Encryption and major changes

2024-09-28 23:12:19 +02:00
parent 1f060541c3
commit 6248286ad2
159 changed files with 153 additions and 129 deletions
@@ -0,0 +1,8 @@
+---
+- name: Converge
+  hosts: all
+  gather_facts: true
+  tasks:
+    - name: Include duo_security
+      ansible.builtin.include_role:
+        name: "duo_security"
@@ -0,0 +1,21 @@
+---
+driver:
+  name: podman
+platforms:
+  - name: instance
+    image: ubuntu:20.04
+    pre_build_image: true
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:ro
+    privileged: true
+provisioner:
+  name: ansible
+  env:
+    DUO_INTEGRATION_KEY: "TEST_INTEGRATION_KEY"
+    DUO_SECRET_KEY: "TEST_SECRET_KEY"
+    DUO_API_HOSTNAME: "api-7cda1654.duosecurity.com"
+  playbooks:
+    converge: converge.yml
+    prepare: prepare.yml
+verifier:
+  name: ansible
@@ -0,0 +1,18 @@
+---
+- name: Prepare
+  hosts: all
+  gather_facts: false
+  tasks:
+    - name: Update cache  # noqa no-changed-when
+      ansible.builtin.raw: apt update
+
+    - name: Install required packages  # noqa no-changed-when
+      ansible.builtin.raw: apt install -y python3 sudo openssh-server
+
+    - name: Create required directories  # noqa no-changed-when
+      ansible.builtin.file:
+        path: var/run/sshd
+        state: directory
+        mode: "0755"
+        owner: root
+        group: root
@@ -0,0 +1,9 @@
+---
+- name: Verify
+  hosts: all
+  any_errors_fatal: true
+  gather_facts: true
+  tasks:
+    - name: Example assertion
+      ansible.builtin.assert:
+        that: true