Martin Schurz
60d10811d4
add separate handlers for audit restart
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 21:45:05 +01:00
Martin Schurz
84c43c0550
limit tests to some distros
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 21:27:23 +01:00
schurzi
f9a1cab023
Merge pull request #721 from dev-sec/python_version
...
pin Ansible to always let Renovate update to the most current version in our tests
2023-11-21 16:38:21 +01:00
Martin Schurz
f15ff3fc83
remove unneeded mysql vars
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 16:37:50 +01:00
Martin Schurz
aae720c977
update python version for all tests
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 12:23:49 +01:00
Martin Schurz
c3b9245900
fix for mysql role
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 12:22:47 +01:00
Martin Schurz
5c5f2ce446
remove the base ansible package
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 12:22:47 +01:00
Martin Schurz
7b32deca17
pin the right ansible package
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 12:22:47 +01:00
Martin Schurz
e2c2d0d5e2
pin Ansible version
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 12:22:47 +01:00
Martin Schurz
addbbd32cf
run tests on update of dependencied
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 12:22:47 +01:00
Martin Schurz
01cc9c811f
update python versions for testing
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-21 12:22:47 +01:00
schurzi
e98d766c6c
Merge pull request #718 from akikanellis/fix-disabling-filesystems-idempotency
...
Restore idempotency for disabling unused filesystems with Ansible 2.16.0
2023-11-21 12:20:42 +01:00
Martin Schurz
adda83572a
fix mixup, add custom test badge
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-16 12:10:41 +01:00
Martin Schurz
01bde49fbc
update badges
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-16 11:30:38 +01:00
schurzi
3d98cbf67b
add testing and support for current versions of Fedora and FreeBSD ( #709 )
...
* add testing and support for current versions of Fedora and FreeBSD
Signed-off-by: Martin Schurz <[email protected] >
* add waivers for FreeBSD
Signed-off-by: Martin Schurz <[email protected] >
* use original fedora images
Signed-off-by: Martin Schurz <[email protected] >
* also harden /home mount
Signed-off-by: Martin Schurz <[email protected] >
* also harden /tmp mount
Signed-off-by: Martin Schurz <[email protected] >
* test mock efi directory
Signed-off-by: Martin Schurz <[email protected] >
* remove mock
Signed-off-by: Martin Schurz <[email protected] >
* umount efi
Signed-off-by: Martin Schurz <[email protected] >
* add /tmp to special mountpoints
Signed-off-by: Martin Schurz <[email protected] >
* set options for /tmp mount
Signed-off-by: Martin Schurz <[email protected] >
* create /tmp mount
Signed-off-by: Martin Schurz <[email protected] >
* create /tmp mount and mount it ...
Signed-off-by: Martin Schurz <[email protected] >
* make fewer changes to default test run
Signed-off-by: Martin Schurz <[email protected] >
* use correct Ansible var
Signed-off-by: Martin Schurz <[email protected] >
---------
Signed-off-by: Martin Schurz <[email protected] >
2023-11-16 09:14:03 +01:00
schurzi
15f2de8b44
fix os ci ( #711 )
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-12 20:45:30 +01:00
schurzi
57d2d524b3
add temporary fix for nginx ci tests ( #710 )
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-12 12:41:15 +01:00
Martin Schurz
655cb49630
add note to temporary fix
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-12 10:00:33 +01:00
Martin Schurz
3c73f8ab1d
use release version of inspec profile again
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:47:00 +01:00
Martin Schurz
8e97184d5e
test wirth modified inspec profile
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:39:20 +01:00
Martin Schurz
7437f68c86
onece more ...
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:26 +01:00
Martin Schurz
bf177add07
one last time ...
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:26 +01:00
Martin Schurz
fb22b242fe
better compare for utf8
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
0c8c96a535
collate for opensuse
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
99784726f8
drop role after test for inspec
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
2f5360225b
extend role check
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
fdf7bbd7be
correct hostname in test
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
ee1fec3d3e
correct indentation
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
35df355248
add tests for roles
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
ec8811acdf
use like to coerce collation
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
6681e0b319
correct query
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
79dc1d5474
check mode for status var
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
219ec1938b
try symlink fix
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
336861838a
try local path
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
b07ac77223
test removing requirements
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
665edd5157
re-add working directories
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
8f516018b6
trigger workflow
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:25 +01:00
Martin Schurz
4756a620f2
reduce dir dependencies
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:37:02 +01:00
Martin Schurz
c59a4d4e48
fix role path
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:36:26 +01:00
Martin Schurz
216b56f468
lint
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:36:26 +01:00
Martin Schurz
36715017d7
use separate task for role detection
...
Signed-off-by: Martin Schurz <[email protected] >
2023-11-11 15:36:26 +01:00
schurzi
da017fa880
Gather facts when os_hardening role is executed with tags ( #708 )
...
* Gather facts when os_hardening role is executed with tags
Signed-off-by: Martin Schurz <[email protected] >
* better when condition
Signed-off-by: Martin Schurz <[email protected] >
---------
Signed-off-by: Martin Schurz <[email protected] >
2023-11-01 15:54:52 +01:00
schurzi
90ca33466e
Merge pull request #696 from dev-sec/renovate/actions-checkout-4.x
...
chore(deps): update actions/checkout action to v4
2023-10-20 10:33:08 +02:00
schurzi
9c2f12561a
update links to new Ansible Galaxy ( #702 )
...
* update links to new Ansible Galaxy
Signed-off-by: Martin Schurz <[email protected] >
* remove dead link
Signed-off-by: Martin Schurz <[email protected] >
---------
Signed-off-by: Martin Schurz <[email protected] >
2023-10-16 20:56:13 +02:00
schurzi
dae8487ab3
Merge pull request #700 from nejch/chore/template-typo
...
Fix typo in login.defs.j2
2023-10-08 21:04:58 +02:00
schurzi
ed5aefad3e
Merge pull request #667 from dev-sec/molecule_update
...
use new molecule-plugins
2023-04-28 14:05:46 +02:00
schurzi
1cce7bca9a
Merge pull request #662 from dev-sec/codespell
...
add spellchecking with codespell
2023-04-17 09:47:53 +02:00
schurzi
4a21ec0234
Merge pull request #656 from dev-sec/update_Tests
...
Update test environment
2023-04-12 22:21:49 +02:00