152 lines
4.1 KiB
YAML
152 lines
4.1 KiB
YAML
# -*- mode: yaml; indent-tabs-mode: nil; tab-width: 2; coding: utf-8-unix -*-
|
|
|
|
---
|
|
|
|
- name: update facts
|
|
shell: |
|
|
# {{USR_LOCAL}}/bin/testforge_local_bin.bash
|
|
true
|
|
|
|
# old base
|
|
- name: "update locales"
|
|
command: |
|
|
locale-gen --update
|
|
|
|
- name: "update env"
|
|
command: |
|
|
env-update
|
|
|
|
- name: "update eix"
|
|
# now done monthly
|
|
command: |
|
|
echo eix-update
|
|
|
|
- name: "update peruser facts"
|
|
# broken this is yaml
|
|
# /usr/local/bin/testforge_local_bin.bash {{item|expanduser}}
|
|
command: |
|
|
true
|
|
with_items:
|
|
- "~{{BOX_USER_NAME}}/{{ BASE_USER_CONFIG_DIR }}/facts.d"
|
|
|
|
# the tar step just before this may have added certificates to
|
|
# /usr/local/share and we may need to run this. Run it anyway
|
|
- name: "update-ca-certificates"
|
|
shell: |
|
|
# morons: this return rc=0 even when there is an exception - with java7 -
|
|
# org.debian.security.InvalidKeystorePasswordException: Cannot open Java keystore. Is the password correct?
|
|
update-ca-certificates -f -v > /tmp/U$$.log 2>&1
|
|
retval=$?
|
|
[ $retval -eq 0 ] && exit 0
|
|
if grep Exception: /tmp/U$$.log ; then
|
|
retval=1
|
|
cat /tmp/$$.log
|
|
else
|
|
retval=0
|
|
fi
|
|
exit $retval
|
|
|
|
# FixMe: was unused
|
|
- name: "chmod /usr/local"
|
|
shell: |
|
|
# there are some exceptions in usr/local
|
|
# chown -R "{{BOX_USER_NAME}}.{{BOX_ALSO_GROUP}}" {{USR_LOCAL}}
|
|
chmod -R g+rw,o-w {{USR_LOCAL}}
|
|
# was TESTF_
|
|
# this should not be needed but it still is because we execute src/var_local_*sh
|
|
# as BOX_USER so they need to be writable - *before* the src/ files are run.
|
|
chmod a+x {{VAR_LOCAL}}/*bin/*sh {{VAR_LOCAL}}/src/*sh
|
|
chmod g+rw {{USR_LOCAL}}/*bin/*sh {{USR_LOCAL}}/src/*sh
|
|
|
|
# was unused - not
|
|
- name: chmod /usr/local
|
|
shell: |
|
|
# do I need this? should it be in hourly? it breaks lynis but I think we still need it
|
|
#? chmod -R g+rw,o-w {{USR_LOCAL}}
|
|
# FixMe: it breaks lynis - fix it here
|
|
chown -R "{{BOX_USER_NAME}}.{{BOX_ALSO_GROUP}}" \
|
|
{{USR_LOCAL}}/src \
|
|
{{USR_LOCAL}}/share \
|
|
{{USR_LOCAL}}/bin \
|
|
{{USR_LOCAL}}/{{BASE_LIB}} \
|
|
{{USR_LOCAL}}/net
|
|
exit 0
|
|
|
|
# was in testforge - to fix problems caused by taring
|
|
- name: chmod /var/local
|
|
shell: |
|
|
# do I need this? should it be in hourly? it breaks lynis but I think we still need it
|
|
#? chmod -R g+rw,o-w {{VAR_LOCAL}}
|
|
# FixMe: it breaks lynis - fix it here
|
|
chown -R "{{BOX_USER_NAME}}.{{BOX_ALSO_GROUP}}" \
|
|
{{VAR_LOCAL}}/src \
|
|
{{VAR_LOCAL}}/share \
|
|
{{VAR_LOCAL}}/bin \
|
|
{{VAR_LOCAL}}/{{BASE_LIB}} \
|
|
{{VAR_LOCAL}}/net
|
|
exit 0
|
|
|
|
# FixMe: somethings strange in /var/local/etc
|
|
# drwxr-xr-x 2 1056888 1049089 4096 Nov 30 13:38 w3af
|
|
|
|
# FixMe: was PENT_
|
|
# FixMe: unused
|
|
- name: "strange ownership - coming from tar?"
|
|
shell: |
|
|
chown -R {{BOX_USER_NAME}}.{{BOX_ALSO_GROUP}} {{VAR_LOCAL}}/src {{VAR_LOCAL}}/bin {{VAR_LOCAL}}/net
|
|
|
|
|
|
- name: summary of logs
|
|
debug:
|
|
# lookup('vars', item ) returns a list of strings?; map yields generators
|
|
# |map(attribute='stdout')|list|join('\n') -> 'str object' has no attribute 'stdout'
|
|
msg: "{{ lookup('vars', item ) }}"
|
|
when:
|
|
- lookup('vars', item, default=[])|length > 0
|
|
# base proxy
|
|
with_items:
|
|
# proxy
|
|
- proxy_log_hourly
|
|
# testforge
|
|
- testforge_log_hourly
|
|
- testforge_log_daily
|
|
- testforge_log_weekly
|
|
- testforge_log_monthly
|
|
- testforge_log_test
|
|
# pydev
|
|
- pydev_log_test
|
|
# text
|
|
- text_log_test
|
|
- text_log_hourly
|
|
# testing
|
|
- testing_log_test
|
|
# harden
|
|
- harden_log_hourly
|
|
- harden_log_daily
|
|
- harden_log_weekly
|
|
- harden_log_monthly
|
|
- harden_log_test
|
|
# logging
|
|
- logging_log_daily
|
|
- logging_log_test
|
|
# hostvms
|
|
- hostvms_log_bin
|
|
- hostvms_log_test
|
|
# pentest
|
|
- pentest_log_weekly
|
|
- pentest_log_test
|
|
# privacy
|
|
- privacy_log_hourly
|
|
- privacy_log_daily
|
|
- privacy_log_weekly
|
|
- privacy_log_monthly
|
|
- privacy_log_test
|
|
# gpgkey
|
|
- gpgkey_log_weekly
|
|
# trading
|
|
- trading_log_test
|
|
# update
|
|
- update_log_daily
|
|
- update_log_test
|
|
|