Tatu Argillander
d7487032d2
disable sshd socket activation first ( #931 )
...
Ansible can open multiple connections and it's possible for a new socket
to open before activation is fully disabled, leaving a zombie sshd
process. At least that is the guess. Ubuntu 24.04 suffers from this.
Reload the configuration after disabling socket activation to not enable
it again.
Signed-off-by: Tatu Argillander <[email protected]
2026-03-20 15:06:59 +01:00
dev-sec CI
7b1052db3a
update changelog
2026-03-14 10:53:31 +00:00
renovate[bot]
7d80c0cdc5
chore(deps): update artis3n/ansible_galaxy_collection action to v3 ( #933 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-14 11:51:58 +01:00
renovate[bot]
56af318f67
chore(deps): update juliangruber/read-file-action digest to 271ff31 ( #937 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-14 11:51:31 +01:00
renovate[bot]
af19631274
chore(deps): update ansible/ansible-lint digest to 8ba9595 ( #934 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-14 11:51:03 +01:00
dev-sec CI
90568a27a8
update galaxy.yml with new version
2026-01-22 22:12:05 +00:00
dev-sec CI
01121abab4
update changelog
2026-01-22 21:31:25 +00:00
renovate[bot]
83167cdd4c
chore(deps): update dependency jmespath to v1.1.0 ( #930 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-22 22:29:59 +01:00
dev-sec CI
7bf49663dd
update changelog
2026-01-22 09:10:00 +00:00
dev-sec CI
c751768731
update changelog
2026-01-22 07:02:40 +00:00
renovate[bot]
05cf135b52
chore(deps): update actions/setup-python digest to a309ff8 ( #929 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-22 08:01:08 +01:00
dev-sec CI
2341043c79
update changelog
2026-01-18 18:58:41 +00:00
renovate[bot]
7c99aa19e0
chore(deps): update artis3n/ansible_galaxy_collection digest to 415a92b ( #927 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-18 19:57:44 +01:00
renovate[bot]
745931444a
chore(deps): update ansible/ansible-lint action to v26 ( #928 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-18 19:57:26 +01:00
dev-sec CI
8f7f3f0695
update changelog
2025-12-23 11:03:34 +00:00
renovate[bot]
a97cc1d6ce
chore(deps): update ansible/ansible-lint digest to a2bc8b8 ( #924 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-23 12:02:13 +01:00
dev-sec CI
ebbbde5ea8
update changelog
2025-12-14 11:20:20 +00:00
renovate[bot]
8826a81a74
chore(deps): update dependency molecule to v25.12.0 ( #914 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-14 12:19:19 +01:00
renovate[bot]
fdfb86b6bb
chore(deps): update actions/setup-python digest to 83679a8 ( #920 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-14 12:19:05 +01:00
dev-sec CI
1328c7ae93
update changelog
2025-12-13 12:47:30 +00:00
renovate[bot]
43b6402acf
chore(deps): update actions/checkout action to v6 ( #919 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-13 13:44:59 +01:00
renovate[bot]
c4acd62225
chore(deps): update ansible/ansible-lint digest to 40f24c2 ( #913 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-13 13:42:47 +01:00
dev-sec CI
936240fc7a
update changelog
2025-12-13 12:39:19 +00:00
Norman Ziegner
209ba1dabf
Consistently access facts via the ansible_facts.* namespace ( #917 )
...
* ci: disable injecting facts as own vars in the main namespace
Signed-off-by: Norman Ziegner <[email protected] [email protected] [email protected]
2025-12-13 13:38:02 +01:00
dev-sec CI
db998ef8c5
update changelog
2025-11-28 17:38:08 +00:00
Norman Ziegner
4e5c4478d8
fix: remove yaml callback entirely for EL8 compatibility ( #918 )
...
Signed-off-by: Norman Ziegner <[email protected]
2025-11-28 18:36:51 +01:00
dev-sec CI
f6b52d55fc
update changelog
2025-10-27 21:25:00 +00:00
Christoph and Christoph Sieber
940ed980b3
disable systemd audit logging ( #902 )
...
* os_hardening: disable systemd audit logging
disable audit logging via systemd-journald when enabling auditd
as this leads to duplicate logs in the journal or even /var/log/messages
depending on the configuration
Signed-off-by: Christoph Sieber <[email protected] [email protected] [email protected] [email protected]
2025-10-27 22:23:39 +01:00
dev-sec CI
9976169cad
update changelog
2025-10-27 09:37:20 +00:00
Martin Schurz
24d4d04840
Update test environments to current Ansible version ( #909 )
...
* Update test environments to current Ansible version
Signed-off-by: Martin Schurz <[email protected] [email protected] [email protected]
2025-10-27 10:32:41 +01:00
dev-sec CI
95e50cb69d
update changelog
2025-10-26 16:17:56 +00:00
renovate[bot]
2484831bca
chore(deps): update ansible/ansible-lint digest to d7cd7cf ( #903 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-26 17:15:44 +01:00
dev-sec CI
76b0ae3000
update galaxy.yml with new version
2025-10-22 10:35:43 +00:00
dev-sec CI
1e40024850
update changelog
2025-10-22 09:02:34 +00:00
Martin Schurz
1512111726
Write sysctl config to separate file ( #907 )
...
* Write sysctl config to separate file
Write our sysctl config to separate file, since newer distributions no longer use the global /etc/sysctl.conf file. All older distributions seem to already support reading from /etc/sysctl.d so this should be no breaking change.
2025-10-22 11:01:01 +02:00
dev-sec CI
328644e1fe
update changelog
2025-10-22 08:22:11 +00:00
Martin Schurz
f377395e00
Update ArchLinux test environment before testing ( #908 )
...
* Update ArchLinux test environment before testing
Update Arch packages and Keyrings to avoid problems when installing Ansible and dependencies.
2025-10-22 10:20:40 +02:00
dev-sec CI
e4d736cde2
update changelog
2025-09-25 16:37:46 +00:00
renovate[bot]
548e888c40
chore(deps): update actions/setup-python action to v6 ( #901 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-25 18:36:52 +02:00
renovate[bot]
77f0d32af7
chore(deps): update actions/labeler action to v6 ( #900 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-25 18:36:33 +02:00
renovate[bot]
5701f291db
chore(deps): update ansible/ansible-lint digest to 8861a73 ( #899 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-25 18:36:24 +02:00
dev-sec CI
50befb5fe8
update changelog
2025-08-13 13:24:28 +00:00
renovate[bot]
afdfdb065f
chore(deps): update actions/checkout action to v5 ( #895 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-13 15:19:49 +02:00
dev-sec CI
4075c453a9
update changelog
2025-08-12 19:20:05 +00:00
renovate[bot]
306903b19d
chore(deps): update hugo19941994/delete-draft-releases action to v2 ( #885 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-12 21:18:50 +02:00
dev-sec CI
61c7c9a823
update ssh_hardening readme
2025-08-12 10:57:52 +00:00
dev-sec CI
1876ee1bf5
update nginx_hardening readme
2025-08-12 10:55:17 +00:00
dev-sec CI
91f8dada4c
update mysql_hardening readme
2025-08-12 10:51:39 +00:00
dev-sec CI
ae3cbf27a6
update os_hardening readme
2025-08-12 10:50:37 +00:00
dev-sec CI
734f2d205e
update changelog
2025-08-12 10:49:32 +00:00
Tatu Argillander