* disable systemd socket activation
Signed-off-by: Sebastian Gumprich <[email protected]>
* move start to after deactivation so it can start
---------
Signed-off-by: Sebastian Gumprich <[email protected]>
* do not force type of gatewayports-var
this way it can be a bool or a string. we also now test for it
Signed-off-by: Sebastian Gumprich <[email protected]>
* replace yum with dnf
Signed-off-by: Sebastian Gumprich <[email protected]>
---------
Signed-off-by: Sebastian Gumprich <[email protected]>
* centos7 is eol, remove it
Signed-off-by: Sebastian Gumprich <[email protected]>
* change workflow to update readmes when meta/main.yml is changed
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove mention of centos 7 from readme
Signed-off-by: Sebastian Gumprich <[email protected]>
---------
Signed-off-by: Sebastian Gumprich <[email protected]>
* add role argument spec for os, ssh, mysql
Signed-off-by: Sebastian Gumprich <[email protected]>
* add role argument spec for os, ssh, mysql
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove variable in variable as it cannot be used in argument spec
Signed-off-by: Sebastian Gumprich <[email protected]>
* fix wrong syntax
* fix spelling errors
Signed-off-by: Sebastian Gumprich <[email protected]>
* cannot use vars before arg-spec validation
Signed-off-by: Sebastian Gumprich <[email protected]>
* yamllint the arg-spec
Signed-off-by: Sebastian Gumprich <[email protected]>
* add back variable
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove redundant setting in tests
* fix descriptions in mysql hardening to betterreflect what they do
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove duplicate empty line
Signed-off-by: Sebastian Gumprich <[email protected]>
* set correct defaults on to ssl options
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove left-over hidepid argument spec
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove license and author infos, this lives in the collection readme
Signed-off-by: Sebastian Gumprich <[email protected]>
* fix styling
Signed-off-by: Sebastian Gumprich <[email protected]>
* update some descriptions and sort them in the readme
Signed-off-by: Sebastian Gumprich <[email protected]>
* some more linting
Signed-off-by: Sebastian Gumprich <[email protected]>
---------
Signed-off-by: Sebastian Gumprich <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
* add debian 12 support
Signed-off-by: Sebastian Gumprich <[email protected]>
* temp disable pam-checks
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove debian12 from vagrant tests as there's no box yet
Signed-off-by: Sebastian Gumprich <[email protected]>
* use new pam-tester from pip
Signed-off-by: Sebastian Gumprich <[email protected]>
* use new pam-tester from pip
Signed-off-by: Sebastian Gumprich <[email protected]>
* add setuptoolks to pam-tester install
Signed-off-by: Sebastian Gumprich <[email protected]>
* add setuptoolks to pam-tester install
Signed-off-by: Sebastian Gumprich <[email protected]>
* add setuptoolks to pam-tester install
Signed-off-by: Sebastian Gumprich <[email protected]>
* add setuptoolks to pam-tester install
Signed-off-by: Sebastian Gumprich <[email protected]>
* install pam-tester with python3 and use full path to it
Signed-off-by: Sebastian Gumprich <[email protected]>
* install python3-setupttools in verify-tests
Signed-off-by: Sebastian Gumprich <[email protected]>
* fix path for pam-tester in all tests
Signed-off-by: Sebastian Gumprich <[email protected]>
* set python interpreter to 3 for verify-tests
Signed-off-by: Sebastian Gumprich <[email protected]>
* Revert "set python interpreter to 3 for verify-tests"
This reverts commit 00b6556e33.
* add back accidentally deleted tasks
Signed-off-by: Sebastian Gumprich <[email protected]>
---------
Signed-off-by: Sebastian Gumprich <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
there's probably some added value for this, but I see no reason to change so many variables and possibly break something when it still works and nobody complained
Signed-off-by: Sebastian Gumprich <[email protected]>
* add verify-task to check if mysql is running and enabled
Signed-off-by: Sebastian Gumprich <[email protected]>
* Update molecule/mysql_hardening/verify_tasks/service.yml
Co-authored-by: schurzi <[email protected]>
Signed-off-by: Sebastian Gumprich <[email protected]>
Co-authored-by: schurzi <[email protected]>
* use os_family instead of distribution for debian systems
Signed-off-by: rndmh3ro <[email protected]>
* remove tasks related to rhel6 or debian 6
Signed-off-by: rndmh3ro <[email protected]>
* add rocky linux 8 tests and make sure that all relevant tasks are executed
Signed-off-by: rndmh3ro <[email protected]>
* fix missing quote
Signed-off-by: rndmh3ro <[email protected]>
* make wrong password fail task
Signed-off-by: Sebastian Gumprich <[email protected]>
* add name to fail task
Signed-off-by: Sebastian Gumprich <[email protected]>
* add restart handler variable for mysql role
Signed-off-by: Sebastian Gumprich <[email protected]>
* add prettierignore file to ignore CHANGELOG
Signed-off-by: Sebastian Gumprich <[email protected]>
* add a runtime.yml to declare minimum ansible version
Signed-off-by: Sebastian Gumprich <[email protected]>
* add minimum ansible version to reamde
Signed-off-by: Sebastian Gumprich <[email protected]>
* Prettified Code!
* fix changelog generation
the changelog generation fails because we merged other repos into
this one and these commits do not share a common ancestor.
see this issue: https://github.com/github-changelog-generator/github-changelog-generator/issues/665
to workaround this, we change the changelog generation so all tags older than 7.0.0 will be ignored
(--since-tag does not work here because it still works on all tags). This however will remove
older releases from the changelog so we move these old releases into a separate file.
this is okay for me since these old releases are for ansible-os-hardening and not the collection.
the new changelog file will contain all changes since 7.0.0.
Signed-off-by: Sebastian Gumprich <[email protected]>
* fix regex in action
Signed-off-by: Sebastian Gumprich <[email protected]>
rndmh3ro