Compare commits

..

No commits in common. "master" and "v1.0.0" have entirely different histories.

5 changed files with 8 additions and 26 deletions

View File

@ -1,16 +1,4 @@
## v1.0.2
### Fix
* Use flatten to manage packages list.
## v1.0.1
### Fix
* Use to_nice_json to manage packages list.
* Set empty dependencies line to fix Galaxy warning.
* Retries packages installation.
## v1.0.0
## v1.0
### Features
* Install debsecan

View File

@ -61,7 +61,7 @@ Jérémy Gardais
* [IPR][ipr website] (Institut de Physique de Rennes)
[gogs to github hook]: https://stackoverflow.com/a/21998477
[debian_security source]: https://git.ipr.univ-rennes.fr/cellinfo/ansible.debian_security
[debian_security source]: https://git.ipr.univ-rennes1.fr/cellinfo/ansible.debian_security
[debian_security github]: https://github.com/ipr-cnrs.debian_security
[wtfpl website]: http://www.wtfpl.net/about/
[ipr website]: https://ipr.univ-rennes1.fr/

View File

@ -11,7 +11,7 @@
#
# List of base packages to install.
deb_sec__required_packages:
- debsecan
- 'debsecan'
# ]]]
# .. envvar:: deb_sec__deploy_state [[[
#

View File

@ -1,19 +1,14 @@
---
dependencies: []
galaxy_info:
author: "Jérémy Gardais"
description: "Tools and configuration to secure Debian system"
license: WTFPL
company: IPR
issue_tracker_url: https://git.ipr.univ-rennes.fr/cellinfo/ansible.debian_security/issues
min_ansible_version: 2.7
issue_tracker_url: https://git.ipr.univ-rennes1.fr/cellinfo/ansible.debian_security/issues
min_ansible_version: 2.5
platforms:
- name: Debian
versions:
- stretch
- buster
galaxy_tags:
- debian
- security

View File

@ -6,13 +6,12 @@
# Manage required system packages [[[1
- name: Ensure required packages are in there desired state
package:
name: '{{ (deb_sec__required_packages | flatten) }}'
name: '{{ item }}'
state: '{{ "present" if (deb_sec__deploy_state == "present")
else "absent" }}'
install_recommends: False
register: pkg_result
until: pkg_result is success
with_flattened:
- '{{ deb_sec__required_packages }}'
# Debsecan [[[1
# Configuration [[[
- name: Debsecan configuration