 Martin Schurz
|
fba07a4d41
|
MOdify PAM to allow SSH Key logins with locked passwords
Signed-off-by: Martin Schurz <[email protected]>
|
2024-12-22 18:51:18 +01:00 |
|
|
schurzi
|
c6c1a78497
|
Merge pull request #831 from dev-sec/renovate/molecule-24.x
chore(deps): update dependency molecule to v24.12.0
|
2024-12-09 12:03:28 +01:00 |
|
|
schurzi
|
ca17c66742
|
Merge pull request #828 from dev-sec/readd_openbsd
Change installation source for OpenBSD tests
|
2024-11-30 13:50:41 +01:00 |
|
|
Martin Schurz
|
c2712fc3d9
|
Change installation source for OpenBSD tests
Signed-off-by: Martin Schurz <[email protected]>
|
2024-11-30 12:54:11 +01:00 |
|
|
schurzi
|
00161845d2
|
Merge pull request #812 from dev-sec/renovate/actions-checkout-digest
chore(deps): update actions/checkout digest to 11bd719
|
2024-11-22 22:02:20 +01:00 |
|
|
schurzi
|
f8e199b315
|
Merge pull request #825 from dev-sec/renovate/ansible-ansible-lint-digest
chore(deps): update ansible/ansible-lint digest to 44be233
|
2024-11-16 11:10:38 +01:00 |
|
|
Martin Schurz
|
577c87d07b
|
Add space ...
|
2024-11-16 11:10:10 +01:00 |
|
|
Martin Schurz
|
9096046161
|
Disable OpenBSD Tests
|
2024-11-16 01:13:50 +01:00 |
|
|
schurzi
|
47ff6e41ac
|
Merge pull request #814 from dev-sec/renovate/actions-setup-python-digest
Update actions/setup-python digest to 0b93645
|
2024-11-16 01:10:29 +01:00 |
|
|
schurzi
|
5d95dc7083
|
Merge pull request #810 from dev-sec/audit_name
Add variable to set name_format for auditd
|
2024-10-22 08:47:36 +02:00 |
|
|
Martin Schurz
|
f70a74f99f
|
Add variable to set name_format for auditd
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-22 08:46:23 +02:00 |
|
|
schurzi
|
b6d11a0b19
|
Merge pull request #811 from dev-sec/py_version
Pin python dependencies and optimize GitHub Actions
|
2024-10-22 08:45:40 +02:00 |
|
|
Martin Schurz
|
92995bbee3
|
Sort matrix builds
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-22 08:44:39 +02:00 |
|
|
Martin Schurz
|
752a541507
|
Fix copy&paste error
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-21 20:06:14 +02:00 |
|
|
Martin Schurz
|
45193e9ff1
|
Pin python dependencies and optimize GitHub Actions
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-21 20:01:14 +02:00 |
|
|
schurzi
|
3923ea888b
|
Merge pull request #806 from vmpr/patch-2
Document correct quotes for ssh_permit_tunnel parameter
|
2024-10-10 13:38:39 +02:00 |
|
|
schurzi
|
421d502f90
|
Merge pull request #802 from dev-sec/renovate/ansible-core-2.x
chore(deps): update dependency ansible-core to v2.17.5
|
2024-10-09 00:01:03 +02:00 |
|
|
schurzi
|
f5303344e4
|
Merge pull request #800 from dev-sec/renovate/actions-checkout-digest
chore(deps): update actions/checkout digest to eef6144
|
2024-10-08 13:27:16 +02:00 |
|
|
schurzi
|
9476dc9130
|
Merge pull request #795 from dev-sec/renovate/ansible-ansible-lint-digest
chore(deps): update ansible/ansible-lint digest to 3b5bee1
|
2024-10-08 13:26:49 +02:00 |
|
|
schurzi
|
2f93835a6f
|
Merge pull request #801 from dev-sec/guard_molecule
Don't run tests if the environment is not correct
|
2024-10-08 09:29:29 +02:00 |
|
|
Martin Schurz
|
6cc57e1581
|
Don't run tests if the environment is not correct
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-07 23:02:51 +02:00 |
|
|
Martin Schurz
|
3bdae0d98f
|
Fix Changelog generation by adapting regex
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-05 10:04:07 +02:00 |
|
|
Martin Schurz
|
1748396683
|
Fix Changelog
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-05 09:48:20 +02:00 |
|
|
schurzi
|
3daba1f3ee
|
Merge pull request #797 from dev-sec/remdep
Remove unused files and variables
|
2024-10-04 15:22:15 +02:00 |
|
|
Martin Schurz
|
2b495bf6b9
|
Disable testing of audit in docker
