You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
93 lines
1.6 KiB
93 lines
1.6 KiB
--- |
|
|
|
driver: |
|
name: docker |
|
|
|
transport: |
|
name: docker |
|
|
|
driver_config: |
|
use_sudo: false |
|
privileged: true |
|
provision_command: mkdir -p /run/sshd |
|
run_command: /lib/systemd/systemd |
|
cap_add: |
|
- CAP_SYS_ADMIN |
|
|
|
verifier: |
|
name: inspec |
|
sudo: true |
|
reporter: |
|
- cli |
|
|
|
platforms: |
|
- name: debian-9 |
|
driver_config: |
|
image: debian:9 |
|
provision_command: |
|
- apt-get install -y python3-pip git |
|
- pip3 install pytoml |
|
|
|
provisioner: |
|
name: salt_solo |
|
require_chef: false |
|
state_collection: . |
|
is_file_root: true |
|
|
|
# Salt-solo installation options |
|
salt_install: bootstrap |
|
salt_version: latest |
|
salt_bootstrap_options: "-x python3" |
|
salt_copy_filter: |
|
- .git |
|
- .kitchen |
|
|
|
dependencies: |
|
- name: openssh |
|
repo: git |
|
source: https://github.com/saltstack-formulas/openssh-formula.git |
|
|
|
# Provision with states |
|
state_top: |
|
base: |
|
'*': |
|
- base.files |
|
- base.repositories |
|
- base.packages |
|
- base.python |
|
- base.sshd |
|
- base.unattended_upgrades |
|
- fwrules |
|
|
|
pillars: |
|
top.sls: |
|
base: |
|
'*': |
|
- firewall |
|
firewall.sls: |
|
firewall: |
|
chains: |
|
- elasticsearch_exporter_private |
|
- http_public |
|
- management |
|
- mqtt_public |
|
- node_exporter_private |
|
defaults: |
|
conntrack: false |
|
policies: |
|
INPUT: ACCEPT |
|
FORWARD: DROP |
|
OUTPUT: ACCEPT |
|
management: |
|
ipv4: |
|
- "107.155.67.64/29" |
|
ipv6: |
|
- "2604:880:396::/48" |
|
resolve_names: |
|
- "adephagia.synology.me": |
|
widen_ipv6: 64 |
|
|
|
suites: |
|
- name: default |
|
provisioner: |
|
pillars: {} |