schurzi
a806ec8598
* add VM tests for ssh_hardening Signed-off-by: Martin Schurz <[email protected]> * remove VM tests from ssh_hardening Signed-off-by: Martin Schurz <[email protected]> * run ssh_hardening test as unprivileged user Signed-off-by: Martin Schurz <[email protected]> * add link for documentation Signed-off-by: Martin Schurz <[email protected]> * use different config Signed-off-by: Martin Schurz <[email protected]> * remove become Signed-off-by: Martin Schurz <[email protected]> * re-add become Signed-off-by: Martin Schurz <[email protected]> * move become into role Signed-off-by: Martin Schurz <[email protected]> * indentation Signed-off-by: Martin Schurz <[email protected]> * try args apply Signed-off-by: Martin Schurz <[email protected]> * fix linting Signed-off-by: Martin Schurz <[email protected]> * add documentation Signed-off-by: Martin Schurz <[email protected]> Signed-off-by: Martin Schurz <[email protected]>
71 lines
1.4 KiB
YAML
71 lines
1.4 KiB
YAML
---
|
|
dependency:
|
|
name: galaxy
|
|
options:
|
|
role-file: molecule/ssh_hardening/requirements.yml
|
|
driver:
|
|
name: docker
|
|
platforms:
|
|
- name: instance
|
|
image: "rndmh3ro/docker-${MOLECULE_DISTRO}-ansible:latest"
|
|
command: ${MOLECULE_DOCKER_COMMAND:-/lib/systemd/systemd}
|
|
volumes:
|
|
- /sys/fs/cgroup:/sys/fs/cgroup:ro
|
|
privileged: true
|
|
tmpfs:
|
|
- /tmp
|
|
- /run
|
|
capabilities:
|
|
- SYS_ADMIN
|
|
tty: true
|
|
env:
|
|
http_proxy: "${http_proxy}"
|
|
https_proxy: "${https_proxy}"
|
|
no_proxy: "${no_proxy}"
|
|
container: docker
|
|
provisioner:
|
|
name: ansible
|
|
config_options:
|
|
defaults:
|
|
interpreter_python: auto_silent
|
|
callback_whitelist: profile_tasks, timer, yaml
|
|
inventory:
|
|
host_vars:
|
|
# https://molecule.readthedocs.io/en/latest/examples.html#docker-with-non-privileged-user
|
|
# setting for the platform instance named 'instance'
|
|
instance:
|
|
ansible_user: ansible
|
|
verifier:
|
|
name: ansible
|
|
|
|
scenario:
|
|
create_sequence:
|
|
- dependency
|
|
- create
|
|
- prepare
|
|
check_sequence:
|
|
- dependency
|
|
- destroy
|
|
- create
|
|
- prepare
|
|
- converge
|
|
- check
|
|
- destroy
|
|
converge_sequence:
|
|
- dependency
|
|
- create
|
|
- prepare
|
|
- converge
|
|
destroy_sequence:
|
|
- destroy
|
|
test_sequence:
|
|
- dependency
|
|
- destroy
|
|
- syntax
|
|
- create
|
|
- prepare
|
|
- converge
|
|
- idempotence
|
|
- verify
|
|
- destroy
|