forked from ansible-lockdown/RHEL9-CIS
Initial molecule thanks to @bbaassssiiee in rh8
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
30abc4b9d0
commit
dadbeaa84e
9 changed files with 205 additions and 0 deletions
27
molecule/default/converge.yml
Normal file
27
molecule/default/converge.yml
Normal file
|
|
@ -0,0 +1,27 @@
|
||||||
|
---
|
||||||
|
# This is a playbook to test the tasks.
|
||||||
|
- name: Converge
|
||||||
|
hosts: all
|
||||||
|
gather_facts: true
|
||||||
|
|
||||||
|
vars:
|
||||||
|
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||||
|
ansible_user: root
|
||||||
|
system_is_container: true
|
||||||
|
rhel9cis_selinux_disable: true
|
||||||
|
rhel9cis_rule_5_3_4: false
|
||||||
|
rhel9cis_rule_1_1_10: false
|
||||||
|
rhel9cis_firewall: "none"
|
||||||
|
rhel9cis_rule_4_1_1_1: false
|
||||||
|
rhel9cis_rule_4_1_1_2: false
|
||||||
|
rhel9cis_rule_4_1_1_3: false
|
||||||
|
rhel9cis_rule_4_1_1_4: false
|
||||||
|
rhel9cis_rule_4_2_1_2: false
|
||||||
|
rhel9cis_rule_4_2_1_4: false
|
||||||
|
rhel9cis_rule_5_1_1: false
|
||||||
|
|
||||||
|
pre_tasks:
|
||||||
|
tasks:
|
||||||
|
- name: "Include tasks"
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: "{{ role_name }}"
|
||||||
34
molecule/default/molecule.yml
Normal file
34
molecule/default/molecule.yml
Normal file
|
|
@ -0,0 +1,34 @@
|
||||||
|
---
|
||||||
|
# Molecule configuration
|
||||||
|
# https://molecule.readthedocs.io/en/latest/
|
||||||
|
|
||||||
|
driver:
|
||||||
|
name: docker
|
||||||
|
|
||||||
|
platforms:
|
||||||
|
- name: ubi9
|
||||||
|
image: registry.access.redhat.com/ubi9/ubi-init
|
||||||
|
pre_build_image: true
|
||||||
|
volumes:
|
||||||
|
- /sys/fs/cgroup:/sys/fs/cgroup:ro
|
||||||
|
privileged: true
|
||||||
|
command: "/usr/sbin/init"
|
||||||
|
capabilities:
|
||||||
|
- SYS_ADMIN
|
||||||
|
|
||||||
|
provisioner:
|
||||||
|
name: ansible
|
||||||
|
config_options:
|
||||||
|
defaults:
|
||||||
|
interpreter_python: auto_silent
|
||||||
|
callbacks_enabled: profile_tasks, timer
|
||||||
|
|
||||||
|
lint: |
|
||||||
|
set -e
|
||||||
|
yamllint .
|
||||||
|
ansible-lint
|
||||||
|
flake8
|
||||||
|
|
||||||
|
verifier:
|
||||||
|
name: ansible
|
||||||
|
|
||||||
13
molecule/default/verify.yml
Normal file
13
molecule/default/verify.yml
Normal file
|
|
@ -0,0 +1,13 @@
|
||||||
|
---
|
||||||
|
- name: Verify
|
||||||
|
hosts: all
|
||||||
|
gather_facts: false
|
||||||
|
|
||||||
|
vars:
|
||||||
|
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||||
|
|
||||||
|
tasks:
|
||||||
|
- name: "Include verify tasks"
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: "{{ role_name }}"
|
||||||
|
tasks_from: verify
|
||||||
18
molecule/localhost/converge.yml
Normal file
18
molecule/localhost/converge.yml
Normal file
|
|
@ -0,0 +1,18 @@
|
||||||
|
---
|
||||||
|
# This is a playbook to test the tasks.
|
||||||
|
- name: Converge
|
||||||
|
hosts: all
|
||||||
|
become: true
|
||||||
|
gather_facts: true
|
||||||
|
|
||||||
|
vars:
|
||||||
|
ansible_user: "{{ lookup('env', 'USER') }}"
|
||||||
|
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||||
|
rhel9cis_rule_5_3_4: false
|
||||||
|
|
||||||
|
pre_tasks:
|
||||||
|
tasks:
|
||||||
|
- name: "Include tasks"
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: "{{ role_name }}"
|
||||||
|
|
||||||
30
molecule/localhost/molecule.yml
Normal file
30
molecule/localhost/molecule.yml
Normal file
|
|
@ -0,0 +1,30 @@
|
||||||
|
---
|
||||||
|
# Molecule configuration
|
||||||
|
# https://molecule.readthedocs.io/en/latest/
|
||||||
|
|
||||||
|
driver:
|
||||||
|
name: delegated
|
||||||
|
options:
|
||||||
|
managed: false
|
||||||
|
ansible_connection_options:
|
||||||
|
ansible_connection: local
|
||||||
|
platforms:
|
||||||
|
- name: localhost
|
||||||
|
|
||||||
|
provisioner:
|
||||||
|
name: ansible
|
||||||
|
config_options:
|
||||||
|
defaults:
|
||||||
|
interpreter_python: auto_silent
|
||||||
|
stdout_callback: yaml
|
||||||
|
callbacks_enabled: profile_tasks, timer
|
||||||
|
|
||||||
|
lint: |
|
||||||
|
set -e
|
||||||
|
yamllint .
