The ansible-hardening role applies security hardening configurations from the Security Technical Implementation Guide (STIG) to systems running the following distributions:
- CentOS 7
- Debian Jessie
- Fedora 27
- openSUSE Leap 42.2 and 42.3
- Red Hat Enterprise Linux 7
- SUSE Linux Enterprise 12 (experimental)
- Ubuntu 16.04
For more details, review the ansible-hardening documentation.
This role can be used with or without OpenStack-Ansible. It requires Ansible 2.3 or later.
All of the variables for this role are in defaults/main.yml.
This role has no dependencies.
Using the role is fairly straightforward:
- hosts: servers
roles:
- ansible-hardening
This role can be tested easily on multiple platforms using Vagrant.
The Vagrantfile supports testing on:
- Ubuntu 16.04
- CentOS 7
To test on all platforms:
vagrant destroy --force && vagrant upTo test on Ubuntu 14.04 only:
vagrant destroy ubuntu1404 --force && vagrant up ubuntu1404To test on Ubuntu 16.04 only:
vagrant destroy ubuntu1604 --force && vagrant up ubuntu1604To test on CentOS 7 only:
vagrant destroy centos7 --force && vagrant up centos7Apache 2.0
For more information, join #openstack-ansible on Freenode.