schurzi
29f8a2fb78
* add testing for OpenBSD and FreeBSD Signed-off-by: Martin Schurz <[email protected]> * make python work Signed-off-by: Martin Schurz <[email protected]> * remove jinja template ... Signed-off-by: Martin Schurz <[email protected]> * make verify work Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * use right vm name for connect Signed-off-by: Martin Schurz <[email protected]> * add a bit of documentation Signed-off-by: Martin Schurz <[email protected]> * remove sudo Signed-off-by: Martin Schurz <[email protected]> * add weird OpenSBD workaround Signed-off-by: Martin Schurz <[email protected]> * make verify playbook more consistent Signed-off-by: Martin Schurz <[email protected]> * rename nonlinux to BSD Signed-off-by: Martin Schurz <[email protected]> * use openbsd7 for testing Signed-off-by: Martin Schurz <[email protected]> * correct use openbsd7 everywhere Signed-off-by: Martin Schurz <[email protected]> * add waivers Signed-off-by: Martin Schurz <[email protected]> * update waiver descriptions Signed-off-by: Martin Schurz <[email protected]> * use docker for inspec Signed-off-by: Martin Schurz <[email protected]> * keep looking right ;) Signed-off-by: Martin Schurz <[email protected]> * correct path to waivers Signed-off-by: Martin Schurz <[email protected]> * use ephemeral directory in docker Signed-off-by: Martin Schurz <[email protected]> * use bsd inspec profile Signed-off-by: Martin Schurz <[email protected]> * remove openbsd workaround Signed-off-by: Martin Schurz <[email protected]> * re-add openbsd workaround Signed-off-by: Martin Schurz <[email protected]> * commit suggestions Signed-off-by: Martin Schurz <[email protected]> * add supportet OS to metadata Signed-off-by: Martin Schurz <[email protected]> * use current python Signed-off-by: Martin Schurz <[email protected]> --------- Signed-off-by: Martin Schurz <[email protected]>
63 lines
1.2 KiB
YAML
63 lines
1.2 KiB
YAML
---
|
|
dependency:
|
|
name: galaxy
|
|
options:
|
|
role-file: molecule/ssh_hardening_bsd/requirements.yml
|
|
driver:
|
|
name: vagrant
|
|
provider:
|
|
name: libvirt
|
|
platforms:
|
|
# we need to name every instance differntly to start multiple VMs on the same host (parallelization)
|
|
# since we also need to use different OS users to run the tests because of how molecule operates,
|
|
# the VM names must be predictable by OS user (to clean up canceled runs)
|
|
- name: "${USER}"
|
|
box: "generic/${MOLECULE_DISTRO}"
|
|
memory: 1024
|
|
cpus: 2
|
|
provisioner:
|
|
name: ansible
|
|
options:
|
|
diff: true
|
|
env:
|
|
ANSIBLE_PIPELINING: "True"
|
|
config_options:
|
|
defaults:
|
|
interpreter_python: auto_silent
|
|
callback_whitelist: profile_tasks, timer, yaml
|
|
verifier:
|
|
name: ansible
|
|
env:
|
|
ANSIBLE_PIPELINING: "True"
|
|
|
|
scenario:
|
|
create_sequence:
|
|
- dependency
|
|
- create
|
|
- prepare
|
|
check_sequence:
|
|
- dependency
|
|
- destroy
|
|
- create
|
|
- prepare
|
|
- converge
|
|
- check
|
|
- destroy
|
|
converge_sequence:
|
|
- dependency
|
|
- create
|
|
- prepare
|
|
- converge
|
|
destroy_sequence:
|
|
- destroy
|
|
test_sequence:
|
|
- dependency
|
|
- destroy
|
|
- syntax
|
|
- create
|
|
- prepare
|
|
- converge
|
|
- idempotence
|
|
- verify
|
|
- destroy
|