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-04 13:29:17 +02:00 |
|
|
Martin Schurz
|
4c87d293ce
|
Disable testing of audit in docker
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-04 13:29:17 +02:00 |
|
|
Martin Schurz
|
2e3d5e916b
|
Remove unused files and variables
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-04 13:29:16 +02:00 |
|
|
schurzi
|
077900eadd
|
Merge pull request #798 from dev-sec/vmvenv
Use Python venv for VM tests
|
2024-10-04 13:28:41 +02:00 |
|
|
Martin Schurz
|
c705e50e0c
|
Correct typo
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-04 12:23:18 +02:00 |
|
|
Martin Schurz
|
75158eb6d3
|
add Dependency
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-04 11:11:40 +02:00 |
|
|
Martin Schurz
|
ecee5ffcbd
|
Use Python venv for VM tests
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-04 11:07:42 +02:00 |
|
|
Martin Schurz
|
75f6b1a801
|
Use Python venv for VM tests
Signed-off-by: Martin Schurz <[email protected]>
|
2024-10-04 11:05:04 +02:00 |
|
|
schurzi
|
83c5918339
|
Merge pull request #788 from dev-sec/renovate/actions-setup-python-digest
chore(deps): update actions/setup-python digest to f677139
|
2024-09-04 10:37:37 +02:00 |
|
|
schurzi
|
69ab9e47ad
|
Update Debian compatibility (#784)
* Update Ubuntu compatability
Signed-off-by: Martin Schurz <[email protected]>
* reload systemd when disabling ssh socket
Signed-off-by: Martin Schurz <[email protected]>
* manage systemd files
Signed-off-by: Martin Schurz <[email protected]>
* Create privsep directory for Debian
Signed-off-by: Martin Schurz <[email protected]>
* Use working Ubuntu 24.04 image for vm tests
Signed-off-by: Martin Schurz <[email protected]>
* Remove deprecated Debian 10
Signed-off-by: Martin Schurz <[email protected]>
---------
Signed-off-by: Martin Schurz <[email protected]>
|
2024-08-06 13:11:32 +02:00 |
|
|
Martin Schurz
|
e73f36d20b
|
Add special vars for Fedora 40
Signed-off-by: Martin Schurz <[email protected]>
|
2024-07-29 22:04:51 +02:00 |
|
|
Martin Schurz
|
6c9de30d90
|
Add needed package for tests
Signed-off-by: Martin Schurz <[email protected]>
|
2024-07-28 18:01:04 +02:00 |
|
|
Martin Schurz
|
f7157dad4f
|
Update to current Fedora releases
Signed-off-by: Martin Schurz <[email protected]>
|
2024-07-28 17:32:44 +02:00 |
|
|
schurzi
|
f1b0bed5c8
|
Merge pull request #782 from dev-sec/rem_dep
Remove deprecated rebuild of initrd
|
2024-07-28 13:45:39 +02:00 |
|
|
Martin Schurz
|
f23d5d8eaf
|
Remove deprecated rebuild of initrd
Signed-off-by: Martin Schurz <[email protected]>
|
2024-07-28 13:17:49 +02:00 |
|
|
schurzi
|
1c3f2418db
|
Merge pull request #781 from dev-sec/renovate/patrickjahns-version-drafter-action-digest
chore(deps): update patrickjahns/version-drafter-action digest to 2076fa4
|
2024-07-25 11:41:56 +02:00 |
|
|
Martin Schurz
|
ba1ab8fdfc
|
fix release workflow
Signed-off-by: Martin Schurz <[email protected]>
|
2024-07-25 11:31:18 +02:00 |
|
|
schurzi
|
f9c8e4b749
|
Merge pull request #777 from dev-sec/fix_Bsd
remove tests for FreeBSD12 since it's out of support
|
2024-07-02 18:18:10 +02:00 |
|
|
Martin Schurz
|
77de9435fa
|
remove freebsd12
Signed-off-by: Martin Schurz <[email protected]>
|
2024-07-02 17:31:22 +02:00 |
|
|
schurzi
|
7008a4b8ca
|
Merge pull request #776 from dev-sec/renovate/pin-dependencies
chore(deps): pin dependencies
|
2024-06-25 13:09:14 +02:00 |
|
|
schurzi
|
22e122ffdc
|
Use best-practice preset for renovate (#775)
Signed-off-by: Martin Schurz <[email protected]>
|
2024-06-25 06:50:36 +02:00 |
|
|
schurzi
|
2959a584a8
|
Merge pull request #766 from dev-sec/codespell
fix spelling
|
2024-05-31 10:55:45 +02:00 |
|
|
schurzi
|
4f66ec4c26
|
Merge pull request #760 from siemens/ci/permissions
