Bertrand Lanson
ee0ec67961
All checks were successful
test / Linting (push) Successful in 7s
test / Molecule tests (default, debian11) (push) Successful in 26s
test / Molecule tests (default, debian12) (push) Successful in 26s
test / Molecule tests (default, ubuntu2004) (push) Successful in 27s
test / Molecule tests (default, ubuntu2204) (push) Successful in 26s
test / Molecule tests (with_ssh_keys, debian11) (push) Successful in 29s
test / Molecule tests (with_ssh_keys, debian12) (push) Successful in 28s
test / Molecule tests (with_ssh_keys, ubuntu2004) (push) Successful in 30s
test / Molecule tests (with_ssh_keys, ubuntu2204) (push) Successful in 30s
54 lines
1.9 KiB
YAML
54 lines
1.9 KiB
YAML
---
|
|
- name: Verify
|
|
hosts: all
|
|
gather_facts: true
|
|
become: true
|
|
tasks:
|
|
- name: "Test: ubuntu user and group"
|
|
block:
|
|
- name: "Getent user ansible"
|
|
ansible.builtin.getent:
|
|
database: passwd
|
|
key: ubuntu
|
|
register: ednz_cloud_management_user
|
|
|
|
- name: "Getent group ubuntu"
|
|
ansible.builtin.getent:
|
|
database: group
|
|
key: ubuntu
|
|
register: ednz_cloud_management_group
|
|
|
|
- name: "Verify ubuntu user and group"
|
|
ansible.builtin.assert:
|
|
that:
|
|
- not ednz_cloud_management_user.failed
|
|
- not ednz_cloud_management_group.failed
|
|
- "'ubuntu' in ednz_cloud_management_user.ansible_facts.getent_passwd.keys()"
|
|
- "'/home/ubuntu' in ednz_cloud_management_user.ansible_facts.getent_passwd['ubuntu']"
|
|
- "'/bin/bash' in ednz_cloud_management_user.ansible_facts.getent_passwd['ubuntu']"
|
|
- "'ubuntu' in ednz_cloud_management_group.ansible_facts.getent_group.keys()"
|
|
|
|
- name: "Test: ubuntu sudo permissions"
|
|
block:
|
|
- name: "Stat file /etc/sudoers.d/ubuntu"
|
|
ansible.builtin.stat:
|
|
path: "/etc/sudoers.d/ubuntu"
|
|
register: stat_etc_sudoers_d_ubuntu
|
|
|
|
- name: "Verify file /etc/sudoers.d/ubuntu"
|
|
ansible.builtin.assert:
|
|
that:
|
|
- not stat_etc_sudoers_d_ubuntu.stat.exists
|
|
|
|
- name: "Test: ubuntu authorized_keys"
|
|
block:
|
|
- name: "Stat file /home/ubuntu/.ssh/authorized_keys"
|
|
ansible.builtin.stat:
|
|
path: "/home/ubuntu/.ssh/authorized_keys"
|
|
register: stat_home_ubuntu_ssh_authorized_keys
|
|
|
|
- name: "Verify file /home/ubuntu/.ssh/authorized_keys"
|
|
ansible.builtin.assert:
|
|
that:
|
|
- not stat_home_ubuntu_ssh_authorized_keys.stat.exists
|