Commit graph

89 commits

Author SHA1 Message Date
Martin Schurz
a186760b45 exclude broken tests
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-04-11 09:51:05 +02:00
Martin Schurz
31c9885610 use docker for inspec-auditor
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-04-10 23:22:41 +02:00
Martin Schurz
ebab98930c try docker for inspec-auditor
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-04-10 22:58:28 +02:00
Martin Schurz
5357f9e718 use current version of amazon linux
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-04-10 22:23:48 +02:00
Martin Schurz
63dc9d3be8 use current amazon linux
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-04-10 19:44:01 +02:00
Martin Schurz
e346c2300f remove unneccessary symlink
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-04-10 11:02:33 +02:00
Martin Schurz
2de009e3b5 use latest runner version
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-04-10 10:28:11 +02:00
schurzi
29f8a2fb78
add testing for OpenBSD and FreeBSD (#642)
* add testing for OpenBSD and FreeBSD

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* make python work

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* remove jinja template ...

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* make verify work

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* correct verify

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* correct verify

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* correct verify

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* correct verify

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use right vm name for connect

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* add a bit of documentation

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* remove sudo

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* add weird OpenSBD workaround

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* make verify playbook more consistent

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* rename nonlinux to BSD

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use openbsd7 for testing

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* correct use openbsd7 everywhere

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* add waivers

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* update waiver descriptions

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use docker for inspec

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* keep looking right ;)

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* correct path to waivers

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use ephemeral directory in docker

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use bsd inspec profile

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* remove openbsd workaround

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* re-add openbsd workaround

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* commit suggestions

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* add supportet OS to metadata

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use current python

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

---------

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-03-31 09:50:04 +02:00
Martin Schurz
e9fa44c243 remove dependabot
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-03-31 09:12:55 +02:00
dependabot[bot]
3a907b2921
Bump creyD/prettier_action from 4.2 to 4.3
Bumps [creyD/prettier_action](https://github.com/creyD/prettier_action) from 4.2 to 4.3.
- [Release notes](https://github.com/creyD/prettier_action/releases)
- [Commits](https://github.com/creyD/prettier_action/compare/v4.2...v4.3)

---
updated-dependencies:
- dependency-name: creyD/prettier_action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-21 12:07:33 +00:00
schurzi
9b32aca0ca
run our CI tests periodically (#634)
* allow multiple instances for os vm tests

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* add scheduled trigger to all test actions

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use different scenario names

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use different scenario names

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use different scenario names

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use username to create uniqe vms

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use compatible name

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* add explaination

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

---------

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-02-07 09:27:46 +01:00
schurzi
1ef9171393
remove unneccessary tasks for VM based test (#629)
* add remaining platforms to test

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* remove unneccessary tasks for test

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* use current opensuse version

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* disable sysctl for missing yama in opensuse

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

---------

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2023-02-06 08:37:40 +01:00
dependabot[bot]
f34f24deb7
Bump hugo19941994/delete-draft-releases from 1.0.0 to 1.0.1 (#627)
Bumps [hugo19941994/delete-draft-releases](https://github.com/hugo19941994/delete-draft-releases) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/hugo19941994/delete-draft-releases/releases)
- [Commits](https://github.com/hugo19941994/delete-draft-releases/compare/v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: hugo19941994/delete-draft-releases
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-01 12:37:31 +01:00
Sebastian Gumprich
bfedba6907 do not let dependabot label our prs
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2023-01-30 16:20:35 +01:00
Sebastian Gumprich
330a1eb94d run linting only when files inside roles change
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2023-01-30 10:23:25 +01:00
Sebastian Gumprich
db4bd32767 cancel running tests if new commit to branch is made
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2023-01-24 13:08:04 +01:00
dependabot[bot]
16f78bc6be
Bump actions/setup-python from 1 to 4 (#611)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 1 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v1...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-24 10:28:54 +01:00
dependabot[bot]
395091c41d
Bump creyD/prettier_action from 3.1 to 4.2 (#610)
Bumps [creyD/prettier_action](https://github.com/creyD/prettier_action) from 3.1 to 4.2.
- [Release notes](https://github.com/creyD/prettier_action/releases)
- [Commits](https://github.com/creyD/prettier_action/compare/v3.1...v4.2)

---
updated-dependencies:
- dependency-name: creyD/prettier_action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-17 19:53:05 +01:00
John Losito
9d0cc42039
Check for github action updates daily (#609)
Signed-off-by: John Losito <lositojohnj@gmail.com>

Signed-off-by: John Losito <lositojohnj@gmail.com>
2022-12-17 19:48:02 +01:00
Sebastian Gumprich
e66c2eb6bb
Add OpenSUSE support (#605)
* Add variables for mariadb on opensuse

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* enable pipeline

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* add a note about the reuirement of the jmespath library.

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* Use python3 on opensuse

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* fix my yml.

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* use right ansible variable

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* Suse requires python-rpm

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* try zypper

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* python-xml

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* another try at fixing the install

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* fix my yml

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* another try

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* another try

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* another try now with rpm.

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* fix my yml...