ci: define permissions for enforce-labels workflow
|
2024-05-09 12:31:28 +02:00 |
|
|
schurzi
|
02ad7664ea
|
Merge pull request #744 from dev-sec/fix_openbsd
Always update Vagrant Boxes before using
|
2024-02-05 10:05:06 +01:00 |
|
|
Martin Schurz
|
b0dff13204
|
add comment
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-05 10:04:51 +01:00 |
|
|
Martin Schurz
|
bb9358e2fb
|
free space on /boot
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-05 07:20:27 +01:00 |
|
|
Martin Schurz
|
3ba52e59e2
|
remove update tasks, since we use updated images
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-05 01:19:34 +01:00 |
|
|
Martin Schurz
|
e54c541d3b
|
add more excluded packages
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-04 23:34:53 +01:00 |
|
|
Martin Schurz
|
a0abefbc29
|
use loop for package names
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-04 21:50:41 +01:00 |
|
|
Martin Schurz
|
898bf73178
|
Block kernel update
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-04 20:41:51 +01:00 |
|
|
Martin Schurz
|
4a25f72076
|
Skip update if box is not present
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-04 16:11:28 +01:00 |
|
|
Martin Schurz
|
7a76975d01
|
Skip update if box is not present
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-04 15:55:31 +01:00 |
|
|
Martin Schurz
|
063f3190b8
|
Always update Vagrant Boxes before using
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-04 15:42:09 +01:00 |
|
|
Martin Schurz
|
4c4721c32f
|
Use Python3 for OpenBSD tests
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-04 14:26:42 +01:00 |
|
|
schurzi
|
9865223b8f
|
Merge pull request #743 from dev-sec/docker_rm
Remove Docker containers on self-hosted runner after tests
|
2024-02-04 11:42:15 +01:00 |
|
|
Martin Schurz
|
11cf72b7e2
|
Remove Docker containers on self-hosted runner after tests
Signed-off-by: Martin Schurz <[email protected]>
|
2024-02-04 10:54:22 +01:00 |
|
|
schurzi
|
94a49a4916
|
Merge pull request #739 from dev-sec/restruct_vars
restructure readme to move known problems up top
|
2024-01-15 14:51:08 +01:00 |
|
|
schurzi
|
e7bad430f2
|
Merge pull request #733 from dev-sec/renovate/actions-setup-python-5.x
Update actions/setup-python action to v5
|
2023-12-10 11:10:36 +01:00 |
|
|
schurzi
|
d93c7401cf
|
Merge pull request #728 from dev-sec/renovate/ansible-core-2.x
Update dependency ansible-core to v2.16.1
|
2023-12-09 21:25:04 +01:00 |
|
|
Martin Schurz
|
d8c9ac71ec
|
fix assertion
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-09 19:14:41 +01:00 |
|
|
schurzi
|
b9a0e65e19
|
Merge pull request #730 from dev-sec/labeler5
update labeler to new config format
|
2023-12-07 09:32:28 +01:00 |
|
|
schurzi
|
e37f01df26
|
Merge pull request #732 from dev-sec/lintall
Update ansible-lint action and revise configuration to scan all Ansible code
|
2023-12-07 09:32:12 +01:00 |
|
|
Martin Schurz
|
1f0d2d5b73
|
add noconfirm
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 21:29:02 +01:00 |
|
|
Martin Schurz
|
5843b03449
|
add prepare for archlinux
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 20:29:43 +01:00 |
|
|
Martin Schurz
|
bf51b96a0b
|
add prepare for archlinux
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 20:21:49 +01:00 |
|
|
Martin Schurz
|
4bc5725836
|
hold grub updates in vm
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 17:51:39 +01:00 |
|
|
Martin Schurz
|
62340c79c6
|
re-add mysql config directory because it is needed by some os
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 16:33:31 +01:00 |
|
|
Martin Schurz
|
bc8b5f60f4
|
remove mysql config directory creation
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 16:08:31 +01:00 |
|
|
Martin Schurz
|
dff224f4c4
|
correct typo
