forked from ansible-lockdown/RHEL9-CIS
Initial molecule thanks to @bbaassssiiee in rh8
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
30abc4b9d0
commit
dadbeaa84e
9 changed files with 205 additions and 0 deletions
27
molecule/default/converge.yml
Normal file
27
molecule/default/converge.yml
Normal file
|
|
@ -0,0 +1,27 @@
|
|||
---
|
||||
# This is a playbook to test the tasks.
|
||||
- name: Converge
|
||||
hosts: all
|
||||
gather_facts: true
|
||||
|
||||
vars:
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
ansible_user: root
|
||||
system_is_container: true
|
||||
rhel9cis_selinux_disable: true
|
||||
rhel9cis_rule_5_3_4: false
|
||||
rhel9cis_rule_1_1_10: false
|
||||
rhel9cis_firewall: "none"
|
||||
rhel9cis_rule_4_1_1_1: false
|
||||
rhel9cis_rule_4_1_1_2: false
|
||||
rhel9cis_rule_4_1_1_3: false
|
||||
rhel9cis_rule_4_1_1_4: false
|
||||
rhel9cis_rule_4_2_1_2: false
|
||||
rhel9cis_rule_4_2_1_4: false
|
||||
rhel9cis_rule_5_1_1: false
|
||||
|
||||
pre_tasks:
|
||||
tasks:
|
||||
- name: "Include tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
34
molecule/default/molecule.yml
Normal file
34
molecule/default/molecule.yml
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
---
|
||||
# Molecule configuration
|
||||
# https://molecule.readthedocs.io/en/latest/
|
||||
|
||||
driver:
|
||||
name: docker
|
||||
|
||||
platforms:
|
||||
- name: ubi9
|
||||
image: registry.access.redhat.com/ubi9/ubi-init
|
||||
pre_build_image: true
|
||||
volumes:
|
||||
- /sys/fs/cgroup:/sys/fs/cgroup:ro
|
||||
privileged: true
|
||||
command: "/usr/sbin/init"
|
||||
capabilities:
|
||||
- SYS_ADMIN
|
||||
|
||||
provisioner:
|
||||
name: ansible
|
||||
config_options:
|
||||
defaults:
|
||||
interpreter_python: auto_silent
|
||||
callbacks_enabled: profile_tasks, timer
|
||||
|
||||
lint: |
|
||||
set -e
|
||||
yamllint .
|
||||
ansible-lint
|
||||
flake8
|
||||
|
||||
verifier:
|
||||
name: ansible
|
||||
|
||||
13
molecule/default/verify.yml
Normal file
13
molecule/default/verify.yml
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
- name: Verify
|
||||
hosts: all
|
||||
gather_facts: false
|
||||
|
||||
vars:
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
|
||||
tasks:
|
||||
- name: "Include verify tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
tasks_from: verify
|
||||
18
molecule/localhost/converge.yml
Normal file
18
molecule/localhost/converge.yml
Normal file
|
|
@ -0,0 +1,18 @@
|
|||
---
|
||||
# This is a playbook to test the tasks.
|
||||
- name: Converge
|
||||
hosts: all
|
||||
become: true
|
||||
gather_facts: true
|
||||
|
||||
vars:
|
||||
ansible_user: "{{ lookup('env', 'USER') }}"
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
rhel9cis_rule_5_3_4: false
|
||||
|
||||
pre_tasks:
|
||||
tasks:
|
||||
- name: "Include tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
|
||||
30
molecule/localhost/molecule.yml
Normal file
30
molecule/localhost/molecule.yml
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
---
|
||||
# Molecule configuration
|
||||
# https://molecule.readthedocs.io/en/latest/
|
||||
|
||||
driver:
|
||||
name: delegated
|
||||
options:
|
||||
managed: false
|
||||
ansible_connection_options:
|
||||
ansible_connection: local
|
||||
platforms:
|
||||
- name: localhost
|
||||
|
||||
provisioner:
|
||||
name: ansible
|
||||
config_options:
|
||||
defaults:
|
||||
interpreter_python: auto_silent
|
||||
stdout_callback: yaml
|
||||
callbacks_enabled: profile_tasks, timer
|
||||
|
||||
lint: |
|
||||
set -e
|
||||
yamllint .
|
||||
ansible-lint
|
||||
flake8
|
||||
|
||||
verifier:
|
||||
name: ansible
|
||||
|
||||
14
molecule/localhost/verify.yml
Normal file
14
molecule/localhost/verify.yml
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
---
|
||||
- name: Verify
|
||||
hosts: all
|
||||
gather_facts: false
|
||||
become: true
|
||||
|
||||
vars:
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
|
||||
tasks:
|
||||
- name: "Include verify tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
tasks_from: verify
|
||||
27
molecule/wsl/converge.yml
Normal file
27
molecule/wsl/converge.yml
Normal file
|
|
@ -0,0 +1,27 @@
|
|||
---
|
||||
# This is a playbook to test the tasks.
|
||||
- name: Converge
|
||||
hosts: all
|
||||
become: true
|
||||
gather_facts: true
|
||||
|
||||
vars:
|
||||
ansible_user: "{{ lookup('env', 'USER') }}"
|
||||
system_is_container: true
|
||||
rhel8cis_selinux_disable: true
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
rhel8cis_rule_5_3_4: false
|
||||
rhel8cis_rule_1_1_10: false
|
||||
rhel8cis_rsyslog_ansiblemanaged: false
|
||||
rhel8cis_rule_3_4_1_3: false
|
||||
rhel8cis_rule_3_4_1_4: false
|
||||
rhel8cis_rule_4_2_1_2: false
|
||||
rhel8cis_rule_4_2_1_4: false
|
||||
rhel8cis_rule_5_1_1: false
|
||||
|
||||
pre_tasks:
|
||||
tasks:
|
||||
- name: "Include tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
|
||||
29
molecule/wsl/molecule.yml
Normal file
29
molecule/wsl/molecule.yml
Normal file
|
|
@ -0,0 +1,29 @@
|
|||
---
|
||||
# Molecule configuration
|
||||
# https://molecule.readthedocs.io/en/latest/
|
||||
|
||||
driver:
|
||||
name: delegated
|
||||
options:
|
||||
managed: false
|
||||
ansible_connection_options:
|
||||
ansible_connection: local
|
||||
platforms:
|
||||
- name: localhost
|
||||
|
||||
provisioner:
|
||||
name: ansible
|
||||
config_options:
|
||||
defaults:
|
||||
interpreter_python: auto_silent
|
||||
callbacks_enabled: profile_tasks, timer
|
||||
|
||||
lint: |
|
||||
set -e
|
||||
yamllint .
|
||||
ansible-lint
|
||||
flake8
|
||||
|
||||
verifier:
|
||||
name: ansible
|
||||
|
||||
13
molecule/wsl/verify.yml
Normal file
13
molecule/wsl/verify.yml
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
- name: Verify
|
||||
hosts: all
|
||||
gather_facts: false
|
||||
|
||||
vars:
|
||||
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||
|
||||
tasks:
|
||||
- name: "Include verify tasks"
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ role_name }}"
|
||||
tasks_from: verify
|
||||
Loading…
Add table
Add a link
Reference in a new issue