jdaln / linux-server-management

Set of Ansible scripts for server setup, hardening and maintenance with semi-automated dependency maintenance.

linux-server-management

Server management playbooks for Debian/Ubuntu based Linux.

Pre-requisites

Pre-requisite commands depends on your OS. Install the software needed to launch this and its automated testing scripts:

Debian-based Linux

sudo apt update
sudo apt install virtualbox vagrant python3-pip

Mac OS

brew install python
python3 -m ensurepip --upgrade
brew install --cask virtualbox
brew install vagrant

Before running anything

Before running anything from this repository, install the following (after the Pre-requisites specific to your OS)

pip install -r requirements.txt
ansible-galaxy install -r requirements.yml

Testing

You may test the playbooks on the latest Debian Bookworm and Ubuntu Jammy. For this, run:

ansible-galaxy install -r testing/requirements.yml
vagrant up

Using

Before launching this, make sure that you have connected to your targets at least once via SSH so that the ssh fingerprint is authorized. The ask-pass To run the setup playbook use:

BASTION_USER="YOUR_USERNAME_TO_SSH_WITH"
ansible-playbook -i inventories/mip-cscs/inventory -l GROUP_OR_HOST_NAME -u $BASTION_USER setup-playbook.yml

linux-server-management's Issues

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

ansible-galaxy

requirements.yml

testing/requirements.yml

• konstruktoid.hardening v2.1.1

github-actions

.github/workflows/deps-new-version-test.yml

• actions/checkout v4
• actions/cache v4
• actions/cache v4
• actions/checkout v4
• ubuntu 22.04

.github/workflows/lint.yml

• step-security/harden-runner v2.9.0@0d381219ddf674d61a7572ddd19d7941e271515c
• actions/checkout v4.1.7@692973e3d937129bcbf40652eb9f2f61becf3332
• ansible/ansible-lint-action eb92667e07cc18e1d115ff02e5f07126310cec11

pip_requirements

requirements.txt

• ansible ~=10.2.0
• ansible-lint ~=24.7.0
• passlib ~=1.7.4
• jmespath ~=1.0.1

---

• Check this box to trigger a request for Renovate to run again on this repository