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 15:57:08 +01:00 |
|
|
Martin Schurz
|
422fb940a9
|
manually fix remaining problems
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 15:27:21 +01:00 |
|
|
Martin Schurz
|
7e33ea0bae
|
use ansible-lint to autofix problems
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 14:37:09 +01:00 |
|
|
Martin Schurz
|
5381a23a4a
|
fix paste error
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 11:38:49 +01:00 |
|
|
Martin Schurz
|
e00716df62
|
fix lint findings
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 11:36:08 +01:00 |
|
|
Martin Schurz
|
6ce8b68650
|
adjust exclude paths
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 11:11:21 +01:00 |
|
|
Martin Schurz
|
f4500457fa
|
extend action triggers
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 11:09:24 +01:00 |
|
|
Martin Schurz
|
2bbfe2dd6b
|
exclude waiver files
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 11:07:43 +01:00 |
|
|
Martin Schurz
|
db437c79f5
|
extend action triggers
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 11:00:22 +01:00 |
|
|
Martin Schurz
|
099145c9b3
|
remove excludes
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 10:58:26 +01:00 |
|
|
Martin Schurz
|
9862676ecf
|
use new ansible-lint action
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-06 10:57:45 +01:00 |
|
|
Martin Schurz
|
6ef52a125d
|
use base branch
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-05 21:46:15 +01:00 |
|
|
Martin Schurz
|
bde286fe47
|
update config
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-05 21:42:01 +01:00 |
|
|
Martin Schurz
|
a58fc24301
|
use correct tag
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-05 21:38:36 +01:00 |
|
|
Martin Schurz
|
12240fea63
|
test labler
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-05 21:37:36 +01:00 |
|
|
Martin Schurz
|
82a0188b8c
|
update labeler to new config format
Signed-off-by: Martin Schurz <[email protected]>
|
2023-12-05 21:31:37 +01:00 |
|
|
schurzi
|
508b993570
|
Merge pull request #722 from dev-sec/arch_audit
support restarts of audit service on Arch linux
|
2023-11-24 13:36:18 +01:00 |
|
|
Martin Schurz
|
54f9ef42a1
|
don't try to restart audit in check mode
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-22 00:45:38 +01:00 |
|
|
Martin Schurz
|
25acb76c05
|
reload systemd after installation
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-21 23:59:22 +01:00 |
|
|
Martin Schurz
|
0f6b8e4a3a
|
use full service name for handler
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-21 23:04:41 +01:00 |
|
|
Martin Schurz
|
571cec1a5c
|
re-add vm tests
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-21 22:12:50 +01:00 |
|
|
Martin Schurz
|
20dd04c9cb
|
split notify, add tmp options for arch
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-21 21:58:58 +01:00 |
|
|
Martin Schurz
|
60d10811d4
|
add separate handlers for audit restart
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-21 21:45:05 +01:00 |
|
|
Martin Schurz
|
84c43c0550
|
limit tests to some distros
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-21 21:27:23 +01:00 |
|
|
schurzi
|
f9a1cab023
|
Merge pull request #721 from dev-sec/python_version
pin Ansible to always let Renovate update to the most current version in our tests
|
2023-11-21 16:38:21 +01:00 |
|
|
Martin Schurz
|
f15ff3fc83
|
remove unneeded mysql vars
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-21 16:37:50 +01:00 |
|
|
Martin Schurz
|
aae720c977
|
update python version for all tests
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-21 12:23:49 +01:00 |
|
|
Martin Schurz
|
c3b9245900
|
fix for mysql role
Signed-off-by: Martin Schurz <[email protected]>
|
2023-11-21 12:22:47 +01:00 |
|