Files
a13labs.infra/ansible/roles/cis_hardening/molecule/ubuntu/molecule.yml
T

114 lines
2.6 KiB
YAML
Raw Normal View History

2024-09-24 15:19:51 +02:00
---
dependency:
name: galaxy
enabled: true
driver:
name: vagrant
provider:
name: libvirt
provisioner:
name: ansible
config_options:
defaults:
callbacks_enabled: profile_tasks
playbooks:
converge: ../default/converge.yml
verify: ../default/verify.yml
log: true
inventory:
host_vars:
jammy:
ssh_allowed_networks: "0.0.0.0/0"
sshd_allow_groups: "vagrant sudo"
platforms:
- name: focal
box: "jaredeh/ubuntu2004-server"
box_version: "0.1.5"
interfaces:
- auto_config: true
network_name: private_network
type: dhcp
instance_raw_config_args:
# use single quotes to avoid YAML parsing as dict due to ':'
- 'vm.synced_folder ".", "/vagrant", type: "rsync"'
# Run 'uname' a provisionning step **needs 'provision: true' to work**
- 'vm.provision :shell, inline: "uname"'
# Dictionary of `config` options. Note that string values need to be
# explicitly enclosed in quotes.
config_options:
vm.boot_timeout: 600
ssh.keep_alive: true
ssh.remote_user: 'ansible'
synced_folder: true
provider_options:
video_type: 'vga'
host: 'localhost'
uri: 'qemu:///system'
memory: 4096
- name: jammy
box: "techchad2022/ubuntu2204"
interfaces:
- auto_config: true
network_name: private_network
type: dhcp
instance_raw_config_args:
# use single quotes to avoid YAML parsing as dict due to ':'
- 'vm.synced_folder ".", "/vagrant", type: "rsync"'
# Run 'uname' a provisionning step **needs 'provision: true' to work**
- 'vm.provision :shell, inline: "uname"'
# Dictionary of `config` options. Note that string values need to be
# explicitly enclosed in quotes.
config_options:
vm.boot_timeout: 600
ssh.keep_alive: true
ssh.remote_user: 'ansible'
synced_folder: true
provider_options:
video_type: 'vga'
host: 'localhost'
uri: 'qemu:///system'
memory: 4096
verifier:
name: ansible
lint: |
set -e
ansible-lint
scenario:
name: ubuntu
create_sequence:
- dependency
- create
- prepare
check_sequence:
- dependency
- cleanup
- destroy
- create
- prepare
- converge
- check
- destroy
converge_sequence:
- dependency
- create
- prepare
- converge
destroy_sequence:
- dependency
- cleanup
- destroy
test_sequence:
- dependency
- lint
- cleanup
- destroy
- syntax
- create
- prepare
- converge
- idempotence
- side_effect
- verify
- cleanup
- destroy