privileged mode, since this grants too much permissions.
Fixes several problems with PAM in test images.
REorder options in kitchen configuration to simplify it.
Signed-off-by: Martin Schurz <[email protected]>
* check all controls in travis
Signed-off-by: Martin Schurz <[email protected]>
* set env vars in travis correctly
according to documentation: https://docs.travis-ci.com/user/environment-variables/
Signed-off-by: Martin Schurz <[email protected]>
* add arch linux to local tests
Signed-off-by: Martin Schurz <[email protected]>
* shorten travis config
Signed-off-by: Martin Schurz <[email protected]>
* use correct init command for containers
Signed-off-by: Martin Schurz <[email protected]>
* try privileged again
Signed-off-by: Martin Schurz <[email protected]>
* arch seems to like privilege
Signed-off-by: Martin Schurz <[email protected]>
* add testing for CentOS8
Adds testing environments for CentOS8 to local Kitchen and remote Travis
tests. Currently only local Kitchen Docker tests are verified.
Signed-off-by: Martin Schurz <[email protected]>
* disable system wide CRYPTO_POLICY on RHEL8+
by default sshd will not use the crypto settings from sshd_config. To
make the settings effective we need to disable the system wide
CRYPTO_POLICY.
see: https://access.redhat.com/solutions/4410591
Signed-off-by: Martin Schurz <[email protected]>
* Set volume variable for travis tests to use cgroups mount where needed
Signed-off-by: Sebastian Gumprich <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
Add section called "Changing the default port and idempotency" and reference to role ssh-hardening-fallback, a wrapper around this role which implements a fallback to port 22 when the configured port is unreachable.
Signed-off-by: Nuno Godinho <[email protected]>
preserve the version ordering of defaults and group all tasks according
to base configuration variable (cipthers, hostkeys, kex and macs)
Signed-off-by: Martin Schurz <[email protected]>
moved the check for user supplied settings to block head and reversed
order of assignments to compensate for the missing check on the set
variable
Signed-off-by: Martin Schurz <[email protected]>
dev-sec CI