-
Notifications
You must be signed in to change notification settings - Fork 138
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Test creation of separate drop-in directory
Signed-off-by: Jakub Jelen <[email protected]>
- Loading branch information
Showing
1 changed file
with
137 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,137 @@ | ||
--- | ||
- name: Test second sshd service with drop-in directory | ||
hosts: all | ||
vars: | ||
__sshd_test_backup_files: | ||
- /etc/ssh/sshd_config | ||
- /etc/ssh/sshd_config.d/00-ansible_system_role.conf | ||
- /etc/ssh2/sshd_config | ||
- /etc/sshd/sshd_config.d/04-ansible.conf | ||
- /etc/systemd/system/sshd2.service | ||
- /etc/systemd/system/[email protected] | ||
- /etc/systemd/system/sshd2.socket | ||
tasks: | ||
- name: "Backup configuration files" | ||
ansible.builtin.include_tasks: tasks/backup.yml | ||
|
||
- name: Create ssh2 directory | ||
ansible.builtin.file: | ||
path: /etc/ssh2 | ||
state: directory | ||
mode: '0755' | ||
when: | ||
- (ansible_facts['os_family'] == 'RedHat' and ansible_facts['distribution_major_version'] | int > 8) or | ||
(ansible_facts['distribution'] == 'Ubuntu' and ansible_facts['distribution_major_version'] | int >= 20) | ||
|
||
- name: Create sshd_config directory | ||
ansible.builtin.file: | ||
path: /etc/ssh2/sshd_config | ||
state: file | ||
mode: '0600' | ||
when: | ||
- (ansible_facts['os_family'] == 'RedHat' and ansible_facts['distribution_major_version'] | int > 8) or | ||
(ansible_facts['distribution'] == 'Ubuntu' and ansible_facts['distribution_major_version'] | int >= 20) | ||
|
||
- name: Configure alternative sshd_config file | ||
ansible.builtin.include_role: | ||
name: ansible-sshd | ||
vars: | ||
sshd_service: sshd2 | ||
sshd_main_config_file: /etc/ssh2/sshd_config | ||
sshd_config_file: /etc/ssh2/sshd_config.d/04-ansible.conf | ||
sshd_install_service: true | ||
sshd_manage_selinux: true | ||
sshd: | ||
Port: 2222 | ||
ForceCommand: echo "CONNECTED2" | ||
when: | ||
- (ansible_facts['os_family'] == 'RedHat' and ansible_facts['distribution_major_version'] | int > 8) or | ||
(ansible_facts['distribution'] == 'Ubuntu' and ansible_facts['distribution_major_version'] | int >= 20) | ||
|
||
- name: Verify the config options are correctly set | ||
tags: tests::verify | ||
when: | ||
- (ansible_facts['os_family'] == 'RedHat' and ansible_facts['distribution_major_version'] | int > 8) or | ||
(ansible_facts['distribution'] == 'Ubuntu' and ansible_facts['distribution_major_version'] | int >= 20) | ||
block: | ||
- name: Flush handlers | ||
ansible.builtin.meta: flush_handlers | ||
|
||
- name: Stat the parent directory | ||
ansible.builtin.stat: | ||
path: /etc/ssh2 | ||
register: parent_stat | ||
|
||
- name: Print the main configuration file | ||
ansible.builtin.slurp: | ||
src: /etc/ssh2/sshd_config | ||
register: config | ||
|
||
- name: Print the drop-in configuration file | ||
ansible.builtin.slurp: | ||
src: /etc/ssh2/sshd_config.d/04-ansible.conf | ||
register: config_drop_in | ||
|
||
- name: Check content of the created configuration file | ||
ansible.builtin.assert: | ||
that: | ||
- "'Port 2222' in config_drop_in.content | b64decode" | ||
- "'ForceCommand echo' in config_drop_in.content | b64decode" | ||
|
||
- name: Check Include is present in the main configuration file | ||
ansible.builtin.assert: | ||
that: | ||
- "'Include' in config.content | b64decode" | ||
|
||
- name: Check the parent directory has not changed to drop-in directory permissions | ||
ansible.builtin.assert: | ||
that: | ||
- parent_stat.stat.exists | ||
- parent_stat.stat.mode == '0755' | ||
|
||
- name: Verify the service files are correct | ||
tags: tests::verify | ||
when: | ||
- ansible_facts['service_mgr'] == 'systemd' or | ||
(ansible_facts['os_family'] == 'RedHat' and ansible_facts['distribution_major_version'] == '7') | ||
- (ansible_facts['os_family'] == 'RedHat' and ansible_facts['distribution_major_version'] | int > 8) or | ||
(ansible_facts['distribution'] == 'Ubuntu' and ansible_facts['distribution_major_version'] | int >= 20) | ||
block: | ||
- name: Read the created service file | ||
ansible.builtin.slurp: | ||
src: "/etc/systemd/system/sshd2.service" | ||
register: service | ||
|
||
- name: Read the created socket file | ||
ansible.builtin.slurp: | ||
src: "/etc/systemd/system/sshd2.socket" | ||
register: socket | ||
|
||
- name: Check content of the created service file | ||
ansible.builtin.assert: | ||
that: | ||
- "' -f/etc/ssh/sshd_config' not in service.content | b64decode" | ||
- "' -f/etc/ssh2/sshd_config' in service.content | b64decode" | ||
|
||
- name: Verify the instantiated service file is correct | ||
tags: tests::verify | ||
when: | ||
- ansible_facts['service_mgr'] == 'systemd' or | ||
(ansible_facts['os_family'] == 'RedHat' and ansible_facts['distribution_major_version'] == '7') | ||
- ansible_facts['distribution'] != "Debian" or ansible_facts['distribution_major_version'] | int < 12 | ||
- (ansible_facts['os_family'] == 'RedHat' and ansible_facts['distribution_major_version'] | int > 8) or | ||
(ansible_facts['distribution'] == 'Ubuntu' and ansible_facts['distribution_major_version'] | int >= 20) | ||
block: | ||
- name: Read the created instantiated service file | ||
ansible.builtin.slurp: | ||
src: "/etc/systemd/system/[email protected]" | ||
register: service_inst | ||
|
||
- name: Check content of the created service file | ||
ansible.builtin.assert: | ||
that: | ||
- "' -f/etc/ssh/sshd_config' not in service_inst.content | b64decode" | ||
- "' -f/etc/ssh2/sshd_config' in service_inst.content | b64decode" | ||
|
||
- name: "Restore configuration files" | ||
ansible.builtin.include_tasks: tasks/restore.yml |