Skip to content

Complete tests for nginx hardening #659

@schurzi

Description

@schurzi

Description

Our current testcase does not support arch and opensuse linux.

Solution

We want to adapt the test in a way, that supports these linux flavors.

Alternatives

No response

Additional information

The tests currenty fail for different reasons in the prepare step.

arch (https://github.com/dev-sec/ansible-collection-hardening/actions/runs/4664154808/jobs/8256129386)

  TASK [geerlingguy.nginx : Ensure nginx service is running as configured.] ******
  Tuesday 11 April 2023  05:23:57 +0000 (0:00:03.025)       0:00:15.627 *********
  fatal: [instance]: FAILED! => {"changed": false, "msg": "Unable to start service nginx: Job for nginx.service failed because the control process exited with error code.\nSee \"systemctl status nginx.service\" and \"journalctl -xeu nginx.service\" for details.\n"}

opensuse (https://github.com/dev-sec/ansible-collection-hardening/actions/runs/4664154808/jobs/8256129463)

  TASK [geerlingguy.nginx : Include OS-specific variables.] **********************
  Tuesday 11 April 2023  05:23:07 +0000 (0:00:00.055)       0:00:17.468 *********
  fatal: [instance]: FAILED! => {"ansible_facts": {}, "ansible_included_var_files": [], "changed": false, "message": "Could not find or access 'Suse.yml'\nSearched in:\n\t/home/runner/.cache/molecule/hardening/nginx_hardening/roles/geerlingguy.nginx/vars/Suse.yml\n\t/home/runner/.cache/molecule/hardening/nginx_hardening/roles/geerlingguy.nginx/Suse.yml\n\t/home/runner/.cache/molecule/hardening/nginx_hardening/roles/geerlingguy.nginx/tasks/vars/Suse.yml\n\t/home/runner/.cache/molecule/hardening/nginx_hardening/roles/geerlingguy.nginx/tasks/Suse.yml\n\t/home/runner/work/ansible-collection-hardening/ansible-collection-hardening/ansible_collections/devsec/hardening/molecule/nginx_hardening/vars/Suse.yml\n\t/home/runner/work/ansible-collection-hardening/ansible-collection-hardening/ansible_collections/devsec/hardening/molecule/nginx_hardening/Suse.yml on the Ansible Controller.\nIf you are using a module and expect the file to exist on the remote, see the remote_src option"}  

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions