enable debian12 for vm tests

Signed-off-by: Sebastian Gumprich <[email protected]>
add back accidentally deleted tasks
2023-09-22 08:52:27 +02:00 · 2023-08-04 12:42:14 +02:00 · 2023-08-04 12:41:40 +02:00 · 2023-08-04 11:40:48 +02:00 · 2023-08-04 10:59:32 +02:00 · 2023-08-04 10:59:19 +02:00
10 changed files with 41 additions and 17 deletions
@@ -45,6 +45,7 @@ jobs:
          - ubuntu2204
          - debian10
          - debian11
+          - debian12
          # - amazon  # geerlingguy.mysql does not support fedora
          # - arch  # geerlingguy.mysql does not support arch
          - opensuse_tumbleweed
@@ -44,6 +44,7 @@ jobs:
          - ubuntu2204
          - debian10
          - debian11
+          - debian12
          - amazon2023
          # - arch  # needs to be fixed
          # - opensuse_tumbleweed  # needs to be fixed
@@ -46,6 +46,7 @@ jobs:
          - ubuntu2204
          - debian10
          - debian11
+          - debian12
          - amazon2023
          - opensuse_tumbleweed
          - arch
@@ -46,6 +46,7 @@ jobs:
          - ubuntu2204
          - debian10
          - debian11
+          - debian12
          - opensuse15
          # - arch  # needs fix for audit
    steps:
@@ -46,6 +46,7 @@ jobs:
          - ubuntu2204
          - debian10
          - debian11
+          - debian12
          - amazon2023
          - arch
          # - opensuse_tumbleweed  # needs fix - opensuse has different file location for conf and pam (/usr/etc/ssh/?, /usr/lib/pam.d/?)
@@ -46,6 +46,7 @@ jobs:
          - ubuntu2204
          - debian10
          - debian11
+          - debian12
          - amazon2023
          - arch
          # - opensuse_tumbleweed  # needs fix - opensuse has different file location for conf and pam (/usr/etc/ssh/?, /usr/lib/pam.d/?)
@@ -11,9 +11,9 @@
 This collection provides battle tested hardening for:

 - Linux operating systems:
-  - CentOS 7
-  - Rocky Linux 8
-  - Debian 10/11
+  - CentOS 7/8/9
+  - Rocky Linux 8/9
+  - Debian 10/11/12
  - Ubuntu 18.04/20.04/22.04
  - Amazon Linux (some roles supported)
  - Arch Linux (some roles supported)
@@ -7,6 +7,10 @@
    https_proxy: "{{ lookup('env', 'https_proxy') | default(omit) }}"
    no_proxy: "{{ lookup('env', 'no_proxy') | default(omit) }}"
  tasks:
+    - name: set ansible_python_interpreter to "/usr/bin/python3"
+      set_fact:
+        ansible_python_interpreter: "/usr/bin/python3"
+
    - name: include verification tasks
      ansible.builtin.include_tasks:
        file: "{{ item }}"
@@ -1,9 +1,17 @@
 ---
- name: download pam-tester
-  get_url:
-    url: https://github.com/schurzi/pam-tester/releases/download/latest/pam-tester
-    dest: /bin/pam-tester
-    mode: 0555
+
+- name: install pip
+  package:
+    name:
+      - python3-pip
+      - python3-setuptools
+    state: present
+
+- name: install pam-tester
+  ansible.builtin.pip:
+    name: pam-tester
+    state: present
+    executable: /usr/bin/pip3

 - name: set password for test
  set_fact:
@@ -23,7 +31,7 @@

 - name: check successful login with correct password
  shell:
-    cmd: "pam-tester --user testuser --password {{ test_pw }}"
+    cmd: "/usr/local/bin/pam-tester --user testuser --password {{ test_pw }}"
  environment:
    TMPDIR: /var/tmp
    LC_ALL: "{{ locale | default('C.UTF-8') }}"
@@ -31,7 +39,7 @@

