Initial

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

tasks/pre_remediation_audit.yml

@@ -0,0 +1,118 @@
+---
+
+- name: Pre Audit | Setup the audit
+  include_tasks: LE_audit_setup.yml
+  when:
+  - setup_audit
+  tags:
+  - setup_audit
+
+- name: "Pre Audit | Ensure {{ audit_conf_dir }} exists"
+  file:
+      path: "{{ audit_conf_dir }}"
+      state: directory
+      mode: '0755'
+
+- name: Pre Audit | If using git for content set up
+  block:
+  - name: Pre Audit | Install git (rh8 python3)
+    package:
+        name: git
+        state: present
+    when: ansible_distribution_major_version == 8
+
+  - name: Pre Audit | Install git (rh7 python2)
+    package:
+        name: git
+        state: present
+    vars:
+        ansible_python_interpreter: "{{ python2_bin }}"
+    when: ansible_distribution_major_version == 7
+
+  - name: Pre Audit | retrieve audit content files from git
+    git:
+        repo: "{{ audit_file_git }}"
+        dest: "{{ audit_conf_dir }}"
+        version: "{{ audit_git_version }}"
+  when:
+  - audit_content == 'git'
+
+- name: Pre Audit | copy to audit content files to server
+  copy:
+      src: "{{ audit_local_copy }}"
+      dest: "{{ audit_conf_dir }}"
+      mode: 0644
+  when:
+  - audit_content == 'copy'
+
+- name: Pre Audit | get audit content from url
+  get_url:
+      url: "{{ audit_files_url }}"
+      dest: "{{ audit_conf_dir }}"
+  when:
+  - audit_content == 'get_url'
+
+- name: Pre Audit | Check Goss is available
+  block:
+  - name: Pre Audit | Check for goss file
+    stat:
+        path: "{{ audit_bin }}"
+    register: goss_available
+
+  - name: Pre Audit | If audit ensure goss is available
+    assert:
+        msg: "Audit has been selected: unable to find goss binary at {{ audit_bin }}"
+    when:
+    - not goss_available.stat.exists
+  when:
+  - run_audit
+
+- name: "Pre Audit | Check whether machine is UEFI-based"
+  stat:
+      path: /sys/firmware/efi
+  register: rhel9_efi_boot
+  tags:
+  - goss_template
+
+- name: Pre Audit | Copy ansible default vars values to test audit
+  template:
+      src: ansible_vars_goss.yml.j2
+      dest: "{{ audit_vars_path }}"
+      mode: 0600
+  when:
+  - run_audit
+  tags:
+  - goss_template
+
+- name: "Pre Audit | Run pre_remediation {{ benchmark }} audit"
+  shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ pre_audit_outfile }} -g {{ group_names }}"
+  vars:
+      warn: false
+
+- name: Pre Audit | Capture audit data if json format
+  block:
+  - name: "Pre Audit | capture data {{ pre_audit_outfile }}"
+    command: "cat {{ pre_audit_outfile }}"
+    register: pre_audit
+    changed_when: false
+
+  - name: Pre Audit | Capture pre-audit result
+    set_fact:
+        pre_audit_summary: "{{ pre_audit.stdout | from_json |json_query(summary) }}"
+    vars:
+        summary: 'summary."summary-line"'
+  when:
+  - audit_format == "json"
+
+- name: Pre Audit | Capture audit data if documentation format
+  block:
+  - name: "Pre Audit | capture data {{ pre_audit_outfile }}"
+    command: "tail -2 {{ pre_audit_outfile }}"
+    register: pre_audit
+    changed_when: false
+
+  - name: Pre Audit | Capture pre-audit result
+    set_fact:
+        pre_audit_summary: "{{ pre_audit.stdout_lines }}"
+  when:
+  - audit_format == "documentation"