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* typo

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* do the test for Suse on the shell and not in ansible

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* specify to use bash

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* specify to use bash

* try the removes keyword of builtin.shell

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* fix ansible syntax

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* fix zypper syntax

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* ensure pymysql is present

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>

* set ansible python interpreter in converge-step, too

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>

* move install task to prepare

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>

Signed-off-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
Co-authored-by: Florian Goth <fgoth@physik.uni-wuerzburg.de>
2022-11-29 15:09:27 +01:00
Martin Schurz
1346e37e14 actually add templates ...
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-10-28 10:26:00 +02:00
Martin Schurz
f496b385dd use github templates for new issues
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-10-27 20:41:06 +02:00
Martin Schurz
c30ef42355 exclude el9 from vm tests
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-10-25 18:59:11 +02:00
Sebastian Gumprich
414efd6125 use correct centos stream images, try to fix prepare step for debian tests
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2022-10-25 18:59:11 +02:00
Sebastian Gumprich
a176443f22 add support for centos stream 8 and 9, rocky 9
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2022-10-24 10:03:07 +02:00
Sebastian Gumprich
44489dea5f
run tests only on pushes to master or to PRs (#581)
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2022-09-28 10:44:31 +02:00
Sebastian Gumprich
11d187e62e
update supported OS in meta and fix linting (#572)
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2022-08-26 13:44:51 +02:00
Sebastian Gumprich
fbea75ad18
only run release actions on upstream-repo (#568)
fixes #566

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2022-08-26 09:40:59 +02:00
Daya Adianto
eef8708918
Add full support for Debian 11 (#538)
* Include Debian 11 into Molecule test suites (#527)

Signed-off-by: Daya Adianto <dayaadianto@cs.ui.ac.id>

* Fix Ansible Lint GitHub Action version (#527)

Signed-off-by: Daya Adianto <dayaadianto@cs.ui.ac.id>

* Update .gitignore

Signed-off-by: Daya Adianto <dayaadianto@cs.ui.ac.id>

* mysql_hardening: Use Python 3 as Ansible interpreter (#527)

Signed-off-by: Daya Adianto <dayaadianto@cs.ui.ac.id>

* Note Debian 11 support for os_hardening & nginx_hardening (#527)

Signed-off-by: Daya Adianto <dayaadianto@cs.ui.ac.id>

* Fix lint issues & Ansible Lint configuration in CI

Signed-off-by: Daya Adianto <dayaadianto@cs.ui.ac.id>

* Try to fix YAML lint issues, again

Re-ordered YAML comments at the end of `.yamllint` file.

Signed-off-by: Daya Adianto <dayaadianto@cs.ui.ac.id>

* rm debian9 from tests, add debian 11 where missing

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>

* fix mysql molecule tests

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>

Signed-off-by: Daya Adianto <dayaadianto@cs.ui.ac.id>
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
Co-authored-by: Sebastian Gumprich <rndmh3ro@users.noreply.github.com>
Co-authored-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2022-08-16 15:02:27 +02:00
schurzi
b56c801574
add basic support for ubuntu22.04 (#554)
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-08-15 13:05:09 +02:00
Martin Schurz
0f631c1405 add sysctl exclude
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-11 09:39:52 +02:00
Martin Schurz
92dc094022 add sysctl exclude
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-11 09:05:58 +02:00
Martin Schurz
fdc6b333c9 exclude arch
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-10 21:30:45 +02:00
Martin Schurz
1825eba27a exclude opensuse
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-10 21:08:50 +02:00
Martin Schurz
730510c2a7 add opensuse and arch
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-10 15:55:08 +02:00
Martin Schurz
7535abd882 remove waiver
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 02:22:35 +02:00
Martin Schurz
400e576984 use correct parameter
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 01:47:59 +02:00
Martin Schurz
0eddf2872b setup python
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 01:19:12 +02:00
Martin Schurz
013a554731 force linking
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 00:59:50 +02:00
Martin Schurz
8f3f724380 call correct molecule task
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 00:57:26 +02:00
Martin Schurz
e742330a41 add testing of os_hardning on vm
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 00:52:58 +02:00
Martin Schurz
02b9a20fe7 fix release action
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-07 12:06:34 +02:00
Martin Schurz
f627d2fbfd fix release action
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-07 11:27:51 +02:00
Martin Schurz
b32ee28a89 use correct version for github-actions-x/commit
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-06-29 15:55:13 +02:00
Martin Schurz
0c8cbb2185 update GitHub action for checkout
there was a new feature introduced to git, that prevents some of our
actions to run. The updated action handles this properly.

https://github.com/actions/checkout/issues/760

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-06-29 15:34:39 +02:00
Sebastian Gumprich
231036f882
update commit-action version 2022-06-29 12:59:44 +02:00
Sebastian Gumprich
36412f438a
upadte commit-action version 2022-06-29 12:56:28 +02:00
Martin Schurz
79fb86d021 fix linter errors
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-05-04 14:12:24 +02:00
Martin Schurz
bff23f82cb update ansible-lint action
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-05-04 13:57:52 +02:00
Martin Schurz
9d00c8ba29 delete old release drafts
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-02-25 20:10:36 +01:00