 - name: check unsuccessful login with incorrect password
  shell:
-    cmd: "pam-tester --user testuser --password {{ test_pw }}fail --expectfail"
+    cmd: "/usr/local/bin/pam-tester --user testuser --password {{ test_pw }}fail --expectfail"
  environment:
    TMPDIR: /var/tmp
    LC_ALL: "{{ locale | default('C.UTF-8') }}"
@@ -40,7 +48,7 @@

 - name: check unsuccessful login, with correct password (lockout)
  shell:
-    cmd: "pam-tester --user testuser --password {{ test_pw }} --expectfail"
+    cmd: "/usr/local/bin/pam-tester --user testuser --password {{ test_pw }} --expectfail"
  environment:
    TMPDIR: /var/tmp
    LC_ALL: "{{ locale | default('C.UTF-8') }}"
@@ -52,7 +60,7 @@

 - name: check successful login
  shell:
-    cmd: "pam-tester --user testuser --password {{ test_pw }}"
+    cmd: "/usr/local/bin/pam-tester --user testuser --password {{ test_pw }}"
  environment:
    TMPDIR: /var/tmp
    LC_ALL: "{{ locale | default('C.UTF-8') }}"
@@ -1,9 +1,15 @@
 ---
- name: download pam-tester
-  get_url:
-    url: https://github.com/schurzi/pam-tester/releases/download/latest/pam-tester
-    dest: /bin/pam-tester
-    mode: 0555
+- name: install pip
+  package:
+    name:
+      - python3-pip
+      - python3-setuptools
+    state: present
+
+- name: install pam-tester
+  ansible.builtin.pip:
+    name: pam-tester
+    state: present

 - name: set password for test
  set_fact:
Author	SHA1	Message	Date
Sebastian Gumprich	8effc06c91	enable debian12 for vm tests Signed-off-by: Sebastian Gumprich <[email protected]>	2023-09-22 08:52:27 +02:00
Sebastian Gumprich	a81b9bc0e6	add back accidentally deleted tasks Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-04 12:42:14 +02:00
Sebastian Gumprich	a1c44a1459	Revert "set python interpreter to 3 for verify-tests" This reverts commit `00b6556e33`.	2023-08-04 12:41:40 +02:00
Sebastian Gumprich	00b6556e33	set python interpreter to 3 for verify-tests Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-04 11:40:48 +02:00
Sebastian Gumprich	c87fe430c7	fix path for pam-tester in all tests Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-04 10:59:32 +02:00
Sebastian Gumprich	35d3e6aa9d	install python3-setupttools in verify-tests Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-04 10:59:19 +02:00
Sebastian Gumprich	5fbed64dd4	install pam-tester with python3 and use full path to it Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-04 09:59:41 +02:00
Sebastian Gumprich	c678514bb6	add setuptoolks to pam-tester install Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-01 13:55:02 +02:00
Sebastian Gumprich	c9d6d981a3	add setuptoolks to pam-tester install Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-01 13:39:06 +02:00
Sebastian Gumprich	a2aae0f49b	add setuptoolks to pam-tester install Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-01 13:13:16 +02:00
Sebastian Gumprich	6ca2f11433	add setuptoolks to pam-tester install Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-01 12:49:53 +02:00
Sebastian Gumprich	f901b684ba	use new pam-tester from pip Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-01 09:29:17 +02:00
Sebastian Gumprich	186b36d954	use new pam-tester from pip Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-01 09:00:13 +02:00
Sebastian Gumprich	49e8d4fdda	remove debian12 from vagrant tests as there's no box yet Signed-off-by: Sebastian Gumprich <[email protected]>	2023-06-21 14:36:11 +02:00
Sebastian Gumprich	7f8b34e0fb	temp disable pam-checks Signed-off-by: Sebastian Gumprich <[email protected]>	2023-06-21 13:40:11 +02:00
Sebastian Gumprich	6d8f4dfbfb	add debian 12 support Signed-off-by: Sebastian Gumprich <[email protected]>	2023-06-20 15:30:22 +02:00