https://github.com/openstack/ansible-hardening
Ansible role for security hardening. Mirror of code maintained at opendev.org.
https://github.com/openstack/ansible-hardening
Last synced: about 1 year ago
JSON representation
Ansible role for security hardening. Mirror of code maintained at opendev.org.
- Host: GitHub
- URL: https://github.com/openstack/ansible-hardening
- Owner: openstack
- License: apache-2.0
- Created: 2017-05-26T07:48:45.000Z (about 9 years ago)
- Default Branch: master
- Last Pushed: 2025-06-05T10:50:18.000Z (about 1 year ago)
- Last Synced: 2025-06-05T11:41:29.055Z (about 1 year ago)
- Language: Jinja
- Homepage: https://opendev.org/openstack/ansible-hardening
- Size: 2.41 MB
- Stars: 680
- Watchers: 48
- Forks: 146
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.rst
- License: LICENSE
Awesome Lists containing this project
README
ansible-hardening
=================
The ansible-hardening role applies security hardening configurations
from the [Security Technical Implementation Guide (STIG)](http://iase.disa.mil/stigs/Pages/index.aspx)
to systems running the following distributions:
* CentOS 8
* Debian Buster
* Ubuntu Bionic
* Ubuntu Focal
For more details, review the
[ansible-hardening documentation](http://docs.openstack.org/developer/ansible-hardening/).
Release notes for the project can be found at:
https://docs.openstack.org/releasenotes/ansible-hardening
Requirements
------------
This role can be used with or without OpenStack-Ansible. It requires
Ansible 2.3 or later.
Role Variables
--------------
All of the variables for this role are in `defaults/main.yml`.
Dependencies
------------
This role has no dependencies.
Example Playbook
----------------
Using the role is fairly straightforward:
- hosts: servers
roles:
- ansible-hardening
Running with Vagrant
--------------------
This role can be tested easily on multiple platforms using Vagrant.
The `Vagrantfile` supports testing on:
* Ubuntu 16.04
* CentOS 7
To test on all platforms:
```shell
vagrant destroy --force && vagrant up
```
To test on Ubuntu 14.04 only:
```shell
vagrant destroy ubuntu1404 --force && vagrant up ubuntu1404
```
To test on Ubuntu 16.04 only:
```shell
vagrant destroy ubuntu1604 --force && vagrant up ubuntu1604
```
To test on CentOS 7 only:
```shell
vagrant destroy centos7 --force && vagrant up centos7
```
License
-------
Apache 2.0
Author Information
------------------
For more information, join `#openstack-ansible` on OFTC.