|
||||||
|
ansible-lint
|
||||||
|
flake8
|
||||||
|
|
||||||
|
verifier:
|
||||||
|
name: ansible
|
||||||
|
|
||||||
14
molecule/localhost/verify.yml
Normal file
14
molecule/localhost/verify.yml
Normal file
|
|
@ -0,0 +1,14 @@
|
||||||
|
---
|
||||||
|
- name: Verify
|
||||||
|
hosts: all
|
||||||
|
gather_facts: false
|
||||||
|
become: true
|
||||||
|
|
||||||
|
vars:
|
||||||
|
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||||
|
|
||||||
|
tasks:
|
||||||
|
- name: "Include verify tasks"
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: "{{ role_name }}"
|
||||||
|
tasks_from: verify
|
||||||
27
molecule/wsl/converge.yml
Normal file
27
molecule/wsl/converge.yml
Normal file
|
|
@ -0,0 +1,27 @@
|
||||||
|
---
|
||||||
|
# This is a playbook to test the tasks.
|
||||||
|
- name: Converge
|
||||||
|
hosts: all
|
||||||
|
become: true
|
||||||
|
gather_facts: true
|
||||||
|
|
||||||
|
vars:
|
||||||
|
ansible_user: "{{ lookup('env', 'USER') }}"
|
||||||
|
system_is_container: true
|
||||||
|
rhel8cis_selinux_disable: true
|
||||||
|
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||||
|
rhel8cis_rule_5_3_4: false
|
||||||
|
rhel8cis_rule_1_1_10: false
|
||||||
|
rhel8cis_rsyslog_ansiblemanaged: false
|
||||||
|
rhel8cis_rule_3_4_1_3: false
|
||||||
|
rhel8cis_rule_3_4_1_4: false
|
||||||
|
rhel8cis_rule_4_2_1_2: false
|
||||||
|
rhel8cis_rule_4_2_1_4: false
|
||||||
|
rhel8cis_rule_5_1_1: false
|
||||||
|
|
||||||
|
pre_tasks:
|
||||||
|
tasks:
|
||||||
|
- name: "Include tasks"
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: "{{ role_name }}"
|
||||||
|
|
||||||
29
molecule/wsl/molecule.yml
Normal file
29
molecule/wsl/molecule.yml
Normal file
|
|
@ -0,0 +1,29 @@
|
||||||
|
---
|
||||||
|
# Molecule configuration
|
||||||
|
# https://molecule.readthedocs.io/en/latest/
|
||||||
|
|
||||||
|
driver:
|
||||||
|
name: delegated
|
||||||
|
options:
|
||||||
|
managed: false
|
||||||
|
ansible_connection_options:
|
||||||
|
ansible_connection: local
|
||||||
|
platforms:
|
||||||
|
- name: localhost
|
||||||
|
|
||||||
|
provisioner:
|
||||||
|
name: ansible
|
||||||
|
config_options:
|
||||||
|
defaults:
|
||||||
|
interpreter_python: auto_silent
|
||||||
|
callbacks_enabled: profile_tasks, timer
|
||||||
|
|
||||||
|
lint: |
|
||||||
|
set -e
|
||||||
|
yamllint .
|
||||||
|
ansible-lint
|
||||||
|
flake8
|
||||||
|
|
||||||
|
verifier:
|
||||||
|
name: ansible
|
||||||
|
|
||||||
13
molecule/wsl/verify.yml
Normal file
13
molecule/wsl/verify.yml
Normal file
|
|
@ -0,0 +1,13 @@
|
||||||
|
---
|
||||||
|
- name: Verify
|
||||||
|
hosts: all
|
||||||
|
gather_facts: false
|
||||||
|
|
||||||
|
vars:
|
||||||
|
role_name: "{{ lookup('env', 'MOLECULE_PROJECT_DIRECTORY') | basename }}"
|
||||||
|
|
||||||
|
tasks:
|
||||||
|
- name: "Include verify tasks"
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: "{{ role_name }}"
|
||||||
|
tasks_from: verify
|
||||||
Loading…
Add table
Add a link
Reference in a new issue